last executing test programs: 44.490135497s ago: executing program 1 (id=438): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) fsmount(0xffffffffffffffff, 0x0, 0x0) 43.622707217s ago: executing program 1 (id=443): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x41, 0x553, &(0x7f0000000c80)="$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") symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlinkat(0xffffffffffffff9c, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, 0xb4) readlink(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000004c0)=""/83, 0x53) 43.444721612s ago: executing program 1 (id=444): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080fffffffe0000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0) 43.306228934s ago: executing program 1 (id=445): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x10050, &(0x7f0000000840), 0x3, 0x52c, &(0x7f0000000880)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000100)='./file0\x00') chroot(&(0x7f0000000080)='./file2\x00') 43.036707455s ago: executing program 1 (id=446): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = open(&(0x7f0000000140)='./file0\x00', 0x800, 0x70) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x400, 0x0) 42.221837081s ago: executing program 1 (id=451): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000400)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) syz_emit_ethernet(0xbe, &(0x7f0000000740)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0xfe, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x24, 0x0, {0x25, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @remote, @rand_addr=0x64010102, {[@cipso={0x86, 0x7a, 0xffffffffffffffff, [{0x0, 0x12, "e25eb28c59881681fb52d13654d3a5a7"}, {0x0, 0x9, "020007651442eb"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, "e706d30bd224f8"}, {0x2, 0x7, "cfa11cab1a"}, {0x0, 0x10, "8475be675de6a70a05a0dc91e5c6"}, {0x0, 0xa, "6580a5e97612fe86"}, {0x0, 0x11, "73bc23f9ffffffa30900a301c84600"}, {0x0, 0x10, "c8f46976e79ea788f03d9d320592"}]}, @rr={0x7, 0x3, 0xd6}]}}}}}}}, 0x0) 41.975896061s ago: executing program 32 (id=451): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000400)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) syz_emit_ethernet(0xbe, &(0x7f0000000740)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0xfe, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x24, 0x0, {0x25, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @remote, @rand_addr=0x64010102, {[@cipso={0x86, 0x7a, 0xffffffffffffffff, [{0x0, 0x12, "e25eb28c59881681fb52d13654d3a5a7"}, {0x0, 0x9, "020007651442eb"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, "e706d30bd224f8"}, {0x2, 0x7, "cfa11cab1a"}, {0x0, 0x10, "8475be675de6a70a05a0dc91e5c6"}, {0x0, 0xa, "6580a5e97612fe86"}, {0x0, 0x11, "73bc23f9ffffffa30900a301c84600"}, {0x0, 0x10, "c8f46976e79ea788f03d9d320592"}]}, @rr={0x7, 0x3, 0xd6}]}}}}}}}, 0x0) 3.556766731s ago: executing program 2 (id=842): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000040)='./file1\x00', 0x4811, &(0x7f0000000400)={[{@noautodefrag}, {@noacl}, {@max_inline={'max_inline', 0x3d, [0x25, 0x33, 0x37, 0x37, 0x31, 0x1, 0x74, 0x65]}}, {@space_cache}, {@noinode_cache}, {@nobarrier}, {@flushoncommit}, {@user_subvol_rm}, {@enospc_debug}, {@compress_algo={'compress', 0x3d, 'zstd'}}, {@clear_cache}, {@flushoncommit}, {@ssd}, {@user_subvol_rm}, {@max_inline={'max_inline', 0x3d, [0x32, 0x6b, 0x38, 0x35, 0x39, 0x0]}}, {@autodefrag}]}, 0xff, 0x50f3, &(0x7f000000a2c0)="$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") open(&(0x7f00000003c0)='.\x00', 0x100, 0x97) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x1260a9, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000c40)) 2.798160372s ago: executing program 4 (id=849): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0x2d2b, &(0x7f0000002040)={0x0, 0x0, 0x10100, 0xfffffffc, 0xfffffffe}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x1, r0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0}}) io_uring_enter(r1, 0x27e2, 0x0, 0x0, 0x0, 0x0) 2.783506323s ago: executing program 2 (id=850): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x1}, 0x18) sendmsg$kcm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000080)='$', 0x1}, {0x0, 0x1f4}], 0x2}, 0x40014) 2.751653627s ago: executing program 4 (id=851): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000000000000ff0040"]) 2.666158233s ago: executing program 2 (id=852): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e80)={0x40, r1, 0x5, 0x4, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0xfac09}, @NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x10, 0x49, [0xfac0c, 0xfac08, 0xfac0a]}]]}, 0x40}, 0x1, 0x0, 0x0, 0x4800}, 0x8060040) 2.612175947s ago: executing program 2 (id=854): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000500)='tlb_flush\x00', r0}, 0x10) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) 2.504405336s ago: executing program 4 (id=855): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x17ef, 0x6047, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x57, {0x57, 0x0, "a7ea3163fd3bc518194b120c1e73d54cfc4ad2841ef4f6a3fd7c59ccb785025f2e7b3504ff87cbfd10f3c080b73385a7015d3a32ed6b5217cdbb6fadb2ea7a288982d5337c364daf03bd400d66293b0a2b103dd93f"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 2.402345265s ago: executing program 2 (id=857): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f00000006c0)=[{{&(0x7f0000000000)={0xa, 0x40, 0x0, @private0={0xfc, 0x0, '\x00', 0xfe}}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000080)="18", 0x1}], 0x1}}], 0x1, 0x0) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000180)={0x0, 0x1ff, 0x0, 0x9, 0x1, 0x4, 0x2, 0x3, {0x0, @in6={{0xa, 0x4e20, 0x8, @empty, 0xfffffffb}}, 0x7fff, 0xc, 0x0, 0x6, 0x2817c26c}}, &(0x7f00000000c0)=0xb0) 2.351013359s ago: executing program 2 (id=858): r0 = syz_usb_connect$cdc_ecm(0x0, 0x5a, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a4400001020301090248000101570040090400000002060000052406000005240000000d240f010008000000000000000424020009058103"], 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e"], 0x0) syz_usb_disconnect(r0) syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x9, 0x10, 0xd9, [{{0x9, 0x4, 0x0, 0xf6, 0x2, 0x7, 0x1, 0x2, 0x9, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0x4, 0x4, 0x1}}}}}]}}]}}, 0x0) 1.262008757s ago: executing program 3 (id=879): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000001c0)=0x4) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x6f) 1.184696053s ago: executing program 3 (id=880): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fddbdf258c00000008000300", @ANYRES32=r2], 0x28}, 0x1, 0x0, 0x0, 0x93ddb44c57957314}, 0x810) 1.10807834s ago: executing program 3 (id=881): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r0, r1, 0x5}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000440)={@fallback=r0, 0x26, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 1.014235447s ago: executing program 3 (id=883): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$inet6(r1, &(0x7f0000005d40)=[{{0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f00000017c0)="01e266b8f3d6a1d424d03661a7d99521f0f5cca9f580cc80f8a6cf1876e772e4da0705073e6b5acf", 0x28}], 0x1}}], 0x1, 0x1) 971.49469ms ago: executing program 3 (id=885): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='vcan0\x00', 0x10) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000140)="441f08d600270bee724ef54e91eeffbe1e68d5040d73161feeb0f24cb1", 0x1d) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x44}}, 0x10) 893.415787ms ago: executing program 0 (id=886): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e8"], 0xe8}}, 0xc0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000640)={[{@grpjquota}, {@auto_da_alloc_val}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x9}}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@oldalloc}, {@nodelalloc}, {@usrquota}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x53}}]}, 0xfa, 0x568, &(0x7f0000000f00)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000240)=ANY=[]) 754.075099ms ago: executing program 0 (id=887): r0 = socket(0x840000000002, 0x3, 0xff) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) syz_mount_image$exfat(&(0x7f0000000280), &(0x7f0000000240)='./file1\x00', 0x2001084c, &(0x7f0000000300)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=r2, @ANYRES64=r1, @ANYRES8=r3, @ANYRES16=r1, @ANYRES64=r1, @ANYRES64], 0x81, 0x14fc, &(0x7f0000002a80)="$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") openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0d83) 615.282249ms ago: executing program 0 (id=888): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x7, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}}, 0x4004) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2d, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0xc, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x7}}, 0xb8}}, 0x10) 563.873624ms ago: executing program 0 (id=889): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x2, &(0x7f0000000000)=0x0) r1 = eventfd(0x0) io_submit(r0, 0x2034, &(0x7f0000000280)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x100, r1, &(0x7f0000000100)="0000fd6000000000", 0x8, 0x3}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7, 0x0, r1, 0x0, 0x0, 0x1000a, 0x0, 0x1, r1}]) 529.486287ms ago: executing program 4 (id=890): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) syz_emit_ethernet(0x3a, &(0x7f0000000100)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x3, 0x3}}}}}}, 0x0) 410.108346ms ago: executing program 4 (id=891): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x120c083, &(0x7f0000000480), 0xfd, 0x111d, &(0x7f0000000640)="$eJzs2bFqFFEUBuD/7qwm3cjYD4IWFhIS1gcwhcK2ttqIBARTZUFQfA3fwLfwFTSVtSG9FgFLYWScHRMloCGbQOD7YPeeOTNnzr3lvRMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoTZOvJbk5SZoxN0lSkrbdnx8macf8jY/VJCWPd+aLh3uzR4sk1a/Hy5Ok9FV9WZqt2+vNrJk1W839B9t3Pi1ev3n5bHd3Z2/5mpI2B0crXUUZ/6qTubLSHgAAAHBldedW592r/+l0/cvF9AcAAAD+ZeUHCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABn1NXHcTMGkyQladv9+WGS9pS6a5c0PwAAAOD8SiZ5Wp+WH44Bjt3L57r8zvfj99LHm3lfp0wvb8oAAABw5bz48Mdlt7YMTn5f/9EN+n333UyHffn6cO9WptnYGOLlkG/bSZVk869eB0dvn4+/0lXJ2sWsCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgJ/swAEJAAAAgKD/r9sRKAAAAAAAAAAAAAAAAAAAAAAAAAAAFwUAAP//cLriEQ==") syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000100)='.\x00', 0x1a484bc, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYBLOB="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", @ANYRES8, @ANYRESDEC=r1, @ANYRESOCT, @ANYRES16, @ANYRESHEX=r1, @ANYRESHEX, @ANYRESDEC], 0x1, 0x0, &(0x7f0000000480)) 216.847852ms ago: executing program 0 (id=892): unshare(0x2040600) r0 = mq_open(&(0x7f0000000740)='\r\x00elinu\xef\xe3elinux\x00\x96\xf6\x92\n#*\xac\x05\xce\xf8D\\\x9a\xe6[]L+\xf6\v\xe8\xf2\xd3\b\x15\n\xb8F!Q9o\x1f#\xbdt\r\xfb\"\x18%\xfdM\xaf_t\xd2\xdcJ\x10\a\xbab\x1a\xdf\xb1\xbdU\xd7Lo\xe7\xac\x81\x10k\xce-\xf5@\xbb\x9d;\xe8\xf6\xffQ\x04\xaai\x92k\x1b;\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xa2.\xb6{\xb5\x85#\x88\xdc\xf0\x0f\x05\xf1\xc4 \xdeV\x80q\xf7\x04\xf5\x85T\x1f\xc2S]*\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAHxr\xac\xb77F\xdf\x1c\xcb\xd4\xce\x88L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b]x\x1a\x95\xe1c6\xe7`83\xb7n#\xe0\xc1_\xec\xba\xde\a\x8b\xc5\x86woo\xbc\x1c\xa3r\x82\xf3enq-\x90/\xed\xff\xad+\x03\x10\t\xda\xfd\xa2\xd0\xef4\n%\xf1\xd8', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x0, 0x1, 0x4}) mq_getsetattr(r0, &(0x7f00000004c0)={0x800, 0x10, 0xa, 0x3000}, 0x0) mq_timedreceive(r0, &(0x7f0000000340)=""/195, 0xc3, 0x0, 0x0) 156.287507ms ago: executing program 0 (id=893): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002cc2cdf406307302079790102030109021209015f6560700904010800ff"], &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000480)={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) 14.391548ms ago: executing program 3 (id=894): r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x8042, 0x0) fcntl$setlease(r0, 0x400, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x183203, 0x0) fcntl$setlease(r0, 0x400, 0x1) 0s ago: executing program 4 (id=895): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) munlock(&(0x7f000031e000/0x4000)=nil, 0x4000) kernel console output (not intermixed with test programs): oop3): disk space caching is enabled [ 77.153151][ T6026] F2FS-fs (loop1): Image doesn't support compression [ 77.221486][ T6026] F2FS-fs (loop1): invalid crc value [ 77.315705][ T6026] F2FS-fs (loop1): Found nat_bits in checkpoint [ 77.346835][ T6024] BTRFS info (device loop3): auto enabling async discard [ 77.413684][ T6024] BTRFS info (device loop3): rebuilding free space tree [ 77.521265][ T6024] BTRFS info (device loop3): disabling free space tree [ 77.528429][ T6026] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 77.547842][ T6024] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 77.597282][ T6065] loop2: detected capacity change from 0 to 64 [ 77.616193][ T6024] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 77.690774][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 77.825712][ T5782] syz-executor: attempt to access beyond end of device [ 77.825712][ T5782] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 77.881989][ T5782] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 77.917332][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 78.167876][ T5780] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 79.307429][ T5821] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 79.507125][ T5821] usb 2-1: Using ep0 maxpacket: 16 [ 79.525261][ T5821] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 79.546071][ T5821] usb 2-1: config 1 has an invalid descriptor of length 32, skipping remainder of the config [ 79.571347][ T5821] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 79.595026][ T5821] usb 2-1: config 1 has no interface number 1 [ 79.609581][ T5821] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 79.649548][ T5821] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1088, setting to 64 [ 79.685316][ T5821] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 79.737112][ T5821] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.764188][ T5821] usb 2-1: Product: syz [ 79.769235][ T5821] usb 2-1: Manufacturer: syz [ 79.784701][ T5821] usb 2-1: SerialNumber: syz [ 79.932509][ T6103] loop0: detected capacity change from 0 to 1024 [ 79.951204][ T6095] loop3: detected capacity change from 0 to 32768 [ 79.957974][ T6103] ======================================================= [ 79.957974][ T6103] WARNING: The mand mount option has been deprecated and [ 79.957974][ T6103] and is ignored by this kernel. Remove the mand [ 79.957974][ T6103] option from the mount to silence this warning. [ 79.957974][ T6103] ======================================================= [ 79.994825][ T6095] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.66 (6095) [ 80.086943][ T6095] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 80.108861][ T6103] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.155803][ T6095] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 80.165390][ T6095] BTRFS info (device loop3): setting nodatacow, compression disabled [ 80.174030][ T6095] BTRFS info (device loop3): max_inline at 0 [ 80.181994][ T6095] BTRFS info (device loop3): enabling disk space caching [ 80.191954][ T6095] BTRFS info (device loop3): turning off barriers [ 80.193768][ T5779] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.198650][ T6095] BTRFS info (device loop3): turning on flush-on-commit [ 80.198677][ T6095] BTRFS info (device loop3): doing ref verification [ 80.198698][ T6095] BTRFS info (device loop3): force clearing of disk cache [ 80.198719][ T6095] BTRFS info (device loop3): enabling ssd optimizations [ 80.198773][ T6095] BTRFS info (device loop3): max_inline at 4096 [ 80.198790][ T6095] BTRFS info (device loop3): disk space caching is enabled [ 80.350715][ T5821] usb 2-1: USB disconnect, device number 2 [ 80.430543][ T6095] BTRFS info (device loop3): auto enabling async discard [ 80.461588][ T6095] BTRFS info (device loop3): rebuilding free space tree [ 80.516118][ T6095] BTRFS info (device loop3): disabling free space tree [ 80.545629][ T6095] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 80.558593][ T6095] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 80.987902][ T5780] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 81.787728][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 81.796797][ T6158] netlink: 'syz.3.85': attribute type 49 has an invalid length. [ 81.836494][ T6158] netlink: 'syz.3.85': attribute type 49 has an invalid length. [ 81.929245][ T8] cfg80211: failed to load regulatory.db [ 82.274878][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 82.283850][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 82.292625][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 82.370123][ T6162] loop1: detected capacity change from 0 to 32768 [ 82.386640][ T6162] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.86 (6162) [ 82.387103][ T27] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 82.437020][ T6162] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 82.537236][ T6162] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 82.575136][ T6162] BTRFS info (device loop1): setting nodatacow, compression disabled [ 82.603815][ T6162] BTRFS info (device loop1): max_inline at 0 [ 82.617083][ T27] usb 4-1: Using ep0 maxpacket: 32 [ 82.627905][ T6162] BTRFS info (device loop1): enabling disk space caching [ 82.638748][ T27] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.655343][ T6162] BTRFS info (device loop1): turning off barriers [ 82.667636][ T27] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 82.686539][ T6162] BTRFS info (device loop1): turning on flush-on-commit [ 82.696495][ T6162] BTRFS info (device loop1): doing ref verification [ 82.715150][ T27] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 82.734779][ T6162] BTRFS info (device loop1): force clearing of disk cache [ 82.742590][ T27] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 82.758011][ T6162] BTRFS info (device loop1): enabling ssd optimizations [ 82.765092][ T6162] BTRFS info (device loop1): max_inline at 4096 [ 82.769208][ T27] usb 4-1: Product: syz [ 82.796188][ T27] usb 4-1: Manufacturer: syz [ 82.816578][ T6162] BTRFS info (device loop1): disk space caching is enabled [ 82.841099][ T27] hub 4-1:4.0: USB hub found [ 82.941539][ T6162] BTRFS info (device loop1): auto enabling async discard [ 82.958684][ T6162] BTRFS info (device loop1): rebuilding free space tree [ 82.996731][ T6162] BTRFS info (device loop1): disabling free space tree [ 83.009351][ T6162] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 83.035305][ T6162] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 83.043466][ T27] hub 4-1:4.0: config failed, can't read hub descriptor (err -22) [ 83.097712][ T27] usb 4-1: USB disconnect, device number 3 [ 83.177191][ T8] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 83.253175][ T5782] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 83.330067][ T6172] loop0: detected capacity change from 0 to 32768 [ 83.371332][ T8] usb 3-1: Using ep0 maxpacket: 32 [ 83.388776][ T8] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 83.407720][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.436521][ T8] usb 3-1: config 0 descriptor?? [ 83.458720][ T6172] JBD2: Ignoring recovery information on journal [ 83.660035][ T8] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 83.674585][ T6172] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 83.722521][ T8] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 83.763731][ T8] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 83.777722][ T8] usb 3-1: media controller created [ 83.817172][ T8] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 83.898622][ T8] az6027: usb out operation failed. (-71) [ 83.923596][ T8] az6027: usb out operation failed. (-71) [ 83.935285][ T8] stb0899_attach: Driver disabled by Kconfig [ 83.949266][ T8] az6027: no front-end attached [ 83.949266][ T8] [ 83.959889][ T8] az6027: usb out operation failed. (-71) [ 83.969476][ T8] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 83.981772][ T5779] ocfs2: Unmounting device (7,0) on (node local) [ 84.001246][ T8] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input6 [ 84.059663][ T8] dvb-usb: schedule remote query interval to 400 msecs. [ 84.087166][ T8] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 84.110678][ T8] usb 3-1: USB disconnect, device number 3 [ 84.221689][ T8] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 84.367136][ T55] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 84.552651][ T55] usb 2-1: Using ep0 maxpacket: 8 [ 84.560083][ T55] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 84.575370][ T55] usb 2-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 84.587250][ T55] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.595437][ T55] usb 2-1: Product: syz [ 84.600476][ T55] usb 2-1: Manufacturer: syz [ 84.605189][ T55] usb 2-1: SerialNumber: syz [ 84.610285][ T5771] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 84.632304][ T55] usb 2-1: config 0 descriptor?? [ 84.644712][ T55] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 84.737232][ T27] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 84.831633][ T5771] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 84.848120][ T5771] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 84.872020][ T5771] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 84.882735][ T5771] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 84.892271][ T5771] usb 4-1: SerialNumber: syz [ 84.930881][ T27] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.946881][ T27] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 84.958526][ T27] usb 3-1: New USB device found, idVendor=1d34, idProduct=0004, bcdDevice= 0.00 [ 84.972957][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.995922][ T27] usb 3-1: config 0 descriptor?? [ 85.134625][ T5771] usb 4-1: 0:2 : does not exist [ 85.187714][ T5771] usb 4-1: USB disconnect, device number 4 [ 85.264727][ T55] gspca_zc3xx: reg_w_i err -71 [ 85.283772][ T5774] udevd[5774]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 85.327296][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 85.450725][ T27] hid-led 0003:1D34:0004.0003: unknown main item tag 0x0 [ 85.658814][ T27] hid-led 0003:1D34:0004.0003: hidraw0: USB HID v0.00 Device [HID 1d34:0004] on usb-dummy_hcd.2-1/input0 [ 85.696562][ T27] hid-led 0003:1D34:0004.0003: Dream Cheeky Webmail Notifier initialized [ 85.863083][ T6219] loop0: detected capacity change from 0 to 32768 [ 85.880068][ T6219] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.104 (6219) [ 85.908541][ T55] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 85.925610][ T55] gspca_zc3xx: probe of 2-1:0.0 failed with error -71 [ 85.934745][ T787] usb 3-1: USB disconnect, device number 4 [ 85.943816][ T6224] loop3: detected capacity change from 0 to 512 [ 85.959960][ T6224] EXT4-fs: Ignoring removed i_version option [ 85.968870][ T55] usb 2-1: USB disconnect, device number 3 [ 85.987186][ T6219] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 86.019976][ T6219] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 86.074367][ T6219] BTRFS info (device loop0): setting nodatacow, compression disabled [ 86.084378][ T6219] BTRFS info (device loop0): max_inline at 0 [ 86.090946][ T6219] BTRFS info (device loop0): enabling disk space caching [ 86.098241][ T6219] BTRFS info (device loop0): turning off barriers [ 86.104731][ T6219] BTRFS info (device loop0): turning on flush-on-commit [ 86.113460][ T6219] BTRFS info (device loop0): doing ref verification [ 86.120594][ T6219] BTRFS info (device loop0): force clearing of disk cache [ 86.128297][ T6219] BTRFS info (device loop0): enabling ssd optimizations [ 86.135327][ T6219] BTRFS info (device loop0): max_inline at 4096 [ 86.141821][ T6219] BTRFS info (device loop0): disk space caching is enabled [ 86.150810][ T6224] EXT4-fs error (device loop3): ext4_orphan_get:1425: comm syz.3.106: bad orphan inode 4261412864 [ 86.186249][ T6224] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.210360][ T6224] ext4 filesystem being mounted at /24/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 86.308977][ T6246] loop1: detected capacity change from 0 to 256 [ 86.316846][ T6246] exfat: Deprecated parameter 'namecase' [ 86.323051][ T6219] BTRFS info (device loop0): auto enabling async discard [ 86.355935][ T6219] BTRFS info (device loop0): rebuilding free space tree [ 86.385723][ T6246] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 86.431237][ T6219] BTRFS info (device loop0): disabling free space tree [ 86.440842][ T5780] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.464993][ T6219] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 86.483678][ T6219] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 86.956878][ T5779] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 86.991032][ T6262] netlink: 'syz.1.115': attribute type 10 has an invalid length. [ 87.067568][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 87.157525][ T6262] team0: Port device dummy0 added [ 87.747747][ T8] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 87.971366][ T787] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 87.976557][ T8] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 87.990295][ T8] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 88.012432][ T8] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 88.022357][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.030535][ T8] usb 3-1: Product: syz [ 88.035760][ T8] usb 3-1: Manufacturer: syz [ 88.040816][ T8] usb 3-1: SerialNumber: syz [ 88.097308][ T55] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 88.158123][ T6281] netlink: 8 bytes leftover after parsing attributes in process `syz.0.123'. [ 88.168086][ T6281] netlink: 'syz.0.123': attribute type 20 has an invalid length. [ 88.175897][ T6281] netlink: 'syz.0.123': attribute type 21 has an invalid length. [ 88.186809][ T787] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.198162][ T787] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 88.209367][ T787] usb 2-1: New USB device found, idVendor=1d34, idProduct=0004, bcdDevice= 0.00 [ 88.222019][ T787] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.256035][ T787] usb 2-1: config 0 descriptor?? [ 88.258541][ T6269] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.282561][ T6269] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.309090][ T55] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 88.329865][ T8] cdc_ether: probe of 3-1:1.0 failed with error -22 [ 88.340786][ T55] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 88.358266][ T8] usb 3-1: USB disconnect, device number 5 [ 88.370913][ T55] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 88.401501][ T55] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 88.411251][ T55] usb 4-1: SerialNumber: syz [ 88.638610][ T55] usb 4-1: 0:2 : does not exist [ 88.665640][ T55] usb 4-1: USB disconnect, device number 5 [ 88.692385][ T787] hid-led 0003:1D34:0004.0004: unknown main item tag 0x0 [ 88.883385][ T787] hid-led 0003:1D34:0004.0004: hidraw0: USB HID v0.00 Device [HID 1d34:0004] on usb-dummy_hcd.1-1/input0 [ 88.898304][ T8] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 88.900631][ T787] hid-led 0003:1D34:0004.0004: Dream Cheeky Webmail Notifier initialized [ 89.112725][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 89.120215][ T55] usb 2-1: USB disconnect, device number 4 [ 89.126801][ T8] usb 3-1: config index 0 descriptor too short (expected 301, got 72) [ 89.143385][ T8] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 89.167302][ T8] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 89.182873][ T8] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 89.193983][ T8] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 89.217080][ T8] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.240935][ T8] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 89.265216][ T8] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 89.282669][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.324483][ T6290] loop0: detected capacity change from 0 to 64 [ 89.510340][ T8] usb 3-1: usb_control_msg returned -71 [ 89.514778][ T6295] loop0: detected capacity change from 0 to 64 [ 89.526226][ T8] usbtmc 3-1:16.0: can't read capabilities [ 89.536572][ T8] usbtmc 3-1:16.0: Failed to submit iin_urb [ 89.563646][ T8] usbtmc: probe of 3-1:16.0 failed with error -90 [ 89.594220][ T8] usb 3-1: USB disconnect, device number 6 [ 89.683023][ T6292] loop3: detected capacity change from 0 to 8192 [ 89.741558][ T6292] FAT-fs (loop3): Unrecognized mount option "flush [ 89.741558][ T6292] appraise_type=imasig" or missing value [ 89.829261][ T6299] loop1: detected capacity change from 0 to 2048 [ 89.953291][ T6302] loop3: detected capacity change from 0 to 64 [ 89.980696][ T6299] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 90.115251][ T6302] syz.3.131: attempt to access beyond end of device [ 90.115251][ T6302] loop3: rw=34817, sector=39, nr_sectors = 30 limit=64 [ 90.157525][ T6302] syz.3.131: attempt to access beyond end of device [ 90.157525][ T6302] loop3: rw=34817, sector=72, nr_sectors = 2 limit=64 [ 90.264547][ T6302] syz.3.131: attempt to access beyond end of device [ 90.264547][ T6302] loop3: rw=34817, sector=76, nr_sectors = 500 limit=64 [ 90.595805][ T6307] loop2: detected capacity change from 0 to 760 [ 90.763164][ T8] kernel write not supported for file /uinput (pid: 8 comm: kworker/0:0) [ 90.807597][ T6319] netlink: 24 bytes leftover after parsing attributes in process `syz.3.139'. [ 90.951706][ T6325] loop1: detected capacity change from 0 to 256 [ 91.137139][ T8] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 91.337183][ T8] usb 3-1: Using ep0 maxpacket: 32 [ 91.347535][ T6335] loop0: detected capacity change from 0 to 64 [ 91.356920][ T8] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 91.378729][ T8] usb 3-1: config 0 has no interface number 0 [ 91.396582][ T8] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 91.418123][ T6335] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 91.441151][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.455373][ T8] usb 3-1: Product: syz [ 91.463650][ T8] usb 3-1: Manufacturer: syz [ 91.477108][ T8] usb 3-1: SerialNumber: syz [ 91.495901][ T8] usb 3-1: config 0 descriptor?? [ 91.525094][ T8] smsc95xx v2.0.0 [ 91.639154][ T5779] minix_free_inode: bit 3 already cleared [ 91.665155][ T5779] minix_free_inode: bit 4 already cleared [ 91.692430][ T5779] minix_free_inode: bit 2 already cleared [ 91.703881][ T5779] minix_free_inode: bit 5 already cleared [ 92.141297][ T28] audit: type=1326 audit(1754057087.620:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6355 comm="syz.0.156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e8c38eb69 code=0x7ffc0000 [ 92.163959][ T8] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -61 [ 92.163987][ T8] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 92.219461][ T28] audit: type=1326 audit(1754057087.620:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6355 comm="syz.0.156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e8c38eb69 code=0x7ffc0000 [ 92.247357][ T28] audit: type=1326 audit(1754057087.620:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6355 comm="syz.0.156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f7e8c38eb69 code=0x7ffc0000 [ 92.275145][ T28] audit: type=1326 audit(1754057087.620:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6355 comm="syz.0.156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e8c38eb69 code=0x7ffc0000 [ 92.357371][ T28] audit: type=1326 audit(1754057087.620:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6355 comm="syz.0.156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e8c38eb69 code=0x7ffc0000 [ 92.398325][ T8] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 92.431816][ T8] smsc95xx: probe of 3-1:0.67 failed with error -71 [ 92.438839][ T28] audit: type=1326 audit(1754057087.620:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6355 comm="syz.0.156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7e8c38d4d0 code=0x7ffc0000 [ 92.484643][ T8] usb 3-1: USB disconnect, device number 7 [ 92.518469][ T28] audit: type=1326 audit(1754057087.620:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6355 comm="syz.0.156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e8c38eb69 code=0x7ffc0000 [ 92.559329][ T6362] netlink: 8 bytes leftover after parsing attributes in process `syz.1.159'. [ 92.580976][ T28] audit: type=1326 audit(1754057087.620:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6355 comm="syz.0.156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e8c38eb69 code=0x7ffc0000 [ 92.629219][ T28] audit: type=1326 audit(1754057087.620:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6355 comm="syz.0.156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=221 compat=0 ip=0x7f7e8c38eb69 code=0x7ffc0000 [ 92.653613][ T28] audit: type=1326 audit(1754057087.620:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6355 comm="syz.0.156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e8c38eb69 code=0x7ffc0000 [ 92.857206][ T27] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 93.076577][ T27] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 93.095033][ T27] usb 1-1: config 0 has no interface number 0 [ 93.107782][ T27] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 93.127063][ T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.137377][ T27] usb 1-1: Product: syz [ 93.146057][ T27] usb 1-1: Manufacturer: syz [ 93.151608][ T27] usb 1-1: SerialNumber: syz [ 93.159076][ T27] usb 1-1: config 0 descriptor?? [ 93.186483][ T6380] loop1: detected capacity change from 0 to 2048 [ 93.252334][ T6380] Alternate GPT is invalid, using primary GPT. [ 93.261145][ T6380] loop1: p2 p3 p7 [ 93.372718][ T27] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 93.415610][ T27] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 93.456924][ T27] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 93.473374][ T27] usb 1-1: media controller created [ 93.490045][ T6382] netlink: 8 bytes leftover after parsing attributes in process `syz.1.169'. [ 93.530679][ T27] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 93.605230][ T5795] udevd[5795]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 93.620676][ T6226] udevd[6226]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 93.622382][ T5996] udevd[5996]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 93.646920][ T27] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 93.719086][ T6378] loop2: detected capacity change from 0 to 32768 [ 93.754620][ T27] usb 1-1: USB disconnect, device number 4 [ 93.805546][ T6378] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 93.891595][ T6378] XFS (loop2): Ending clean mount [ 93.909759][ T6378] XFS (loop2): Quotacheck needed: Please wait. [ 93.956938][ T6378] XFS (loop2): Quotacheck: Done. [ 94.074381][ T6401] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 94.124770][ T5781] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 94.567463][ T6409] loop2: detected capacity change from 0 to 1024 [ 94.737157][ T59] hfsplus: b-tree write err: -5, ino 4 [ 95.033364][ T6416] loop1: detected capacity change from 0 to 4096 [ 95.066580][ T6416] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [ 95.119346][ T6411] loop0: detected capacity change from 0 to 32768 [ 95.136385][ T6411] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.178 (6411) [ 95.189611][ T6411] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 95.213034][ T6411] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 95.225721][ T6411] BTRFS info (device loop0): setting nodatasum [ 95.252433][ T6411] BTRFS info (device loop0): enabling auto defrag [ 95.261621][ T6411] BTRFS info (device loop0): disabling tree log [ 95.268834][ T6411] BTRFS info (device loop0): using free space tree [ 95.384468][ T6434] loop2: detected capacity change from 0 to 512 [ 95.395598][ T6434] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 95.428708][ T6434] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 95.482273][ T6411] BTRFS info (device loop0): enabling ssd optimizations [ 95.497144][ T6411] BTRFS info (device loop0): auto enabling async discard [ 95.519250][ T6434] EXT4-fs (loop2): 1 truncate cleaned up [ 95.526209][ T6434] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.564472][ T6444] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 95.744179][ T5781] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.912329][ T6450] netlink: 8 bytes leftover after parsing attributes in process `syz.2.186'. [ 95.971959][ T5779] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 96.022835][ T6450] vlan2: entered allmulticast mode [ 96.919686][ T6478] loop3: detected capacity change from 0 to 256 [ 96.956815][ T6478] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 97.070389][ T6457] loop0: detected capacity change from 0 to 32768 [ 97.253781][ T6457] ERROR: (device loop0): dtReadFirst: stbl[0] out of bound [ 97.253781][ T6457] [ 97.301470][ T6488] netlink: 4 bytes leftover after parsing attributes in process `syz.2.204'. [ 97.313110][ T6457] ERROR: (device loop0): remounting filesystem as read-only [ 97.740732][ T6507] loop1: detected capacity change from 0 to 64 [ 97.790732][ T6507] BFS-fs: bfs_fill_super(): loop1 is unclean, continuing [ 97.883223][ T6511] loop2: detected capacity change from 0 to 2048 [ 97.988434][ T6511] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.077435][ T6511] ext4 filesystem being mounted at /45/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 98.119786][ T6518] loop0: detected capacity change from 0 to 64 [ 98.232673][ T6518] syz.0.216: attempt to access beyond end of device [ 98.232673][ T6518] loop0: rw=0, sector=268435468, nr_sectors = 2 limit=64 [ 98.260413][ T6518] Buffer I/O error on dev loop0, logical block 134217734, async page read [ 98.275446][ T5781] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.430109][ T6509] loop3: detected capacity change from 0 to 32768 [ 98.438856][ T6509] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 scanned by syz.3.214 (6509) [ 98.483064][ T6509] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 98.503674][ T6509] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 98.520739][ T6509] BTRFS info (device loop3): force zlib compression, level 3 [ 98.531360][ T6509] BTRFS info (device loop3): force clearing of disk cache [ 98.532478][ T6529] netlink: 12 bytes leftover after parsing attributes in process `syz.1.221'. [ 98.538775][ T6509] BTRFS info (device loop3): setting nodatasum [ 98.538798][ T6509] BTRFS info (device loop3): use zlib compression, level 3 [ 98.538819][ T6509] BTRFS info (device loop3): allowing degraded mounts [ 98.538837][ T6509] BTRFS info (device loop3): enabling disk space caching [ 98.538852][ T6509] BTRFS info (device loop3): disk space caching is enabled [ 98.697566][ T6509] BTRFS info (device loop3): enabling ssd optimizations [ 98.746209][ T6509] BTRFS info (device loop3): auto enabling async discard [ 98.768915][ T6509] BTRFS info (device loop3): rebuilding free space tree [ 98.809590][ T6509] BTRFS info (device loop3): disabling free space tree [ 98.816630][ T6509] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 98.833616][ T6509] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 99.003109][ T5780] BTRFS info (device loop3): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 99.009545][ T6556] C: renamed from team_slave_0 (while UP) [ 99.026631][ T6556] netlink: 'syz.1.225': attribute type 4 has an invalid length. [ 99.043875][ T6556] netlink: 120 bytes leftover after parsing attributes in process `syz.1.225'. [ 99.072340][ T6556] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 100.218078][ T6570] loop1: detected capacity change from 0 to 32768 [ 100.311924][ T6570] find_entry called with index = 0 [ 100.344792][ T6570] read_mapping_page failed! [ 100.356201][ T6570] ERROR: (device loop1): txCommit: [ 100.356201][ T6570] [ 100.376712][ T6570] ERROR: (device loop1): remounting filesystem as read-only [ 100.411958][ T6576] loop0: detected capacity change from 0 to 32768 [ 100.524072][ T6576] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 100.620325][ T6595] serio: Serial port ptm0 [ 100.774320][ T5779] ocfs2: Unmounting device (7,0) on (node local) [ 100.896821][ T6601] loop1: detected capacity change from 0 to 1024 [ 100.950019][ T6601] EXT4-fs (loop1): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 101.078485][ T6601] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.236762][ T6601] EXT4-fs (loop1): Online resizing not supported with bigalloc [ 101.341173][ T5782] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.510577][ T6625] capability: warning: `syz.0.255' uses deprecated v2 capabilities in a way that may be insecure [ 101.783758][ T6636] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 102.046098][ T6646] netlink: 12 bytes leftover after parsing attributes in process `syz.0.261'. [ 102.631002][ T6666] loop1: detected capacity change from 0 to 2048 [ 102.716895][ T6666] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 102.745949][ T6666] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 102.814635][ T6666] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 103.113170][ T6677] loop3: detected capacity change from 0 to 1024 [ 103.143005][ T6677] hfsplus: inconsistency in B*Tree (-1,0,1,1,0) [ 103.150077][ T6677] hfsplus: failed to load root directory [ 103.201275][ T5953] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 103.288018][ T6681] loop2: detected capacity change from 0 to 128 [ 103.312631][ T6681] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 103.330634][ T6681] ext4 filesystem being mounted at /61/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 103.387416][ T28] audit: type=1800 audit(1754057098.860:12): pid=6681 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.278" name="file1" dev="loop2" ino=12 res=0 errno=0 [ 103.474054][ T5781] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 103.527167][ T787] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 103.651622][ T6694] loop1: detected capacity change from 0 to 512 [ 103.670577][ T6694] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 103.723165][ T6694] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.737497][ T787] usb 4-1: Using ep0 maxpacket: 8 [ 103.753446][ T6694] ext4 filesystem being mounted at /84/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.789433][ T787] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.836153][ T787] usb 4-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 103.865879][ T787] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.902123][ T5782] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.913580][ T787] usb 4-1: config 0 descriptor?? [ 104.357580][ T787] hid-multitouch 0003:0EEF:72C4.0005: hidraw0: USB HID v0.03 Device [HID 0eef:72c4] on usb-dummy_hcd.3-1/input0 [ 104.532495][ T23] usb 4-1: USB disconnect, device number 6 [ 104.599889][ T6718] program syz.2.292 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 104.709791][ T6706] loop1: detected capacity change from 0 to 32768 [ 104.738110][ T787] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 104.841357][ T6723] warning: `syz.2.294' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 104.927154][ T787] usb 1-1: Using ep0 maxpacket: 16 [ 104.935867][ T787] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.951114][ T787] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.963734][ T787] usb 1-1: config 0 interface 0 has no altsetting 0 [ 104.963854][ T6725] loop2: detected capacity change from 0 to 256 [ 104.971429][ T787] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 104.980188][ T6725] exfat: Deprecated parameter 'namecase' [ 104.991330][ T787] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.017822][ T787] usb 1-1: config 0 descriptor?? [ 105.024481][ T6725] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 105.368934][ T6734] netlink: 8 bytes leftover after parsing attributes in process `syz.2.300'. [ 105.453018][ T787] hid (null): usage index exceeded [ 105.459802][ T6738] netlink: 60 bytes leftover after parsing attributes in process `syz.3.299'. [ 105.474844][ T6740] netlink: 8 bytes leftover after parsing attributes in process `syz.2.301'. [ 105.487080][ T6738] netlink: 60 bytes leftover after parsing attributes in process `syz.3.299'. [ 105.507314][ T6732] netlink: 60 bytes leftover after parsing attributes in process `syz.3.299'. [ 105.544611][ T6735] netlink: 60 bytes leftover after parsing attributes in process `syz.3.299'. [ 105.665612][ T8] usb 1-1: USB disconnect, device number 5 [ 105.703326][ T6746] input: syz1 as /devices/virtual/input/input7 [ 105.766889][ T6748] netlink: 4 bytes leftover after parsing attributes in process `syz.3.305'. [ 105.927259][ T55] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 106.142791][ T55] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 106.163908][ T55] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 106.173142][ T55] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 106.197330][ T55] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.258054][ T55] usb 2-1: config 0 descriptor?? [ 106.286619][ T55] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 106.303988][ T55] dvb-usb: bulk message failed: -22 (3/0) [ 106.343395][ T55] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 106.353158][ T55] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 106.360568][ T55] usb 2-1: media controller created [ 106.367352][ T55] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 106.381685][ T55] dvb-usb: bulk message failed: -22 (6/0) [ 106.391581][ T55] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 106.401541][ T55] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input8 [ 106.416248][ T55] dvb-usb: schedule remote query interval to 150 msecs. [ 106.423660][ T55] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 106.502195][ T27] usb 2-1: USB disconnect, device number 5 [ 106.529108][ T27] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 106.537736][ T787] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 106.548857][ T23] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 106.597107][ T5875] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 106.737248][ T787] usb 4-1: Using ep0 maxpacket: 8 [ 106.744651][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.756476][ T787] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 106.766787][ T787] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.775362][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.785962][ T23] usb 3-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 106.796503][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.808845][ T787] pvrusb2: Hardware description: Terratec Grabster AV400 [ 106.816370][ T787] pvrusb2: ********** [ 106.821831][ T5875] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 106.830166][ T5875] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 106.841587][ T787] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 106.853683][ T23] usb 3-1: config 0 descriptor?? [ 106.859260][ T5875] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 106.870563][ T787] pvrusb2: Important functionality might not be entirely working. [ 106.881390][ T5875] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64 [ 106.893714][ T787] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 106.905241][ T5875] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 106.918641][ T787] pvrusb2: ********** [ 106.923859][ T5875] usb 1-1: config 0 interface 0 has no altsetting 0 [ 106.933355][ T5875] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 106.942708][ T5875] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 106.951296][ T5875] usb 1-1: Product: syz [ 106.955941][ T5875] usb 1-1: Manufacturer: syz [ 106.960905][ T5875] usb 1-1: SerialNumber: syz [ 106.967968][ T5875] usb 1-1: config 0 descriptor?? [ 106.973986][ T6770] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 106.984871][ T5875] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 107.002215][ T5875] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 107.011228][ T2316] pvrusb2: Invalid write control endpoint [ 107.143856][ T2316] pvrusb2: Invalid write control endpoint [ 107.150139][ T2316] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 107.167086][ T2316] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 107.189175][ T2316] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 107.200450][ T2316] pvrusb2: Device being rendered inoperable [ 107.209885][ T2316] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 107.223099][ T2316] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 107.223786][ T6766] pvrusb2: Attempted to execute control transfer when device not ok [ 107.244412][ T55] usb 1-1: USB disconnect, device number 6 [ 107.248221][ T2316] pvrusb2: Attached sub-driver cx25840 [ 107.267988][ T55] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 107.275644][ T2316] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 107.291266][ T2316] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 107.306396][ T23] uclogic 0003:5543:0522.0007: No inputs registered, leaving [ 107.307089][ T5830] usb 4-1: USB disconnect, device number 7 [ 107.328978][ T23] uclogic 0003:5543:0522.0007: hidraw0: USB HID v0.00 Device [HID 5543:0522] on usb-dummy_hcd.2-1/input0 [ 107.525412][ T55] usb 3-1: USB disconnect, device number 8 [ 107.856950][ T6786] netlink: 12 bytes leftover after parsing attributes in process `syz.1.321'. [ 108.041117][ T6790] loop3: detected capacity change from 0 to 8192 [ 108.070074][ T6790] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 108.095645][ T6790] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 108.105518][ T6790] REISERFS (device loop3): using ordered data mode [ 108.112158][ T6790] reiserfs: using flush barriers [ 108.131148][ T6790] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 108.165674][ T6790] REISERFS (device loop3): checking transaction log (loop3) [ 108.216361][ T6797] syz.2.326 (6797) used greatest stack depth: 20688 bytes left [ 108.280334][ T6790] REISERFS (device loop3): Using r5 hash to sort names [ 108.321386][ T6790] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 108.520805][ T6805] loop0: detected capacity change from 0 to 4096 [ 108.549421][ T6805] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [ 108.621446][ T5875] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 108.832973][ T5875] usb 3-1: Using ep0 maxpacket: 8 [ 108.858696][ T5875] usb 3-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 108.900472][ T5875] usb 3-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 108.961263][ T5875] usb 3-1: Product: syz [ 108.965525][ T5875] usb 3-1: Manufacturer: syz [ 108.981531][ T5875] usb 3-1: SerialNumber: syz [ 109.002593][ T5875] usb 3-1: config 0 descriptor?? [ 109.025896][ T5875] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 109.071021][ T6819] netlink: 80 bytes leftover after parsing attributes in process `syz.0.334'. [ 109.320350][ T6827] loop1: detected capacity change from 0 to 8 [ 109.605150][ T6831] loop3: detected capacity change from 0 to 8192 [ 109.648215][ T5875] input: gspca_zc3xx as /devices/platform/dummy_hcd.2/usb3/3-1/input/input10 [ 109.836813][ T6835] loop0: detected capacity change from 0 to 4096 [ 109.852589][ T6840] netlink: 'syz.1.345': attribute type 21 has an invalid length. [ 109.871296][ T6835] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 109.875906][ T787] usb 3-1: USB disconnect, device number 9 [ 109.909911][ T6840] netlink: 'syz.1.345': attribute type 1 has an invalid length. [ 109.939111][ T6840] netlink: 144 bytes leftover after parsing attributes in process `syz.1.345'. [ 110.033219][ T6835] ntfs3: loop0: failed to convert "c46c" to maccyrillic [ 110.312136][ T6848] loop0: detected capacity change from 0 to 1764 [ 110.363843][ T6850] loop3: detected capacity change from 0 to 512 [ 110.390140][ T6850] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 110.443075][ T6850] EXT4-fs (loop3): 1 truncate cleaned up [ 110.473975][ T6850] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.613508][ T5780] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.773285][ T6858] netlink: 884 bytes leftover after parsing attributes in process `syz.3.353'. [ 111.122042][ T6869] loop0: detected capacity change from 0 to 2048 [ 111.249314][ T6875] loop1: detected capacity change from 0 to 64 [ 111.299319][ T6876] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 111.503538][ T6876] NILFS (loop0): vblocknr = 12 has abnormal lifetime: start cno (= 150994946) > current cno (= 3) [ 111.528814][ T6876] NILFS error (device loop0): nilfs_bmap_propagate: broken bmap (inode number=16) [ 111.557094][ T6876] Remounting filesystem read-only [ 111.584942][ T6881] NILFS (loop0): error -2 truncating bmap (ino=16) [ 111.597112][ T55] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 111.677458][ T6869] syz.0.356 (6869) used greatest stack depth: 19120 bytes left [ 111.680184][ T5779] NILFS (loop0): disposed unprocessed dirty file(s) when stopping log writer [ 111.719308][ T5779] NILFS (loop0): discard dirty page: offset=4096, ino=6 [ 111.737099][ T5779] NILFS (loop0): discard dirty block: blocknr=39, size=1024 [ 111.754704][ T5779] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 111.776089][ T5779] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 111.796401][ T5779] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 111.807237][ T55] usb 3-1: Using ep0 maxpacket: 32 [ 111.808314][ T5779] NILFS (loop0): discard dirty page: offset=0, ino=5 [ 111.826649][ T55] usb 3-1: config 0 interface 0 has no altsetting 0 [ 111.837536][ T5779] NILFS (loop0): discard dirty block: blocknr=41, size=1024 [ 111.844924][ T5779] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 111.864095][ T5779] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 111.873447][ T55] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 111.873476][ T55] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.873495][ T55] usb 3-1: Product: syz [ 111.873509][ T55] usb 3-1: Manufacturer: syz [ 111.873523][ T55] usb 3-1: SerialNumber: syz [ 111.875811][ T55] usb 3-1: config 0 descriptor?? [ 111.909809][ T5779] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 111.910228][ T5779] NILFS (loop0): discard dirty page: offset=0, ino=3 [ 111.933635][ T5779] NILFS (loop0): discard dirty block: blocknr=42, size=1024 [ 111.941366][ T5779] NILFS (loop0): discard dirty block: blocknr=43, size=1024 [ 111.948921][ T5779] NILFS (loop0): discard dirty block: blocknr=44, size=1024 [ 111.956412][ T5779] NILFS (loop0): discard dirty block: blocknr=0, size=1024 [ 111.966846][ T5779] NILFS (loop0): discard dirty page: offset=4096, ino=3 [ 111.983259][ T5779] NILFS (loop0): discard dirty block: blocknr=0, size=1024 [ 111.991585][ T5779] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 112.022451][ T5779] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 112.032188][ T5779] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 112.050736][ T6880] loop3: detected capacity change from 0 to 32768 [ 112.166417][ T6894] loop0: detected capacity change from 0 to 512 [ 112.196835][ T6894] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 112.274700][ T6894] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.313774][ T6894] ext4 filesystem being mounted at /85/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.377277][ T55] gs_usb 3-1:0.0: Configuring for 1 interfaces [ 112.521032][ T5779] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.779537][ T55] gs_usb 3-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 112.864373][ T55] usb 3-1: USB disconnect, device number 10 [ 112.935020][ T28] audit: type=1326 audit(1754057108.410:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6910 comm="syz.0.375" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7e8c38eb69 code=0x0 [ 113.328090][ T6927] netlink: 60 bytes leftover after parsing attributes in process `syz.3.378'. [ 113.439643][ T6930] C: entered promiscuous mode [ 113.444747][ T6930] team_slave_1: entered promiscuous mode [ 113.450525][ T6930] dummy0: entered promiscuous mode [ 113.497326][ T6930] macsec1: entered promiscuous mode [ 113.521579][ T6930] team0: entered promiscuous mode [ 113.552048][ T6930] team0: Device macsec1 is already an upper device of the team interface [ 113.599079][ T6930] team0: left promiscuous mode [ 113.626333][ T6930] C: left promiscuous mode [ 113.630932][ T6930] team_slave_1: left promiscuous mode [ 113.636627][ T6930] dummy0: left promiscuous mode [ 114.202703][ T6947] loop0: detected capacity change from 0 to 8192 [ 114.505404][ T6960] netlink: 4 bytes leftover after parsing attributes in process `syz.0.388'. [ 114.806185][ T6952] loop1: detected capacity change from 0 to 32768 [ 114.824372][ T6949] loop2: detected capacity change from 0 to 32768 [ 114.851443][ T6952] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.387 (6952) [ 114.896215][ T6945] loop3: detected capacity change from 0 to 40427 [ 114.904721][ T6945] F2FS-fs (loop3): heap/no_heap options were deprecated [ 114.926408][ T6949] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 114.929251][ T6952] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 115.002357][ T6952] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 115.016637][ T6945] F2FS-fs (loop3): invalid crc value [ 115.043922][ T6952] BTRFS info (device loop1): use zlib compression, level 3 [ 115.067490][ T6945] F2FS-fs (loop3): Found nat_bits in checkpoint [ 115.097762][ T6952] BTRFS info (device loop1): using free space tree [ 115.277476][ T6949] XFS (loop2): Ending clean mount [ 115.309045][ T6949] XFS (loop2): Quotacheck needed: Please wait. [ 115.321366][ T6952] BTRFS info (device loop1): enabling ssd optimizations [ 115.342107][ T6952] BTRFS info (device loop1): auto enabling async discard [ 115.380383][ T6945] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 115.485982][ T6949] XFS (loop2): Quotacheck: Done. [ 115.513780][ T5780] syz-executor: attempt to access beyond end of device [ 115.513780][ T5780] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 115.564289][ T5780] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 115.658773][ T5781] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 115.699504][ T5782] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 116.032727][ T6226] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop1 scanned by udevd (6226) [ 116.616871][ T28] audit: type=1326 audit(1754057112.090:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7024 comm="syz.1.402" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb2aa38eb69 code=0x0 [ 116.946258][ T7035] loop0: detected capacity change from 0 to 64 [ 117.644144][ T7038] loop2: detected capacity change from 0 to 32768 [ 117.675203][ T7038] XFS: attr2 mount option is deprecated. [ 117.764386][ T7038] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 117.798283][ T7042] loop0: detected capacity change from 0 to 40427 [ 117.809302][ T7042] F2FS-fs (loop0): Small segment_count (9 < 1 * 24) [ 117.832671][ T7042] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 117.864580][ T7040] loop3: detected capacity change from 0 to 40427 [ 117.883727][ T7040] F2FS-fs (loop3): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 117.896338][ T7040] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 117.913465][ T7040] F2FS-fs (loop3): build fault injection attr: rate: 18446, type: 0x7ffff [ 117.937535][ T7038] XFS (loop2): Ending clean mount [ 117.949359][ T7042] F2FS-fs (loop0): Found nat_bits in checkpoint [ 117.971790][ T7040] F2FS-fs (loop3): invalid crc value [ 117.983379][ T7038] XFS (loop2): Quotacheck needed: Please wait. [ 117.996058][ T7040] F2FS-fs (loop3): Found nat_bits in checkpoint [ 118.126750][ T7038] XFS (loop2): Quotacheck: Done. [ 118.149232][ T7040] F2FS-fs (loop3): Start checkpoint disabled! [ 118.164243][ T7042] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 118.198105][ T7042] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 118.220438][ T7040] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 118.257605][ T7040] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 118.263581][ T7042] syz.0.410: attempt to access beyond end of device [ 118.263581][ T7042] loop0: rw=2049, sector=53248, nr_sectors = 136 limit=40427 [ 118.401034][ T5779] syz-executor: attempt to access beyond end of device [ 118.401034][ T5779] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 118.433715][ T5779] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 118.441719][ T5781] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 118.518969][ T12] kworker/u4:1: attempt to access beyond end of device [ 118.518969][ T12] loop3: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 118.532889][ T7046] loop1: detected capacity change from 0 to 32768 [ 118.555355][ T7046] [ 118.555355][ T7046] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 118.555355][ T7046] [ 118.569807][ T12] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 118.593683][ T12] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 118.619386][ T12] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 118.708820][ T7046] ERROR: (device loop1): diWrite: ixpxd invalid [ 118.708820][ T7046] [ 118.807294][ T7046] ERROR: (device loop1): txCommit: [ 118.807294][ T7046] [ 118.867652][ T7046] [ 118.867652][ T7046] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 118.867652][ T7046] [ 118.915017][ T7046] [ 118.915017][ T7046] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 118.915017][ T7046] [ 118.981086][ T7060] find_entry called with index = 0 [ 119.009325][ T7060] read_mapping_page failed! [ 119.047436][ T7060] ERROR: (device loop1): txCommit: [ 119.047436][ T7060] [ 119.062970][ T7060] [ 119.062970][ T7060] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 119.062970][ T7060] [ 119.192850][ T1132] ERROR: (device loop1): diWrite: ixpxd invalid [ 119.192850][ T1132] [ 119.213715][ T1132] ERROR: (device loop1): txCommit: [ 119.213715][ T1132] [ 119.231904][ T1132] jfs_write_inode: jfs_commit_inode failed! [ 119.247515][ T5782] [ 119.247515][ T5782] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 119.247515][ T5782] [ 119.272443][ T5782] [ 119.272443][ T5782] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 119.272443][ T5782] [ 119.832697][ T7064] loop0: detected capacity change from 0 to 32768 [ 119.848094][ T7064] XFS: attr2 mount option is deprecated. [ 119.908618][ T7064] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 119.950011][ T7062] loop2: detected capacity change from 0 to 32768 [ 120.017740][ T7062] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 120.123366][ T7066] loop3: detected capacity change from 0 to 32768 [ 120.133847][ T7066] XFS: noikeep mount option is deprecated. [ 120.153984][ T7066] XFS (loop3): invalid logbufsize: 34816 [not 16k,32k,64k,128k or 256k] [ 120.181328][ T7064] XFS (loop0): Ending clean mount [ 120.216373][ T7062] XFS (loop2): Ending clean mount [ 120.220280][ T7064] XFS (loop0): Quotacheck needed: Please wait. [ 120.258827][ T7062] XFS (loop2): Quotacheck needed: Please wait. [ 120.363679][ T7064] XFS (loop0): Quotacheck: Done. [ 120.473429][ T7062] XFS (loop2): Quotacheck: Done. [ 120.588301][ T7069] loop1: detected capacity change from 0 to 32768 [ 120.595202][ T5779] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 120.669359][ T7069] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 120.749025][ T7069] XFS (loop1): Ending clean mount [ 120.753403][ T5781] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 120.780882][ T7069] XFS (loop1): Quotacheck needed: Please wait. [ 120.859251][ T7069] XFS (loop1): Quotacheck: Done. [ 121.279570][ T5782] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 122.276534][ T7100] loop2: detected capacity change from 0 to 40427 [ 122.300300][ T7100] F2FS-fs (loop2): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 122.327046][ T7100] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 122.353659][ T7100] F2FS-fs (loop2): invalid crc value [ 122.358617][ T7102] loop0: detected capacity change from 0 to 40427 [ 122.406891][ T7102] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 122.426004][ T7102] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 122.431728][ T7100] F2FS-fs (loop2): Found nat_bits in checkpoint [ 122.469064][ T7102] F2FS-fs (loop0): invalid crc value [ 122.521019][ T7102] F2FS-fs (loop0): Found nat_bits in checkpoint [ 122.557206][ T5791] Bluetooth: hci3: command tx timeout [ 122.563069][ T7100] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 122.597243][ T7100] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 122.629741][ T7132] netem: incorrect ge model size [ 122.635226][ T7132] netem: change failed [ 122.649988][ T7122] f2fs_ckpt-7:2: attempt to access beyond end of device [ 122.649988][ T7122] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 122.713829][ T7122] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 122.743232][ T7102] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 122.763081][ T7102] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 123.102527][ T7144] loop3: detected capacity change from 0 to 512 [ 123.150367][ T7144] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 123.216533][ T7144] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 123.254010][ T7144] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.437: invalid indirect mapped block 2683928664 (level 1) [ 123.320950][ T7144] EXT4-fs (loop3): Remounting filesystem read-only [ 123.346337][ T7144] EXT4-fs (loop3): 1 truncate cleaned up [ 123.368367][ T7144] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.545580][ T5780] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.958399][ T5830] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 124.035510][ T7164] loop1: detected capacity change from 0 to 1024 [ 124.072533][ T7164] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 124.136620][ T5782] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.160351][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 124.171733][ T5830] usb 3-1: Using ep0 maxpacket: 32 [ 124.181956][ T5830] usb 3-1: config 0 interface 0 has no altsetting 0 [ 124.189112][ T5830] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 124.199030][ T5830] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.227747][ T5830] usb 3-1: config 0 descriptor?? [ 124.362121][ T7170] loop1: detected capacity change from 0 to 512 [ 124.390837][ T7170] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 124.405796][ T7170] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 124.414296][ T7170] System zones: 0-1, 15-15, 18-18, 34-34 [ 124.427035][ T7170] EXT4-fs (loop1): orphan cleanup on readonly fs [ 124.434036][ T7170] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=0 [ 124.443881][ T7170] EXT4-fs warning (device loop1): ext4_enable_quotas:7173: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 124.460373][ T7170] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 124.468845][ T7170] EXT4-fs error (device loop1): ext4_orphan_get:1425: comm syz.1.445: bad orphan inode 16 [ 124.481066][ T7170] ext4_test_bit(bit=15, block=18) = 1 [ 124.486523][ T7170] is_bad_inode(inode)=0 [ 124.490807][ T7170] NEXT_ORPHAN(inode)=0 [ 124.494898][ T7170] max_ino=32 [ 124.498919][ T7170] i_nlink=2 [ 124.503338][ T7170] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 124.547457][ T7170] fscrypt (loop1, inode 16): Error -61 getting encryption context [ 124.590500][ T5782] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #13: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic f300, entries 1, max 4(0), depth 0(0) [ 124.611154][ T5782] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #13: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic f300, entries 1, max 4(0), depth 0(0) [ 124.696644][ T5830] corsair-cpro 0003:1B1C:0C10.0008: unknown main item tag 0x0 [ 124.723816][ T5830] corsair-cpro 0003:1B1C:0C10.0008: unknown main item tag 0x0 [ 124.747258][ T5830] corsair-cpro 0003:1B1C:0C10.0008: unknown main item tag 0x0 [ 124.764078][ T5830] corsair-cpro 0003:1B1C:0C10.0008: unknown main item tag 0x0 [ 124.790607][ T5830] corsair-cpro 0003:1B1C:0C10.0008: unknown main item tag 0x0 [ 124.807817][ T5830] corsair-cpro 0003:1B1C:0C10.0008: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.2-1/input0 [ 124.919627][ T5830] corsair-cpro: probe of 0003:1B1C:0C10.0008 failed with error -71 [ 124.951112][ T5830] usb 3-1: USB disconnect, device number 11 [ 125.333985][ T5782] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.842747][ T7181] loop3: detected capacity change from 0 to 32768 [ 125.864524][ T7181] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.450 (7181) [ 125.881503][ T7181] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 125.896289][ T7181] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 125.906239][ T7181] BTRFS info (device loop3): enabling auto defrag [ 125.936432][ T7181] BTRFS info (device loop3): use no compression [ 125.943407][ T7181] BTRFS info (device loop3): force clearing of disk cache [ 125.953335][ T7181] BTRFS info (device loop3): max_inline at 4096 [ 125.974025][ T7181] BTRFS info (device loop3): turning on sync discard [ 126.005826][ T7181] BTRFS info (device loop3): disabling free space tree [ 126.135122][ T7181] BTRFS info (device loop3): enabling ssd optimizations [ 126.175669][ T7181] BTRFS info (device loop3): rebuilding free space tree [ 126.184400][ T5791] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 126.201592][ T5791] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 126.215153][ T5791] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 126.223994][ T5791] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 126.232166][ T5791] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 126.241301][ T5791] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 126.251225][ T7181] BTRFS info (device loop3): disabling free space tree [ 126.278388][ T7181] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 126.288444][ T7181] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 126.472145][ T5780] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 126.767574][ T7190] loop2: detected capacity change from 0 to 40427 [ 126.823115][ T7190] F2FS-fs (loop2): heap/no_heap options were deprecated [ 126.853878][ T7190] F2FS-fs (loop2): invalid crc value [ 126.877079][ T7190] F2FS-fs (loop2): Found nat_bits in checkpoint [ 126.911617][ T7216] loop3: detected capacity change from 0 to 256 [ 126.955031][ T7216] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 127.006693][ T7216] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 127.052120][ T7205] chnl_net:caif_netlink_parms(): no params data found [ 127.055435][ T7216] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 127.085304][ T7190] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 127.264465][ T5781] syz-executor: attempt to access beyond end of device [ 127.264465][ T5781] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 127.337735][ T5781] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 127.360935][ T7208] loop0: detected capacity change from 0 to 32768 [ 127.379473][ T7208] XFS: attr2 mount option is deprecated. [ 127.448144][ T7208] XFS (loop0): DAX unsupported by block device. Turning off DAX. [ 127.467277][ T7208] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 127.544667][ T7205] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.557395][ T7205] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.564651][ T7205] bridge_slave_0: entered allmulticast mode [ 127.592199][ T7205] bridge_slave_0: entered promiscuous mode [ 127.616197][ T7208] XFS (loop0): Ending clean mount [ 127.633997][ T7205] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.677521][ T7205] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.697320][ T7205] bridge_slave_1: entered allmulticast mode [ 127.706588][ T7208] XFS (loop0): Quotacheck needed: Please wait. [ 127.714231][ T7231] loop3: detected capacity change from 0 to 256 [ 127.724461][ T7205] bridge_slave_1: entered promiscuous mode [ 127.762633][ T7231] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 127.814108][ T7231] exFAT-fs (loop3): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 127.839767][ T7208] XFS (loop0): Quotacheck: Done. [ 127.934186][ T7205] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 127.986313][ T7205] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 128.022433][ T5779] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 128.160060][ T7205] team0: Port device team_slave_0 added [ 128.180015][ T7205] team0: Port device team_slave_1 added [ 128.264426][ T7205] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 128.265508][ T7238] netlink: 88 bytes leftover after parsing attributes in process `syz.2.463'. [ 128.274643][ T7205] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 128.283213][ T7238] netlink: 8 bytes leftover after parsing attributes in process `syz.2.463'. [ 128.312438][ T7205] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 128.327440][ T5791] Bluetooth: hci3: command tx timeout [ 128.336332][ T7205] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 128.344981][ T7205] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 128.372595][ T7205] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 128.479255][ T7205] hsr_slave_0: entered promiscuous mode [ 128.485907][ T7205] hsr_slave_1: entered promiscuous mode [ 128.492546][ T7205] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 128.500955][ T7205] Cannot create hsr debugfs directory [ 128.845716][ T7205] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 128.862249][ T7205] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 128.890213][ T7205] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 128.906031][ T7205] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 129.138896][ T7205] 8021q: adding VLAN 0 to HW filter on device bond0 [ 129.196704][ T7205] 8021q: adding VLAN 0 to HW filter on device team0 [ 129.238490][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.245801][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 129.257597][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.264800][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 129.722790][ T7273] loop0: detected capacity change from 0 to 128 [ 129.763973][ T7273] EXT4-fs: Ignoring removed nobh option [ 129.807145][ T7273] EXT4-fs (loop0): Test dummy encryption mode enabled [ 129.854219][ T7205] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 129.883075][ T7273] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 129.972274][ T7285] Bluetooth: MGMT ver 1.22 [ 129.975819][ T7273] ext4 filesystem being mounted at /107/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 130.048764][ T7287] program syz.3.481 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 130.258234][ T7294] Driver unsupported XDP return value 0 on prog (id 42) dev N/A, expect packet loss! [ 130.397307][ T5791] Bluetooth: hci3: command tx timeout [ 130.612052][ T7311] netlink: 'syz.3.487': attribute type 11 has an invalid length. [ 130.621282][ T7311] netlink: 'syz.3.487': attribute type 1 has an invalid length. [ 130.630925][ T7311] netlink: 3593 bytes leftover after parsing attributes in process `syz.3.487'. [ 130.656164][ T7273] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 130.704007][ T7205] veth0_vlan: entered promiscuous mode [ 130.769883][ T7205] veth1_vlan: entered promiscuous mode [ 130.806160][ T5779] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 130.892315][ T7205] veth0_macvtap: entered promiscuous mode [ 130.920159][ T7205] veth1_macvtap: entered promiscuous mode [ 130.970979][ T7205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.993800][ T7320] loop0: detected capacity change from 0 to 256 [ 131.003855][ T7205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.029898][ T7205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.057410][ T7205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.072047][ T7205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.085444][ T7320] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d) [ 131.101760][ T7205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.113637][ T7205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.126124][ T7205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.178917][ T7205] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 131.232822][ T7205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.274470][ T7205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.286596][ T7205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.299272][ T7205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.309697][ T7205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.320879][ T7205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.342083][ T7205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.352970][ T7205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.365235][ T7205] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 131.383791][ T7205] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.404065][ T7205] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.407221][ T787] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 131.419873][ T7205] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.457547][ T7205] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.637768][ T787] usb 4-1: Using ep0 maxpacket: 32 [ 131.648330][ T787] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.670127][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.674471][ T787] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.700938][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.737757][ T787] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 131.758951][ T787] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.780472][ T1132] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.792257][ T787] usb 4-1: config 0 descriptor?? [ 131.798050][ T1132] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.814202][ T787] hub 4-1:0.0: USB hub found [ 132.018538][ T787] hub 4-1:0.0: config failed, can't read hub descriptor (err -90) [ 132.086260][ T7337] loop4: detected capacity change from 0 to 4096 [ 132.156586][ T7325] loop2: detected capacity change from 0 to 40427 [ 132.165776][ T7337] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 132.176024][ T7339] loop0: detected capacity change from 0 to 256 [ 132.189085][ T7325] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x7 [ 132.194989][ T7337] ntfs3: loop4: Failed to load $Extend (-22). [ 132.220334][ T787] usbhid 4-1:0.0: can't add hid device: -71 [ 132.226435][ T787] usbhid: probe of 4-1:0.0 failed with error -71 [ 132.227207][ T7337] ntfs3: loop4: Failed to initialize $Extend. [ 132.268976][ T7325] F2FS-fs (loop2): invalid crc value [ 132.289485][ T787] usb 4-1: USB disconnect, device number 8 [ 132.319812][ T7325] F2FS-fs (loop2): Found nat_bits in checkpoint [ 132.491723][ T5791] Bluetooth: hci3: command tx timeout [ 132.516497][ T7325] F2FS-fs (loop2): Start checkpoint disabled! [ 132.600881][ T7325] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 132.699708][ T7347] netlink: 144 bytes leftover after parsing attributes in process `syz.0.502'. [ 132.961944][ T11] kworker/u4:0: attempt to access beyond end of device [ 132.961944][ T11] loop2: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 132.977596][ T11] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 132.984563][ T11] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 133.035162][ T11] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 133.122840][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.129899][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.772843][ T7373] loop4: detected capacity change from 0 to 2048 [ 133.787696][ T8] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 133.791791][ T7373] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 133.977286][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 134.029375][ T8] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 134.059827][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 134.122208][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 134.167866][ T8] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 134.214373][ T8] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 134.238043][ T7383] netlink: 24 bytes leftover after parsing attributes in process `syz.3.519'. [ 134.264605][ T8] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 134.302387][ T8] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 134.352026][ T8] usb 1-1: Manufacturer: syz [ 134.434565][ T8] usb 1-1: config 0 descriptor?? [ 134.557381][ T5791] Bluetooth: hci3: command tx timeout [ 134.847426][ T8] rc_core: IR keymap rc-hauppauge not found [ 134.861955][ T8] Registered IR keymap rc-empty [ 134.882827][ T8] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 134.927826][ T8] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 134.946991][ C1] sched: RT throttling activated [ 134.989143][ T8] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 135.033910][ T8] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input11 [ 135.068434][ T7379] loop2: detected capacity change from 0 to 131072 [ 135.143015][ T8] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 135.168704][ T7379] F2FS-fs (loop2): Test dummy encryption mode enabled [ 135.181463][ T7379] F2FS-fs (loop2): invalid crc value [ 135.197867][ T7379] F2FS-fs (loop2): Found nat_bits in checkpoint [ 135.237330][ T8] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 135.260518][ T7379] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 135.299823][ T8] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 135.347795][ T8] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 135.417228][ T8] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 135.479105][ T8] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 135.528202][ T8] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 135.557261][ T8] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 135.637234][ T8] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 135.674624][ T8] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 135.739186][ T8] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 135.777913][ T8] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 135.817385][ T8] usb 1-1: USB disconnect, device number 7 [ 136.233186][ T7419] loop3: detected capacity change from 0 to 2048 [ 136.275871][ T7420] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 136.305856][ T7419] NILFS (loop3): failed to count free inodes: err=-34 [ 136.312993][ T7419] NILFS (loop3): failed to count free inodes: err=-34 [ 136.823694][ T7430] loop3: detected capacity change from 0 to 8192 [ 136.836061][ T7430] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 136.849554][ T7430] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 136.862619][ T7430] REISERFS (device loop3): using journaled data mode [ 136.869782][ T7430] reiserfs: using flush barriers [ 136.885663][ T7430] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 136.902930][ T7430] REISERFS (device loop3): checking transaction log (loop3) [ 136.928165][ T7430] REISERFS (device loop3): Using r5 hash to sort names [ 136.939902][ T7430] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 136.982816][ T7430] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 137.034302][ T7430] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 137.078341][ T7430] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 137.121560][ T7430] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 137.394454][ T7448] damon-dbgfs: DAMON debugfs interface is deprecated, so users should move to DAMON_SYSFS. If you cannot, please report your usecase to damon@lists.linux.dev and linux-mm@kvack.org. [ 137.410186][ T7446] loop0: detected capacity change from 0 to 512 [ 137.575918][ T7446] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.602608][ T7446] ext4 filesystem being mounted at /124/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.768835][ T7457] loop3: detected capacity change from 0 to 4096 [ 137.779797][ T7461] loop2: detected capacity change from 0 to 128 [ 137.804915][ T7457] NILFS (loop3): invalid segment: Checksum error in segment payload [ 137.823312][ T7457] NILFS (loop3): trying rollback from an earlier position [ 137.854912][ T28] audit: type=1800 audit(1754057133.330:15): pid=7461 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.547" name="file1" dev="loop2" ino=1048601 res=0 errno=0 [ 137.865337][ T7461] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 137.952793][ T7461] FAT-fs (loop2): Filesystem has been set read-only [ 137.963016][ T7457] NILFS (loop3): recovery complete [ 137.978110][ T7465] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 138.188658][ T5779] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.226202][ T7467] loop2: detected capacity change from 0 to 512 [ 138.275343][ T7469] ALSA: mixer_oss: invalid OSS volume 'D dŸ' [ 138.281969][ T7469] ALSA: mixer_oss: invalid OSS volume '©ž‰ 0b e8 6f 80 5f ff 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 [ 167.689380][ T7205] RSP: 0018:ffffc9000515fb00 EFLAGS: 00010293 [ 167.695462][ T7205] RAX: ffffffff8226151a RBX: ffff88801e3a6000 RCX: ffff888023a49e00 [ 167.703428][ T7205] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 167.711393][ T7205] RBP: ffffc9000515fbf8 R08: ffffc9000515fb77 R09: 0000000000000000 [ 167.719365][ T7205] R10: ffffc9000515fb40 R11: fffff52000a2bf6f R12: ffffc90011d0f000 [ 167.727354][ T7205] R13: 1ffff92000a2bf64 R14: ffff88801e3a6630 R15: 0000000000000000 [ 167.735346][ T7205] FS: 000055558fbd3500(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 167.744373][ T7205] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 167.750953][ T7205] CR2: 00007fff230bcf08 CR3: 000000007c644000 CR4: 00000000003506e0 [ 167.757138][ T55] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 167.758914][ T7205] Call Trace: [ 167.758924][ T7205] [ 167.758932][ T7205] ? journal_release+0x30/0x30 [ 167.777455][ T7205] journal_release+0x1f/0x30 [ 167.782142][ T7205] reiserfs_put_super+0x222/0x480 [ 167.787180][ T7205] ? hook_inode_free_security+0xb0/0xb0 [ 167.792734][ T7205] ? reiserfs_dirty_inode+0x240/0x240 [ 167.798206][ T7205] ? fscrypt_destroy_keyring+0x288/0x2a0 [ 167.803858][ T7205] ? reiserfs_dirty_inode+0x240/0x240 [ 167.809260][ T7205] generic_shutdown_super+0x134/0x2b0 [ 167.814628][ T7205] kill_block_super+0x44/0x90 [ 167.819481][ T7205] deactivate_locked_super+0x97/0x100 [ 167.824908][ T7205] cleanup_mnt+0x429/0x4c0 [ 167.829321][ T7205] task_work_run+0x1ce/0x250 [ 167.833922][ T7205] ? task_work_cancel+0x240/0x240 [ 167.838942][ T7205] ? exit_to_user_mode_loop+0x3b/0x110 [ 167.844397][ T7205] exit_to_user_mode_loop+0xe6/0x110 [ 167.849772][ T7205] exit_to_user_mode_prepare+0xb1/0x140 [ 167.855508][ T7205] syscall_exit_to_user_mode+0x1a/0x50 [ 167.860965][ T7205] do_syscall_64+0x61/0xb0 [ 167.865381][ T7205] ? clear_bhb_loop+0x40/0x90 [ 167.870074][ T7205] ? clear_bhb_loop+0x40/0x90 [ 167.874744][ T7205] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 167.880641][ T7205] RIP: 0033:0x7f7b2458fe97 [ 167.885101][ T7205] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 167.904792][ T7205] RSP: 002b:00007fff230bd6b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 167.913316][ T7205] RAX: 0000000000000000 RBX: 00007f7b24611bdd RCX: 00007f7b2458fe97 [ 167.921377][ T7205] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff230bd770 [ 167.929459][ T7205] RBP: 00007fff230bd770 R08: 0000000000000000 R09: 0000000000000000 [ 167.937554][ T7205] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff230be800 [ 167.945534][ T7205] R13: 00007f7b24611bdd R14: 0000000000028e99 R15: 00007fff230be840 [ 167.949297][ T55] usb 1-1: not running at top speed; connect to a high speed hub [ 167.953519][ T7205] [ 167.953543][ T7205] Modules linked in: [ 167.961705][ T7205] ---[ end trace 0000000000000000 ]--- [ 167.972247][ T55] usb 1-1: config index 0 descriptor too short (expected 2322, got 18) [ 167.982568][ T7205] RIP: 0010:do_journal_release+0x53a/0x550 [ 167.982744][ T55] usb 1-1: config 95 has an invalid interface number: 1 but max is 0 [ 167.991214][ T7205] Code: b6 ff e9 49 fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c b9 fc ff ff 4c 89 ff e8 60 c6 b6 ff e9 ac fc ff ff e8 76 80 5f ff <0f> 0b e8 6f 80 5f ff 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 [ 168.000867][ T55] usb 1-1: config 95 has no interface number 0 [ 168.018799][ T7205] RSP: 0018:ffffc9000515fb00 EFLAGS: 00010293 [ 168.028566][ T55] usb 1-1: config 95 interface 1 has no altsetting 0 [ 168.034288][ T7205] RAX: ffffffff8226151a RBX: ffff88801e3a6000 RCX: ffff888023a49e00 [ 168.042143][ T55] usb 1-1: string descriptor 0 read error: -22 [ 168.045682][ T7205] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 168.052327][ T55] usb 1-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice=79.79 [ 168.064309][ T7205] RBP: ffffc9000515fbf8 R08: ffffc9000515fb77 R09: 0000000000000000 [ 168.073148][ T55] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.080420][ T7205] R10: ffffc9000515fb40 R11: fffff52000a2bf6f R12: ffffc90011d0f000 [ 168.094796][ T7205] R13: 1ffff92000a2bf64 R14: ffff88801e3a6630 R15: 0000000000000000 [ 168.104721][ T7205] FS: 000055558fbd3500(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 168.115458][ T7205] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 168.122360][ T7205] CR2: 000055b35e567168 CR3: 000000007c644000 CR4: 00000000003506e0 [ 168.130543][ T7205] Kernel panic - not syncing: Fatal exception [ 168.136839][ T7205] Kernel Offset: disabled [ 168.141159][ T7205] Rebooting in 86400 seconds..