last executing test programs: 2m56.001997132s ago: executing program 1 (id=437): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@multicast, @random="8a0a63cdec59", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @remote, @remote, @remote}}}}, 0x0) sendto$packet(r0, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) 2m55.821625098s ago: executing program 1 (id=440): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000007c0)={0x5c, r1, 0x1, 0x70fd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x40, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "417f7622318573d5"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="f6068208f31b26ec21e5075c5e0766e9"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="4f236ce153aaa2b0ea77ec1dfb061cbb"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xb}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4010000}, 0x4000000) 2m55.567019926s ago: executing program 1 (id=443): r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x8}}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_buf(r0, 0x0, 0x20, 0x0, 0x45) 2m54.844978519s ago: executing program 1 (id=447): symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mount$9p_unix(&(0x7f00000000c0)='./file0/file0/..\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x12d7498, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r0, r0, &(0x7f0000000000)=0x2eb4, 0x2000007ff) 2m54.643188495s ago: executing program 1 (id=449): syz_mount_image$nilfs2(&(0x7f0000000180), &(0x7f0000000300)='./file3\x00', 0x0, &(0x7f0000001040)=ANY=[], 0x1, 0xadc, &(0x7f0000001900)="$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") munmap(&(0x7f0000001000/0x2000)=nil, 0x2000) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000002400)=""/4111, 0x100f) 2m54.257088418s ago: executing program 1 (id=452): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x7, 0x5, &(0x7f0000000940)=ANY=[@ANYBLOB="18090000140000000000000062000000180000000400000000000000fcffffff95"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000540), &(0x7f0000000580)=r1}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r0, &(0x7f0000000780)}, 0x20) 2m53.818629172s ago: executing program 32 (id=452): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x7, 0x5, &(0x7f0000000940)=ANY=[@ANYBLOB="18090000140000000000000062000000180000000400000000000000fcffffff95"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000540), &(0x7f0000000580)=r1}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r0, &(0x7f0000000780)}, 0x20) 2m49.746158372s ago: executing program 2 (id=481): r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) ioctl$CAPI_GET_FLAGS(r0, 0x80044323, 0x0) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000080)=0x3) syz_usb_connect$uac2(0x0, 0x7b, &(0x7f0000000a40)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x41e, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0xcb, 0x40, 0x0, {0x8, 0xb, 0x0, 0x1, 0x1, 0x8, 0x20, 0x3}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0xe, 0x2, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x7, 0x8, 0x3, {0x8, 0x25, 0x1, 0x0, 0x33, 0x9, 0x4c}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x10, 0x0, 0x38, {0x8, 0x25, 0x1, 0x2, 0x3f, 0x2, 0xa}}}}}}}}]}}, &(0x7f0000000c40)={0x0, 0x0, 0x1f, &(0x7f0000000b80)={0x5, 0xf, 0x1f, 0x2, [@ssp_cap={0x10, 0x10, 0xa, 0x4, 0x1, 0x9, 0xff00, 0x9, [0xff60]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x4, 0x4, 0x2}]}}) 2m48.991764026s ago: executing program 2 (id=484): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x48000009, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4c, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0xe}, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8}, @TCA_FQ_FLOW_PLIMIT={0x8, 0x8}, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8}, @TCA_FQ_FLOW_DEFAULT_RATE={0xfffffe96}, @TCA_FQ_QUANTUM={0x5, 0xf}]}}]}, 0x78}}, 0x0) 2m46.548571795s ago: executing program 2 (id=493): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000280)={0x40, r1, 0x801, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x24, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "23faf2ed776a80b12183fb4517"}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x1030a5d77370323b}, 0x0) 2m46.323338432s ago: executing program 2 (id=495): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000040)='./file1\x00', 0x800810, &(0x7f0000000140), 0xfb, 0x510a, &(0x7f000000d000)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) statx(0xffffffffffffff9c, &(0x7f000000b680)='.\x00', 0x2000, 0x1180, &(0x7f000000b6c0)) 2m44.919680017s ago: executing program 2 (id=500): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000480)={&(0x7f0000000400)=[0x0], 0x1, r2, 0x0, 0x403e, 0xe6, 0x0, 0x0, {0x1ff, 0x5, 0x8, 0x2, 0x5, 0x3, 0x0, 0x200, 0xc81, 0x6, 0x200, 0x10, 0x9, 0x2, "ce7f3ab49e5e380faae116abee862b6f9fd9b490f1397c0cb721632c6ec1275a"}}) 2m44.481151501s ago: executing program 2 (id=501): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x12, 0xa, 0x8, 0x2, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1}, &(0x7f0000001d80), &(0x7f0000001d40)=r0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r1, &(0x7f0000000300), 0x0}, 0x20) 2m43.833039781s ago: executing program 33 (id=501): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x12, 0xa, 0x8, 0x2, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1}, &(0x7f0000001d80), &(0x7f0000001d40)=r0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r1, &(0x7f0000000300), 0x0}, 0x20) 1m54.970713854s ago: executing program 4 (id=780): r0 = mq_open(&(0x7f0000000100)='&\x00', 0x40, 0x118, 0x0) mq_notify(r0, &(0x7f0000000000)={0x110c230000, 0x3, 0x1}) unshare(0x2020600) mq_notify(r0, 0x0) 1m54.610831256s ago: executing program 4 (id=784): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000001400030500008000ffdbdf25020851ff", @ANYRES32=r2, @ANYBLOB="080002007f00000114000600ff030000ffff"], 0x34}, 0x1, 0x0, 0x0, 0xc090}, 0x0) 1m54.348924824s ago: executing program 4 (id=785): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000800) r1 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f00000000c0)="39000000140081ae00002c000500015601618575e285af0180007a1b31d569d9ae527048ffffffffffffffff56fabcb3b2aa9be3da9212d744", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x10048800) 1m54.085992973s ago: executing program 4 (id=788): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x8, &(0x7f0000000600), 0x5, 0x50c, &(0x7f0000001640)="$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") syz_mount_image$fuse(0x0, &(0x7f00000002c0)='./bus\x00', 0x30040a9, 0x0, 0x1, 0x0, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x0, 0x0, 0x1) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}, {@lowerdir={'lowerdir', 0x3d, '.'}}]}) 1m53.368609675s ago: executing program 4 (id=793): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$l2tp6(r1, 0x0, 0x0, 0x4008000, 0x0, 0x0) 1m52.628937189s ago: executing program 4 (id=800): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x6) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020000000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000380)={@broadcast, @local, @val={@void, {0x8100, 0x4, 0x1, 0x3}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x3, 0x4, 0x28, 0x66, 0x0, 0xd8, 0x6, 0x0, @dev={0xac, 0x14, 0x14, 0x1d}, @broadcast}, {{0x4e20, 0x4e23, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x8, 0x4340, 0x0, 0x1ff}}}}}}, 0x0) 1m52.193912993s ago: executing program 34 (id=800): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x6) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020000000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000380)={@broadcast, @local, @val={@void, {0x8100, 0x4, 0x1, 0x3}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x3, 0x4, 0x28, 0x66, 0x0, 0xd8, 0x6, 0x0, @dev={0xac, 0x14, 0x14, 0x1d}, @broadcast}, {{0x4e20, 0x4e23, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x8, 0x4340, 0x0, 0x1ff}}}}}}, 0x0) 2.933326296s ago: executing program 0 (id=1521): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000040)={[{@norecovery}, {@grpquota}, {@debug}, {@discard}]}, 0xee, 0x498, &(0x7f0000001b40)="$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") io_setup(0x9, &(0x7f00000001c0)=0x0) r1 = open(&(0x7f0000000000)='./file1\x00', 0x147042, 0x60) io_submit(r0, 0x1, &(0x7f0000000440)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x18, 0x1, 0x5, r1, 0x0, 0x0, 0x6}]) 2.886567167s ago: executing program 5 (id=1522): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000000)=0xd, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e24, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000300)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x68, 0x0, 0x0, 0x88, 0x0, @remote, @local}, {0xfffe, 0x4e24, 0x4d, 0x0, @wg=@initiation={0x1, 0x4, "497a1d08fd3d0ee007022798bb6374ed840b4f36f41fc4d035e9ebe414aa958d", "4bbef5e4007898221aa606d083cd59745493938f1e2de8fdadd3823fedd2c01b2aff03050a4ca5d10fd1b6b06f47ea42", "ef7c9d6a98e3943f6892078bb952854743fe4dddd2e7c0ce70a4ac7d", {"a851525b16af17fe87acbae2ab0b233d", "01422d01cd53c3abe94331d0b7918724"}}}}}}}, 0x0) 2.600882647s ago: executing program 5 (id=1524): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000400)={0xa, 0x2, 0x13, @ipv4={'\x00', '\xff\xff', @loopback}, 0xa}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 2.141465872s ago: executing program 0 (id=1528): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000080)={0x0, "4fcb813dd28b42bee2b094a3de6dbfd30a74457bcd1cfd5feffe5c019f45d57f", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f00000000c0)={"000006000000d43c40fc0a000000ab65a29e23546aad9d81b1aff5eb00", r1, 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r2, 0xc0383e04, &(0x7f0000000000)={""/32, 0x0, 0x0, 0xfffffffffffffcc1, 0x0, 0x0}) 1.929509968s ago: executing program 5 (id=1530): bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x1, @mcast2={0xff, 0x5}, 0x1ff}, 0x1c) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) 1.775291003s ago: executing program 0 (id=1532): r0 = io_uring_setup(0x72ed, &(0x7f0000000500)={0x0, 0x3709, 0x1000}) r1 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x40, 0x0, 0x0) mq_timedreceive(r1, &(0x7f0000000000)=""/83, 0x9b0c4f391059f39b, 0x20000000, &(0x7f0000000100)={0x77359400}) close_range(r0, 0xffffffffffffffff, 0x0) 1.664988517s ago: executing program 3 (id=1533): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b40)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) 1.657743667s ago: executing program 5 (id=1534): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000044402, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x11, r0, 0x0) io_setup(0xc00, &(0x7f0000000000)=0x0) io_submit(r1, 0x2, &(0x7f0000000080)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8, r0, &(0x7f0000000140)="1e", 0x1, 0x4b, 0x0, 0x2}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x8, 0x8227, r0, 0x0, 0x0, 0x9, 0x0, 0x2}]) 1.414384205s ago: executing program 0 (id=1535): r0 = socket$kcm(0xa, 0x922000000003, 0x11) r1 = socket$kcm(0x10, 0x2, 0x4) connect(r0, &(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x65, @dev={0xfe, 0x80, '\x00', 0xd}, 0x1, 0x1}, 0x80) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x0) 1.160342333s ago: executing program 0 (id=1537): openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) lchown(&(0x7f0000000000)='./cgroup/cgroup.procs\x00', 0x0, 0x0) 1.140175363s ago: executing program 3 (id=1538): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setuid(0xee00) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, 0x0, 0x0) 1.080902035s ago: executing program 5 (id=1539): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x2c, r1, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x5, 0x2, [{0x0, 0xa}]}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004080}, 0x4000) 950.66136ms ago: executing program 3 (id=1540): mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000400)='./file7\x00', 0x21c0, 0x103) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2000, 0x103) 923.46836ms ago: executing program 0 (id=1541): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000580)='./file0\x00', 0x2000000, &(0x7f0000000140)=ANY=[], 0xfe, 0x6241, &(0x7f000000ea80)="$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") r0 = open(&(0x7f00000000c0)='./file2\x00', 0x24842, 0x80) truncate(&(0x7f0000000080)='./file2\x00', 0x4fffc) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xfffffdd6}], 0x1, 0x9c00, 0x0, 0x3) 922.80286ms ago: executing program 6 (id=1542): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'netdevsim0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ENCRYPT={0x5, 0xf, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}}, 0x800) 873.053132ms ago: executing program 5 (id=1543): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x3, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000079db8540da0b77010b7d000000010902120001000000000904", @ANYRES32=r0, @ANYRES8=r0], 0x0) 725.071327ms ago: executing program 3 (id=1544): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x2) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000180)={0x2, &(0x7f0000000080)=[{0x40, 0x0, 0x7, 0x5}, {0x6, 0xfd}]}) write$ppp(r0, &(0x7f00000001c0)="6734334ddd58b6", 0x7) 688.064048ms ago: executing program 6 (id=1545): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x2) syz_emit_ethernet(0x4e, &(0x7f0000000680)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x8, {[@fastopen={0x1e, 0x3, '0'}]}}}}}}}}, 0x0) 535.015473ms ago: executing program 6 (id=1546): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000340)={0x7, 0x8, 0xfa00, {r1}}, 0x10) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000580)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000000c0)=0x400000, r1, 0x0, 0x1, 0x4}}, 0x20) 519.508363ms ago: executing program 3 (id=1547): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002880)=@delchain={0x674, 0x65, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x8, 0x2}, {0x0, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x640, 0x2, [@TCA_BPF_ACT={0x63c, 0x1, [@m_xt={0x120, 0x5, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8}]}, {0xed, 0x6, "a5fd64840366fd7ad44f3f053221ded9ced495590e2bc8690a2765e56ded8425cb3eb0e04bbcfec50e639bf373167e617b24eccd260f28bb850873b1e2154b158987d6e585e10ffeaba32641bae47de041e1169d8e4a65b8ce3633a4469c93c5228320c572237d92a9ae6bbc2d2bd3a2d1e27de283017ecf9fca6b2cd8a119dee59702830717b694625f60f5c81f688775c5e292f76a0ffa39e1d2cabd639d1c111c01e0d2f9faa220154db33399242bca9f4fac65c74cb6264c28ac7a50037564c7b417fb61d617d212ab3243c30e0e82d9a12651b74553d539b991a302489af94626e5aac41c53b2"}, {0xc, 0x7, {0x1, 0xeb0757422c733451}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_simple={0xe4, 0xa, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x1, 0x9b6, 0x7, 0x4, 0x1b}}, @TCA_DEF_DATA={0xa, 0x3, '%{^):\x00'}]}, {0x93, 0x6, "f2687c5aa78339e616deb3f19827c994141f940d92a804637d54cb155e6be27b3c2ad1ec52a0a08ca0fb9f17a3ef6ce3652e6f0136028c9b46b33e74015138ea6ba9c60c29dd78378bb28567c803e2a63a94c5fba4bb4bb2adcab7d81ccda8c5f8e000b81344003a049b8353b716e0d9c0c6c5fbd0a6ac6532013f1ee7bfec23f8da74544263415dacc108fada4f83"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_bpf={0xe8, 0x8, 0x0, 0x0, {{0x8}, {0x14, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x3}]}, {0xad, 0x6, "5d3aee85a6264cff4a2163adaec321e008985cfa435b8922eeb16f1932265618158a3fe72c442a68b182e8f673f9251a03dc831c5947be17ca906c3dcb99adb55bc5f0ad8886f235f45d7e29bb727715f2e7a3200ac63eb79f7a023835874514b60b0177c40370157c0c21b37875e7e4a2e75b3cc54be7d719fa695469336b975cb56bf3667e66922c0cf263fb2e4901e74673ec3bf8e140cb438b8aae24d0722b0ea76c66d09a9ae2"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_nat={0x234, 0x6, 0x0, 0x0, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xab7, 0x4c1adacc, 0x5, 0x99, 0x6}, @remote, @local, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x401, 0x7, 0x6, 0x5}, @rand_addr=0x64010102, @rand_addr=0x64010102, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x5, 0x5, 0x0, 0xd}, @private=0xa010100, @empty, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4ef0, 0x1, 0x4, 0x10000, 0xc0e}, @multicast1, @rand_addr=0x64010100, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xe21, 0x1, 0x3, 0xfd30, 0x1}, @remote, @local, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x11d, 0x5, 0x3, 0x1}, @multicast1, @empty, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0xffffff7f, 0x5, 0x79, 0x74e69dde}, @broadcast, @empty, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xffff000, 0x2cf, 0xffffffffffffffff, 0x7, 0xfffffffb}, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x10, 0x8, 0x10000000, 0x1ff, 0x2}, @loopback, @rand_addr=0x64010100, 0xffffff00}}]}, {0xa1, 0x6, "72c2816ab98a21c440078477977f213e81d0d0ff724f9d0109cdd14889252206b3196663ec1f74e5725f9c0ecf9c39784a71c0f063e45546f47be19f4cc6f84d49f14e97170ef06821de0ad03324f247a528ffe670b5612e99cdea1c052893a8bebddc718dcdb6f83131ecdce1ff76574eb3bd9c8a9b939e1f685c662f3dd9528cd9f8393594571e1dfda71bd155c1a9a37b984aaccd6f745144019213"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_connmark={0x118, 0x9, 0x0, 0x0, {{0xd}, {0xac, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1ff, 0x5, 0x7, 0x1, 0x1e1c}, 0x5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xd784, 0x7ff, 0x20000000, 0x9, 0x4}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x4, 0x5, 0x8, 0x1}, 0x5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x2, 0x20000000, 0x6, 0x6a}, 0x80}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x2, 0xfffffffffffffff7, 0x9, 0x7}, 0x6}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x3ff, 0x0, 0xb, 0xd}, 0xf40f}}]}, {0x3f, 0x6, "b243cf248ea5504cf7e5a67f45c10cd2a166afa2d80373ea83920403cb721db30d012aa4e92778532221b7b7d71aecab94a386e573c76fcd9950dd"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xb, 0x40}}]}, 0x674}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 345.020569ms ago: executing program 3 (id=1548): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) timerfd_create(0x0, 0x0) 344.715809ms ago: executing program 6 (id=1549): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000000)=0xfffffffd, 0x4) sendto$inet(r0, 0x0, 0x0, 0x48000, &(0x7f00000000c0)={0x2, 0x4e23, @remote}, 0x10) sendto$inet(r0, 0x0, 0xffef, 0x20000000, &(0x7f0000000240)={0x2, 0x4e22, @remote}, 0x10) 146.262955ms ago: executing program 6 (id=1550): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000e40), 0x1, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000080)={0x8001, 0xeeee8000, 0x0, 0xffffffffffffffff, 0xb}) r1 = dup(r0) ioctl$PTP_EXTTS_REQUEST2(r1, 0xc0603d06, &(0x7f0000000040)={0x200}) 0s ago: executing program 6 (id=1551): syz_mount_image$iso9660(&(0x7f0000000dc0), &(0x7f0000002380)='./file1\x00', 0x3a0cc0a, &(0x7f0000000300)=ANY=[@ANYBLOB='hide,dmode=0x0000000000000005,map=normal,map=normal,session=0x000000000000000e,overriderockperm,showassoc,nocompress,utf8,map=normal,session=0x0000000000000006,map=acorn,mode=0x0000000000000086,uid=', @ANYRESDEC=0x0, @ANYBLOB='\x00\x00', @ANYRESDEC, @ANYRESDEC, @ANYRES8, @ANYRESDEC], 0x43, 0xa02, &(0x7f0000003640)="$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") mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) kernel console output (not intermixed with test programs): 342469][ T5777] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 203.365226][ T5777] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 203.403272][ T5777] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 203.421916][ T5777] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 203.430736][ T5777] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 203.459566][ T5087] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 203.472593][ T8415] loop3: detected capacity change from 0 to 64 [ 203.479320][ T5087] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 203.495044][ T5087] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 203.505251][ T5087] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 203.513368][ T5087] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 203.523042][ T5087] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 204.189804][ T8430] loop5: detected capacity change from 0 to 2048 [ 204.341307][ T8430] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 205.293803][ T8411] chnl_net:caif_netlink_parms(): no params data found [ 205.571505][ T5087] Bluetooth: hci3: command tx timeout [ 205.631671][ T8460] loop5: detected capacity change from 0 to 4096 [ 205.752168][ T8462] loop3: detected capacity change from 0 to 2048 [ 205.791597][ T8463] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 205.863381][ T8462] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 205.904439][ T8460] NILFS error (device loop5): nilfs_dotdot: directory #12 missing '.' [ 205.955676][ T8460] Remounting filesystem read-only [ 206.257775][ T7264] NILFS (loop5): disposed unprocessed dirty file(s) when detaching log writer [ 206.286841][ T7264] NILFS (loop5): discard dirty page: offset=0, ino=18 [ 206.302788][ T7264] NILFS (loop5): discard dirty block: blocknr=0, size=4096 [ 206.321270][ T7264] NILFS (loop5): discard dirty page: offset=0, ino=2 [ 206.340637][ T7264] NILFS (loop5): discard dirty block: blocknr=14, size=4096 [ 206.349690][ T7264] NILFS (loop5): discard dirty page: offset=0, ino=6 [ 206.355635][ T8446] loop0: detected capacity change from 0 to 40427 [ 206.399351][ T7264] NILFS (loop5): discard dirty block: blocknr=23, size=4096 [ 206.402622][ T8446] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 206.437356][ T7264] NILFS (loop5): discard dirty page: offset=4096, ino=6 [ 206.468215][ T7264] NILFS (loop5): discard dirty block: blocknr=24, size=4096 [ 206.473691][ T8446] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 206.491694][ T8446] F2FS-fs (loop0): invalid crc value [ 206.504207][ T7264] NILFS (loop5): discard dirty page: offset=8192, ino=6 [ 206.536504][ T7264] NILFS (loop5): discard dirty block: blocknr=25, size=4096 [ 206.551534][ T7264] NILFS (loop5): discard dirty page: offset=0, ino=3 [ 206.572198][ T60] hsr_slave_0: left promiscuous mode [ 206.586266][ T7264] NILFS (loop5): discard dirty block: blocknr=28, size=4096 [ 206.600399][ T60] hsr_slave_1: left promiscuous mode [ 206.621281][ T7264] NILFS (loop5): discard dirty page: offset=4096, ino=3 [ 206.629706][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 206.652878][ T60] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 206.653426][ T7264] NILFS (loop5): discard dirty block: blocknr=29, size=4096 [ 206.700531][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 206.716739][ T7264] NILFS (loop5): discard dirty page: offset=270336, ino=3 [ 206.725028][ T60] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 206.742730][ T7264] NILFS (loop5): discard dirty block: blocknr=0, size=4096 [ 206.771142][ T60] bridge_slave_1: left allmulticast mode [ 206.813298][ T60] bridge_slave_1: left promiscuous mode [ 206.819195][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.843993][ T60] bridge_slave_0: left allmulticast mode [ 206.850009][ T60] bridge_slave_0: left promiscuous mode [ 206.856301][ T8446] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 206.881865][ T8446] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 206.895386][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.055354][ T60] veth1_macvtap: left promiscuous mode [ 207.060985][ T60] veth0_macvtap: left promiscuous mode [ 207.079374][ T60] veth1_vlan: left promiscuous mode [ 207.089849][ T60] veth0_vlan: left promiscuous mode [ 207.177038][ T5784] syz-executor: attempt to access beyond end of device [ 207.177038][ T5784] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 207.216001][ T5784] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 207.523849][ T5812] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 207.644019][ T5087] Bluetooth: hci3: command tx timeout [ 207.769891][ T5812] usb 4-1: Using ep0 maxpacket: 32 [ 207.815868][ T5812] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 207.827224][ T5812] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.846893][ T5812] usb 4-1: config 0 descriptor?? [ 207.905244][ T5813] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 207.913895][ T5813] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 207.937442][ T5813] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz0] on syz0 [ 208.088984][ T5812] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 208.093229][ T8501] fido_id[8501]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 208.118008][ T5812] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 208.175015][ T5812] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 208.200791][ T5812] usb 4-1: media controller created [ 208.262222][ T5812] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 208.362980][ T5812] az6027: usb out operation failed. (-71) [ 208.375402][ T5812] az6027: usb out operation failed. (-71) [ 208.398595][ T5812] stb0899_attach: Driver disabled by Kconfig [ 208.422790][ T5812] az6027: no front-end attached [ 208.422790][ T5812] [ 208.434542][ T5812] az6027: usb out operation failed. (-71) [ 208.457607][ T5812] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 208.469856][ T5812] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input16 [ 208.492448][ T8508] loop5: detected capacity change from 0 to 256 [ 208.503564][ T5812] dvb-usb: schedule remote query interval to 400 msecs. [ 208.510587][ T5812] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 208.530062][ T8508] exfat: Deprecated parameter 'utf8' [ 208.552954][ T8508] exfat: Deprecated parameter 'namecase' [ 208.554846][ T5812] usb 4-1: USB disconnect, device number 6 [ 208.569076][ T8508] exfat: Deprecated parameter 'namecase' [ 208.575482][ T8508] exfat: Deprecated parameter 'utf8' [ 208.646654][ T8508] exFAT-fs (loop5): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 208.692015][ T5812] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 209.273295][ T60] team0 (unregistering): Port device team_slave_1 removed [ 209.372387][ T60] team0 (unregistering): Port device team_slave_0 removed [ 209.432566][ T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 209.492136][ T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 209.722951][ T5087] Bluetooth: hci3: command tx timeout [ 209.940430][ T60] bond0 (unregistering): Released all slaves [ 210.021280][ T8411] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.029696][ T8411] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.040320][ T8411] bridge_slave_0: entered allmulticast mode [ 210.048144][ T8411] bridge_slave_0: entered promiscuous mode [ 210.058149][ T8411] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.065767][ T8411] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.074661][ T8411] bridge_slave_1: entered allmulticast mode [ 210.082284][ T8411] bridge_slave_1: entered promiscuous mode [ 210.235834][ T8411] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 210.314491][ T8411] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 210.451465][ T8411] team0: Port device team_slave_0 added [ 210.479064][ T8411] team0: Port device team_slave_1 added [ 210.623123][ T8411] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 210.647595][ T8411] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.749381][ T8411] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 210.793775][ T8411] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 210.800802][ T8411] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.881330][ T8411] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 211.027774][ T8542] netlink: 64 bytes leftover after parsing attributes in process `syz.0.841'. [ 211.065380][ T8411] hsr_slave_0: entered promiscuous mode [ 211.104617][ T8411] hsr_slave_1: entered promiscuous mode [ 211.143052][ T8411] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 211.152846][ T8411] Cannot create hsr debugfs directory [ 211.790066][ T8411] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 211.803739][ T5087] Bluetooth: hci3: command tx timeout [ 211.836295][ T8411] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 211.884320][ T8411] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 211.932593][ T8411] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 212.219682][ T8411] 8021q: adding VLAN 0 to HW filter on device bond0 [ 212.259371][ T8548] loop5: detected capacity change from 0 to 32768 [ 212.296610][ T8411] 8021q: adding VLAN 0 to HW filter on device team0 [ 212.385028][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.392247][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 212.425241][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.432492][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 212.457947][ T8574] ea_get: invalid extended attribute [ 212.502171][ T8557] loop3: detected capacity change from 0 to 32768 [ 212.507074][ T8574] ffff88805d953ab0: 04 00 00 00 .... [ 212.635540][ T8557] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 212.778069][ T8557] JBD2: Ignoring recovery information on journal [ 212.953472][ T8557] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 213.289321][ T8593] netlink: 16 bytes leftover after parsing attributes in process `syz.5.851'. [ 213.348298][ T8411] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 213.402862][ T43] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 213.517641][ T6638] ocfs2: Unmounting device (7,3) on (node local) [ 213.615003][ T43] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 213.634631][ T43] usb 1-1: config 0 interface 0 has no altsetting 0 [ 213.661964][ T43] usb 1-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 213.681511][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 213.705087][ T43] usb 1-1: Product: syz [ 213.709321][ T43] usb 1-1: Manufacturer: syz [ 213.732960][ T43] usb 1-1: SerialNumber: syz [ 213.749266][ T43] usb 1-1: config 0 descriptor?? [ 213.754546][ T5812] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 213.779693][ T43] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 213.800409][ T43] pctv452e: pctv452e_power_ctrl: 1 [ 213.800409][ T43] [ 213.982729][ T5812] usb 6-1: Using ep0 maxpacket: 8 [ 214.007100][ T5812] usb 6-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 214.019751][ T43] dvb-usb: bulk message failed: -22 (5/0) [ 214.044739][ T5812] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.055888][ T43] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 214.073254][ T5812] usb 6-1: Product: syz [ 214.081951][ T5812] usb 6-1: Manufacturer: syz [ 214.094080][ T5812] usb 6-1: SerialNumber: syz [ 214.108693][ T43] dvb-usb: Technotrend TT Connect S2-3600 error while loading driver (-19) [ 214.210522][ T8411] veth0_vlan: entered promiscuous mode [ 214.239865][ T8411] veth1_vlan: entered promiscuous mode [ 214.304904][ T5848] usb 1-1: USB disconnect, device number 11 [ 214.373659][ T8411] veth0_macvtap: entered promiscuous mode [ 214.402359][ T8411] veth1_macvtap: entered promiscuous mode [ 214.452594][ T8411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.472766][ T8411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.489988][ T8411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.501729][ T8411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.512374][ T8411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.533511][ T8411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.552544][ T8411] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 214.588094][ T8411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.609171][ T8411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.623366][ T8411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.642085][ T8411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.654992][ T8411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.672797][ T8411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.696869][ T8411] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 214.719386][ T8411] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.729652][ T8411] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.740283][ T8411] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.749668][ T8411] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.925162][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 214.964653][ T5812] usb 6-1: 1:1: cannot get freq (v2/v3): err -71 [ 214.965069][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 214.984205][ T5812] usb 6-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 215.000534][ T5812] usb 6-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 215.020803][ T5812] usb 6-1: clock source 0 is not valid, cannot use [ 215.033729][ T5812] usb 6-1: 2:1: cannot get freq (v2/v3): err -71 [ 215.040594][ T5812] usb 6-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 215.058765][ T8632] loop0: detected capacity change from 0 to 2048 [ 215.066406][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.088556][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.144947][ T5812] usb 6-1: USB disconnect, device number 5 [ 215.181315][ T8632] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 215.267761][ T5963] udevd[5963]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 215.470417][ T8637] netlink: 27 bytes leftover after parsing attributes in process `syz.3.857'. [ 215.949601][ T8653] overlayfs: statfs failed on './file0' [ 216.468196][ T60] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 216.859710][ T8676] loop5: detected capacity change from 0 to 256 [ 216.969244][ T27] kauditd_printk_skb: 11 callbacks suppressed [ 216.969261][ T27] audit: type=1800 audit(1781142324.103:44): pid=8676 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.866" name="file2" dev="loop5" ino=1048630 res=0 errno=0 [ 217.034452][ T8679] loop6: detected capacity change from 0 to 2048 [ 217.099906][ T8679] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 217.100204][ T8676] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 198) [ 217.140396][ T8676] FAT-fs (loop5): Filesystem has been set read-only [ 217.171810][ T8676] FAT-fs (loop5): error, fat_free_clusters: deleting FAT entry beyond EOF [ 217.464712][ T8689] loop5: detected capacity change from 0 to 256 [ 217.529922][ T8689] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x99a53fd9, utbl_chksum : 0xe619d30d) [ 217.890657][ T5765] kernel write not supported for file /cpu/0/msr (pid: 5765 comm: kworker/0:3) [ 218.108117][ T8706] loop5: detected capacity change from 0 to 256 [ 218.121610][ T8706] exfat: Deprecated parameter 'utf8' [ 218.146366][ T8706] exfat: Deprecated parameter 'namecase' [ 218.164428][ T8706] exfat: Deprecated parameter 'utf8' [ 218.210894][ T8706] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 218.261588][ T8706] exFAT-fs (loop5): error, tried to truncate zeroed cluster. [ 218.289696][ T8706] exFAT-fs (loop5): hint_cluster is invalid (1), rewind to the first cluster [ 218.304454][ T8706] exFAT-fs (loop5): error, invalid access to exfat cache (entry 0x00000000) [ 218.329235][ T8706] exFAT-fs (loop5): error, failed to bmap (inode : ffff888078960e60 iblock : 9, err : -5) [ 218.341521][ T8706] exFAT-fs (loop5): error, tried to truncate zeroed cluster. [ 218.362503][ T8706] syz.5.876: attempt to access beyond end of device [ 218.362503][ T8706] loop5: rw=2049, sector=34359738488, nr_sectors = 8 limit=256 [ 218.402793][ T5812] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 218.613994][ T5812] usb 7-1: Using ep0 maxpacket: 16 [ 218.624937][ T5812] usb 7-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 218.655573][ T5812] usb 7-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 218.671518][ T8717] loop5: detected capacity change from 0 to 2048 [ 218.692741][ T5812] usb 7-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 218.742015][ T5812] usb 7-1: config 1 interface 0 has no altsetting 0 [ 218.743399][ T8717] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 218.767866][ T5812] usb 7-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40 [ 218.787290][ T5812] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.823159][ T5812] usb 7-1: Product: syz [ 218.827414][ T5812] usb 7-1: Manufacturer: syz [ 218.832067][ T5812] usb 7-1: SerialNumber: syz [ 218.939765][ T8699] loop0: detected capacity change from 0 to 40427 [ 218.983124][ T8699] F2FS-fs (loop0): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288) [ 218.992451][ T8699] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 219.055651][ T8699] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x35f7 [ 219.096161][ T5812] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 255 proto 1 vid 0x0521 pid 0xB1A8 [ 219.119755][ T8699] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x7ffff [ 219.175199][ T8699] F2FS-fs (loop0): Image doesn't support compression [ 219.183917][ T8699] F2FS-fs (loop0): invalid crc value [ 219.201263][ T8699] F2FS-fs (loop0): Found nat_bits in checkpoint [ 219.260116][ T8723] loop3: detected capacity change from 0 to 1024 [ 219.287335][ T8723] EXT4-fs: Ignoring removed oldalloc option [ 219.307699][ T8723] EXT4-fs: inline encryption not supported [ 219.321882][ T8723] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 219.353555][ T8699] F2FS-fs (loop0): Start checkpoint disabled! [ 219.409438][ T5814] usb 7-1: USB disconnect, device number 2 [ 219.458199][ T5814] usblp0: removed [ 219.478030][ T8699] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 219.516106][ T8723] EXT4-fs error (device loop3): ext4_map_blocks:610: inode #3: block 2: comm syz.3.880: lblock 2 mapped to illegal pblock 2 (length 1) [ 219.522955][ T8699] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 219.550113][ T8723] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 219.569518][ T8723] EXT4-fs error (device loop3): ext4_map_blocks:610: inode #3: block 48: comm syz.3.880: lblock 0 mapped to illegal pblock 48 (length 1) [ 219.613515][ T8723] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 219.655605][ T8723] EXT4-fs error (device loop3): ext4_acquire_dquot:6953: comm syz.3.880: Failed to acquire dquot type 0 [ 219.705541][ T8723] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5939: Corrupt filesystem [ 219.736732][ T8723] EXT4-fs error (device loop3): ext4_evict_inode:254: inode #11: comm syz.3.880: mark_inode_dirty error [ 219.763677][ T8699] F2FS-fs (loop0): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_page+0x1d7/0x910 [ 219.787684][ T8723] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 219.815615][ T8739] overlayfs: failed to resolve './bus': -2 [ 219.851659][ T8723] EXT4-fs (loop3): 1 orphan inode deleted [ 219.873673][ T8723] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 219.874291][ T1114] EXT4-fs error (device loop3): ext4_map_blocks:610: inode #3: block 1: comm kworker/u4:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 219.978628][ T1114] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 220.013028][ T1114] EXT4-fs error (device loop3): ext4_release_dquot:6989: comm kworker/u4:7: Failed to release dquot type 0 [ 220.139094][ T1121] kworker/u4:8: attempt to access beyond end of device [ 220.139094][ T1121] loop0: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 220.194400][ T6638] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.201062][ T1121] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 220.221606][ T1121] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 220.226461][ T6638] EXT4-fs error (device loop3): __ext4_get_inode_loc:4496: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 220.234634][ T1121] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 220.260731][ T6638] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5939: Corrupt filesystem [ 220.337235][ T6638] EXT4-fs error (device loop3): ext4_quota_off:7237: inode #3: comm syz-executor: mark_inode_dirty error [ 221.523695][ T8750] loop6: detected capacity change from 0 to 32768 [ 221.627414][ T8750] XFS (loop6): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 221.900346][ T8750] XFS (loop6): Ending clean mount [ 222.039374][ T8799] loop0: detected capacity change from 0 to 64 [ 222.400898][ T8806] loop3: detected capacity change from 0 to 2048 [ 222.416645][ T8411] XFS (loop6): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 222.485312][ T8806] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 222.560107][ T8812] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 222.861364][ T6638] syz-executor: attempt to access beyond end of device [ 222.861364][ T6638] loop3: rw=0, sector=262216, nr_sectors = 2 limit=2048 [ 222.882485][ T6638] NILFS (loop3): I/O error reading meta-data file (ino=6, block-offset=1) [ 222.947249][ T6638] syz-executor: attempt to access beyond end of device [ 222.947249][ T6638] loop3: rw=0, sector=262216, nr_sectors = 2 limit=2048 [ 222.971490][ T6638] NILFS (loop3): I/O error reading meta-data file (ino=6, block-offset=1) [ 223.008459][ T6638] syz-executor: attempt to access beyond end of device [ 223.008459][ T6638] loop3: rw=0, sector=262216, nr_sectors = 2 limit=2048 [ 223.069340][ T6638] NILFS (loop3): I/O error reading meta-data file (ino=6, block-offset=1) [ 223.090073][ T6638] NILFS (loop3): DAT doesn't have a block to manage vblocknr = 147 [ 223.099891][ T6638] NILFS error (device loop3): nilfs_bmap_truncate: broken bmap (inode number=15) [ 223.128571][ T6638] Remounting filesystem read-only [ 223.136395][ T6638] NILFS (loop3): error -5 truncating bmap (ino=15) [ 223.159260][ T6638] syz-executor: attempt to access beyond end of device [ 223.159260][ T6638] loop3: rw=0, sector=262216, nr_sectors = 2 limit=2048 [ 223.199273][ T6638] NILFS (loop3): I/O error reading meta-data file (ino=6, block-offset=1) [ 223.409807][ T6638] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer [ 223.414274][ T8831] net_ratelimit: 9 callbacks suppressed [ 223.414290][ T8831] Set syz1 is full, maxelem 0 reached [ 223.441096][ T6638] NILFS (loop3): discard dirty page: offset=0, ino=2 [ 223.462748][ T6638] NILFS (loop3): discard dirty block: blocknr=18, size=1024 [ 223.492544][ T6638] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 223.509041][ T6638] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 223.518460][ T6638] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 223.539427][ T6638] NILFS (loop3): discard dirty page: offset=0, ino=6 [ 223.549002][ T6638] NILFS (loop3): discard dirty block: blocknr=35, size=1024 [ 223.556804][ T6638] NILFS (loop3): discard dirty block: blocknr=131108, size=1024 [ 223.570230][ T6638] NILFS (loop3): discard dirty block: blocknr=37, size=1024 [ 223.578554][ T6638] NILFS (loop3): discard dirty block: blocknr=38, size=1024 [ 223.627126][ T6638] NILFS (loop3): discard dirty page: offset=163840, ino=3 [ 223.656355][ T6638] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 223.677590][ T6638] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 223.716457][ T6638] NILFS (loop3): discard dirty block: blocknr=47, size=1024 [ 223.746544][ T6638] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 223.777679][ T6638] NILFS (loop3): discard dirty page: offset=196608, ino=3 [ 223.786669][ T6638] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 223.815205][ T6638] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 223.834125][ T6638] NILFS (loop3): discard dirty block: blocknr=49, size=1024 [ 223.856192][ T6638] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 224.362995][ T5812] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 224.492813][ T5814] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 224.554893][ T5812] usb 4-1: unable to get BOS descriptor or descriptor too short [ 224.587456][ T5812] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 224.603201][ T5812] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 224.622909][ T5812] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 224.649283][ T5812] usb 4-1: string descriptor 0 read error: -22 [ 224.662862][ T5812] usb 4-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 224.690562][ T5814] usb 6-1: Using ep0 maxpacket: 16 [ 224.697192][ T5812] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.707738][ T5814] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 224.745239][ T8873] loop6: detected capacity change from 0 to 64 [ 224.748657][ T5814] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 224.792848][ T5814] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 224.802605][ T5814] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 224.812610][ T5814] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 224.844574][ T5814] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 224.862835][ T5814] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 224.874674][ T5814] usb 6-1: Manufacturer: syz [ 224.906888][ T5814] usb 6-1: config 0 descriptor?? [ 225.124083][ T8880] loop6: detected capacity change from 0 to 64 [ 225.187186][ T5812] usb 4-1: 2:0: failed to get current value for ch 0 (-71) [ 225.213411][ T5812] usb 4-1: 2:0: cannot get min/max values for control 2 (id 2) [ 225.327058][ T5812] usb 4-1: 2:0: cannot get min/max values for control 2 (id 2) [ 225.380953][ T5812] usb 4-1: 2:0: cannot get min/max values for control 2 (id 2) [ 225.400403][ T5814] rc_core: IR keymap rc-hauppauge not found [ 225.430103][ T5814] Registered IR keymap rc-empty [ 225.454717][ T5812] usb 4-1: USB disconnect, device number 7 [ 225.467100][ T5814] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 225.513099][ T5814] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 225.595537][ T5814] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 225.640143][ T5814] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input17 [ 225.697480][ T5814] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 225.753205][ T5814] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 225.814122][ T5814] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 225.854481][ T5814] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 225.903110][ T5814] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 225.952809][ T5814] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 225.992826][ T5814] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 226.052863][ T5814] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 226.093699][ T5814] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 226.132818][ T5814] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 226.181162][ T8877] loop0: detected capacity change from 0 to 40427 [ 226.188564][ T5814] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 226.206221][ T8877] F2FS-fs (loop0): invalid crc value [ 226.226119][ T8877] F2FS-fs (loop0): Found nat_bits in checkpoint [ 226.229242][ T5814] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 226.303308][ T5814] usb 6-1: USB disconnect, device number 6 [ 226.452538][ T8877] F2FS-fs (loop0): Start checkpoint disabled! [ 226.529180][ T8877] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 227.171440][ T1121] kworker/u4:8: attempt to access beyond end of device [ 227.171440][ T1121] loop0: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 227.237601][ T1121] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 227.263062][ T1121] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 227.304302][ T1121] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 227.719427][ T8938] loop5: detected capacity change from 0 to 64 [ 228.186317][ T8945] loop5: detected capacity change from 0 to 128 [ 228.201670][ T8916] loop3: detected capacity change from 0 to 32768 [ 228.210146][ T8945] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 228.268723][ T8916] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 228.274245][ T8945] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 228.376290][ T8916] XFS (loop3): Ending clean mount [ 228.388025][ T8916] XFS (loop3): Quotacheck needed: Please wait. [ 228.526122][ T8916] XFS (loop3): Quotacheck: Done. [ 228.826030][ T6638] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 229.882850][ T5814] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 230.096463][ T5814] usb 6-1: config 0 has no interfaces? [ 230.107706][ T8996] loop3: detected capacity change from 0 to 1024 [ 230.118801][ T5814] usb 6-1: New USB device found, idVendor=056a, idProduct=0045, bcdDevice= 0.00 [ 230.149947][ T5814] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.166402][ T27] audit: type=1800 audit(1781142337.303:45): pid=8996 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.944" name="file1" dev="loop3" ino=20 res=0 errno=0 [ 230.216739][ T5814] usb 6-1: config 0 descriptor?? [ 230.452574][ T8986] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 230.458404][ T9003] Context (ID=0x10) not attached to queue pair (handle=0x2:0xf2) [ 230.474199][ T8986] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 230.501018][ T5813] usb 6-1: USB disconnect, device number 7 [ 230.706164][ T9010] loop3: detected capacity change from 0 to 512 [ 230.761398][ T9010] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 230.792874][ T9010] ext4 filesystem being mounted at /159/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 230.945162][ T6638] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.951837][ T9016] netlink: 9 bytes leftover after parsing attributes in process `syz.6.950'. [ 230.981174][ T9016] netlink: 9 bytes leftover after parsing attributes in process `syz.6.950'. [ 231.082831][ T5813] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 231.292936][ T5813] usb 6-1: Using ep0 maxpacket: 8 [ 231.301105][ T5813] usb 6-1: config 1 has an invalid interface number: 136 but max is 0 [ 231.322886][ T5813] usb 6-1: config 1 has no interface number 0 [ 231.361417][ T5813] usb 6-1: config 1 interface 136 has no altsetting 0 [ 231.379781][ T5813] usb 6-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=bf.65 [ 231.411320][ T5813] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.427416][ T5813] usb 6-1: Product: syz [ 231.431654][ T5813] usb 6-1: Manufacturer: syz [ 231.436537][ T5813] usb 6-1: SerialNumber: syz [ 231.667171][ T9019] loop3: detected capacity change from 0 to 32768 [ 231.675066][ T5813] usb 6-1: USB disconnect, device number 8 [ 231.721231][ T27] audit: type=1800 audit(1781142338.853:46): pid=9019 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.951" name="file1" dev="loop3" ino=4 res=0 errno=0 [ 231.771019][ T9031] loop6: detected capacity change from 0 to 128 [ 231.822510][ T9031] EXT4-fs (loop6): Test dummy encryption mode enabled [ 231.861472][ T9031] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 231.886007][ T9031] ext4 filesystem being mounted at /24/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 231.952767][ T23] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 232.096463][ T8411] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 232.159693][ T23] usb 1-1: unable to get BOS descriptor or descriptor too short [ 232.171510][ T23] usb 1-1: config 1 has an invalid descriptor of length 241, skipping remainder of the config [ 232.210153][ T23] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 118, changing to 7 [ 232.245522][ T23] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 50432, setting to 1024 [ 232.265151][ T23] usb 1-1: string descriptor 0 read error: -22 [ 232.271759][ T23] usb 1-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 232.322875][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.856567][ T9055] loop6: detected capacity change from 0 to 8192 [ 232.877868][ T9055] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 232.892484][ T9055] REISERFS (device loop6): found reiserfs format "3.6" with non-standard journal [ 232.906389][ T9055] REISERFS (device loop6): using ordered data mode [ 232.955876][ T9055] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 232.991350][ T9055] REISERFS (device loop6): checking transaction log (loop6) [ 232.999518][ T23] usb 1-1: current rate 2133376 is different from the runtime rate 48000 [ 233.014579][ T9055] REISERFS (device loop6): Using r5 hash to sort names [ 233.033608][ T9055] REISERFS warning (device loop6): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 233.050186][ T9055] REISERFS (device loop6): Created .reiserfs_priv - reserved for xattr storage. [ 233.194440][ T9055] REISERFS warning (device loop6): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 233.216171][ T23] usb 1-1: USB disconnect, device number 12 [ 233.299593][ T9061] REISERFS warning (device loop6): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 233.741323][ T9075] loop6: detected capacity change from 0 to 8 [ 233.898742][ T9079] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 234.253888][ T9087] loop3: detected capacity change from 0 to 4096 [ 234.389954][ T9097] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 234.755455][ T9104] loop0: detected capacity change from 0 to 2048 [ 234.807822][ T9104] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 234.995787][ T9115] loop0: detected capacity change from 0 to 128 [ 235.003267][ T5814] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 235.045369][ T9115] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 235.069929][ T9115] ext4 filesystem being mounted at /259/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 235.095959][ T23] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 235.203204][ T5814] usb 7-1: Using ep0 maxpacket: 16 [ 235.213988][ T5814] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 235.227569][ T5814] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 235.232229][ T5784] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 235.261160][ T5814] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 235.272323][ T5814] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 235.289132][ T5814] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 235.336631][ T5814] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 235.346184][ T23] usb 6-1: Using ep0 maxpacket: 16 [ 235.351704][ T5814] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 235.367188][ T23] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 235.387870][ T23] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 235.404424][ T5814] usb 7-1: Manufacturer: syz [ 235.406951][ T9128] loop0: detected capacity change from 0 to 64 [ 235.431194][ T5814] usb 7-1: config 0 descriptor?? [ 235.453147][ T23] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 235.489734][ T23] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 235.500745][ T23] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 235.516807][ T23] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 235.567695][ T23] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 235.592848][ T23] usb 6-1: Manufacturer: syz [ 235.634652][ T23] usb 6-1: config 0 descriptor?? [ 235.720931][ T9135] loop0: detected capacity change from 0 to 512 [ 235.843117][ T5814] rc_core: IR keymap rc-hauppauge not found [ 235.873244][ T5814] Registered IR keymap rc-empty [ 235.890167][ T5814] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 235.953628][ T5814] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 235.996403][ T5814] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 236.038981][ T5814] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input18 [ 236.063545][ T23] rc_core: IR keymap rc-hauppauge not found [ 236.069522][ T23] Registered IR keymap rc-empty [ 236.090395][ T23] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 236.116138][ T5814] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 236.143028][ T23] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 236.153172][ T5814] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 236.175324][ T23] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc1 [ 236.212954][ T23] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc1/input19 [ 236.226601][ T5814] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 236.246873][ T23] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 236.263599][ T5814] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 236.285075][ T23] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 236.301062][ T9148] loop0: detected capacity change from 0 to 512 [ 236.323051][ T5814] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 236.330402][ T23] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 236.356590][ T9148] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 236.373206][ T5814] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 236.382482][ T23] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 236.407019][ T9148] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2855: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 236.430491][ T9148] EXT4-fs (loop0): 1 truncate cleaned up [ 236.440432][ T9148] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 236.444128][ T5814] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 236.473744][ T23] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 236.504936][ T23] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 236.520199][ T5784] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.562815][ T5814] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 236.593139][ T23] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 236.603045][ T5814] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 236.620006][ T27] audit: type=1326 audit(1781142343.753:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9152 comm="syz.3.1001" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7b0f9ce59 code=0x7ffc0000 [ 236.656430][ T5814] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 236.690858][ T23] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 236.700945][ T27] audit: type=1326 audit(1781142343.753:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9152 comm="syz.3.1001" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7b0f9ce59 code=0x7ffc0000 [ 236.732915][ T5814] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 236.740933][ T23] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 236.749106][ T27] audit: type=1326 audit(1781142343.783:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9152 comm="syz.3.1001" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7fb7b0f9ce59 code=0x7ffc0000 [ 236.778474][ T27] audit: type=1326 audit(1781142343.783:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9152 comm="syz.3.1001" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7b0f9ce59 code=0x7ffc0000 [ 236.785730][ T5814] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 236.816223][ T23] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 236.824840][ T27] audit: type=1326 audit(1781142343.783:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9152 comm="syz.3.1001" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7b0f9ce59 code=0x7ffc0000 [ 236.840873][ T5814] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 236.859966][ T23] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 236.861088][ T27] audit: type=1326 audit(1781142343.783:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9152 comm="syz.3.1001" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fb7b0f9ce59 code=0x7ffc0000 [ 236.869385][ T23] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 236.901483][ T27] audit: type=1326 audit(1781142343.783:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9152 comm="syz.3.1001" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7b0f9ce59 code=0x7ffc0000 [ 236.920378][ T5814] usb 7-1: USB disconnect, device number 3 [ 236.945676][ T27] audit: type=1326 audit(1781142343.803:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9152 comm="syz.3.1001" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7fb7b0f9ce59 code=0x7ffc0000 [ 236.978488][ T27] audit: type=1326 audit(1781142343.803:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9152 comm="syz.3.1001" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7b0f9ce59 code=0x7ffc0000 [ 237.012644][ T27] audit: type=1326 audit(1781142343.803:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9152 comm="syz.3.1001" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7b0f9ce59 code=0x7ffc0000 [ 237.066380][ T23] usb 6-1: USB disconnect, device number 9 [ 237.192239][ T9162] loop3: detected capacity change from 0 to 256 [ 237.238145][ T9162] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 237.301305][ T9162] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 237.369188][ T9162] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 237.417491][ T9166] loop0: detected capacity change from 0 to 512 [ 237.498237][ T9166] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 237.805030][ T5784] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.313079][ T5814] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 238.512750][ T5814] usb 1-1: Using ep0 maxpacket: 8 [ 238.525292][ T5814] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 238.543857][ T5814] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 238.574786][ T5814] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 238.607359][ T5814] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 238.632951][ T5814] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 238.652969][ T5814] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.801631][ T9175] loop5: detected capacity change from 0 to 40427 [ 238.837775][ T9175] F2FS-fs (loop5): invalid crc value [ 238.903843][ T9175] F2FS-fs (loop5): Found nat_bits in checkpoint [ 238.926741][ T5814] usb 1-1: GET_CAPABILITIES returned 0 [ 238.932300][ T5814] usbtmc 1-1:16.0: can't read capabilities [ 239.066066][ T9175] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 239.136488][ T9180] usb 1-1: usbtmc_ioctl_clear_out_halt returned -32 [ 239.156034][ T5814] usb 1-1: USB disconnect, device number 13 [ 239.332163][ T7264] syz-executor: attempt to access beyond end of device [ 239.332163][ T7264] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 239.365552][ T7264] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 239.394612][ T9198] loop3: detected capacity change from 0 to 8192 [ 239.430248][ T9198] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 239.490284][ T9198] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 239.501657][ T9198] REISERFS (device loop3): using ordered data mode [ 239.523637][ T9198] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 239.540401][ T9198] REISERFS (device loop3): checking transaction log (loop3) [ 239.575552][ T9198] REISERFS (device loop3): Using r5 hash to sort names [ 239.593452][ T9198] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 239.631104][ T9198] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 239.805409][ T9205] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 239.860931][ T9198] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 241.102208][ T9243] loop3: detected capacity change from 0 to 512 [ 241.213572][ T9243] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 241.273135][ T9243] ext4 filesystem being mounted at /185/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 241.294370][ T9255] loop5: detected capacity change from 0 to 256 [ 241.586131][ T6638] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.878717][ T9271] loop0: detected capacity change from 0 to 512 [ 241.918453][ T9271] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 242.096825][ T9271] EXT4-fs (loop0): 1 truncate cleaned up [ 242.140945][ T9271] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 242.264782][ T9285] loop3: detected capacity change from 0 to 8 [ 242.344547][ T5784] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.432825][ T5814] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 242.642887][ T5814] usb 6-1: Using ep0 maxpacket: 32 [ 242.659471][ T5814] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 242.672907][ T5814] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 242.694295][ T5814] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 242.706014][ T5814] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 242.733102][ T5814] usb 6-1: config 0 interface 0 has no altsetting 0 [ 242.757501][ T5814] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 242.771601][ T5814] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 242.800779][ T5814] usb 6-1: Product: syz [ 242.810899][ T5814] usb 6-1: Manufacturer: syz [ 242.822793][ T5814] usb 6-1: SerialNumber: syz [ 242.854042][ T5814] usb 6-1: config 0 descriptor?? [ 242.867745][ T5814] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 242.887249][ T5814] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 243.189943][ T5814] usb 6-1: USB disconnect, device number 10 [ 243.190031][ C1] ldusb 6-1:0.0: usb_submit_urb failed (-19) [ 243.221208][ T5814] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 243.475174][ T9295] loop0: detected capacity change from 0 to 32768 [ 243.563091][ T9295] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 243.628484][ T9295] JBD2: Ignoring recovery information on journal [ 243.875351][ T9295] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 244.387324][ T5784] ocfs2: Unmounting device (7,0) on (node local) [ 244.648986][ T9338] loop6: detected capacity change from 0 to 4096 [ 244.721467][ T9340] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 245.448288][ T9333] loop3: detected capacity change from 0 to 32768 [ 245.500637][ T9333] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 9 [ 245.640398][ T9357] loop6: detected capacity change from 0 to 2048 [ 245.685989][ T9362] netlink: 4768 bytes leftover after parsing attributes in process `syz.5.1065'. [ 245.698937][ T9357] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 245.741311][ T5776] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 9 [ 245.767378][ T9362] netlink: 4768 bytes leftover after parsing attributes in process `syz.5.1065'. [ 246.053110][ T5813] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 246.282935][ T5813] usb 4-1: Using ep0 maxpacket: 32 [ 246.296042][ T5813] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 246.317167][ T5813] usb 4-1: config 0 has no interface number 0 [ 246.346126][ T5813] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 246.355914][ T5813] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.365017][ T9347] loop0: detected capacity change from 0 to 32768 [ 246.380129][ T5813] usb 4-1: Product: syz [ 246.390253][ T5813] usb 4-1: Manufacturer: syz [ 246.394057][ T9347] XFS: attr2 mount option is deprecated. [ 246.421090][ T5813] usb 4-1: SerialNumber: syz [ 246.451991][ T5813] usb 4-1: config 0 descriptor?? [ 246.472325][ T5813] smsc95xx v2.0.0 [ 246.474395][ T9347] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 246.689562][ T9347] XFS (loop0): Ending clean mount [ 246.721046][ T9347] XFS (loop0): Quotacheck needed: Please wait. [ 246.869529][ T9347] XFS (loop0): Quotacheck: Done. [ 247.037756][ T9393] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 247.037756][ T9393] The task syz.5.1071 (9393) triggered the difference, watch for misbehavior. [ 247.130239][ T5784] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 247.139557][ T9368] loop6: detected capacity change from 0 to 40427 [ 247.167795][ T9368] F2FS-fs (loop6): Fix alignment : internally, start(4096) end(16896) block(12288) [ 247.186135][ T9368] F2FS-fs (loop6): invalid crc value [ 247.267658][ T9368] F2FS-fs (loop6): Found nat_bits in checkpoint [ 247.289885][ T5813] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 247.328537][ T5813] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 247.384868][ T5813] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 247.432948][ T5813] smsc95xx: probe of 4-1:0.67 failed with error -71 [ 247.464024][ T5813] usb 4-1: USB disconnect, device number 8 [ 247.487383][ T9368] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 247.495635][ T50] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 247.614296][ T9368] F2FS-fs (loop6): Stopped filesystem due to reason: 0 [ 248.063190][ T9410] loop6: detected capacity change from 0 to 512 [ 248.172087][ T9410] EXT4-fs error (device loop6): ext4_iget_extra_inode:4739: inode #15: comm syz.6.1073: corrupted in-inode xattr: invalid ea_ino [ 248.252897][ T9410] EXT4-fs error (device loop6): ext4_orphan_get:1409: comm syz.6.1073: couldn't read orphan inode 15 (err -117) [ 248.268152][ T9410] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 248.384508][ T8411] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.641400][ T9428] loop5: detected capacity change from 0 to 1024 [ 248.750967][ T9428] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 249.043340][ T7264] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.200795][ T27] audit: type=1107 audit(1781142356.323:57): pid=9452 uid=0 auid=0 ses=1 subj=unconfined msg='' [ 249.262846][ T6733] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 249.492797][ T6733] usb 7-1: Using ep0 maxpacket: 8 [ 249.505658][ T6733] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 249.552769][ T6733] usb 7-1: config 179 has no interface number 0 [ 249.559140][ T6733] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 249.595295][ T9467] loop0: detected capacity change from 0 to 512 [ 249.618992][ T6733] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 249.662902][ T6733] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 249.677463][ T9467] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 249.684343][ T6733] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 249.722042][ T6733] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 249.746229][ T6733] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 249.769079][ T9467] ext4 filesystem being mounted at /281/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 249.772763][ T6733] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.812944][ T9448] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 250.047074][ T5784] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.161664][ T6733] input: Generic X-Box pad as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:179.65/input/input20 [ 250.413871][ T5848] usb 7-1: USB disconnect, device number 4 [ 250.413936][ C0] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 250.428188][ C0] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 250.437360][ C0] vkms_vblank_simulate: vblank timer overrun [ 250.447990][ T5848] xpad 7-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 250.803791][ T9484] loop5: detected capacity change from 0 to 256 [ 250.867950][ T9469] loop3: detected capacity change from 0 to 32768 [ 251.014419][ T9469] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 251.144059][ T9469] XFS (loop3): Ending clean mount [ 251.186886][ T9469] XFS (loop3): Quotacheck needed: Please wait. [ 251.387434][ T9469] XFS (loop3): Quotacheck: Done. [ 251.582420][ T9469] XFS (loop3): User initiated shutdown received. [ 251.620419][ T9469] XFS (loop3): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:497). Shutting down filesystem. [ 251.678235][ T9469] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [ 251.712510][ T9479] loop0: detected capacity change from 0 to 40427 [ 251.769526][ T9479] F2FS-fs (loop0): Small segment_count (9 < 1 * 24) [ 251.792018][ T6638] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 251.800834][ T9479] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 251.808751][ T9479] F2FS-fs (loop0): invalid crc value [ 251.883120][ T9479] F2FS-fs (loop0): Found nat_bits in checkpoint [ 252.119593][ T9479] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 252.139721][ T9479] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 252.315675][ T9479] syz.0.1092: attempt to access beyond end of device [ 252.315675][ T9479] loop0: rw=2049, sector=53248, nr_sectors = 8 limit=40427 [ 252.545277][ T5784] syz-executor: attempt to access beyond end of device [ 252.545277][ T5784] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 252.589513][ T9530] loop5: detected capacity change from 0 to 512 [ 252.632244][ T5784] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 252.637404][ T9530] EXT4-fs: Ignoring removed nobh option [ 252.831526][ T9530] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 252.882987][ T9530] ext4 filesystem being mounted at /153/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 253.176077][ T7264] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.112134][ T9572] input: syz1 as /devices/virtual/input/input21 [ 254.320759][ T9548] loop3: detected capacity change from 0 to 32768 [ 254.372997][ T9548] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.1108 (9548) [ 254.466487][ T9548] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 254.489167][ T9548] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 254.528575][ T9548] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 254.555933][ T9548] BTRFS info (device loop3): use zstd compression, level 3 [ 254.593693][ T9548] BTRFS info (device loop3): use no compression [ 254.642846][ T9548] BTRFS info (device loop3): using free space tree [ 254.792594][ T9603] loop0: detected capacity change from 0 to 4096 [ 254.865410][ T9548] BTRFS info (device loop3): enabling ssd optimizations [ 254.898777][ T9548] BTRFS info (device loop3): auto enabling async discard [ 255.077499][ T27] audit: type=1800 audit(1781142362.203:58): pid=9548 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1108" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 255.445002][ T6638] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 255.949636][ T5776] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 10 /dev/loop3 scanned by udevd (5776) [ 256.130940][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.186616][ T9644] loop6: detected capacity change from 0 to 2048 [ 256.241326][ T9648] loop5: detected capacity change from 0 to 512 [ 256.268731][ T9648] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 256.290945][ T9644] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found [ 256.314649][ T9648] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 256.352573][ T9644] UDF-fs: Scanning with blocksize 512 failed [ 256.399849][ T9648] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=84ec018, mo2=0002] [ 256.443927][ T9644] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 256.511396][ T9648] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4059: comm syz.5.1134: Allocating blocks 41-42 which overlap fs metadata [ 256.619227][ T9648] Quota error (device loop5): write_blk: dquota write failed [ 256.677935][ T9648] Quota error (device loop5): find_free_dqentry: Can't write quota data block 5 [ 256.708207][ T9648] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4059: comm syz.5.1134: Allocating blocks 41-42 which overlap fs metadata [ 256.755233][ T9648] Quota error (device loop5): write_blk: dquota write failed [ 256.789139][ T9648] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 256.817085][ T9648] EXT4-fs error (device loop5): ext4_acquire_dquot:6953: comm syz.5.1134: Failed to acquire dquot type 1 [ 256.859799][ T9648] EXT4-fs error (device loop5): mb_free_blocks:1970: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 256.953225][ T9648] EXT4-fs error (device loop5): ext4_do_update_inode:5255: inode #12: comm syz.5.1134: corrupted inode contents [ 256.972576][ T9656] loop3: detected capacity change from 0 to 4096 [ 257.006580][ T9648] EXT4-fs error (device loop5): ext4_dirty_inode:6143: inode #12: comm syz.5.1134: mark_inode_dirty error [ 257.053680][ T9648] EXT4-fs error (device loop5): ext4_do_update_inode:5255: inode #12: comm syz.5.1134: corrupted inode contents [ 257.102148][ T9648] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #12: comm syz.5.1134: mark_inode_dirty error [ 257.135935][ T9648] EXT4-fs error (device loop5): ext4_do_update_inode:5255: inode #12: comm syz.5.1134: corrupted inode contents [ 257.178244][ T9648] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 257.218120][ T9648] EXT4-fs error (device loop5): ext4_do_update_inode:5255: inode #12: comm syz.5.1134: corrupted inode contents [ 257.273534][ T9648] EXT4-fs error (device loop5): ext4_truncate:4301: inode #12: comm syz.5.1134: mark_inode_dirty error [ 257.300707][ T9648] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem [ 257.361133][ T9648] EXT4-fs (loop5): 1 truncate cleaned up [ 257.381911][ T9648] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 257.605592][ T9648] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 257.721906][ T9648] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 258.019933][ T9679] loop3: detected capacity change from 0 to 512 [ 258.054412][ T9679] EXT4-fs error (device loop3): ext4_orphan_get:1404: inode #15: comm syz.3.1145: inode has both inline data and extents flags [ 258.078607][ T9679] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.1145: couldn't read orphan inode 15 (err -117) [ 258.145712][ T9679] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 258.189032][ T7264] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.404976][ T6638] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.495836][ T9689] loop0: detected capacity change from 0 to 1024 [ 259.032764][ T5814] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 259.243788][ T5814] usb 1-1: Using ep0 maxpacket: 32 [ 259.251308][ T9685] loop5: detected capacity change from 0 to 32768 [ 259.265574][ T5814] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 259.277755][ T9685] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 9 [ 259.296987][ T5814] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 259.347632][ T5814] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 259.364308][ T5814] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 259.379021][ T5814] usb 1-1: config 0 interface 0 has no altsetting 0 [ 259.419688][ T5814] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 259.441705][ T5814] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 259.455884][ T5814] usb 1-1: Product: syz [ 259.473778][ T5814] usb 1-1: Manufacturer: syz [ 259.484379][ T5814] usb 1-1: SerialNumber: syz [ 259.503587][ T5814] usb 1-1: config 0 descriptor?? [ 259.527676][ T5814] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 259.553578][ T5814] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 259.617505][ T5776] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 9 [ 259.805197][ C1] ldusb 1-1:0.0: usb_submit_urb failed (-19) [ 259.819285][ T5814] usb 1-1: USB disconnect, device number 14 [ 259.850441][ T5814] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 260.239165][ T9712] loop3: detected capacity change from 0 to 32768 [ 260.629805][ T9732] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1169'. [ 260.896024][ T9739] loop6: detected capacity change from 0 to 256 [ 260.944782][ T9739] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 261.331968][ T9748] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 261.361172][ T9748] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 261.381548][ T9748] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 261.408404][ T9748] netdevsim netdevsim6 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 261.464541][ T9748] netdevsim netdevsim6 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 261.502941][ T9748] netdevsim netdevsim6 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 261.531788][ T9748] netdevsim netdevsim6 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 261.564285][ T9748] netdevsim netdevsim6 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 262.381014][ T9746] loop5: detected capacity change from 0 to 40427 [ 262.409370][ T9746] F2FS-fs (loop5): invalid crc value [ 262.430647][ T9746] F2FS-fs (loop5): Found nat_bits in checkpoint [ 262.607052][ T9746] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 263.153383][ T9764] loop0: detected capacity change from 0 to 32768 [ 263.194976][ T7264] syz-executor: attempt to access beyond end of device [ 263.194976][ T7264] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 263.269911][ T7264] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 263.376236][ T9778] loop3: detected capacity change from 0 to 1024 [ 263.431053][ T9778] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 263.453183][ T9778] ext4 filesystem being mounted at /215/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 263.597147][ T9778] EXT4-fs error (device loop3): ext4_free_blocks:6694: comm syz.3.1188: Freeing blocks not in datazone - block = 0, count = 16 [ 263.664828][ T9778] EXT4-fs (loop3): Remounting filesystem read-only [ 263.847466][ T6638] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 264.499530][ T9791] loop5: detected capacity change from 0 to 128 [ 264.566774][ T9791] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 264.582887][ T6733] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 264.623609][ T9791] hpfs: filesystem error: improperly stopped [ 264.629952][ T9791] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 264.669498][ T9791] hpfs: You really don't want any checks? You are crazy... [ 264.684602][ T9791] hpfs: hpfs_map_sector(): read error [ 264.711101][ T9791] hpfs: code page support is disabled [ 264.730745][ T9791] hpfs: hpfs_map_4sectors(): unaligned read [ 264.745748][ T9791] hpfs: hpfs_map_4sectors(): unaligned read [ 264.751717][ T9791] hpfs: filesystem error: unable to find root dir [ 264.775182][ T6733] usb 1-1: Using ep0 maxpacket: 8 [ 264.807195][ T6733] usb 1-1: config index 0 descriptor too short (expected 26, got 18) [ 264.845220][ T6733] usb 1-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 264.864886][ T6733] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.883336][ T6733] usb 1-1: Product: syz [ 264.892830][ T6733] usb 1-1: Manufacturer: syz [ 264.907756][ T6733] usb 1-1: SerialNumber: syz [ 264.926875][ T6733] usb 1-1: config 0 descriptor?? [ 264.937239][ T6733] gspca_main: sq930x-2.14.0 probing 2770:930c [ 265.132447][ T9796] loop3: detected capacity change from 0 to 1024 [ 266.579241][ T9798] loop5: detected capacity change from 0 to 131072 [ 266.587609][ T9798] F2FS-fs (loop5): Invalid log sectorsize (67108873) [ 266.594528][ T9798] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 266.618493][ T9798] F2FS-fs (loop5): invalid crc value [ 266.657655][ T9798] F2FS-fs (loop5): Found nat_bits in checkpoint [ 266.724581][ T9798] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 266.731698][ T9798] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 266.792217][ T9798] F2FS-fs (loop5): sanity_check_inode: inode (ino=4, mode=1773) should not have inline_dentry, run fsck to fix [ 266.808211][ T6733] gspca_sq930x: ucbus_write failed -71 [ 266.924470][ T9800] loop3: detected capacity change from 0 to 40427 [ 266.966055][ T9800] F2FS-fs (loop3): invalid crc value [ 267.011043][ T9800] F2FS-fs (loop3): Found nat_bits in checkpoint [ 267.073057][ T6733] gspca_sq930x: Sensor ov9630 not yet treated [ 267.079282][ T6733] sq930x: probe of 1-1:0.0 failed with error -22 [ 267.136186][ T9800] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 267.162433][ T6733] usb 1-1: USB disconnect, device number 15 [ 267.321203][ T9806] loop6: detected capacity change from 0 to 32768 [ 267.383550][ T9806] JBD2: Ignoring recovery information on journal [ 267.651256][ T9806] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 267.680766][ T9818] loop0: detected capacity change from 0 to 512 [ 267.729266][ T9818] EXT4-fs: Ignoring removed i_version option [ 267.772851][ T9818] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 267.861765][ T9818] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 267.941681][ T9818] ext4 filesystem being mounted at /306/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 268.048308][ T6638] syz-executor: attempt to access beyond end of device [ 268.048308][ T6638] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 268.129730][ T6638] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 268.145642][ T5784] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.424138][ T8411] ocfs2: Unmounting device (7,6) on (node local) [ 268.602809][ T5814] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 268.825486][ T5814] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 268.842793][ T5814] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.856783][ T5814] usb 1-1: Product: syz [ 268.869302][ T5814] usb 1-1: Manufacturer: syz [ 268.887676][ T5814] usb 1-1: SerialNumber: syz [ 268.901690][ T5814] usb 1-1: config 0 descriptor?? [ 269.161543][ T9837] loop3: detected capacity change from 0 to 512 [ 269.567452][ T9843] loop5: detected capacity change from 0 to 4096 [ 269.631066][ T9843] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 269.798234][ T5814] usb 1-1: Firmware version (0.0) predates our first public release. [ 269.825145][ T7264] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.833263][ T5814] usb 1-1: Please update to version 0.2 or newer [ 270.021084][ T9830] loop6: detected capacity change from 0 to 32768 [ 270.028040][ T5814] usb 1-1: USB disconnect, device number 16 [ 270.143936][ T9830] XFS (loop6): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 270.251887][ T9830] XFS (loop6): Ending clean mount [ 270.264360][ T9830] XFS (loop6): Quotacheck needed: Please wait. [ 270.332723][ T9830] XFS (loop6): Quotacheck: Done. [ 270.402336][ T9830] XFS (loop6): User initiated shutdown received. [ 270.416914][ T9830] XFS (loop6): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:497). Shutting down filesystem. [ 270.432451][ T9830] XFS (loop6): Please unmount the filesystem and rectify the problem(s) [ 270.473560][ T8411] XFS (loop6): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 270.927142][ T9873] loop3: detected capacity change from 0 to 1024 [ 270.970864][ T9873] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 271.228388][ T6638] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 271.709180][ T9891] netlink: 'syz.0.1221': attribute type 12 has an invalid length. [ 271.731728][ T9891] netlink: 'syz.0.1221': attribute type 29 has an invalid length. [ 271.763180][ T9891] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1221'. [ 271.772311][ T9891] netlink: 'syz.0.1221': attribute type 2 has an invalid length. [ 271.801496][ T9891] netlink: 'syz.0.1221': attribute type 3 has an invalid length. [ 271.820601][ T9891] netlink: 19 bytes leftover after parsing attributes in process `syz.0.1221'. [ 272.007639][ T9880] loop6: detected capacity change from 0 to 40427 [ 272.034059][ T9880] F2FS-fs (loop6): invalid crc value [ 272.138677][ T9880] F2FS-fs (loop6): Found nat_bits in checkpoint [ 272.336343][ T9880] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 272.370343][ T9904] loop0: detected capacity change from 0 to 8192 [ 272.416380][ T9904] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 272.483751][ T9904] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 272.493621][ T9904] REISERFS (device loop0): using ordered data mode [ 272.500168][ T9904] reiserfs: using flush barriers [ 272.509158][ T9904] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 272.585001][ T9904] REISERFS (device loop0): checking transaction log (loop0) [ 272.863675][ T9904] REISERFS (device loop0): Using tea hash to sort names [ 272.903332][ T9904] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 272.926374][ T9896] loop3: detected capacity change from 0 to 32768 [ 272.953575][ T9904] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 272.974881][ T9896] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.1223 (9896) [ 273.018978][ T9896] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 273.044090][ T9896] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 273.076755][ T9896] BTRFS info (device loop3): using free space tree [ 273.253456][ T8411] syz-executor: attempt to access beyond end of device [ 273.253456][ T8411] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 273.301436][ T9896] BTRFS info (device loop3): enabling ssd optimizations [ 273.315511][ T8411] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 273.337342][ T9896] BTRFS info (device loop3): auto enabling async discard [ 273.682367][ T6638] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 274.289987][ T5776] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop3 scanned by udevd (5776) [ 274.503859][ T9947] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 274.525317][ T9947] iommufd_mock iommufd_mock2: Adding to iommu group 1 [ 275.000094][ T9958] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1240'. [ 275.735413][ T9951] loop0: detected capacity change from 0 to 40427 [ 275.735727][ T9976] loop6: detected capacity change from 0 to 64 [ 275.755141][ T9951] F2FS-fs (loop0): invalid crc value [ 275.795185][ T9951] F2FS-fs (loop0): Found nat_bits in checkpoint [ 275.893349][ T27] audit: type=1800 audit(1781142383.033:59): pid=9976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1247" name="file1" dev="loop6" ino=21 res=0 errno=0 [ 275.931813][ T9951] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 276.411239][ T9969] loop5: detected capacity change from 0 to 32768 [ 276.508872][ T9969] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 276.639990][ T9969] XFS (loop5): Ending clean mount [ 276.661314][ T5784] syz-executor: attempt to access beyond end of device [ 276.661314][ T5784] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 276.733064][ T9969] XFS (loop5): Quotacheck needed: Please wait. [ 276.745697][ T5784] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 276.857660][ T9969] XFS (loop5): Quotacheck: Done. [ 277.006337][ T9969] XFS (loop5): User initiated shutdown received. [ 277.017721][ T9969] XFS (loop5): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:497). Shutting down filesystem. [ 277.035562][ T9969] XFS (loop5): Please unmount the filesystem and rectify the problem(s) [ 277.053817][T10010] program syz.6.1261 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 277.110414][ T7264] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 277.185362][T10013] netlink: 'syz.3.1262': attribute type 9 has an invalid length. [ 277.626133][T10021] loop3: detected capacity change from 0 to 8 [ 278.161016][T10039] netlink: 'syz.5.1274': attribute type 6 has an invalid length. [ 278.184513][T10039] netlink: 'syz.5.1274': attribute type 6 has an invalid length. [ 278.432872][ T5765] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 278.498125][T10049] program syz.0.1278 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 278.525002][ T4995] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 278.634756][ T5765] usb 7-1: unable to get BOS descriptor or descriptor too short [ 278.685543][ T5765] usb 7-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 278.732891][ T5765] usb 7-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 278.742017][ T5765] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.792832][ T5765] usb 7-1: Product: syz [ 278.799343][ T5765] usb 7-1: Manufacturer: syz [ 278.816291][ T5765] usb 7-1: SerialNumber: syz [ 279.216032][ T5765] usb 7-1: reset high-speed USB device number 5 using dummy_hcd [ 279.354022][T10052] loop3: detected capacity change from 0 to 40427 [ 279.373432][T10052] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 279.384144][T10052] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 279.407299][T10052] F2FS-fs (loop3): Found nat_bits in checkpoint [ 279.537181][T10057] loop5: detected capacity change from 0 to 32768 [ 279.573247][T10052] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 279.594666][T10052] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 279.923302][ T5765] usb 7-1: device descriptor read/64, error -71 [ 280.193349][ T5765] usb 7-1: reset high-speed USB device number 5 using dummy_hcd [ 280.396330][ T5765] usb 7-1: unable to get BOS descriptor or descriptor too short [ 280.428050][ T5765] usb 7-1: device firmware changed [ 280.475172][ T5765] usb 7-1: USB disconnect, device number 5 [ 280.946359][T10079] loop5: detected capacity change from 0 to 32768 [ 281.000025][T10079] JBD2: Ignoring recovery information on journal [ 281.040514][T10081] loop0: detected capacity change from 0 to 32768 [ 281.099526][T10079] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 281.150033][T10086] loop6: detected capacity change from 0 to 16 [ 281.183071][T10081] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 281.197844][T10086] MTD: Attempt to mount non-MTD device "/dev/loop6" [ 281.236728][ T5854] udevd[5854]: incorrect cramfs checksum on /dev/loop6 [ 281.305051][ T7264] ocfs2: Unmounting device (7,5) on (node local) [ 281.340420][ T6027] udevd[6027]: incorrect cramfs checksum on /dev/loop6 [ 281.435033][T10081] XFS (loop0): Ending clean mount [ 281.850007][ T5784] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 282.508091][T10108] loop0: detected capacity change from 0 to 8 [ 282.763811][T10108] SQUASHFS error: Failed to read block 0x2fc: -5 [ 282.789200][T10108] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 282.820697][T10108] SQUASHFS error: Unable to read directory block [2fa:0] [ 283.146833][T10124] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1306'. [ 283.354939][T10128] netem: change failed [ 283.530207][T10132] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.543664][T10132] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.551108][T10132] bridge0: port 1(bridge_slave_0) entered forwarding state [ 283.567870][T10132] bridge_slave_0: left allmulticast mode [ 283.574700][T10132] bridge_slave_0: left promiscuous mode [ 283.587698][T10132] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.621396][T10132] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 283.667055][T10134] loop0: detected capacity change from 0 to 256 [ 283.696635][T10134] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 283.748022][T10120] loop5: detected capacity change from 0 to 40427 [ 283.769236][T10120] F2FS-fs (loop5): Small segment_count (9 < 1 * 24) [ 283.797951][T10120] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 283.911767][T10120] F2FS-fs (loop5): Found nat_bits in checkpoint [ 284.088920][T10120] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 284.106545][T10120] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 284.152779][ T5765] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 284.356884][ T5765] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 284.400160][ T5765] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 284.422598][ T7264] syz-executor: attempt to access beyond end of device [ 284.422598][ T7264] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 284.442965][ T5765] usb 7-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 284.452080][ T5765] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.480117][ T7264] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 284.514013][ T5765] usb 7-1: config 0 descriptor?? [ 284.957085][ T5765] cp2112 0003:10C4:EA90.0009: unknown main item tag 0x0 [ 284.984155][ T5765] cp2112 0003:10C4:EA90.0009: unknown main item tag 0x0 [ 284.991303][ T5765] cp2112 0003:10C4:EA90.0009: unknown main item tag 0x0 [ 285.011564][ T5765] cp2112 0003:10C4:EA90.0009: unknown main item tag 0x0 [ 285.021684][ T5765] cp2112 0003:10C4:EA90.0009: unknown main item tag 0x0 [ 285.052137][ T5765] cp2112 0003:10C4:EA90.0009: unknown main item tag 0x0 [ 285.092876][ T5765] cp2112 0003:10C4:EA90.0009: unknown main item tag 0x0 [ 285.119717][ T5765] cp2112 0003:10C4:EA90.0009: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.6-1/input0 [ 285.233089][ T5765] cp2112 0003:10C4:EA90.0009: Part Number: 0x00 Device Version: 0x00 [ 285.443135][ T5765] cp2112 0003:10C4:EA90.0009: error requesting SMBus config [ 285.471863][ T5765] cp2112: probe of 0003:10C4:EA90.0009 failed with error -71 [ 285.508215][ T5765] usb 7-1: USB disconnect, device number 6 [ 285.531578][T10164] loop3: detected capacity change from 0 to 8192 [ 285.561791][T10164] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 285.575179][T10164] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 285.584644][T10164] REISERFS (device loop3): using ordered data mode [ 285.591571][T10164] reiserfs: using flush barriers [ 285.599376][T10164] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 285.617587][T10164] REISERFS (device loop3): checking transaction log (loop3) [ 285.635423][T10164] REISERFS (device loop3): Using r5 hash to sort names [ 285.645044][T10164] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 286.112122][T10172] loop0: detected capacity change from 0 to 4096 [ 286.138386][T10172] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [ 286.190401][T10172] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 286.221072][T10172] ntfs3: loop0: Failed to initialize $Extend/$Reparse. [ 286.611623][T10178] (syz.6.1331,10178,1):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 286.838001][T10182] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1333'. [ 286.856372][T10186] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1330'. [ 287.645458][T10205] loop5: detected capacity change from 0 to 256 [ 287.713642][T10190] loop3: detected capacity change from 0 to 32768 [ 287.736642][T10190] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 9 [ 287.762005][T10205] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 287.896954][ T5783] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 9 [ 288.062243][T10184] loop6: detected capacity change from 0 to 40427 [ 288.133768][T10184] F2FS-fs (loop6): invalid crc value [ 288.173387][T10184] F2FS-fs (loop6): Found nat_bits in checkpoint [ 288.380647][T10184] F2FS-fs (loop6): Start checkpoint disabled! [ 288.415415][T10184] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 288.553265][ T9] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 288.772805][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 288.784714][ T9] usb 4-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 119, changing to 10 [ 288.812815][ T9] usb 4-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid wMaxPacketSize 0 [ 288.838898][T10227] loop5: detected capacity change from 0 to 2048 [ 288.842970][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 288.856963][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=c71e, bcdDevice= 0.00 [ 288.865473][T10228] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 288.896975][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.922404][ T1147] kworker/u4:9: attempt to access beyond end of device [ 288.922404][ T1147] loop6: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 288.937450][ T27] audit: type=1800 audit(1781142396.053:60): pid=10227 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1351" name="file2" dev="loop5" ino=16 res=0 errno=0 [ 288.938594][T10227] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 288.980363][ T9] usb 4-1: config 0 descriptor?? [ 289.005794][ T1147] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 289.031507][ T1147] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 289.046982][T10227] Remounting filesystem read-only [ 289.403881][ T9] logitech-djreceiver 0003:046D:C71E.000A: ignoring exceeding usage max [ 289.435138][ T9] logitech-djreceiver 0003:046D:C71E.000A: unknown main item tag 0x0 [ 289.453104][ T9] logitech-djreceiver 0003:046D:C71E.000A: unknown main item tag 0x0 [ 289.471542][ T9] logitech-djreceiver 0003:046D:C71E.000A: unknown main item tag 0x0 [ 289.474321][T10232] loop0: detected capacity change from 0 to 1024 [ 289.486789][ T9] logitech-djreceiver 0003:046D:C71E.000A: unknown main item tag 0x0 [ 289.515654][ T9] logitech-djreceiver 0003:046D:C71E.000A: unknown main item tag 0x0 [ 289.542762][ T9] logitech-djreceiver 0003:046D:C71E.000A: unknown main item tag 0x0 [ 289.593988][ T9] logitech-djreceiver 0003:046D:C71E.000A: unknown main item tag 0x0 [ 289.623395][ T9] logitech-djreceiver 0003:046D:C71E.000A: unknown main item tag 0x0 [ 289.636962][T10236] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1350'. [ 289.660099][ T9] logitech-djreceiver 0003:046D:C71E.000A: hidraw0: USB HID v0.04 Device [HID 046d:c71e] on usb-dummy_hcd.3-1/input0 [ 289.800678][ T9] usb 4-1: USB disconnect, device number 9 [ 289.862397][T10237] fido_id[10237]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 290.110917][T10250] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1358'. [ 290.523766][T10262] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1365'. [ 290.625079][T10268] loop6: detected capacity change from 0 to 16 [ 290.653683][T10268] MTD: Attempt to mount non-MTD device "/dev/loop6" [ 290.710374][ T5776] udevd[5776]: incorrect cramfs checksum on /dev/loop6 [ 290.767069][T10272] loop3: detected capacity change from 0 to 16 [ 290.795310][T10272] erofs: (device loop3): mounted with root inode @ nid 36. [ 290.892079][ T27] audit: type=1800 audit(1781142398.023:61): pid=10272 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1369" name="file1" dev="loop3" ino=86 res=0 errno=0 [ 291.898522][ T5777] Bluetooth: hci3: command 0x0405 tx timeout [ 292.435844][T10301] loop5: detected capacity change from 0 to 4096 [ 292.464546][T10284] loop6: detected capacity change from 0 to 32768 [ 292.472988][T10301] ntfs3: loop5: Different NTFS sector size (1024) and media sector size (512). [ 292.558758][T10301] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 292.742738][ T27] audit: type=1800 audit(1781142399.873:62): pid=10301 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1381" name="file1" dev="loop5" ino=30 res=0 errno=0 [ 293.079672][T10307] loop5: detected capacity change from 0 to 256 [ 293.117558][T10303] loop3: detected capacity change from 0 to 32768 [ 293.179733][T10303] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 293.306666][T10303] XFS (loop3): Ending clean mount [ 293.420049][T10303] XFS (loop3): User initiated shutdown received. [ 293.452327][T10303] XFS (loop3): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:497). Shutting down filesystem. [ 293.519134][T10303] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [ 293.651163][ T6638] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 294.560879][T10342] loop5: detected capacity change from 0 to 164 [ 294.619024][T10342] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 294.743623][T10320] loop0: detected capacity change from 0 to 32768 [ 294.864791][T10320] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 294.996494][T10359] loop5: detected capacity change from 0 to 512 [ 294.996937][T10320] XFS (loop0): Ending clean mount [ 295.011087][T10359] EXT4-fs: Ignoring removed oldalloc option [ 295.065217][T10359] EXT4-fs: Ignoring removed nomblk_io_submit option [ 295.115449][T10359] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 295.165574][ T5784] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 295.186661][T10359] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 295.200088][T10359] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e041e118, mo2=0002] [ 295.218840][T10359] System zones: 0-1, 15-15, 18-18, 34-34 [ 295.226152][T10359] EXT4-fs (loop5): orphan cleanup on readonly fs [ 295.232832][T10359] Quota error (device loop5): v2_read_header: Failed header read: expected=8 got=0 [ 295.245375][T10359] EXT4-fs warning (device loop5): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 295.260195][T10359] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 295.275652][T10359] EXT4-fs error (device loop5): ext4_validate_block_bitmap:439: comm syz.5.1399: bg 0: block 40: padding at end of block bitmap is not set [ 295.359523][T10359] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 295.384391][T10359] EXT4-fs (loop5): 1 truncate cleaned up [ 295.400661][T10359] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 295.571403][ T7264] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.021118][T10388] loop3: detected capacity change from 0 to 256 [ 296.032830][ T43] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 296.255040][ T43] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 296.292719][ T43] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 296.302551][ T43] usb 7-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 296.329708][ T43] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.356489][ T43] usb 7-1: config 0 descriptor?? [ 296.815721][ T43] hid-thrustmaster 0003:044F:B65D.000B: unknown main item tag 0x0 [ 296.824155][ T43] hid-thrustmaster 0003:044F:B65D.000B: unknown main item tag 0x0 [ 296.832621][ T43] hid-thrustmaster 0003:044F:B65D.000B: unknown main item tag 0x0 [ 296.845020][ T43] hid-thrustmaster 0003:044F:B65D.000B: unknown main item tag 0x0 [ 296.878710][ T43] hid-thrustmaster 0003:044F:B65D.000B: unknown main item tag 0x0 [ 296.887693][ T43] hid-thrustmaster 0003:044F:B65D.000B: unknown main item tag 0x0 [ 296.926042][ T43] hid-thrustmaster 0003:044F:B65D.000B: unknown main item tag 0x0 [ 296.937510][ T43] hid-thrustmaster 0003:044F:B65D.000B: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.6-1/input0 [ 296.969959][ T43] hid-thrustmaster 0003:044F:B65D.000B: Wrong number of endpoints? [ 297.132202][ C1] hid-thrustmaster 0003:044F:B65D.000B: Unknown wheel's model id 0x0, unable to proceed further with wheel init [ 297.350831][ T43] usb 7-1: USB disconnect, device number 7 [ 299.241179][T10454] loop3: detected capacity change from 0 to 1024 [ 299.640490][T10464] program syz.0.1442 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 299.707466][T10467] loop6: detected capacity change from 0 to 512 [ 299.757080][T10467] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 299.770545][T10467] ext4 filesystem being mounted at /140/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 299.855704][T10472] netlink: 'syz.0.1446': attribute type 10 has an invalid length. [ 299.896554][T10465] loop5: detected capacity change from 0 to 4096 [ 299.944520][T10465] ntfs3: loop5: Different NTFS sector size (4096) and media sector size (512). [ 300.002264][T10472] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 300.038274][T10465] ntfs3: loop5: ino=3, ntfs_set_state failed, -22. [ 300.038588][ T8411] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.052896][T10465] ntfs3: loop5: Failed to initialize $Extend/$Reparse. [ 300.094140][T10471] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 300.138339][ T4995] ntfs3: loop5: ino=3, ntfs3_write_inode failed, -22. [ 300.157240][T10465] ntfs3: loop5: ino=3, ntfs_set_state failed, -22. [ 300.169229][T10465] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 300.178795][T10465] ntfs3: loop5: ino=3, ntfs_set_state failed, -22. [ 300.192084][ T1147] ntfs3: loop5: ino=3, ntfs3_write_inode failed, -22. [ 300.422621][T10484] loop6: detected capacity change from 0 to 64 [ 300.456192][T10483] pim6reg0: tun_chr_ioctl cmd 1074025694 [ 300.521537][T10484] Trying to free block not in datazone [ 300.527767][T10484] Trying to free block not in datazone [ 300.533645][T10484] Trying to free block not in datazone [ 300.540407][T10484] Trying to free block not in datazone [ 300.546432][T10484] Trying to free block not in datazone [ 300.552355][T10484] Trying to free block not in datazone [ 300.558871][T10484] Trying to free block not in datazone [ 300.564676][T10484] Trying to free block not in datazone [ 300.571636][T10484] Trying to free block not in datazone [ 300.577686][T10484] Trying to free block not in datazone [ 300.609834][T10484] Trying to free block not in datazone [ 300.622168][T10484] Trying to free block not in datazone [ 300.638667][T10484] Trying to free block not in datazone [ 300.647375][T10484] Trying to free block not in datazone [ 300.653400][T10484] Trying to free block not in datazone [ 300.658962][T10484] Trying to free block not in datazone [ 300.667090][T10484] Trying to free block not in datazone [ 300.696419][T10484] Trying to free block not in datazone [ 300.712799][T10484] Trying to free block not in datazone [ 300.727840][T10484] Trying to free block not in datazone [ 300.744447][T10484] Trying to free block not in datazone [ 300.760246][T10484] Trying to free block not in datazone [ 300.766690][T10484] Trying to free block not in datazone [ 300.779551][T10484] Trying to free block not in datazone [ 300.785437][T10484] Trying to free block not in datazone [ 300.791025][T10484] Trying to free block not in datazone [ 300.814322][T10491] binder: 10490:10491 ioctl 40046205 0 returned -22 [ 300.820045][T10484] Trying to free block not in datazone [ 300.828047][T10484] Trying to free block not in datazone [ 300.834426][T10484] Trying to free block not in datazone [ 300.839930][T10484] Trying to free block not in datazone [ 300.848145][T10484] Trying to free block not in datazone [ 300.856696][T10484] Trying to free block not in datazone [ 300.878789][T10484] Trying to free block not in datazone [ 300.891639][T10493] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1453'. [ 300.898188][T10484] Trying to free block not in datazone [ 300.909368][T10484] Trying to free block not in datazone [ 300.915838][T10484] Trying to free block not in datazone [ 300.917650][T10493] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1453'. [ 300.921568][T10484] Trying to free block not in datazone [ 300.955687][T10484] Trying to free block not in datazone [ 300.961297][T10484] Trying to free block not in datazone [ 300.970778][T10484] Trying to free block not in datazone [ 300.980621][T10484] Trying to free block not in datazone [ 300.987824][T10484] Trying to free block not in datazone [ 300.997573][T10484] Trying to free block not in datazone [ 301.018617][T10484] Trying to free block not in datazone [ 301.024530][T10484] Trying to free block not in datazone [ 301.030293][T10484] Trying to free block not in datazone [ 301.041146][T10484] Trying to free block not in datazone [ 301.047053][T10484] Trying to free block not in datazone [ 301.065008][T10484] Trying to free block not in datazone [ 301.070618][T10484] Trying to free block not in datazone [ 301.082476][T10484] Trying to free block not in datazone [ 301.106505][T10484] Trying to free block not in datazone [ 301.112150][T10484] Trying to free block not in datazone [ 301.112163][T10484] Trying to free block not in datazone [ 301.112170][T10484] Trying to free block not in datazone [ 301.112178][T10484] Trying to free block not in datazone [ 301.112185][T10484] Trying to free block not in datazone [ 301.112193][T10484] Trying to free block not in datazone [ 301.146510][T10484] Trying to free block not in datazone [ 301.156836][T10484] Trying to free block not in datazone [ 301.162360][T10484] Trying to free block not in datazone [ 301.172408][T10484] Trying to free block not in datazone [ 301.192806][T10484] Trying to free block not in datazone [ 301.198657][T10484] Trying to free block not in datazone [ 301.204573][T10484] Trying to free block not in datazone [ 301.210365][T10484] Trying to free block not in datazone [ 301.216427][T10484] Trying to free block not in datazone [ 301.222161][T10484] Trying to free block not in datazone [ 301.228042][T10484] Trying to free block not in datazone [ 301.234142][T10484] Trying to free block not in datazone [ 301.239947][T10484] Trying to free block not in datazone [ 301.245908][T10484] Trying to free block not in datazone [ 301.251756][T10484] Trying to free block not in datazone [ 301.258756][T10484] Trying to free block not in datazone [ 301.269952][T10484] Trying to free block not in datazone [ 301.282325][T10484] Trying to free block not in datazone [ 301.288303][T10484] Trying to free block not in datazone [ 301.294369][T10484] Trying to free block not in datazone [ 301.300375][T10484] Trying to free block not in datazone [ 301.306547][T10484] Trying to free block not in datazone [ 301.312141][T10484] Trying to free block not in datazone [ 301.318269][T10484] Trying to free block not in datazone [ 301.324612][T10484] Trying to free block not in datazone [ 301.330199][T10484] Trying to free block not in datazone [ 301.336353][T10484] Trying to free block not in datazone [ 301.342028][T10484] Trying to free block not in datazone [ 301.348123][T10484] Trying to free block not in datazone [ 301.354120][T10484] Trying to free block not in datazone [ 301.361005][T10484] Trying to free block not in datazone [ 301.367055][T10484] Trying to free block not in datazone [ 301.372576][T10484] Trying to free block not in datazone [ 301.378712][T10484] Trying to free block not in datazone [ 301.384661][T10484] Trying to free block not in datazone [ 301.390156][T10484] Trying to free block not in datazone [ 301.396523][T10484] Trying to free block not in datazone [ 301.402016][T10484] Trying to free block not in datazone [ 301.408482][T10484] Trying to free block not in datazone [ 301.417823][T10484] Trying to free block not in datazone [ 301.440708][T10484] Trying to free block not in datazone [ 301.447012][T10484] Trying to free block not in datazone [ 301.452504][T10484] Trying to free block not in datazone [ 301.471931][T10484] Trying to free block not in datazone [ 301.478154][T10484] Trying to free block not in datazone [ 301.484019][T10484] Trying to free block not in datazone [ 301.486831][T10503] loop5: detected capacity change from 0 to 256 [ 301.489494][T10484] Trying to free block not in datazone [ 301.489505][T10484] Trying to free block not in datazone [ 301.489511][T10484] Trying to free block not in datazone [ 301.489518][T10484] Trying to free block not in datazone [ 301.489525][T10484] Trying to free block not in datazone [ 301.489532][T10484] Trying to free block not in datazone [ 301.489539][T10484] Trying to free block not in datazone [ 301.535679][T10484] Trying to free block not in datazone [ 301.541181][T10484] Trying to free block not in datazone [ 301.546758][T10484] Trying to free block not in datazone [ 301.552819][T10484] Trying to free block not in datazone [ 301.558327][T10484] Trying to free block not in datazone [ 301.583476][T10484] Trying to free block not in datazone [ 301.589514][T10484] Trying to free block not in datazone [ 301.595850][T10484] Trying to free block not in datazone [ 301.601697][T10484] Trying to free block not in datazone [ 301.608100][T10484] Trying to free block not in datazone [ 301.608885][T10503] FAT-fs (loop5): Directory bread(block 64) failed [ 301.622250][T10503] FAT-fs (loop5): Directory bread(block 65) failed [ 301.622433][T10484] Trying to free block not in datazone [ 301.634766][T10484] Trying to free block not in datazone [ 301.640376][T10484] Trying to free block not in datazone [ 301.646080][T10484] Trying to free block not in datazone [ 301.651696][T10484] Trying to free block not in datazone [ 301.657656][T10484] Trying to free block not in datazone [ 301.660170][T10503] FAT-fs (loop5): Directory bread(block 66) failed [ 301.679196][T10503] FAT-fs (loop5): Directory bread(block 67) failed [ 301.686096][T10484] Trying to free block not in datazone [ 301.697894][T10503] FAT-fs (loop5): Directory bread(block 68) failed [ 301.706190][T10484] Trying to free block not in datazone [ 301.718698][T10503] FAT-fs (loop5): Directory bread(block 69) failed [ 301.721327][T10484] Trying to free block not in datazone [ 301.727156][T10503] FAT-fs (loop5): Directory bread(block 70) failed [ 301.743007][T10503] FAT-fs (loop5): Directory bread(block 71) failed [ 301.747713][T10484] Trying to free block not in datazone [ 301.752085][T10503] FAT-fs (loop5): Directory bread(block 72) failed [ 301.762788][T10484] Trying to free block not in datazone [ 301.768569][T10484] Trying to free block not in datazone [ 301.774443][T10484] Trying to free block not in datazone [ 301.777893][T10503] FAT-fs (loop5): Directory bread(block 73) failed [ 301.781057][T10484] Trying to free block not in datazone [ 301.792811][T10484] Trying to free block not in datazone [ 301.809355][T10484] Trying to free block not in datazone [ 301.821799][T10484] Trying to free block not in datazone [ 301.842098][T10484] Trying to free block not in datazone [ 301.852730][T10484] Trying to free block not in datazone [ 301.863880][T10484] Trying to free block not in datazone [ 301.876422][T10484] Trying to free block not in datazone [ 301.892583][T10484] Trying to free block not in datazone [ 301.898644][T10484] Trying to free block not in datazone [ 301.907512][T10484] Trying to free block not in datazone [ 301.914908][T10484] Trying to free block not in datazone [ 301.920491][T10484] Trying to free block not in datazone [ 301.930887][T10484] Trying to free block not in datazone [ 301.940277][T10484] Trying to free block not in datazone [ 301.946039][T10484] Trying to free block not in datazone [ 301.956171][T10484] Trying to free block not in datazone [ 301.961694][T10484] Trying to free block not in datazone [ 301.968057][T10484] Trying to free block not in datazone [ 301.977792][T10484] Trying to free block not in datazone [ 301.989664][T10484] Trying to free block not in datazone [ 302.006543][T10484] Trying to free block not in datazone [ 302.027783][T10484] Trying to free block not in datazone [ 302.037367][T10484] Trying to free block not in datazone [ 302.053313][T10484] Trying to free block not in datazone [ 302.058847][T10484] Trying to free block not in datazone [ 302.066542][T10484] Trying to free block not in datazone [ 302.072489][T10484] Trying to free block not in datazone [ 302.082052][T10484] Trying to free block not in datazone [ 302.092178][T10484] Trying to free block not in datazone [ 302.101395][T10484] Trying to free block not in datazone [ 302.109537][T10484] Trying to free block not in datazone [ 302.131561][T10484] Trying to free block not in datazone [ 302.133420][T10511] program syz.5.1459 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 302.143374][T10484] Trying to free block not in datazone [ 302.151880][T10484] Trying to free block not in datazone [ 302.157914][T10484] Trying to free block not in datazone [ 302.163706][T10484] Trying to free block not in datazone [ 302.169271][T10484] Trying to free block not in datazone [ 302.181178][T10484] Trying to free block not in datazone [ 302.203514][T10484] Trying to free block not in datazone [ 302.209769][T10484] Trying to free block not in datazone [ 302.231965][T10484] Trying to free block not in datazone [ 302.239956][T10484] Trying to free block not in datazone [ 302.246233][T10484] Trying to free block not in datazone [ 302.251727][T10484] Trying to free block not in datazone [ 302.258425][T10484] Trying to free block not in datazone [ 302.264153][T10484] Trying to free block not in datazone [ 302.269645][T10484] Trying to free block not in datazone [ 302.275453][T10484] Trying to free block not in datazone [ 302.282235][T10484] Trying to free block not in datazone [ 302.288007][ T12] wlan1: Trigger new scan to find an IBSS to join [ 302.298188][T10484] Trying to free block not in datazone [ 302.304011][T10484] Trying to free block not in datazone [ 302.320866][T10484] Trying to free block not in datazone [ 302.340636][T10484] Trying to free block not in datazone [ 302.347694][T10484] Trying to free block not in datazone [ 302.361765][T10484] Trying to free block not in datazone [ 302.371665][T10484] Trying to free block not in datazone [ 302.377623][T10484] Trying to free block not in datazone [ 302.384615][T10484] Trying to free block not in datazone [ 302.390159][T10484] Trying to free block not in datazone [ 302.396106][T10484] Trying to free block not in datazone [ 302.401604][T10484] Trying to free block not in datazone [ 302.407555][T10484] Trying to free block not in datazone [ 302.413171][ T23] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 302.432109][T10484] Trying to free block not in datazone [ 302.445547][T10484] Trying to free block not in datazone [ 302.451086][T10484] Trying to free block not in datazone [ 302.460680][T10484] Trying to free block not in datazone [ 302.466604][T10484] Trying to free block not in datazone [ 302.472114][T10484] Trying to free block not in datazone [ 302.484726][T10484] Trying to free block not in datazone [ 302.490242][T10484] Trying to free block not in datazone [ 302.496331][T10484] Trying to free block not in datazone [ 302.501866][T10484] Trying to free block not in datazone [ 302.507917][T10484] Trying to free block not in datazone [ 302.513809][T10484] Trying to free block not in datazone [ 302.519311][T10484] Trying to free block not in datazone [ 302.533761][T10484] Trying to free block not in datazone [ 302.539285][T10484] Trying to free block not in datazone [ 302.545349][T10484] Trying to free block not in datazone [ 302.550847][T10484] Trying to free block not in datazone [ 302.562756][T10484] Trying to free block not in datazone [ 302.568259][T10484] Trying to free block not in datazone [ 302.577721][T10484] Trying to free block not in datazone [ 302.583932][T10484] Trying to free block not in datazone [ 302.592873][ T23] usb 4-1: Using ep0 maxpacket: 32 [ 302.602724][T10484] Trying to free block not in datazone [ 302.605907][ T23] usb 4-1: config 0 interface 0 has no altsetting 0 [ 302.608225][T10484] Trying to free block not in datazone [ 302.608238][T10484] Trying to free block not in datazone [ 302.608245][T10484] Trying to free block not in datazone [ 302.608252][T10484] Trying to free block not in datazone [ 302.608259][T10484] Trying to free block not in datazone [ 302.608266][T10484] Trying to free block not in datazone [ 302.608273][T10484] Trying to free block not in datazone [ 302.608280][T10484] Trying to free block not in datazone [ 302.608288][T10484] Trying to free block not in datazone [ 302.608295][T10484] Trying to free block not in datazone [ 302.608303][T10484] Trying to free block not in datazone [ 302.631449][ T23] usb 4-1: New USB device found, idVendor=0e41, idProduct=4159, bcdDevice=b8.da [ 302.650899][T10484] Trying to free block not in datazone [ 302.692889][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.732790][ T23] usb 4-1: Product: syz [ 302.737080][ T23] usb 4-1: Manufacturer: syz [ 302.738659][T10484] Trying to free block not in datazone [ 302.741693][ T23] usb 4-1: SerialNumber: syz [ 302.759417][ T23] usb 4-1: config 0 descriptor?? [ 302.791553][T10484] Trying to free block not in datazone [ 302.800252][T10525] loop5: detected capacity change from 0 to 512 [ 302.810802][T10484] Trying to free block not in datazone [ 302.822857][T10484] Trying to free block not in datazone [ 302.835503][T10484] Trying to free block not in datazone [ 302.854471][T10484] Trying to free block not in datazone [ 302.859997][T10484] Trying to free block not in datazone [ 302.867089][T10525] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 302.887678][T10484] Trying to free block not in datazone [ 302.894054][T10484] Trying to free block not in datazone [ 302.899757][T10484] Trying to free block not in datazone [ 302.907593][T10484] Trying to free block not in datazone [ 302.913300][T10484] Trying to free block not in datazone [ 302.919781][T10484] Trying to free block not in datazone [ 302.925527][T10484] Trying to free block not in datazone [ 302.931159][T10484] Trying to free block not in datazone [ 302.936916][T10484] Trying to free block not in datazone [ 302.942519][T10484] Trying to free block not in datazone [ 302.952755][T10484] Trying to free block not in datazone [ 302.958370][T10484] Trying to free block not in datazone [ 302.966930][T10484] Trying to free block not in datazone [ 302.972485][T10484] Trying to free block not in datazone [ 302.978235][T10484] Trying to free block not in datazone [ 302.992882][T10484] Trying to free block not in datazone [ 302.998613][T10484] Trying to free block not in datazone [ 303.013031][T10484] Trying to free block not in datazone [ 303.022162][ T23] snd_usb_podhd 4-1:0.0: Line 6 POD HD500X found [ 303.034889][T10484] Trying to free block not in datazone [ 303.040925][ T23] snd_usb_podhd 4-1:0.0: set_interface failed [ 303.048125][ T23] snd_usb_podhd 4-1:0.0: Line 6 POD HD500X now disconnected [ 303.071228][ T7264] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 303.072861][ T23] snd_usb_podhd: probe of 4-1:0.0 failed with error -71 [ 303.140200][ T23] usb 4-1: USB disconnect, device number 10 [ 303.335284][T10534] loop6: detected capacity change from 0 to 2048 [ 303.384851][T10534] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 303.550339][T10540] netlink: 'syz.6.1472': attribute type 10 has an invalid length. [ 303.558960][T10540] netlink: 152 bytes leftover after parsing attributes in process `syz.6.1472'. [ 303.753088][ T23] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 304.291282][T10548] loop0: detected capacity change from 0 to 32768 [ 304.336116][T10548] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 304.344921][T10548] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 304.420756][T10548] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 304.442939][ T23] usb 4-1: Using ep0 maxpacket: 32 [ 304.461749][ T43] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 304.484321][ T23] usb 4-1: config 0 interface 0 has no altsetting 0 [ 304.499099][ T43] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 304.512878][ T23] usb 4-1: string descriptor 0 read error: -22 [ 304.529845][ T23] usb 4-1: New USB device found, idVendor=0e41, idProduct=4159, bcdDevice=b8.da [ 304.570600][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.616424][ T23] usb 4-1: config 0 descriptor?? [ 304.629606][ T23] snd_usb_podhd 4-1:0.0: Line 6 POD HD500X found [ 304.710729][ T43] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 211ms [ 304.738198][ T43] gfs2: fsid=syz:syz.0: jid=0: Done [ 304.773830][T10548] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 304.908542][ T23] snd_usb_podhd 4-1:0.0: endpoint not available, using fallback values [ 304.932975][ T23] snd_usb_podhd 4-1:0.0: invalid control EP [ 304.938939][ T23] snd_usb_podhd 4-1:0.0: cannot start listening: -22 [ 304.946844][ T23] snd_usb_podhd 4-1:0.0: Line 6 POD HD500X now disconnected [ 304.956451][ T23] snd_usb_podhd: probe of 4-1:0.0 failed with error -22 [ 305.195666][ T5765] usb 4-1: USB disconnect, device number 11 [ 305.433721][T10561] netlink: 'syz.5.1480': attribute type 11 has an invalid length. [ 305.441881][T10561] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1480'. [ 306.265538][T10585] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1490'. [ 306.559522][T10589] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1492'. [ 306.824334][T10574] loop0: detected capacity change from 0 to 32768 [ 306.909584][T10574] JBD2: Ignoring recovery information on journal [ 307.021368][T10580] loop6: detected capacity change from 0 to 32768 [ 307.023928][T10574] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 307.068378][T10601] loop3: detected capacity change from 0 to 1024 [ 307.084134][T10601] EXT4-fs: Ignoring removed bh option [ 307.149899][T10601] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 307.230383][T10601] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1497'. [ 307.250198][ T1114] wlan1: Trigger new scan to find an IBSS to join [ 307.406665][ T6638] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 307.594678][ T5784] ocfs2: Unmounting device (7,0) on (node local) [ 308.070057][T10614] loop0: detected capacity change from 0 to 512 [ 308.172863][T10614] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 308.286379][ T1114] wlan1: Creating new IBSS network, BSSID b2:f9:55:60:1b:d7 [ 308.427522][ T5784] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 308.430133][T10607] loop6: detected capacity change from 0 to 32768 [ 308.555934][T10607] XFS (loop6): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 308.806565][T10607] XFS (loop6): Ending clean mount [ 309.135984][ T27] audit: type=1800 audit(1781142416.223:63): pid=10607 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1498" name="file1" dev="loop6" ino=6150 res=0 errno=0 [ 309.322529][ T8411] XFS (loop6): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 310.039288][T10637] loop5: detected capacity change from 0 to 131072 [ 310.060285][T10637] F2FS-fs (loop5): Segment count (31) mismatch with total segments from devices (0) [ 310.070075][T10637] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 310.083068][T10637] F2FS-fs (loop5): invalid crc value [ 310.090523][T10621] loop3: detected capacity change from 0 to 32768 [ 310.092405][T10645] loop0: detected capacity change from 0 to 1024 [ 310.154299][T10637] F2FS-fs (loop5): Found nat_bits in checkpoint [ 310.166657][T10645] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 310.226693][T10637] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 310.233916][T10637] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 310.237481][T10621] JBD2: Ignoring recovery information on journal [ 310.290087][T10637] F2FS-fs (loop5): checksum invalid, nid = 4, ino_of_node = 4, efdbe231 vs. 15bb5891 [ 310.410291][T10621] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 310.664531][T10621] (syz.3.1503,10621,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len % 4 != 0 - offset=312, inode=13845347915746889, rec_len=25793, name_len=214 [ 310.955392][ T6638] ocfs2: Unmounting device (7,3) on (node local) [ 311.013327][T10664] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1518'. [ 311.331841][T10670] loop0: detected capacity change from 0 to 512 [ 311.379555][T10670] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 311.417062][T10670] EXT4-fs (loop0): invalid journal inode [ 311.431285][T10670] EXT4-fs (loop0): can't get journal size [ 311.510456][T10670] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e016c118, mo2=0002] [ 311.553646][T10670] System zones: 1-12, 13-13 [ 311.577478][T10670] EXT4-fs (loop0): 1 truncate cleaned up [ 311.586405][T10670] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 311.623693][T10679] bridge0: entered promiscuous mode [ 311.629284][T10679] macvlan2: entered promiscuous mode [ 311.758982][ T27] audit: type=1800 audit(1781142418.893:64): pid=10670 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1521" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 312.049377][ T5784] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 312.226386][T10688] loop3: detected capacity change from 0 to 2048 [ 312.275830][T10688] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 312.553478][T10698] loop6: detected capacity change from 0 to 736 [ 312.639407][T10702] batadv_slave_0: entered promiscuous mode [ 312.685072][T10702] batman_adv: batadv0: Adding interface: macvtap1 [ 312.733033][T10702] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 312.822887][T10702] batman_adv: batadv0: Interface activated: macvtap1 [ 313.572798][ T9] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 313.793496][ T9] usb 6-1: config 0 has an invalid interface number: 5 but max is 0 [ 313.832135][ T9] usb 6-1: config 0 has no interface number 0 [ 313.853568][ T9] usb 6-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 313.877195][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.909630][ T9] usb 6-1: config 0 descriptor?? [ 313.935302][ T9] ums-realtek 6-1:0.5: USB Mass Storage device detected [ 314.060653][T10720] loop0: detected capacity change from 0 to 32768 [ 314.100102][ T27] audit: type=1800 audit(1781142421.233:65): pid=10720 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1541" name="file2" dev="loop0" ino=5 res=0 errno=0 [ 314.209545][T10720] ERROR: (device loop0): dbAlloc: the hint is outside the map [ 314.209545][T10720] [ 314.223363][ T23] usb 6-1: USB disconnect, device number 11 [ 314.281090][T10720] ERROR: (device loop0): remounting filesystem as read-only [ 314.302331][T10720] syz.0.1541: attempt to access beyond end of device [ 314.302331][T10720] loop0: rw=2049, sector=2621792, nr_sectors = 8 limit=32768 [ 314.350022][T10742] loop6: detected capacity change from 0 to 1764 [ 314.383335][ T5784] ------------[ cut here ]------------ [ 314.388869][ T5784] kernel BUG at fs/jfs/inode.c:175! [ 314.413805][ T5784] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 314.419952][ T5784] CPU: 1 PID: 5784 Comm: syz-executor Not tainted syzkaller #0 [ 314.427531][ T5784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 314.437624][ T5784] RIP: 0010:jfs_evict_inode+0x431/0x440 [ 314.443226][ T5784] Code: df fe e9 e0 fd ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 23 fe ff ff 4c 89 f7 e8 79 84 df fe e9 16 fe ff ff e8 6f 44 87 fe <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 f3 0f 1e fa 41 57 41 [ 314.462875][ T5784] RSP: 0018:ffffc9000446fac0 EFLAGS: 00010293 [ 314.468986][ T5784] RAX: ffffffff82ffe721 RBX: ffff88805b7844f0 RCX: ffff88802b908000 [ 314.476993][ T5784] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88805b7844f0 [ 314.484995][ T5784] RBP: 0000000000000002 R08: ffffffff911cd64f R09: 1ffffffff2239ac9 [ 314.492979][ T5784] R10: dffffc0000000000 R11: fffffbfff2239aca R12: dffffc0000000000 [ 314.500956][ T5784] R13: dffffc0000000000 R14: ffff88805b784178 R15: ffff88805b784528 [ 314.508941][ T5784] FS: 0000555591bf2500(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 314.517921][ T5784] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 314.524519][ T5784] CR2: 00007fb7b1f03ff8 CR3: 000000005f99d000 CR4: 00000000003506e0 [ 314.532503][ T5784] Call Trace: [ 314.535796][ T5784] [ 314.538732][ T5784] ? evict+0x4c4/0x8d0 [ 314.542859][ T5784] ? jfs_write_inode+0x220/0x220 [ 314.547809][ T5784] evict+0x4ca/0x8d0 [ 314.551713][ T5784] ? proc_nr_inodes+0x230/0x230 [ 314.556571][ T5784] ? do_raw_spin_unlock+0x121/0x230 [ 314.561810][ T5784] ? do_raw_spin_unlock+0x121/0x230 [ 314.567123][ T5784] evict_inodes+0x606/0x6a0 [ 314.571636][ T5784] ? clear_inode+0x150/0x150 [ 314.576237][ T5784] generic_shutdown_super+0x97/0x2b0 [ 314.581650][ T5784] kill_block_super+0x44/0x90 [ 314.586395][ T5784] deactivate_locked_super+0x97/0x100 [ 314.591774][ T5784] cleanup_mnt+0x43b/0x4d0 [ 314.596198][ T5784] task_work_run+0x1d4/0x260 [ 314.600828][ T5784] ? task_work_cancel+0x220/0x220 [ 314.605863][ T5784] ? exit_to_user_mode_loop+0x3b/0x110 [ 314.611358][ T5784] exit_to_user_mode_loop+0xe6/0x110 [ 314.616739][ T5784] exit_to_user_mode_prepare+0xee/0x180 [ 314.622293][ T5784] syscall_exit_to_user_mode+0x1a/0x50 [ 314.627815][ T5784] do_syscall_64+0x61/0xb0 [ 314.632332][ T5784] ? clear_bhb_loop+0x40/0x90 [ 314.637046][ T5784] ? clear_bhb_loop+0x40/0x90 [ 314.641728][ T5784] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 314.647651][ T5784] RIP: 0033:0x7fb32d39e097 [ 314.652092][ T5784] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 314.671709][ T5784] RSP: 002b:00007fff37e417e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 314.680216][ T5784] RAX: 0000000000000000 RBX: 00007fb32d4321ca RCX: 00007fb32d39e097 [ 314.688194][ T5784] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff37e418a0 [ 314.696172][ T5784] RBP: 00007fff37e418a0 R08: 00007fff37e428a0 R09: 00000000ffffffff [ 314.704165][ T5784] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff37e42930 [ 314.712146][ T5784] R13: 00007fb32d4321ca R14: 000000000004cb91 R15: 00007fff37e42970 [ 314.720132][ T5784] [ 314.723160][ T5784] Modules linked in: [ 314.762680][ T5784] ---[ end trace 0000000000000000 ]--- [ 314.768431][ T5784] RIP: 0010:jfs_evict_inode+0x431/0x440 [ 314.783025][ T5784] Code: df fe e9 e0 fd ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 23 fe ff ff 4c 89 f7 e8 79 84 df fe e9 16 fe ff ff e8 6f 44 87 fe <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 f3 0f 1e fa 41 57 41 [ 314.804492][ T5784] RSP: 0018:ffffc9000446fac0 EFLAGS: 00010293 [ 314.810617][ T5784] RAX: ffffffff82ffe721 RBX: ffff88805b7844f0 RCX: ffff88802b908000 [ 314.819062][ T5784] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88805b7844f0 [ 314.828591][ T5784] RBP: 0000000000000002 R08: ffffffff911cd64f R09: 1ffffffff2239ac9 [ 314.841113][ T5784] R10: dffffc0000000000 R11: fffffbfff2239aca R12: dffffc0000000000 [ 314.851215][ T5784] R13: dffffc0000000000 R14: ffff88805b784178 R15: ffff88805b784528 [ 314.859541][ T5784] FS: 0000555591bf2500(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 314.868655][ T5784] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 314.877241][ T5784] CR2: 0000001b32e1dff8 CR3: 000000005f99d000 CR4: 00000000003506f0 [ 314.885405][ T5784] Kernel panic - not syncing: Fatal exception [ 314.891735][ T5784] Kernel Offset: disabled [ 314.896080][ T5784] Rebooting in 86400 seconds..