last executing test programs: 1m20.469027599s ago: executing program 3 (id=111): r0 = socket$kcm(0xa, 0x2, 0x0) r1 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'fo\x00', 0x1, 0x9d3f, 0x6a}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x10000, 0xcd}}, 0x44) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 1m20.355938795s ago: executing program 3 (id=112): syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x804cd8, &(0x7f00000000c0)=ANY=[@ANYRES8=0x0, @ANYRES32=0x0], 0x3, 0x232, &(0x7f0000000500)="$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") open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=@FILEID_INO32_GEN={0x8, 0x1, {0x4, 0x4}}, 0x300) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) lseek(r0, 0x2, 0x0) getdents64(r0, 0x0, 0x22) 1m20.159191446s ago: executing program 3 (id=113): r0 = userfaultfd(0x80801) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, r0, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f00006c0000/0x1000)=nil, 0x800000}) 1m19.890134809s ago: executing program 3 (id=114): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@noauto_da_alloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@dioread_lock}, {@norecovery}, {@discard}, {@lazytime}, {@noload}, {@usrquota}, {@noauto_da_alloc}]}, 0xfe, 0x54d, &(0x7f0000000400)="$eJzs3d9rW1UcAPDvTdv96nQdjKE+SGEPTubStfXHBB/mo+hwoO8ztHdlNFlGk461Dtwe3IsvMgQRB+If4LuPw3/Av2KggyGj6IMvkZvedNmatFmXrZn5fOC259x703NPzv2enpOTkACG1mT2oxDxakR8m0Qcajs2GvnByfXz1h5cm8u2JBqNz/5KIsn3tc5P8t/jeeaViPjt64gThc3l1lZWF0vlcrqU56fqlctTtZXVkxcrpYV0Ib00Mzt7+p3Zmfffe7dvdX3z3D8/fHrno9PfHFv7/pd7h28lcSYO5sfa6/EUrrdnJmMyf07G4sxjJ073obBBkuz2BbAjI3mcj0XWBxyKkTzqgf+/ryKiAQypRPzDkGqNA1pz+z7Ng18Y9z9cnwBtrv/o+msjsa85NzqwljwyM8rmuxN9KD8r49c/b9/Ktujf6xAA27p+IyJOjY5u7v+SvP/buVM9nPN4Gfo/eH7uZOOftzqNfwob45/oMP4Z7xC7O7F9/Bfu9aGYrrLx3wcdx78bi1YTI3nupeaYbyy5cLGcZn3byxFxPMb2Zvmt1nNOr91tdDvWPv7Ltqz81lgwv457o3sffcx8qV56mjq3u38j4rWO499ko/2TDu2fPR/neizjaHr79W7Htq//s9X4OeKNju3/cEUr2Xp9cqp5P0y17orN/r559Pdu5e92/bP2P7B1/SeS9vXa2pOX8dO+f9Nux3Z6/+9JPm+m9+T7rpbq9aXpiD3JJ5v3zzx8bCvfOj+r//FjW/d/ne7//RHxRY/1v3nkZtdTB6H955+o/Z88cffjL3/sVn5v7f92M3U839NL/9frBT7NcwcAAAAAAACDphARByMpFDfShUKxuP7+jiNxoFCu1uonLlSXL81H87OyEzFWaK10j7e9H2I6fz9sKz/zWH42Ig5HxHcj+5v54ly1PL/blQcAAAAAAAAAAAAAAAAAAIABMd7l8/+ZP0Z2++qAZ85XfsPw2jb++/FNT8BA8v8fhpf4h+El/mF4iX8YXuIfhpf4h+El/mF4iX8AAAAAAAAAAAAAAAAAAAAAAAAAAADoq3Nnz2ZbY+3BtbksP39lZXmxeuXkfFpbLFaW54pz1aXLxYVqdaGcFueqle3+XrlavTw9E8tXp+pprT5VW1k9X6kuX6qfv1gpLaTn07HnUisAAAAAAAAAAAAAAAAAAAB4sdRWVhdL5XK6JCGxo8ToYFyGRJ8Tu90zAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBD/wUAAP//y284sw==") mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x20083, 0x2) 1m19.420760664s ago: executing program 3 (id=116): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'geneve1\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x1a, r1, 0x1, 0xf, 0x6, @multicast}, 0x14) sendto$packet(r0, &(0x7f0000000180)="0b0312002e1264000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x8100, r1}, 0x14) 1m18.234918197s ago: executing program 3 (id=123): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870fd00090582020002"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xa8, &(0x7f0000000000)=ANY=[@ANYBLOB="1b1b", @ANYRES8=r0]) 1m17.560419722s ago: executing program 32 (id=123): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870fd00090582020002"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xa8, &(0x7f0000000000)=ANY=[@ANYBLOB="1b1b", @ANYRES8=r0]) 11.749612502s ago: executing program 0 (id=440): symlinkat(&(0x7f0000000400)='./file1/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, 0x0) r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000e0ff00000000000000bd0000000000000000000000e4ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000067ff0000000000000005"], 0x310) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000640)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000001"], 0x110) 11.377889351s ago: executing program 0 (id=443): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0207e80702"], 0x10}}, 0x40044) r1 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000600)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@local, 0x0, 0x8, 0x4e23, 0x0, 0x2}, {0x0, 0x0, 0x8db6, 0x2, 0xfffffffffffffff6, 0x2000000, 0x1, 0xfffffffffffffffd}, {0x200000001ff, 0x800000000000, 0x1, 0xffffffffffffff7f}, 0x1, 0x0, 0x1, 0x0, 0x3}, {{@in6=@loopback, 0xffffffff, 0x2b}, 0x2, @in=@loopback, 0x3504, 0x4, 0x0, 0x0, 0xffffffff, 0x6, 0x4}}, 0xe8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}}, 0x1c) 10.24202688s ago: executing program 0 (id=450): syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000001300)={[{@nouid32}, {@nodioread_nolock}, {@noquota}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x9}}, {@commit}, {@usrquota}, {@bh}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x0) pwritev2(r0, &(0x7f0000000040)=[{&(0x7f0000000200)="df", 0x1}], 0x1, 0x47ffffe, 0xffffffff, 0x0) write$P9_RLERRORu(r0, &(0x7f0000000080)={0x13, 0x7, 0x2, {{0x6, 'commit'}, 0x8}}, 0x13) truncate(&(0x7f0000000300)='./file1\x00', 0x591) 9.757506286s ago: executing program 0 (id=454): syz_mount_image$exfat(0x0, &(0x7f0000000300)='./bus\x00', 0x448c, 0x0, 0x0, 0x0, &(0x7f0000000300)) syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./bus/file0\x00', 0x80008, 0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) rename(&(0x7f0000000100)='./bus/file0\x00', &(0x7f0000000180)='./mnt\x00') 9.329823989s ago: executing program 0 (id=458): r0 = epoll_create1(0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(0x4) r2 = dup(r0) mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESDEC=r1]) 8.889714932s ago: executing program 0 (id=460): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r1, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r0, 0x3ba0, &(0x7f0000001200)={0x48, 0x8, r2, 0x0, 0xffff, 0x1, &(0x7f0000000480)='|', 0x4}) 8.36111199s ago: executing program 33 (id=460): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r1, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r0, 0x3ba0, &(0x7f0000001200)={0x48, 0x8, r2, 0x0, 0xffff, 0x1, &(0x7f0000000480)='|', 0x4}) 4.669327374s ago: executing program 4 (id=492): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x806, 0xf6, 0x0, 0xe0}]}, 0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000180)={r2}, &(0x7f00000001c0)=0x8) 4.622582827s ago: executing program 4 (id=494): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000080)={r2, 0x7}, &(0x7f0000000140)=0x8) 3.700600275s ago: executing program 5 (id=462): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0) ftruncate(r0, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r2, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r1, r0, 0x0, 0x578410eb) 3.574054182s ago: executing program 4 (id=498): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000040)=0x10000, 0x4) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000200)=0x7, 0x4) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000000100)=""/92, &(0x7f00000001c0)=0x11) 3.492747297s ago: executing program 4 (id=500): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d02, 0xec000000, 0xca}]}) 3.198959042s ago: executing program 4 (id=502): r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x40045b0a, &(0x7f0000000040)) 2.302343589s ago: executing program 5 (id=510): syz_mount_image$jfs(&(0x7f0000000080), &(0x7f0000000140)='./file0\x00', 0x20108c0, &(0x7f00000008c0)=ANY=[@ANYBLOB="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", @ANYRES8, @ANYRES32, @ANYBLOB="a783c89422e31c30d6bf831c4426922089e2b8944eda733c7bed9440aee9df8636110f251ff75794e847bbad8f5979c9d55434d5344bc268e61948fc8a8ffe2d27c14972f79c1c977c01b4a8a4e35f14d116c59482add0c31e922b29fb4c24948818edc636cced878ca31c24c6a3a31bcdca27864f7611d3163d21939c3c5afb70", @ANYBLOB="013ced044bdd1d80c6a59bca5c1f9d57c0bf983de420f461a7414616093c243234af9243259143a1df24ac0219d7c378a65b310c8b4a0a5be52831340548247ed220c3c9fbc83337fa0b63b0a54e73ff5f9b6625b0faa1fb755e1af638d96ec92d0802aa01c49d12703c6452c7b0edad1ecfdc926cf6ee88d55c25510952b43a773f9cd35d70e03d69b2af2ead1c39ef1c55be4e5afc92674e57e227951a9706cec7b734dec89e0ed0de44f23a3de29cee4de42e117c71af53f785eb2feb89"], 0xfa, 0x61ee, &(0x7f0000012cc0)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000021c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000080)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x80000, 0x0) getdents64(r0, 0x0, 0x0) 1.492267321s ago: executing program 5 (id=519): r0 = fsopen(&(0x7f0000000180)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) unshare(0x22020600) r1 = fsmount(r0, 0x0, 0x0) listen(r1, 0xfffffffc) 1.100707862s ago: executing program 1 (id=523): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000080)={@local, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) 946.50645ms ago: executing program 2 (id=525): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40040cf}, 0x104) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x20008000) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x44, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x8, 0x4, '\x00\x00\x00\x00'}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x44}}, 0x0) 862.042564ms ago: executing program 1 (id=526): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1, 0x9}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000000)=@sack_info={r2, 0xd, 0x7}, 0xc) 804.719367ms ago: executing program 2 (id=527): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x2) 750.245921ms ago: executing program 1 (id=528): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000040)=0x1e6e, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000000080)=[{{&(0x7f0000000000)={0x2, 0x4e1e, @broadcast}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @dev={0xac, 0x14, 0x14, 0x3b}, @initdev={0xac, 0x1e, 0x1, 0x0}}}}], 0x20}}], 0x1, 0x0) 672.300845ms ago: executing program 2 (id=529): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000200)={0x15, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f0000000280)={0xc, r1}) ioctl$IOMMU_VFIO_SET_IOMMU(r0, 0x3b66, 0x1) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, &(0x7f00000002c0)={0x18, 0x0, 0x9, 0x4800000000000000}) 618.020267ms ago: executing program 1 (id=530): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x38, 0x6d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROP_LIST={0x18, 0x34, 0x0, 0x1, [{0x14, 0x35, 'ip6_vti0\x00'}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 579.841689ms ago: executing program 2 (id=531): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x143280, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x2710, 0x3, 0x0, 0x1000, &(0x7f0000b07000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4048aecb, &(0x7f0000000000)) 536.870072ms ago: executing program 1 (id=532): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='veth1_to_team\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x804, &(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000100)=0x3ff, 0x4) recvmmsg(r0, &(0x7f0000001080)=[{{0x0, 0x0, 0x0}, 0x8a}], 0x1, 0x22, 0x0) 413.667328ms ago: executing program 1 (id=533): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='memory=low,background_gc=off,noquota,inline_dentry,data_flush,disable_roll_forward,noinline_xattr,discard,checkpoint=disable,user_xattr,atgc,resuid=', @ANYRESHEX=0x0, @ANYBLOB="2c6a71666d743d76667376312c7573726a71756f74613d2d29242d2e25272a2c2c00a40988e362019a69db5cb2a8b125934e5652c7c1af7aa1b29a3326b2ca0000000000"], 0xff, 0x5512, &(0x7f00000079c0)="$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") r1 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') sendfile(r1, r1, 0x0, 0x80000000) 379.63899ms ago: executing program 2 (id=534): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000480)='./file2\x00', 0x0, &(0x7f0000000540), 0x1, 0x7a1, &(0x7f0000000f80)="$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") mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x33ed0000) r0 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x0) getdents64(r0, &(0x7f0000000fc0)=""/224, 0xe0) getdents64(r0, &(0x7f0000000fc0)=""/224, 0xe0) 161.847402ms ago: executing program 2 (id=535): setuid(0xee01) r0 = semget$private(0x0, 0x4, 0x96) semop(r0, &(0x7f0000000180)=[{0x0, 0x203}, {}], 0x2) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f00000001c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x108}, 0x476d, 0xffffffffffffffd8, 0x0, 0x0, 0x0, 0x0, 0xb}) semctl$GETALL(r0, 0x0, 0xd, &(0x7f0000000000)=""/80) 0s ago: executing program 4 (id=536): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x10d2, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newlink={0x34, 0x10, 0x401, 0x70bd29, 0x0, {0x0, 0x3, 0x0, 0x0, 0x0, 0x400}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) kernel console output (not intermixed with test programs): val = 5 seconds, CP frequency < 30 seconds [ 81.293910][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.302422][ T5032] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.322850][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.344430][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.375203][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.395246][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.411666][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.423812][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.453789][ T5774] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.484570][ T5774] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.493327][ T5774] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.524566][ T5774] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.621614][ T5838] syz.1.6 uses obsolete (PF_INET,SOCK_PACKET) [ 81.644132][ T2966] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.665035][ T2966] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.802150][ T1117] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.832405][ T5032] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.833568][ T1117] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.870208][ T5032] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.983001][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.018770][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.094964][ T5771] Bluetooth: hci0: command tx timeout [ 82.103556][ T5032] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.137192][ T5032] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.265695][ T5771] Bluetooth: hci3: command tx timeout [ 82.334754][ T5771] Bluetooth: hci1: command tx timeout [ 82.346367][ T5771] Bluetooth: hci2: command tx timeout [ 82.391571][ T5854] loop3: detected capacity change from 0 to 512 [ 82.535968][ T5854] FAT-fs (loop3): unable to read block(16384) for building NFS inode [ 82.682489][ T5860] loop0: detected capacity change from 0 to 512 [ 82.730336][ T5860] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 82.792134][ T5860] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 82.871346][ T5860] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 82.950589][ T5860] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 82.965524][ T5860] EXT4-fs (loop0): 1 truncate cleaned up [ 82.972685][ T5860] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.991139][ T5865] loop3: detected capacity change from 0 to 2048 [ 82.999190][ T5865] ======================================================= [ 82.999190][ T5865] WARNING: The mand mount option has been deprecated and [ 82.999190][ T5865] and is ignored by this kernel. Remove the mand [ 82.999190][ T5865] option from the mount to silence this warning. [ 82.999190][ T5865] ======================================================= [ 83.046637][ T5869] syzkaller1: entered promiscuous mode [ 83.052165][ T5869] syzkaller1: entered allmulticast mode [ 83.079437][ T5865] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 83.115113][ T5865] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 83.210942][ T28] audit: type=1800 audit(1777334613.691:2): pid=5865 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.13" name="file1" dev="loop3" ino=1346 res=0 errno=0 [ 83.223944][ T5778] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.457169][ T5873] loop0: detected capacity change from 0 to 4096 [ 83.657990][ T5873] EXT4-fs (loop0): Test dummy encryption mode enabled [ 83.689732][ T5873] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.800404][ T28] audit: type=1800 audit(1777334614.281:3): pid=5873 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.15" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 83.954135][ T5778] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.181267][ T5083] Bluetooth: hci0: command tx timeout [ 84.335509][ T5083] Bluetooth: hci3: command tx timeout [ 84.414934][ T5083] Bluetooth: hci2: command tx timeout [ 84.416272][ T5771] Bluetooth: hci1: command tx timeout [ 84.440843][ T5902] loop0: detected capacity change from 0 to 2048 [ 84.469682][ T5902] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 84.515474][ T5902] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 84.523174][ T5902] UDF-fs: Scanning with blocksize 512 failed [ 84.589894][ T5902] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 84.760554][ T28] audit: type=1800 audit(1777334615.241:4): pid=5902 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.25" name="file1" dev="loop0" ino=838 res=0 errno=0 [ 84.996247][ T5912] netlink: 12 bytes leftover after parsing attributes in process `syz.1.30'. [ 85.500443][ T5926] netlink: 28 bytes leftover after parsing attributes in process `syz.0.37'. [ 85.530939][ T5926] netlink: 28 bytes leftover after parsing attributes in process `syz.0.37'. [ 85.586117][ T5926] netlink: 28 bytes leftover after parsing attributes in process `syz.0.37'. [ 85.625178][ T5926] netlink: 28 bytes leftover after parsing attributes in process `syz.0.37'. [ 85.635673][ T5926] Zero length message leads to an empty skb [ 85.724223][ T5933] Bluetooth: MGMT ver 1.22 [ 85.755031][ T5935] loop3: detected capacity change from 0 to 128 [ 85.798097][ T5935] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 85.865400][ T5935] ext4 filesystem being mounted at /4/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 85.893089][ T5940] loop0: detected capacity change from 0 to 512 [ 86.020409][ T5774] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 86.360873][ T5950] loop2: detected capacity change from 0 to 512 [ 86.399531][ T5950] EXT4-fs error (device loop2): ext4_orphan_get:1404: inode #15: comm syz.2.48: inode has both inline data and extents flags [ 86.417522][ T5950] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.48: couldn't read orphan inode 15 (err -117) [ 86.457694][ T5950] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.692013][ T5955] sock: sock_set_timeout: `syz.3.50' (pid 5955) tries to set negative timeout [ 86.746662][ T2129] cfg80211: failed to load regulatory.db [ 86.767402][ T5942] loop1: detected capacity change from 0 to 32768 [ 86.796967][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.157403][ T5965] loop0: detected capacity change from 0 to 128 [ 87.177050][ T5965] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 87.202696][ T5967] process 'syz.2.56' launched './file0' with NULL argv: empty string added [ 87.217338][ T5965] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 87.230463][ T5967] Invalid argument reading file caps for ./file0 [ 87.445280][ T1122] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 88.121355][ T5990] loop0: detected capacity change from 0 to 1024 [ 88.204335][ T5990] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.436258][ T5778] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.480190][ T6005] ipvlan2: entered promiscuous mode [ 88.516496][ T6005] team0: Device ipvlan2 failed to register rx_handler [ 88.553161][ T6009] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 88.714108][ T6015] loop0: detected capacity change from 0 to 256 [ 88.778514][ T6015] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d) [ 88.940484][ T6020] netlink: 8 bytes leftover after parsing attributes in process `syz.3.77'. [ 89.129455][ T28] audit: type=1326 audit(1777334619.611:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5997 comm="syz.2.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f636119cdd9 code=0x7fc00000 [ 89.156173][ T6024] loop0: detected capacity change from 0 to 64 [ 89.323626][ T6028] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 89.392545][ T6030] loop3: detected capacity change from 0 to 256 [ 89.489492][ T6030] FAT-fs (loop3): Directory bread(block 64) failed [ 89.508884][ T6030] FAT-fs (loop3): Directory bread(block 65) failed [ 89.541722][ T6030] FAT-fs (loop3): Directory bread(block 66) failed [ 89.574616][ T6030] FAT-fs (loop3): Directory bread(block 67) failed [ 89.581321][ T6030] FAT-fs (loop3): Directory bread(block 68) failed [ 89.632079][ T6030] FAT-fs (loop3): Directory bread(block 69) failed [ 89.662714][ T6030] FAT-fs (loop3): Directory bread(block 70) failed [ 89.685750][ T6030] FAT-fs (loop3): Directory bread(block 71) failed [ 89.723734][ T6030] FAT-fs (loop3): Directory bread(block 72) failed [ 89.753867][ T6030] FAT-fs (loop3): Directory bread(block 73) failed [ 90.004565][ T28] audit: type=1800 audit(1777334620.481:6): pid=6030 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.82" name="bus" dev="loop3" ino=1048597 res=0 errno=0 [ 90.311751][ T6050] loop3: detected capacity change from 0 to 512 [ 90.363818][ T6050] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.424410][ T6034] loop0: detected capacity change from 0 to 32768 [ 90.488873][ T6050] EXT4-fs (loop3): shut down requested (0) [ 90.557868][ T6034] JBD2: Ignoring recovery information on journal [ 90.569547][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.737542][ T6034] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 90.829293][ T28] audit: type=1326 audit(1777334621.311:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6063 comm="syz.3.94" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e9ff9cdd9 code=0x7ffc0000 [ 90.869696][ T28] audit: type=1326 audit(1777334621.311:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6063 comm="syz.3.94" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e9ff9cdd9 code=0x7ffc0000 [ 90.895745][ T6064] loop3: detected capacity change from 0 to 128 [ 90.903833][ T28] audit: type=1326 audit(1777334621.351:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6063 comm="syz.3.94" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f5e9ff9cdd9 code=0x7ffc0000 [ 90.984663][ T28] audit: type=1326 audit(1777334621.351:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6063 comm="syz.3.94" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f5e9ff9cb42 code=0x7ffc0000 [ 90.995793][ T6064] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 91.094007][ T28] audit: type=1326 audit(1777334621.351:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6063 comm="syz.3.94" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f5e9ff5d60e code=0x7ffc0000 [ 91.120199][ T28] audit: type=1326 audit(1777334621.351:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6063 comm="syz.3.94" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f5e9ff9cc07 code=0x7ffc0000 [ 91.146753][ T28] audit: type=1326 audit(1777334621.351:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6063 comm="syz.3.94" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5e9ff5d60e code=0x7ffc0000 [ 91.173991][ T6064] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 91.198255][ T6034] syz.0.83 (6034) used greatest stack depth: 18768 bytes left [ 91.209841][ T28] audit: type=1326 audit(1777334621.351:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6063 comm="syz.3.94" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5e9ff9ca6b code=0x7ffc0000 [ 91.283810][ T6068] FAT-fs (loop1): Directory bread(block 64) failed [ 91.298090][ T6068] FAT-fs (loop1): Directory bread(block 65) failed [ 91.325290][ T6068] FAT-fs (loop1): Directory bread(block 66) failed [ 91.345698][ T6068] FAT-fs (loop1): Directory bread(block 67) failed [ 91.361491][ T6068] FAT-fs (loop1): Directory bread(block 68) failed [ 91.407502][ T6068] FAT-fs (loop1): Directory bread(block 69) failed [ 91.437285][ T6068] FAT-fs (loop1): Directory bread(block 70) failed [ 91.443976][ T6068] FAT-fs (loop1): Directory bread(block 71) failed [ 91.462852][ T5778] ocfs2: Unmounting device (7,0) on (node local) [ 91.470059][ T6068] FAT-fs (loop1): Directory bread(block 72) failed [ 91.490363][ T6068] FAT-fs (loop1): Directory bread(block 73) failed [ 91.808451][ T6078] set_capacity_and_notify: 1 callbacks suppressed [ 91.808469][ T6078] loop3: detected capacity change from 0 to 512 [ 91.934446][ T6078] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #16: comm syz.3.101: invalid indirect mapped block 4294967295 (level 0) [ 92.007291][ T6078] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #16: comm syz.3.101: invalid indirect mapped block 4294967295 (level 1) [ 92.044047][ T6078] EXT4-fs (loop3): 1 orphan inode deleted [ 92.050776][ T6078] EXT4-fs (loop3): 1 truncate cleaned up [ 92.062601][ T6078] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.173871][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.274848][ T5758] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 92.478506][ T5758] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 92.497940][ T5758] usb 2-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 92.508087][ T5758] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.516805][ T5758] usb 2-1: Product: syz [ 92.521147][ T5758] usb 2-1: Manufacturer: syz [ 92.526171][ T5758] usb 2-1: SerialNumber: syz [ 92.554130][ T5758] usb 2-1: config 0 descriptor?? [ 92.582035][ T5758] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 93.022300][ T5809] IPVS: starting estimator thread 0... [ 93.043250][ T6092] loop2: detected capacity change from 0 to 40427 [ 93.076744][ T6092] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [ 93.083960][ T6092] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 93.105795][ T6092] F2FS-fs (loop2): build fault injection attr: rate: 17008, type: 0x7ffff [ 93.122084][ T6092] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x6 [ 93.145100][ T6103] IPVS: using max 21 ests per chain, 50400 per kthread [ 93.159086][ T6105] loop3: detected capacity change from 0 to 8 [ 93.165498][ T6092] F2FS-fs (loop2): invalid crc value [ 93.187039][ T966] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 93.228517][ T6092] F2FS-fs (loop2): Found nat_bits in checkpoint [ 93.349921][ T6092] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 93.364177][ T6092] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 93.418025][ T5758] input: gspca_pac7302 as /devices/platform/dummy_hcd.1/usb2/2-1/input/input5 [ 93.531123][ T966] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 93.554631][ T966] usb 1-1: can't read configurations, error -71 [ 93.636025][ T6092] syz.2.107: attempt to access beyond end of device [ 93.636025][ T6092] loop2: rw=2049, sector=53248, nr_sectors = 8 limit=40427 [ 93.647110][ T6115] loop3: detected capacity change from 0 to 1024 [ 93.724611][ T5809] usb 2-1: USB disconnect, device number 2 [ 93.762689][ T6115] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.783302][ T5773] syz-executor: attempt to access beyond end of device [ 93.783302][ T5773] loop2: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 93.801208][ T5773] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 93.813484][ T5773] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 93.982673][ T6115] syz.3.114 (6115) used greatest stack depth: 17328 bytes left [ 94.008667][ T5774] EXT4-fs error (device loop3): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 94.024000][ T5774] EXT4-fs error (device loop3): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 94.041913][ T5774] EXT4-fs error (device loop3): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 94.056626][ T5774] EXT4-fs error (device loop3): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 94.096707][ T5774] EXT4-fs error (device loop3): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 94.111281][ T5774] EXT4-fs error (device loop3): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 94.128049][ T5774] EXT4-fs error (device loop3): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 94.141373][ T5774] EXT4-fs error (device loop3): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 94.183968][ T5774] EXT4-fs error (device loop3): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 94.199883][ T5774] EXT4-fs error (device loop3): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 94.476624][ T6123] loop1: detected capacity change from 0 to 1024 [ 94.480378][ T6125] loop0: detected capacity change from 0 to 512 [ 94.536092][ T6123] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 94.548568][ T6123] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.574419][ T6123] EXT4-fs error (device loop1): ext4_map_blocks:720: inode #15: comm syz.1.118: lblock 0 mapped to illegal pblock 0 (length 1) [ 94.596003][ T6123] EXT4-fs (loop1): Remounting filesystem read-only [ 94.596050][ T6125] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -13 [ 94.685062][ T6125] EXT4-fs error (device loop0): ext4_orphan_get:1404: inode #13: comm syz.0.119: iget: bad i_size value: 12154757448730 [ 94.715084][ T6125] EXT4-fs error (device loop0): ext4_orphan_get:1409: comm syz.0.119: couldn't read orphan inode 13 (err -117) [ 94.746848][ T6125] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.771678][ T5768] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 94.932139][ T5778] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.102163][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.251719][ T1122] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.363082][ T6140] loop0: detected capacity change from 0 to 512 [ 95.458032][ T1122] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.536022][ T6140] EXT4-fs (loop0): 1 orphan inode deleted [ 95.542638][ T6140] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.577920][ T49] __quota_error: 20 callbacks suppressed [ 95.577934][ T49] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 95.594650][ T49] EXT4-fs error (device loop0): ext4_release_dquot:6989: comm kworker/u4:3: Failed to release dquot type 1 [ 95.638730][ T6140] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.654807][ T1122] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.712936][ T28] audit: type=1800 audit(1777334626.191:35): pid=6140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.124" name="bus" dev="loop0" ino=16 res=0 errno=0 [ 95.755546][ T5778] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.765541][ T1117] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 95.775582][ T1117] EXT4-fs error (device loop0): ext4_release_dquot:6989: comm kworker/u4:6: Failed to release dquot type 1 [ 95.868778][ T1122] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.423384][ T6130] loop2: detected capacity change from 0 to 65536 [ 96.570619][ T6130] XFS (loop2): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 96.598683][ T6164] cgroup: fork rejected by pids controller in /syz1 [ 96.708001][ T6130] XFS (loop2): Ending clean mount [ 96.949319][ T5083] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 96.958994][ T5083] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 96.975308][ T5083] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 96.988745][ T5083] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 96.996609][ T5083] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 97.004359][ T5083] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 97.198614][ T6159] loop0: detected capacity change from 0 to 32768 [ 97.280741][ T6159] JBD2: Ignoring recovery information on journal [ 97.303647][ T5773] XFS (loop2): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 97.349518][ T6159] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 97.634253][ T6159] (syz.0.132,6159,0):ocfs2_rename:1690 ERROR: status = -39 [ 97.782209][ T5778] ocfs2: Unmounting device (7,0) on (node local) [ 98.360507][ T6175] chnl_net:caif_netlink_parms(): no params data found [ 98.374856][ T23] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 98.414075][ T5083] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 98.427244][ T5083] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 98.436748][ T5083] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 98.453726][ T5083] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 98.461520][ T5083] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 98.475429][ T5083] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 98.569653][ T23] usb 3-1: Using ep0 maxpacket: 16 [ 98.619233][ T23] usb 3-1: config 0 has no interfaces? [ 98.642120][ T23] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 98.654928][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 98.662959][ T23] usb 3-1: SerialNumber: syz [ 98.683481][ T23] usb 3-1: config 0 descriptor?? [ 98.731085][ T6209] loop0: detected capacity change from 0 to 512 [ 98.824026][ T6209] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.875930][ T6209] ext4 filesystem being mounted at /35/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 98.967799][ T6175] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.997135][ T6191] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.016383][ T6175] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.023667][ T6175] bridge_slave_0: entered allmulticast mode [ 99.046371][ T6191] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.058820][ T5771] Bluetooth: hci1: command tx timeout [ 99.062504][ T6175] bridge_slave_0: entered promiscuous mode [ 99.111319][ T8] usb 3-1: USB disconnect, device number 2 [ 99.199119][ T6175] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.211757][ T6175] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.228837][ T6175] bridge_slave_1: entered allmulticast mode [ 99.238890][ T6175] bridge_slave_1: entered promiscuous mode [ 99.255599][ T5778] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.368804][ T1122] hsr_slave_0: left promiscuous mode [ 99.384010][ T1122] hsr_slave_1: left promiscuous mode [ 99.391885][ T1122] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 99.400800][ T1122] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 99.411535][ T1122] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 99.421199][ T1122] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 99.432077][ T1122] bridge_slave_1: left allmulticast mode [ 99.441402][ T1122] bridge_slave_1: left promiscuous mode [ 99.451805][ T1122] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.485025][ T1122] bridge_slave_0: left allmulticast mode [ 99.490747][ T1122] bridge_slave_0: left promiscuous mode [ 99.501705][ T1122] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.541652][ T1122] veth1_macvtap: left promiscuous mode [ 99.548166][ T1122] veth0_macvtap: left promiscuous mode [ 99.553829][ T1122] veth1_vlan: left promiscuous mode [ 99.559874][ T1122] veth0_vlan: left promiscuous mode [ 99.794973][ T5810] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 100.010208][ T5810] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.022867][ T5810] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 100.034877][ T5810] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 100.050906][ T5810] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 100.071198][ T5810] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 100.082364][ T5810] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.098807][ T5810] usb 1-1: Product: syz [ 100.103055][ T5810] usb 1-1: Manufacturer: syz [ 100.110657][ T5810] usb 1-1: SerialNumber: syz [ 100.168729][ T5810] cdc_mbim 1-1:1.0: skipping garbage [ 100.174109][ T8] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 100.329791][ T1122] team0 (unregistering): Port device team_slave_1 removed [ 100.380670][ T6227] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 100.380821][ T1122] team0 (unregistering): Port device team_slave_0 removed [ 100.395222][ T8] usb 3-1: Using ep0 maxpacket: 32 [ 100.402708][ T8] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.426966][ T8] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.446758][ T8] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 100.462945][ T8] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 100.471521][ T8] usb 3-1: Product: syz [ 100.475762][ T8] usb 3-1: Manufacturer: syz [ 100.488740][ T8] hub 3-1:4.0: USB hub found [ 100.508253][ T1122] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 100.556311][ T1122] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 100.578575][ T5771] Bluetooth: hci0: command tx timeout [ 100.702901][ T8] hub 3-1:4.0: config failed, hub doesn't have any ports! (err -19) [ 100.916599][ T1122] bond0 (unregistering): Released all slaves [ 101.010361][ T6227] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 101.033005][ T6175] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.062897][ T6175] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.072561][ T8] usb 3-1: USB disconnect, device number 3 [ 101.133519][ T6175] team0: Port device team_slave_0 added [ 101.148100][ T5771] Bluetooth: hci1: command tx timeout [ 101.179696][ T6175] team0: Port device team_slave_1 added [ 101.220501][ T5810] cdc_mbim 1-1:1.0: bind() failure [ 101.261898][ T5810] cdc_ncm: probe of 1-1:1.1 failed with error -71 [ 101.288682][ T5810] cdc_mbim: probe of 1-1:1.1 failed with error -71 [ 101.305889][ T5810] usbtest: probe of 1-1:1.1 failed with error -71 [ 101.336046][ T5810] usb 1-1: USB disconnect, device number 4 [ 101.411913][ T6175] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.433171][ T6175] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.475167][ T6175] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.492764][ T6175] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.502437][ T6175] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.582203][ T6175] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.660589][ T6196] chnl_net:caif_netlink_parms(): no params data found [ 101.750502][ T1122] IPVS: stop unused estimator thread 0... [ 101.800450][ T6175] hsr_slave_0: entered promiscuous mode [ 101.813741][ T6175] hsr_slave_1: entered promiscuous mode [ 101.838112][ T6175] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 101.847087][ T6175] Cannot create hsr debugfs directory [ 102.193298][ T1122] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.224040][ T6196] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.231615][ T6196] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.239287][ T6196] bridge_slave_0: entered allmulticast mode [ 102.246721][ T6196] bridge_slave_0: entered promiscuous mode [ 102.303321][ T1122] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.320646][ T6196] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.328326][ T6196] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.336152][ T6196] bridge_slave_1: entered allmulticast mode [ 102.343538][ T6196] bridge_slave_1: entered promiscuous mode [ 102.374465][ T1122] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.419548][ T6196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.443110][ T6196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.466955][ T1122] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.532944][ T6196] team0: Port device team_slave_0 added [ 102.541537][ T6196] team0: Port device team_slave_1 added [ 102.595196][ T6196] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.603374][ T6196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.630139][ T6196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.645161][ T6196] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.652985][ T6196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.680755][ T5771] Bluetooth: hci0: command tx timeout [ 102.686433][ T6196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.811522][ T6196] hsr_slave_0: entered promiscuous mode [ 102.831879][ T6196] hsr_slave_1: entered promiscuous mode [ 102.841186][ T6196] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 102.852346][ T6196] Cannot create hsr debugfs directory [ 103.122666][ T6175] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 103.170771][ T6269] loop2: detected capacity change from 0 to 4096 [ 103.184349][ T6175] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 103.214752][ T5771] Bluetooth: hci1: command tx timeout [ 103.219584][ T6269] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 103.302951][ T6269] ntfs: (device loop2): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 103.358148][ T6269] ntfs: (device loop2): check_mft_mirror(): Incomplete multi sector transfer detected in mft record 2. [ 103.391211][ T6269] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 103.417999][ T6175] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 103.439182][ T6269] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 103.449889][ T6175] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 103.475150][ T6269] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 103.524384][ T6269] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 103.558524][ T6269] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 103.595205][ T6269] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 103.615138][ T6269] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 103.678569][ T6269] ntfs: volume version 3.1. [ 104.178017][ T6175] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.258358][ T6175] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.344200][ T5032] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.351422][ T5032] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.437790][ T5032] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.445084][ T5032] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.735230][ T5771] Bluetooth: hci0: command tx timeout [ 104.812290][ T6288] loop2: detected capacity change from 0 to 32768 [ 104.832504][ T1122] hsr_slave_0: left promiscuous mode [ 104.840676][ T6288] XFS (loop2): DAX unsupported by block device. Turning off DAX. [ 104.851538][ T6288] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 104.867494][ T1122] hsr_slave_1: left promiscuous mode [ 104.901116][ T1122] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.944375][ T1122] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 104.968528][ T6288] XFS (loop2): Ending clean mount [ 104.987840][ T1122] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 105.014710][ T1122] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 105.028470][ T6288] XFS (loop2): Quotacheck needed: Please wait. [ 105.050428][ T1122] bridge_slave_1: left allmulticast mode [ 105.080173][ T1122] bridge_slave_1: left promiscuous mode [ 105.094147][ T1122] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.120377][ T6288] XFS (loop2): Quotacheck: Done. [ 105.122180][ T1122] bridge_slave_0: left allmulticast mode [ 105.165929][ T1122] bridge_slave_0: left promiscuous mode [ 105.181962][ T1122] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.242681][ T5773] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 105.261698][ T1122] veth1_macvtap: left promiscuous mode [ 105.272614][ T1122] veth0_macvtap: left promiscuous mode [ 105.279135][ T1122] veth1_vlan: left promiscuous mode [ 105.284661][ T1122] veth0_vlan: left promiscuous mode [ 105.296079][ T5771] Bluetooth: hci1: command tx timeout [ 105.336897][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802fd44c00: rx timeout, send abort [ 105.347086][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88802fd44c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 105.628231][ T6314] loop2: detected capacity change from 0 to 128 [ 105.662531][ T6314] FAT-fs (loop2): Directory bread(block 414) failed [ 105.708764][ T6314] FAT-fs (loop2): Directory bread(block 415) failed [ 105.715816][ T6314] FAT-fs (loop2): Directory bread(block 416) failed [ 105.737820][ T6314] FAT-fs (loop2): Directory bread(block 417) failed [ 105.755407][ T6314] FAT-fs (loop2): Directory bread(block 418) failed [ 105.769335][ T6314] FAT-fs (loop2): Directory bread(block 419) failed [ 105.776625][ T6314] FAT-fs (loop2): Directory bread(block 420) failed [ 105.783583][ T6314] FAT-fs (loop2): Directory bread(block 421) failed [ 105.831928][ T6314] FAT-fs (loop2): FAT read failed (blocknr 128) [ 105.870569][ T6314] FAT-fs (loop2): FAT read failed (blocknr 128) [ 106.112813][ T6322] loop2: detected capacity change from 0 to 1024 [ 106.149528][ T6322] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 106.170734][ T6322] ext4 filesystem being mounted at /44/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.238818][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 106.404904][ T6327] loop2: detected capacity change from 0 to 4096 [ 106.482530][ T6327] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 106.563246][ T1122] team0 (unregistering): Port device team_slave_1 removed [ 106.622093][ T1122] team0 (unregistering): Port device team_slave_0 removed [ 106.679034][ T1122] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 106.772429][ T1122] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 106.814723][ T5771] Bluetooth: hci0: command tx timeout [ 107.066310][ T2129] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 107.081295][ T1122] bond0 (unregistering): Released all slaves [ 107.168732][ T6196] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 107.179155][ T6196] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 107.189557][ T6196] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 107.210676][ T6196] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 107.246166][ T6175] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 107.273296][ T2129] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.304586][ T2129] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 107.330292][ T2129] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 107.384764][ T2129] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 107.393174][ T2129] usb 3-1: Manufacturer: syz [ 107.448924][ T2129] usb 3-1: config 0 descriptor?? [ 107.619513][ T6196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.691383][ T6196] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.732722][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.739946][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.810788][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.818310][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.917006][ T6175] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.959735][ T6196] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 108.329462][ T2129] input: syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0001/input/input6 [ 108.434043][ T6196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.533757][ T6338] loop0: detected capacity change from 0 to 32768 [ 108.543003][ T2129] input: syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0001/input/input7 [ 108.590885][ T6196] veth0_vlan: entered promiscuous mode [ 108.601898][ T2129] input: syz Touch Strip as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0001/input/input8 [ 108.636918][ T6196] veth1_vlan: entered promiscuous mode [ 108.661896][ T2129] input: syz Dial as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0001/input/input9 [ 108.671945][ T6338] JBD2: Ignoring recovery information on journal [ 108.701635][ T2129] uclogic 0003:256C:006D.0001: input,hidraw0: USB HID v0.00 Keypad [syz] on usb-dummy_hcd.2-1/input0 [ 108.728870][ T2129] usb 3-1: USB disconnect, device number 4 [ 108.905242][ T6338] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 108.943124][ T6196] veth0_macvtap: entered promiscuous mode [ 109.023898][ T6196] veth1_macvtap: entered promiscuous mode [ 109.070356][ T6175] veth0_vlan: entered promiscuous mode [ 109.162804][ T6175] veth1_vlan: entered promiscuous mode [ 109.212826][ T6196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.253903][ T6196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.282706][ T6366] fido_id[6366]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 109.284901][ T6196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.321226][ T6196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.338008][ T6196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.396511][ T6196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.424588][ T6196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.438184][ T6196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.450166][ T6196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.466238][ T6196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.514400][ T6196] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.529774][ T6196] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.539915][ T6196] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.561844][ T6196] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.617340][ T5778] ocfs2: Unmounting device (7,0) on (node local) [ 109.618425][ T6175] veth0_macvtap: entered promiscuous mode [ 109.674364][ T6175] veth1_macvtap: entered promiscuous mode [ 109.783814][ T6175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.803271][ T6175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.819729][ T6175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.832136][ T6175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.844806][ T6175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.861904][ T6175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.889574][ T6175] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.954124][ T6175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.971606][ T6175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.982973][ T6175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.998757][ T6175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.024094][ T6175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.048143][ T6175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.062684][ T6175] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.111715][ T5032] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.126071][ T6175] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.141479][ T5032] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.150775][ T6175] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.167042][ T6175] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.179231][ T6175] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.184776][ T5840] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 110.295940][ T2966] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.323754][ T2966] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.388513][ T5840] usb 3-1: config 0 has an invalid interface number: 199 but max is 1 [ 110.405029][ T5840] usb 3-1: config 0 has no interface number 1 [ 110.422015][ T5032] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.435484][ T5840] usb 3-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 110.458499][ T5032] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.470902][ T5840] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 110.500351][ T5840] usb 3-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 110.519256][ T5840] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 110.535064][ T5840] usb 3-1: SerialNumber: syz [ 110.551914][ T5840] usb 3-1: config 0 descriptor?? [ 110.584704][ T2966] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.613266][ T2966] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.773621][ T5840] usb 3-1: Found UVC 0.00 device (0002:0000) [ 110.811665][ T5840] usb 3-1: No valid video chain found. [ 110.852953][ T5840] usb 3-1: USB disconnect, device number 5 [ 110.949364][ T6399] loop4: detected capacity change from 0 to 256 [ 110.985597][ T6399] exfat: Deprecated parameter 'namecase' [ 111.024772][ T6399] exfat: Deprecated parameter 'utf8' [ 111.053690][ T6399] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xbe5fd08b, utbl_chksum : 0xe619d30d) [ 111.292780][ T6392] loop1: detected capacity change from 0 to 32768 [ 111.339293][ T6392] (syz.1.136,6392,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 111.387539][ T6392] (syz.1.136,6392,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 111.517089][ T6392] JBD2: Ignoring recovery information on journal [ 111.653107][ T6412] loop2: detected capacity change from 0 to 128 [ 111.717632][ T6392] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 111.751191][ T6365] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 112.369140][ T6196] ocfs2: Unmounting device (7,1) on (node local) [ 112.623225][ T6446] Bluetooth: MGMT ver 1.22 [ 113.042625][ T6458] mmap: syz.2.187 (6458) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 113.211738][ T6440] loop0: detected capacity change from 0 to 32768 [ 113.264065][ T6440] JBD2: Ignoring recovery information on journal [ 113.420966][ T6440] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 113.465284][ T5810] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 113.594644][ T5840] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 113.659342][ T5778] ocfs2: Unmounting device (7,0) on (node local) [ 113.685830][ T5810] usb 2-1: Using ep0 maxpacket: 32 [ 113.709741][ T5810] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 113.724979][ T5810] usb 2-1: config 0 has no interface number 0 [ 113.747638][ T5810] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 113.766338][ T5810] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.794670][ T5840] usb 3-1: Using ep0 maxpacket: 16 [ 113.799929][ T5810] usb 2-1: Product: syz [ 113.804128][ T5810] usb 2-1: Manufacturer: syz [ 113.814978][ T5810] usb 2-1: SerialNumber: syz [ 113.820977][ T5840] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.843124][ T5810] usb 2-1: config 0 descriptor?? [ 113.853157][ T5840] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 113.877737][ T5810] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 113.891395][ T5840] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 113.921089][ T5840] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.962305][ T5840] usb 3-1: config 0 descriptor?? [ 113.969323][ T6456] loop4: detected capacity change from 0 to 32768 [ 114.025419][ T6456] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 114.121420][ T5810] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 114.143150][ T6456] XFS (loop4): Ending clean mount [ 114.161914][ T6456] XFS (loop4): Quotacheck needed: Please wait. [ 114.169286][ T5810] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 114.264985][ T6456] XFS (loop4): Quotacheck: Done. [ 114.433900][ T6490] XFS (loop4): User initiated shutdown received. [ 114.436916][ T28] kauditd_printk_skb: 68 callbacks suppressed [ 114.436965][ T28] audit: type=1800 audit(1777334644.911:36): pid=6456 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.186" name="file1" dev="loop4" ino=6150 res=0 errno=0 [ 114.443031][ T6490] XFS (loop4): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:501). Shutting down filesystem. [ 114.446790][ T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 114.468656][ T6490] XFS (loop4): Please unmount the filesystem and rectify the problem(s) [ 114.562615][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 114.564105][ T5809] usb 2-1: USB disconnect, device number 3 [ 114.585097][ T5809] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 114.607857][ T6175] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 114.641964][ T5809] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 114.685405][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 114.691582][ T5809] quatech2 2-1:0.51: device disconnected [ 114.725658][ T9] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 114.744365][ T9] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 114.769541][ T9] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 114.780335][ T9] usb 1-1: Product: syz [ 114.786193][ T9] usb 1-1: Manufacturer: syz [ 114.790882][ T9] usb 1-1: SerialNumber: syz [ 114.808036][ T5840] usbhid 3-1:0.0: can't add hid device: -71 [ 114.816668][ T9] usb 1-1: config 0 descriptor?? [ 114.822802][ T6486] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 114.825694][ T5840] usbhid: probe of 3-1:0.0 failed with error -71 [ 114.851275][ T9] hub 1-1:0.0: bad descriptor, ignoring hub [ 114.858474][ T5840] usb 3-1: USB disconnect, device number 6 [ 114.873881][ T9] hub: probe of 1-1:0.0 failed with error -5 [ 115.455497][ T5809] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 115.524679][ T8] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 115.532359][ T6486] usb 1-1: reset high-speed USB device number 5 using dummy_hcd [ 115.644839][ T5809] usb 2-1: Using ep0 maxpacket: 32 [ 115.652411][ T5809] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 115.661544][ T5809] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.672338][ T5809] usb 2-1: config 0 descriptor?? [ 115.744624][ T5841] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 115.754637][ T8] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.766729][ T8] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 115.780013][ T8] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 115.790025][ T6486] usb 1-1: device firmware changed [ 115.790081][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.790102][ T8] usb 5-1: Product: syz [ 115.790116][ T8] usb 5-1: Manufacturer: syz [ 115.790130][ T8] usb 5-1: SerialNumber: syz [ 115.824036][ T9] usb 1-1: USB disconnect, device number 5 [ 115.888501][ T5809] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 115.901263][ T5809] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 115.912736][ T5809] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 115.921625][ T5809] usb 2-1: media controller created [ 115.943673][ T5809] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 115.957845][ T5841] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 115.982660][ T5841] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.997478][ T9] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 116.005060][ T5841] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.015385][ T5841] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 116.041961][ T5841] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 116.051553][ T6505] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 116.068793][ T5841] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 116.079788][ T5841] usb 3-1: Manufacturer: syz [ 116.093871][ T5841] usb 3-1: config 0 descriptor?? [ 116.120350][ T5809] DVB: Unable to find symbol dib7000p_attach() [ 116.126803][ T5809] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 116.217847][ T5809] rc_core: IR keymap rc-dib0700-rc5 not found [ 116.223975][ T5809] Registered IR keymap rc-empty [ 116.229644][ T5809] dvb-usb: could not initialize remote control. [ 116.236282][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 116.241625][ T5809] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 116.253741][ T9] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 116.268861][ T9] usb 1-1: string descriptor 0 read error: -22 [ 116.275332][ T9] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 116.284413][ T9] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 116.301876][ T9] usb 1-1: config 0 descriptor?? [ 116.312193][ T6499] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 116.324756][ T9] hub 1-1:0.0: bad descriptor, ignoring hub [ 116.330793][ T9] hub: probe of 1-1:0.0 failed with error -5 [ 116.376668][ T5809] usb 2-1: USB disconnect, device number 4 [ 116.419800][ T5809] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 116.545866][ T5841] appleir 0003:05AC:8243.0002: unknown main item tag 0x0 [ 116.560355][ T5841] appleir 0003:05AC:8243.0002: No inputs registered, leaving [ 116.580200][ T5841] appleir 0003:05AC:8243.0002: hiddev1,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 116.707361][ T5840] usb 1-1: USB disconnect, device number 6 [ 116.780451][ T5840] usb 3-1: USB disconnect, device number 7 [ 116.903003][ T8] cdc_ncm 5-1:1.0: bind() failure [ 116.917918][ T8] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 116.925129][ T8] cdc_ncm 5-1:1.1: bind() failure [ 116.935027][ T8] usb 5-1: USB disconnect, device number 2 [ 117.392205][ T6524] netlink: 24 bytes leftover after parsing attributes in process `syz.2.200'. [ 117.707314][ T6534] loop2: detected capacity change from 0 to 512 [ 117.749342][ T6534] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.879501][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.978107][ T6540] loop0: detected capacity change from 0 to 4096 [ 117.991273][ T6543] sctp: [Deprecated]: syz.1.209 (pid 6543) Use of int in max_burst socket option deprecated. [ 117.991273][ T6543] Use struct sctp_assoc_value instead [ 118.018418][ T6540] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [ 118.147683][ T6540] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 118.177336][ T6540] ntfs3: loop0: Failed to load $Extend (-22). [ 118.194572][ T6540] ntfs3: loop0: Failed to initialize $Extend. [ 118.273803][ T6540] ntfs3: loop0: ino=0, attr_set_size [ 118.334423][ T6540] ntfs3: loop0: ino=0, attr_set_size [ 118.379631][ T6540] ntfs3: loop0: ino=0, attr_set_size [ 118.398868][ T6540] ntfs3: loop0: no free space to extend mft [ 118.742954][ T6557] loop2: detected capacity change from 0 to 2048 [ 118.799918][ T6557] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.841682][ T6557] ext4 filesystem being mounted at /61/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.989468][ T6557] fs-verity: sha512 using implementation "sha512-avx2" [ 119.002481][ T6564] loop4: detected capacity change from 0 to 256 [ 119.112027][ T6561] loop0: detected capacity change from 0 to 4096 [ 119.159295][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.555950][ T6552] loop1: detected capacity change from 0 to 40427 [ 119.583334][ T6552] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x7ffff [ 119.608922][ T6552] F2FS-fs (loop1): Image doesn't support compression [ 119.620206][ T6552] F2FS-fs (loop1): Image doesn't support compression [ 119.630182][ T6552] F2FS-fs (loop1): invalid crc value [ 119.657631][ T6552] F2FS-fs (loop1): Found nat_bits in checkpoint [ 119.704688][ T5810] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 119.805256][ T6552] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 119.911625][ T5810] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 119.935122][ T5810] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 119.952100][ T6582] loop0: detected capacity change from 0 to 128 [ 119.967754][ T5810] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 119.993363][ T5810] usb 3-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 120.019071][ T5810] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.038717][ T6582] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 120.056101][ T5810] usb 3-1: Product: syz [ 120.060312][ T5810] usb 3-1: Manufacturer: syz [ 120.078411][ T6582] ext4 filesystem being mounted at /62/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 120.108537][ T5810] usb 3-1: SerialNumber: syz [ 120.125859][ T5810] usb 3-1: config 0 descriptor?? [ 120.282875][ T5778] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 120.370991][ T5810] adutux 3-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 120.426163][ T6594] loop0: detected capacity change from 0 to 64 [ 120.492016][ T28] audit: type=1800 audit(1777334650.971:37): pid=6594 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.223" name="file1" dev="loop0" ino=21 res=0 errno=0 [ 120.644548][ T8] usb 3-1: USB disconnect, device number 8 [ 120.709497][ T6599] 9pnet: p9_errstr2errno: server reported unknown error @c18446744073709551615 [ 120.753768][ T6600] loop1: detected capacity change from 0 to 4096 [ 120.767085][ T6600] EXT4-fs: Ignoring removed orlov option [ 120.773983][ T6600] EXT4-fs (loop1): Test dummy encryption mode enabled [ 120.823856][ T6600] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.883885][ T6600] fs-verity: sha256 using implementation "sha256-avx2" [ 120.998699][ T6196] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.224609][ T5809] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 121.443584][ T5809] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 121.482861][ T5809] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 121.501349][ T6619] loop2: detected capacity change from 0 to 8 [ 121.515114][ T5809] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 121.541304][ T5809] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.552501][ T5809] usb 1-1: Product: syz [ 121.560044][ T5809] usb 1-1: Manufacturer: syz [ 121.565967][ T5809] usb 1-1: SerialNumber: syz [ 121.722865][ T6625] loop2: detected capacity change from 0 to 164 [ 121.806446][ T5809] usb 1-1: 0:2 : does not exist [ 121.817795][ T5809] usb 1-1: unit 9 not found! [ 121.838512][ T5809] usb 1-1: 4:0: cannot get min/max values for control 1 (id 4) [ 121.903349][ T5809] usb 1-1: USB disconnect, device number 7 [ 122.001924][ T6369] udevd[6369]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 122.079978][ T6632] loop1: detected capacity change from 0 to 4096 [ 122.504658][ T5809] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 122.705089][ T5809] usb 3-1: Using ep0 maxpacket: 16 [ 122.719872][ T6640] loop0: detected capacity change from 0 to 8192 [ 122.738405][ T5809] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 122.754550][ T5809] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 122.772485][ T5809] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 122.783599][ T5809] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.791750][ T5809] usb 3-1: Product: syz [ 122.798976][ T6640] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 122.812457][ T5809] usb 3-1: Manufacturer: syz [ 122.817177][ T5809] usb 3-1: SerialNumber: syz [ 122.832149][ T6640] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 122.847320][ T6640] REISERFS (device loop0): using ordered data mode [ 122.854280][ T6640] reiserfs: using flush barriers [ 122.863224][ T6640] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 122.883021][ T6640] REISERFS (device loop0): checking transaction log (loop0) [ 122.900508][ T6640] REISERFS (device loop0): Using r5 hash to sort names [ 122.918132][ T6640] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 123.050848][ T5809] usb 3-1: 0:2 : does not exist [ 123.092974][ T5809] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 123.165012][ T5809] usb 3-1: USB disconnect, device number 9 [ 123.285635][ T6365] udevd[6365]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 123.444437][ T6652] ntfs: (device loop1): ntfs_read_locked_inode(): $DATA attribute is missing. [ 123.496038][ T6652] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 123.544659][ T6652] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 123.629744][ T6652] ntfs: volume version 3.1. [ 123.657951][ T6642] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 123.844552][ T6642] (syz.4.246,6642,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is smaller than minimal - offset=16, inode=65, rec_len=12, name_len=0 [ 123.895375][ T6652] ntfs: (device loop1): ntfs_cluster_alloc(): Failed to allocate clusters, aborting (error -28). [ 123.927399][ T6642] (syz.4.246,6642,0):ocfs2_prepare_dir_for_insert:4312 ERROR: status = -2 [ 123.940401][ T6642] (syz.4.246,6642,0):ocfs2_mknod:298 ERROR: status = -2 [ 123.951877][ T6652] ntfs: (device loop1): ntfs_attr_extend_allocation(): Cannot extend allocation of inode 0x43, attribute type 0x80, because the allocation of clusters failed with error code -28. [ 123.977630][ T6642] (syz.4.246,6642,0):ocfs2_mknod:502 ERROR: status = -2 [ 123.986460][ T6642] (syz.4.246,6642,0):ocfs2_create:676 ERROR: status = -2 [ 124.143677][ T6175] ocfs2: Unmounting device (7,4) on (node local) [ 124.258669][ T6196] ntfs: (device loop1): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 124.641860][ T6685] set_capacity_and_notify: 2 callbacks suppressed [ 124.641874][ T6685] loop0: detected capacity change from 0 to 512 [ 124.672774][ T6689] loop8: detected capacity change from 0 to 8 [ 124.695831][ T6689] Dev loop8: unable to read RDB block 8 [ 124.704247][ T6685] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 124.719411][ T6689] loop8: unable to read partition table [ 124.735044][ T6689] loop8: partition table beyond EOD, truncated [ 124.757404][ T6689] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 124.784527][ T6685] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 124.803871][ T6693] netlink: 24 bytes leftover after parsing attributes in process `syz.4.252'. [ 124.844604][ T6685] System zones: 1-12 [ 124.858613][ T6693] bond0: ARP target 8.4.0.0 is already present [ 124.885214][ T6693] bond0: option arp_ip_target: invalid value (1032) [ 124.901422][ T6685] EXT4-fs (loop0): 1 truncate cleaned up [ 124.945949][ T6685] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.108906][ T5778] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.147245][ T6699] loop1: detected capacity change from 0 to 4096 [ 125.214632][ T6699] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 125.340202][ T6699] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.483529][ T6699] EXT4-fs (loop1): shut down requested (2) [ 125.602156][ T6711] loop4: detected capacity change from 0 to 256 [ 125.644452][ T6196] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.677678][ T6711] exfat: Unknown parameter '' [ 126.124534][ C1] sched: RT throttling activated [ 126.145737][ T6711] nullb0: [POWERTEC] p1 [ 126.188162][ T6711] nullb0: p1 start 1768304430 is beyond EOD, truncated [ 126.212670][ T6703] loop2: detected capacity change from 0 to 131072 [ 126.251656][ T6703] F2FS-fs (loop2): Found nat_bits in checkpoint [ 126.324608][ T6703] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 126.468006][ T6725] capability: warning: `syz.1.266' uses deprecated v2 capabilities in a way that may be insecure [ 126.603027][ T6730] netlink: 260 bytes leftover after parsing attributes in process `syz.0.268'. [ 126.660634][ T6732] netlink: 4 bytes leftover after parsing attributes in process `syz.4.270'. [ 126.830478][ T6740] : renamed from vlan0 (while UP) [ 126.838937][ T6738] loop1: detected capacity change from 0 to 1024 [ 127.066137][ T6738] hfsplus: invalid catalog entry type in lookup [ 127.374941][ T5840] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 127.571795][ T5840] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 127.582197][ T5840] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 127.608922][ T5840] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 127.628411][ T5840] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 127.658800][ T5840] usb 1-1: SerialNumber: syz [ 127.872139][ T6761] loop1: detected capacity change from 0 to 128 [ 127.893992][ T5840] usb 1-1: 0:2 : does not exist [ 127.900176][ T6761] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 127.957565][ T5840] usb 1-1: USB disconnect, device number 8 [ 128.017906][ T6365] udevd[6365]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 128.043019][ T6761] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 128.198704][ T6746] loop2: detected capacity change from 0 to 32768 [ 128.278343][ T6746] (syz.2.273,6746,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 128.338018][ T6746] (syz.2.273,6746,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 128.387656][ T6749] loop4: detected capacity change from 0 to 40427 [ 128.414891][ T6746] JBD2: Ignoring recovery information on journal [ 128.436234][ T6749] F2FS-fs (loop4): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 128.494723][ T6749] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 128.521927][ T6749] F2FS-fs (loop4): invalid crc value [ 128.566192][ T6746] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 128.579390][ T6749] F2FS-fs (loop4): Found nat_bits in checkpoint [ 128.648376][ T6778] loop1: detected capacity change from 0 to 2048 [ 128.726541][ T6778] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.739662][ T6778] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.773231][ T28] audit: type=1800 audit(1777334659.241:38): pid=6778 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.279" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 128.882858][ T6196] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.893965][ T6749] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 128.930488][ T6749] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 129.205937][ T6788] exfat: Unknown parameter '' [ 129.332724][ T6788] nullb0: [POWERTEC] p1 [ 129.344087][ T5773] ocfs2: Unmounting device (7,2) on (node local) [ 129.356615][ T6788] nullb0: p1 start 1768304430 is beyond EOD, truncated [ 129.466829][ T1122] kworker/u4:7: attempt to access beyond end of device [ 129.466829][ T1122] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 129.512252][ T1122] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 129.663913][ T6796] netlink: 260 bytes leftover after parsing attributes in process `syz.1.284'. [ 130.442056][ T6813] set_capacity_and_notify: 1 callbacks suppressed [ 130.442069][ T6813] loop4: detected capacity change from 0 to 64 [ 130.540946][ T28] audit: type=1800 audit(1777334661.021:39): pid=6813 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.294" name="file1" dev="loop4" ino=21 res=0 errno=0 [ 131.031084][ T6804] loop1: detected capacity change from 0 to 32768 [ 131.155156][ T6804] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 131.428391][ T6804] XFS (loop1): Ending clean mount [ 131.446159][ T6804] XFS (loop1): Quotacheck needed: Please wait. [ 131.536775][ T6804] XFS (loop1): Quotacheck: Done. [ 131.715896][ T6830] loop2: detected capacity change from 0 to 32768 [ 131.770987][ T6804] XFS (loop1): User initiated shutdown received. [ 131.819561][ T28] audit: type=1800 audit(1777334662.301:40): pid=6837 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.286" name="file1" dev="loop1" ino=6150 res=0 errno=0 [ 131.819831][ T6831] loop4: detected capacity change from 0 to 8192 [ 131.839968][ T6804] XFS (loop1): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:501). Shutting down filesystem. [ 131.911712][ T6804] XFS (loop1): Please unmount the filesystem and rectify the problem(s) [ 131.920384][ T6830] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 131.932077][ T6831] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 132.001678][ T6831] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 132.063964][ T6831] REISERFS (device loop4): using ordered data mode [ 132.079033][ T6831] reiserfs: using flush barriers [ 132.136253][ T6831] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 132.156403][ T6196] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 132.185126][ T6831] REISERFS (device loop4): checking transaction log (loop4) [ 132.193176][ T6830] (syz.2.289,6830,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is smaller than minimal - offset=16, inode=65, rec_len=12, name_len=0 [ 132.281482][ T6831] REISERFS (device loop4): Using r5 hash to sort names [ 132.311861][ T6830] (syz.2.289,6830,1):ocfs2_prepare_dir_for_insert:4312 ERROR: status = -2 [ 132.348813][ T6830] (syz.2.289,6830,0):ocfs2_mknod:298 ERROR: status = -2 [ 132.375455][ T6831] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 132.384764][ T6830] (syz.2.289,6830,1):ocfs2_mknod:502 ERROR: status = -2 [ 132.391767][ T6830] (syz.2.289,6830,1):ocfs2_create:676 ERROR: status = -2 [ 132.630547][ T5773] ocfs2: Unmounting device (7,2) on (node local) [ 132.831916][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.839399][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.263457][ T6859] netlink: 260 bytes leftover after parsing attributes in process `syz.2.295'. [ 133.383803][ T6846] loop0: detected capacity change from 0 to 40427 [ 133.430329][ T6846] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x7ffff [ 133.464302][ T6846] F2FS-fs (loop0): Image doesn't support compression [ 133.504208][ T6846] F2FS-fs (loop0): Image doesn't support compression [ 133.536715][ T6846] F2FS-fs (loop0): invalid crc value [ 133.580208][ T6846] F2FS-fs (loop0): Found nat_bits in checkpoint [ 133.709659][ T6846] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 133.915484][ T6856] loop1: detected capacity change from 0 to 32768 [ 134.010401][ T6856] JBD2: Ignoring recovery information on journal [ 134.044681][ T6874] loop4: detected capacity change from 0 to 8 [ 134.085676][ T6871] loop2: detected capacity change from 0 to 8192 [ 134.125936][ T6871] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 134.141086][ T6871] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 134.150471][ T6871] REISERFS (device loop2): using ordered data mode [ 134.182827][ T6871] reiserfs: using flush barriers [ 134.202050][ T6871] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 134.236705][ T6856] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 134.259709][ T6871] REISERFS (device loop2): checking transaction log (loop2) [ 134.310335][ T6871] REISERFS (device loop2): Using r5 hash to sort names [ 134.342021][ T6871] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 134.732850][ T6886] 9pnet: p9_errstr2errno: server reported unknown error @c18446744073709551615 [ 134.907134][ T6196] ocfs2: Unmounting device (7,1) on (node local) [ 135.199852][ T6894] loop4: detected capacity change from 0 to 4096 [ 135.225669][ T6894] EXT4-fs: Ignoring removed orlov option [ 135.258067][ T6894] EXT4-fs (loop4): Test dummy encryption mode enabled [ 135.290189][ T6894] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.685284][ T6175] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.168104][ T5810] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 136.195976][ T6903] loop2: detected capacity change from 0 to 32768 [ 136.253147][ T6903] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 136.354054][ T6903] XFS (loop2): Ending clean mount [ 136.355089][ T5810] usb 5-1: Using ep0 maxpacket: 32 [ 136.367356][ T6903] XFS (loop2): Quotacheck needed: Please wait. [ 136.392254][ T5810] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 136.415993][ T6903] XFS (loop2): Quotacheck: Done. [ 136.425024][ T5810] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 136.455259][ T5810] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 136.463467][ T5810] usb 5-1: Product: syz [ 136.493890][ T5810] usb 5-1: Manufacturer: syz [ 136.510999][ T5810] usb 5-1: SerialNumber: syz [ 136.535960][ T5810] usb 5-1: config 0 descriptor?? [ 136.550331][ T6933] XFS (loop2): User initiated shutdown received. [ 136.553486][ T6916] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 136.557631][ T6933] XFS (loop2): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:501). Shutting down filesystem. [ 136.581957][ T5810] hub 5-1:0.0: bad descriptor, ignoring hub [ 136.585051][ T28] audit: type=1800 audit(1777334667.031:41): pid=6903 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.303" name="file1" dev="loop2" ino=6150 res=0 errno=0 [ 136.597141][ T5810] hub: probe of 5-1:0.0 failed with error -5 [ 136.626474][ T6913] loop1: detected capacity change from 0 to 32768 [ 136.638477][ T6933] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 136.672308][ T6913] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 136.771820][ T6913] (syz.1.304,6913,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is smaller than minimal - offset=16, inode=65, rec_len=12, name_len=0 [ 136.799112][ T5773] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 136.807927][ T6913] (syz.1.304,6913,0):ocfs2_prepare_dir_for_insert:4312 ERROR: status = -2 [ 136.835802][ T6913] (syz.1.304,6913,0):ocfs2_mknod:298 ERROR: status = -2 [ 136.843238][ T6913] (syz.1.304,6913,0):ocfs2_mknod:502 ERROR: status = -2 [ 136.858334][ T6913] (syz.1.304,6913,0):ocfs2_create:676 ERROR: status = -2 [ 136.985929][ T6196] ocfs2: Unmounting device (7,1) on (node local) [ 137.308910][ T6943] netlink: 16 bytes leftover after parsing attributes in process `syz.2.309'. [ 137.362144][ T6945] loop1: detected capacity change from 0 to 8192 [ 137.396969][ T6945] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 137.413629][ T6945] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 137.423158][ T6945] REISERFS (device loop1): using ordered data mode [ 137.435938][ T6945] reiserfs: using flush barriers [ 137.442506][ T6945] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 137.459951][ T6945] REISERFS (device loop1): checking transaction log (loop1) [ 137.473318][ T6945] REISERFS (device loop1): Using r5 hash to sort names [ 137.482130][ T6945] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 137.594604][ T6916] usb 5-1: reset high-speed USB device number 3 using dummy_hcd [ 137.712425][ T6938] loop0: detected capacity change from 0 to 32768 [ 137.770257][ T6938] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 137.821923][ T6916] usb 5-1: device firmware changed [ 137.828811][ T5810] usb 5-1: USB disconnect, device number 3 [ 137.910210][ T6938] XFS (loop0): Ending clean mount [ 137.937230][ T6938] XFS (loop0): Quotacheck needed: Please wait. [ 137.991529][ T6938] XFS (loop0): Quotacheck: Done. [ 137.998371][ T5810] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 138.160672][ T6963] XFS (loop0): User initiated shutdown received. [ 138.167338][ T6963] XFS (loop0): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:501). Shutting down filesystem. [ 138.190419][ T6963] XFS (loop0): Please unmount the filesystem and rectify the problem(s) [ 138.195308][ T28] audit: type=1800 audit(1777334668.671:42): pid=6938 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.316" name="file1" dev="loop0" ino=6150 res=0 errno=0 [ 138.224618][ T5810] usb 5-1: Using ep0 maxpacket: 32 [ 138.253559][ T5810] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 138.290984][ T5810] usb 5-1: string descriptor 0 read error: -22 [ 138.297625][ T5810] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 138.325643][ T5810] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 138.360590][ T5778] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 138.370469][ T5810] usb 5-1: config 0 descriptor?? [ 138.379276][ T6936] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 138.389991][ T5810] hub 5-1:0.0: bad descriptor, ignoring hub [ 138.404138][ T5810] hub: probe of 5-1:0.0 failed with error -5 [ 138.804956][ T8] usb 5-1: USB disconnect, device number 4 [ 138.823667][ T6973] loop0: detected capacity change from 0 to 1024 [ 139.445297][ T6989] loop2: detected capacity change from 0 to 512 [ 139.484051][ T6987] loop4: detected capacity change from 0 to 4096 [ 139.529346][ T6989] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #12: comm syz.2.327: missing EA_INODE flag [ 139.655190][ T6989] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.327: error while reading EA inode 12 err=-117 [ 139.729451][ T6989] EXT4-fs (loop2): 1 orphan inode deleted [ 139.736549][ T6989] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.792787][ T6989] EXT4-fs warning (device loop2): ext4_empty_dir:3147: inode #2: comm syz.2.327: directory missing '.' [ 139.920022][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.083583][ T6991] loop0: detected capacity change from 0 to 32768 [ 140.121315][ T6991] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 140.208202][ T6991] XFS (loop0): Ending clean mount [ 140.252696][ T6991] XFS (loop0): Quotacheck needed: Please wait. [ 140.314072][ T6991] XFS (loop0): Quotacheck: Done. [ 140.522545][ T7013] XFS (loop0): User initiated shutdown received. [ 140.539676][ T7013] XFS (loop0): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:501). Shutting down filesystem. [ 140.573112][ T28] audit: type=1800 audit(1777334671.051:43): pid=6991 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.328" name="file1" dev="loop0" ino=6150 res=0 errno=0 [ 140.654847][ T7013] XFS (loop0): Please unmount the filesystem and rectify the problem(s) [ 140.765091][ T7019] Bluetooth: MGMT ver 1.22 [ 140.788225][ T5778] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 140.994624][ T5810] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 141.049783][ T7012] loop4: detected capacity change from 0 to 32768 [ 141.092763][ T7012] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 141.143796][ C1] vcan0: j1939_tp_rxtimer: 0xffff888025413000: rx timeout, send abort [ 141.154140][ T7012] XFS (loop4): Ending clean mount [ 141.184561][ T5810] usb 2-1: Using ep0 maxpacket: 32 [ 141.186326][ T7012] XFS (loop4): Quotacheck needed: Please wait. [ 141.194991][ T5810] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 141.226682][ T5810] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 141.244906][ T5810] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 141.269147][ T5810] usb 2-1: Product: syz [ 141.289438][ T5810] usb 2-1: Manufacturer: syz [ 141.310209][ T5810] usb 2-1: SerialNumber: syz [ 141.314152][ T7012] XFS (loop4): Quotacheck: Done. [ 141.334566][ T5810] usb 2-1: config 0 descriptor?? [ 141.343657][ T7017] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 141.354854][ T5810] hub 2-1:0.0: bad descriptor, ignoring hub [ 141.360813][ T5810] hub: probe of 2-1:0.0 failed with error -5 [ 141.382283][ T28] audit: type=1804 audit(1777334671.861:44): pid=7012 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.333" name="/newroot/40/file1/file1" dev="loop4" ino=6150 res=1 errno=0 [ 141.449794][ T6175] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 141.585500][ T5758] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 141.644229][ C1] vcan0: j1939_tp_rxtimer: 0xffff888025412000: rx timeout, send abort [ 141.652755][ C1] vcan0: j1939_tp_rxtimer: 0xffff888025413000: abort rx timeout. Force session deactivation [ 141.808677][ T7041] netlink: 4 bytes leftover after parsing attributes in process `syz.2.342'. [ 141.841960][ T5758] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 141.873656][ T5758] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.913043][ T5758] usb 1-1: config 0 descriptor?? [ 141.924016][ T5758] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 142.041169][ T7017] usb 2-1: reset high-speed USB device number 5 using dummy_hcd [ 142.152763][ C1] vcan0: j1939_tp_rxtimer: 0xffff888025412000: abort rx timeout. Force session deactivation [ 142.254445][ T7017] usb 2-1: device firmware changed [ 142.265042][ T5809] usb 2-1: USB disconnect, device number 5 [ 142.334749][ T5758] cpia1 1-1:0.0: unexpected state after lo power cmd: 00 [ 142.426407][ T5809] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 142.634544][ T5809] usb 2-1: Using ep0 maxpacket: 32 [ 142.641529][ T5809] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 142.660232][ T5809] usb 2-1: string descriptor 0 read error: -22 [ 142.669266][ T5809] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 142.682496][ T5809] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 142.697914][ T5809] usb 2-1: config 0 descriptor?? [ 142.703770][ T7034] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 142.717548][ T5809] hub 2-1:0.0: bad descriptor, ignoring hub [ 142.723493][ T5809] hub: probe of 2-1:0.0 failed with error -5 [ 142.795356][ T7052] loop4: detected capacity change from 0 to 32768 [ 142.821414][ T7052] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 142.855850][ T7052] XFS (loop4): Ending clean mount [ 142.863255][ T7052] XFS (loop4): Quotacheck needed: Please wait. [ 142.884801][ T5840] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 142.922263][ T7052] XFS (loop4): Quotacheck: Done. [ 142.945372][ T5758] gspca_cpia1: usb_control_msg 05, error -71 [ 142.951428][ T5758] cpia1 1-1:0.0: unexpected systemstate: 00 [ 142.966389][ T5758] usb 1-1: USB disconnect, device number 9 [ 143.088340][ T7063] XFS (loop4): User initiated shutdown received. [ 143.095262][ T5840] usb 3-1: Using ep0 maxpacket: 32 [ 143.098236][ T28] audit: type=1800 audit(1777334673.571:45): pid=7052 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.346" name="file1" dev="loop4" ino=6150 res=0 errno=0 [ 143.131275][ T5840] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 143.142641][ T7063] XFS (loop4): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:501). Shutting down filesystem. [ 143.154893][ T2129] usb 2-1: USB disconnect, device number 6 [ 143.164341][ T7063] XFS (loop4): Please unmount the filesystem and rectify the problem(s) [ 143.183840][ T5840] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 143.219031][ T5840] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 143.234063][ T5840] usb 3-1: Product: syz [ 143.245532][ T5840] usb 3-1: Manufacturer: syz [ 143.254615][ T5840] usb 3-1: SerialNumber: syz [ 143.266480][ T5840] usb 3-1: config 0 descriptor?? [ 143.283257][ T7054] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 143.293639][ T5840] hub 3-1:0.0: bad descriptor, ignoring hub [ 143.315742][ T6175] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 143.324569][ T5840] hub: probe of 3-1:0.0 failed with error -5 [ 143.631979][ T7066] loop0: detected capacity change from 0 to 8 [ 143.709657][ T7069] syz.4.348[7069] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 143.709897][ T7069] syz.4.348[7069] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 145.459982][ T7089] loop4: detected capacity change from 0 to 131072 [ 145.495679][ T7089] F2FS-fs (loop4): Found nat_bits in checkpoint [ 145.545376][ T7089] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 145.565525][ T7089] F2FS-fs (loop4): lookup inode (7) has corrupted xattr [ 145.587167][ T7089] F2FS-fs (loop4): lookup inode (7) has corrupted xattr [ 145.615679][ T7089] F2FS-fs (loop4): lookup inode (7) has corrupted xattr [ 145.629911][ T7089] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=fff70000, run fsck to fix. [ 146.002062][ T5840] usb 3-1: reset high-speed USB device number 10 using dummy_hcd [ 146.201628][ T7098] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 146.553407][ T7107] loop0: detected capacity change from 0 to 1024 [ 146.563447][ T7107] EXT4-fs: Ignoring removed bh option [ 146.590685][ T7107] EXT4-fs: Ignoring removed oldalloc option [ 146.610744][ T7107] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 146.622196][ T7107] EXT4-fs (loop0): bad geometry: bigalloc file system with non-zero first_data_block [ 146.622196][ T7107] [ 146.916987][ T7098] usb 3-1: reset high-speed USB device number 10 using dummy_hcd [ 147.116818][ T7098] usb 3-1: device firmware changed [ 147.122788][ T5840] usb 3-1: USB disconnect, device number 10 [ 147.140907][ T7120] loop1: detected capacity change from 0 to 4096 [ 147.159792][ T7120] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [ 147.174747][ T5758] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 147.197976][ T7120] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 147.205490][ T7120] ntfs3: loop1: Failed to load $Extend (-22). [ 147.211634][ T7120] ntfs3: loop1: Failed to initialize $Extend. [ 147.243791][ T7120] ntfs3: loop1: ino=0, attr_set_size [ 147.252929][ T7120] ntfs3: loop1: ino=0, attr_set_size [ 147.260408][ T7120] ntfs3: loop1: ino=0, attr_set_size [ 147.267905][ T7120] ntfs3: loop1: no free space to extend mft [ 147.294694][ T2129] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 147.302429][ T5840] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 147.365273][ T5758] usb 5-1: Using ep0 maxpacket: 8 [ 147.376160][ T5758] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 147.387310][ T5758] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 147.398722][ T5758] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 52064, setting to 1024 [ 147.410364][ T5758] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 147.424310][ T5758] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 147.441935][ T5758] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 147.452071][ T5758] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.484628][ T2129] usb 1-1: Using ep0 maxpacket: 16 [ 147.489987][ T5840] usb 3-1: Using ep0 maxpacket: 32 [ 147.503910][ T2129] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.521668][ T2129] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 147.537921][ T2129] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 147.547919][ T5840] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 147.558655][ T2129] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.571920][ T5840] usb 3-1: string descriptor 0 read error: -22 [ 147.579044][ T5840] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 147.591084][ T2129] usb 1-1: config 0 descriptor?? [ 147.609767][ T5840] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 147.641263][ T5840] usb 3-1: config 0 descriptor?? [ 147.648711][ T7105] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 147.662666][ T5840] hub 3-1:0.0: bad descriptor, ignoring hub [ 147.673101][ T5840] hub: probe of 3-1:0.0 failed with error -5 [ 147.680004][ T5758] usb 5-1: GET_CAPABILITIES returned 0 [ 147.686291][ T5758] usbtmc 5-1:16.0: can't read capabilities [ 147.860590][ T7122] loop1: detected capacity change from 0 to 32768 [ 147.920187][ T5758] usb 5-1: USB disconnect, device number 5 [ 147.963971][ T7122] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 148.037294][ T8] usb 3-1: USB disconnect, device number 11 [ 148.056324][ T7122] XFS (loop1): Ending clean mount [ 148.067724][ T7122] XFS (loop1): Quotacheck needed: Please wait. [ 148.109845][ T7122] XFS (loop1): Quotacheck: Done. [ 148.198351][ T6196] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 148.400686][ T2129] usbhid 1-1:0.0: can't add hid device: -71 [ 148.406813][ T2129] usbhid: probe of 1-1:0.0 failed with error -71 [ 148.424298][ T2129] usb 1-1: USB disconnect, device number 10 [ 148.612459][ T7137] loop2: detected capacity change from 0 to 512 [ 148.628498][ T7137] EXT4-fs (loop2): 1 truncate cleaned up [ 148.640644][ T7137] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.781386][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.871600][ T7142] loop2: detected capacity change from 0 to 16 [ 150.214670][ T5809] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 150.414679][ T5809] usb 5-1: Using ep0 maxpacket: 32 [ 150.422219][ T5809] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 150.444333][ T5809] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 150.453909][ T5809] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 150.462262][ T5809] usb 5-1: Product: syz [ 150.467749][ T5809] usb 5-1: Manufacturer: syz [ 150.472478][ T5809] usb 5-1: SerialNumber: syz [ 150.481297][ T5809] usb 5-1: config 0 descriptor?? [ 150.487350][ T7164] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 150.496909][ T5809] hub 5-1:0.0: bad descriptor, ignoring hub [ 150.502990][ T5809] hub: probe of 5-1:0.0 failed with error -5 [ 151.147109][ T7164] usb 5-1: reset high-speed USB device number 6 using dummy_hcd [ 151.341764][ T7164] usb 5-1: device firmware changed [ 151.349316][ T5809] usb 5-1: USB disconnect, device number 6 [ 151.483360][ T7185] loop2: detected capacity change from 0 to 32768 [ 151.501261][ T8] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 151.517503][ T7185] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.391 (7185) [ 151.537518][ T5809] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 151.585263][ T7185] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 151.596187][ T7185] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 151.607045][ T7185] BTRFS info (device loop2): using free space tree [ 151.720182][ T7185] BTRFS info (device loop2): enabling ssd optimizations [ 151.727711][ T7185] BTRFS info (device loop2): auto enabling async discard [ 151.735091][ T5809] usb 5-1: Using ep0 maxpacket: 32 [ 151.742481][ T7197] loop1: detected capacity change from 0 to 4096 [ 151.749300][ T8] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 151.766106][ T5809] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 151.786662][ T8] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 151.815002][ T5809] usb 5-1: string descriptor 0 read error: -22 [ 151.821298][ T5809] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 151.851347][ T8] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 151.865258][ T5809] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 151.880259][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.891029][ T7197] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 151.900268][ T8] usb 1-1: Product: syz [ 151.905709][ T5809] usb 5-1: config 0 descriptor?? [ 151.921004][ T8] usb 1-1: Manufacturer: syz [ 151.926606][ T7176] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 151.948890][ T8] usb 1-1: SerialNumber: syz [ 151.966647][ T5809] hub 5-1:0.0: bad descriptor, ignoring hub [ 151.972603][ T5809] hub: probe of 5-1:0.0 failed with error -5 [ 152.052674][ T5773] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 152.209754][ T7183] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 152.385415][ T2129] usb 5-1: USB disconnect, device number 7 [ 152.498612][ T6369] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop2 scanned by udevd (6369) [ 153.049059][ T8] cdc_ncm 1-1:1.0: bind() failure [ 153.059214][ T8] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 153.066112][ T8] cdc_ncm 1-1:1.1: bind() failure [ 153.073990][ T8] usb 1-1: USB disconnect, device number 11 [ 154.046256][ T7211] loop1: detected capacity change from 0 to 32768 [ 154.065862][ T7211] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.395 (7211) [ 154.120984][ T7211] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 154.153443][ T7211] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 154.178540][ T7211] BTRFS info (device loop1): setting nodatacow, compression disabled [ 154.198541][ T7211] BTRFS info (device loop1): disabling tree log [ 154.211440][ T7211] BTRFS info (device loop1): turning on sync discard [ 154.226489][ T7211] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 154.245980][ T7211] BTRFS info (device loop1): force zstd compression, level 3 [ 154.258995][ T7211] BTRFS info (device loop1): using free space tree [ 154.330286][ T7211] BTRFS info (device loop1): enabling ssd optimizations [ 154.818687][ T6196] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 154.892550][ T7244] loop2: detected capacity change from 0 to 4096 [ 155.144557][ T8] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 155.183179][ T7255] loop4: detected capacity change from 0 to 128 [ 155.254162][ T7255] FAT-fs (loop4): Directory bread(block 414) failed [ 155.294595][ T7255] FAT-fs (loop4): Directory bread(block 415) failed [ 155.301269][ T7255] FAT-fs (loop4): Directory bread(block 416) failed [ 155.353504][ T7255] FAT-fs (loop4): Directory bread(block 417) failed [ 155.360300][ T8] usb 1-1: Using ep0 maxpacket: 32 [ 155.389447][ T7255] FAT-fs (loop4): Directory bread(block 418) failed [ 155.397947][ T8] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 155.413355][ T7255] FAT-fs (loop4): Directory bread(block 419) failed [ 155.422652][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.443396][ T7255] FAT-fs (loop4): Directory bread(block 420) failed [ 155.465684][ T7255] FAT-fs (loop4): Directory bread(block 421) failed [ 155.473560][ T8] usb 1-1: config 0 descriptor?? [ 155.552591][ T7255] FAT-fs (loop4): FAT read failed (blocknr 128) [ 155.622920][ T7255] FAT-fs (loop4): FAT read failed (blocknr 128) [ 155.691865][ T8] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 155.720258][ T8] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 155.759179][ T8] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 155.778564][ T8] usb 1-1: media controller created [ 155.848015][ T8] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 156.071447][ T8] DVB: Unable to find symbol dib7000p_attach() [ 156.091053][ T8] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 156.244551][ T8] rc_core: IR keymap rc-dib0700-rc5 not found [ 156.250690][ T8] Registered IR keymap rc-empty [ 156.290677][ T8] dvb-usb: could not initialize remote control. [ 156.303799][ T8] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 156.321697][ T8] usb 1-1: USB disconnect, device number 12 [ 156.433351][ T8] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 156.563708][ T7273] loop4: detected capacity change from 0 to 32768 [ 156.598271][ T7273] JBD2: Ignoring recovery information on journal [ 156.691657][ T7273] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 156.838566][ T6175] ocfs2: Unmounting device (7,4) on (node local) [ 157.427836][ T7295] loop1: detected capacity change from 0 to 128 [ 157.493680][ T7295] syz.1.416: attempt to access beyond end of device [ 157.493680][ T7295] loop1: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 157.882489][ T7291] loop4: detected capacity change from 0 to 32768 [ 157.961625][ T7291] XFS (loop4): DAX unsupported by block device. Turning off DAX. [ 157.981967][ T7291] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 158.060765][ T7311] loop2: detected capacity change from 0 to 256 [ 158.109071][ T7291] XFS (loop4): Ending clean mount [ 158.152342][ T7291] XFS (loop4): Quotacheck needed: Please wait. [ 158.182626][ T7313] loop1: detected capacity change from 0 to 4096 [ 158.224243][ T7313] ntfs: (device loop1): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 158.248293][ T7293] loop0: detected capacity change from 0 to 32768 [ 158.262084][ T7291] XFS (loop4): Quotacheck: Done. [ 158.330774][ T7293] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 scanned by syz.0.415 (7293) [ 158.344158][ T7311] FAT-fs (loop2): Directory bread(block 64) failed [ 158.361018][ T7313] ntfs: (device loop1): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 158.374352][ T7311] FAT-fs (loop2): Directory bread(block 65) failed [ 158.397808][ T7311] FAT-fs (loop2): Directory bread(block 66) failed [ 158.413780][ T7313] ntfs: (device loop1): check_mft_mirror(): Incomplete multi sector transfer detected in mft record 2. [ 158.443616][ T7311] FAT-fs (loop2): Directory bread(block 67) failed [ 158.444598][ T7293] BTRFS info (device loop0): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 158.461122][ T7313] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 158.470842][ T7311] FAT-fs (loop2): Directory bread(block 68) failed [ 158.494564][ T7293] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 158.495535][ T7311] FAT-fs (loop2): Directory bread(block 69) failed [ 158.512114][ T7313] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 158.522319][ T7311] FAT-fs (loop2): Directory bread(block 70) failed [ 158.526474][ T7293] BTRFS info (device loop0): turning on sync discard [ 158.540648][ T7311] FAT-fs (loop2): Directory bread(block 71) failed [ 158.545390][ T7313] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 158.563242][ T6175] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 158.568759][ T7293] BTRFS info (device loop0): turning on async discard [ 158.582981][ T7313] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 158.595530][ T7311] FAT-fs (loop2): Directory bread(block 72) failed [ 158.600804][ T7293] BTRFS info (device loop0): using free space tree [ 158.613146][ T7311] FAT-fs (loop2): Directory bread(block 73) failed [ 158.676534][ T7313] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 158.784632][ T7313] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 158.793702][ T7313] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 158.861368][ T7293] BTRFS info (device loop0): enabling ssd optimizations [ 158.918911][ T7313] ntfs: volume version 3.1. [ 159.176448][ T5778] BTRFS info (device loop0): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 159.405004][ T5758] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 159.604699][ T5758] usb 3-1: Using ep0 maxpacket: 32 [ 159.632825][ T5758] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 159.662069][ T5758] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.690150][ T5758] usb 3-1: config 0 descriptor?? [ 159.940249][ T5758] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 159.966944][ T5758] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 159.994879][ T5758] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 160.009875][ T5758] usb 3-1: media controller created [ 160.074152][ T5758] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 160.220182][ T7341] loop1: detected capacity change from 0 to 32768 [ 160.234198][ T5758] DVB: Unable to find symbol dib7000p_attach() [ 160.240730][ T5758] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 160.259093][ T7341] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop1 scanned by syz.1.426 (7341) [ 160.293919][ T7341] BTRFS info (device loop1): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 160.318704][ T7341] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 160.341087][ T7341] BTRFS info (device loop1): using free space tree [ 160.420426][ T5758] rc_core: IR keymap rc-dib0700-rc5 not found [ 160.439015][ T5758] Registered IR keymap rc-empty [ 160.453351][ T5758] dvb-usb: could not initialize remote control. [ 160.484610][ T7341] BTRFS info (device loop1): enabling ssd optimizations [ 160.487754][ T5758] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 160.501927][ T7341] BTRFS info (device loop1): auto enabling async discard [ 160.539892][ T5758] usb 3-1: USB disconnect, device number 12 [ 160.647288][ T5758] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 160.673856][ T6196] BTRFS info (device loop1): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 161.007508][ T7378] loop4: detected capacity change from 0 to 4096 [ 161.111184][ T7378] ntfs: volume version 3.1. [ 161.390144][ T7384] syzkaller1: entered promiscuous mode [ 161.414715][ T7384] syzkaller1: entered allmulticast mode [ 161.504754][ T7387] input: syz1 as /devices/virtual/input/input13 [ 161.782117][ T7380] loop1: detected capacity change from 0 to 32768 [ 161.809768][ T7396] loop4: detected capacity change from 0 to 512 [ 161.833336][ T7398] netlink: 'syz.2.442': attribute type 1 has an invalid length. [ 161.849629][ T7398] netlink: 'syz.2.442': attribute type 2 has an invalid length. [ 161.858511][ T7398] netlink: 'syz.2.442': attribute type 2 has an invalid length. [ 161.867338][ T7398] netlink: 'syz.2.442': attribute type 3 has an invalid length. [ 161.875356][ T7398] netlink: 'syz.2.442': attribute type 4 has an invalid length. [ 161.883253][ T7398] netlink: 'syz.2.442': attribute type 5 has an invalid length. [ 161.892061][ T7398] netlink: 'syz.2.442': attribute type 6 has an invalid length. [ 161.900469][ T7398] netlink: 'syz.2.442': attribute type 7 has an invalid length. [ 161.908613][ T7398] netlink: 'syz.2.442': attribute type 9 has an invalid length. [ 161.916582][ T7398] netlink: 'syz.2.442': attribute type 10 has an invalid length. [ 161.924680][ T7398] netlink: 126304 bytes leftover after parsing attributes in process `syz.2.442'. [ 161.945924][ T7396] EXT4-fs (loop4): 1 truncate cleaned up [ 161.952790][ T7396] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.049771][ T7396] overlayfs: upper fs needs to support d_type. [ 162.111026][ T7396] overlayfs: invalid origin (0000) [ 162.265194][ T6175] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 4294901760 (level 0) [ 162.302133][ T6175] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 4294967295 (level 1) [ 162.351505][ T6175] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz-executor: invalid indirect mapped block 65535 (level 2) [ 162.437369][ T6175] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.315200][ T7451] loop0: detected capacity change from 0 to 1024 [ 163.332589][ T7451] EXT4-fs: Ignoring removed bh option [ 163.344689][ T5810] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 163.375651][ T7451] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.431221][ T7451] ext4 filesystem being mounted at /119/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 163.501655][ T7451] EXT4-fs error (device loop0): ext4_free_blocks:6694: comm syz.0.450: Freeing blocks not in datazone - block = 0, count = 16 [ 163.558360][ T5810] usb 5-1: Using ep0 maxpacket: 32 [ 163.566129][ T5810] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 163.584528][ T5810] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.609470][ T5810] usb 5-1: config 0 descriptor?? [ 163.660058][ T12] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm kworker/u4:1: bg 0: block 112: padding at end of block bitmap is not set [ 163.679836][ T12] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 163.712712][ T12] EXT4-fs (loop0): This should not happen!! Data will be lost [ 163.712712][ T12] [ 163.743271][ T12] EXT4-fs (loop0): Total free blocks count 0 [ 163.754519][ T12] EXT4-fs (loop0): Free/Dirty block details [ 163.770697][ T12] EXT4-fs (loop0): free_blocks=16 [ 163.780869][ T12] EXT4-fs (loop0): dirty_blocks=16 [ 163.790888][ T12] EXT4-fs (loop0): Block reservation details [ 163.801615][ T7462] loop1: detected capacity change from 0 to 1024 [ 163.804695][ T12] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 163.839230][ T5778] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 163.861871][ T5810] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 163.895980][ T5810] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 163.915076][ T5810] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 163.932592][ T5810] usb 5-1: media controller created [ 163.976426][ T5810] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 164.147516][ T5810] DVB: Unable to find symbol dib7000p_attach() [ 164.153733][ T5810] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 164.290084][ T5810] rc_core: IR keymap rc-dib0700-rc5 not found [ 164.297729][ T5810] Registered IR keymap rc-empty [ 164.302819][ T5810] dvb-usb: could not initialize remote control. [ 164.334829][ T5810] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 164.381126][ T5810] usb 5-1: USB disconnect, device number 8 [ 164.445954][ T5810] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 164.483830][ T7458] loop2: detected capacity change from 0 to 32768 [ 164.541023][ T7458] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 164.619052][ T7458] XFS (loop2): Ending clean mount [ 164.632491][ T7458] XFS (loop2): Quotacheck needed: Please wait. [ 164.719786][ T7458] XFS (loop2): Quotacheck: Done. [ 164.880288][ T5773] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 165.804150][ T5083] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 165.824540][ T5083] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 165.835135][ T5083] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 165.863806][ T5083] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 165.884804][ T5083] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 165.892205][ T5083] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 166.170326][ T7507] syzkaller1: entered promiscuous mode [ 166.180143][ T7507] syzkaller1: entered allmulticast mode [ 166.211090][ T7494] loop1: detected capacity change from 0 to 32768 [ 166.292177][ T7494] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 166.401318][ T7494] XFS (loop1): Ending clean mount [ 166.432439][ T7494] XFS (loop1): Quotacheck needed: Please wait. [ 166.578062][ T7494] XFS (loop1): Quotacheck: Done. [ 166.610284][ T7503] chnl_net:caif_netlink_parms(): no params data found [ 166.800398][ T7503] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.820248][ T7503] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.831214][ T6196] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 166.831636][ T7503] bridge_slave_0: entered allmulticast mode [ 166.852021][ T7503] bridge_slave_0: entered promiscuous mode [ 166.873521][ T7503] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.882716][ T7503] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.890080][ T7503] bridge_slave_1: entered allmulticast mode [ 166.897738][ T7503] bridge_slave_1: entered promiscuous mode [ 166.931956][ T7503] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 166.945141][ T7503] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 166.996620][ T7503] team0: Port device team_slave_0 added [ 167.007141][ T7503] team0: Port device team_slave_1 added [ 167.053403][ T7503] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 167.060705][ T7503] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 167.088887][ T7503] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 167.101666][ T7503] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 167.109030][ T7503] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 167.135172][ T7503] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 167.207277][ T7503] hsr_slave_0: entered promiscuous mode [ 167.214988][ T7503] hsr_slave_1: entered promiscuous mode [ 167.350243][ T7543] loop2: detected capacity change from 0 to 512 [ 167.362471][ T7543] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 167.393560][ T7543] EXT4-fs (loop2): 1 truncate cleaned up [ 167.412865][ T7543] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.510629][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.538294][ T7503] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 167.559636][ T7503] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 167.582907][ T7503] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 167.601560][ T7503] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 167.727899][ T7503] 8021q: adding VLAN 0 to HW filter on device bond0 [ 167.751512][ T7503] 8021q: adding VLAN 0 to HW filter on device team0 [ 167.766222][ T2975] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.773433][ T2975] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.788767][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.795967][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 167.934672][ T5771] Bluetooth: hci3: command tx timeout [ 168.085674][ T7503] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 168.095496][ T7556] sock: sock_set_timeout: `syz.4.485' (pid 7556) tries to set negative timeout [ 168.735961][ T7576] netlink: 256 bytes leftover after parsing attributes in process `syz.1.490'. [ 168.777428][ T7503] veth0_vlan: entered promiscuous mode [ 168.811908][ T7503] veth1_vlan: entered promiscuous mode [ 168.930766][ T7584] loop1: detected capacity change from 0 to 1024 [ 168.931695][ T7503] veth0_macvtap: entered promiscuous mode [ 168.958995][ T7503] veth1_macvtap: entered promiscuous mode [ 168.982335][ T7503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.005073][ T7503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.032911][ T7503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.047149][ T7503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.075010][ T7503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.085907][ T7503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.096286][ T7503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.108208][ T7503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.120862][ T7503] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 169.138650][ T7503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.161136][ T7503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.171184][ T7503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.184580][ T966] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 169.196546][ T7503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.207565][ T7503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.219642][ T7503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.230372][ T7503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.246554][ T7503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.258698][ T7503] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 169.281632][ T7503] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.291364][ T7503] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.303340][ T7503] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.313584][ T7503] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.395497][ T966] usb 3-1: Using ep0 maxpacket: 8 [ 169.403747][ T966] usb 3-1: config 0 has no interfaces? [ 169.421472][ T966] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 169.450731][ T966] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.481328][ T966] usb 3-1: config 0 descriptor?? [ 169.511673][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 169.538532][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.553229][ T7588] syz.1.496 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 169.615390][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 169.623354][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.719151][ T5758] usb 3-1: USB disconnect, device number 13 [ 170.014630][ T5771] Bluetooth: hci3: command tx timeout [ 170.130819][ T7603] loop1: detected capacity change from 0 to 512 [ 170.156070][ T7603] EXT4-fs error (device loop1): ext4_orphan_get:1404: inode #15: comm syz.1.501: inode has both inline data and extents flags [ 170.194199][ T7603] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.501: couldn't read orphan inode 15 (err -117) [ 170.237571][ T7603] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.401347][ T7609] macvlan1: entered promiscuous mode [ 170.418302][ T6196] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.428223][ T7609] ipvlan0: entered promiscuous mode [ 170.435047][ T7609] ipvlan0: left promiscuous mode [ 170.441765][ T7609] macvlan1: left promiscuous mode [ 170.530311][ T7611] overlayfs: upper fs does not support file handles, falling back to index=off. [ 170.634566][ T966] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 170.634646][ T7613] Illegal XDP return value 4294967294 on prog (id 38) dev N/A, expect packet loss! [ 170.702592][ T7615] loop2: detected capacity change from 0 to 128 [ 170.751344][ T7615] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 170.776255][ T7615] ext4 filesystem being mounted at /133/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 170.800336][ T7615] syz.2.506 (pid 7615) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 170.848279][ T5773] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 170.866401][ T966] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 170.876798][ T966] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 170.890183][ T966] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 170.900203][ T966] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.140771][ T966] usb 5-1: usb_control_msg returned -32 [ 171.166617][ T966] usbtmc 5-1:16.0: can't read capabilities [ 171.248499][ T7626] loop2: detected capacity change from 0 to 2048 [ 171.292409][ T7626] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 171.805428][ T7624] loop5: detected capacity change from 0 to 32768 [ 171.931304][ T7641] netlink: 40 bytes leftover after parsing attributes in process `syz.1.518'. [ 171.941373][ T7641] netlink: 40 bytes leftover after parsing attributes in process `syz.1.518'. [ 172.167674][ T7643] loop1: detected capacity change from 0 to 4096 [ 172.198199][ T7643] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.331094][ T6196] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.115017][ T7673] loop2: detected capacity change from 0 to 2048 [ 173.178288][ T7673] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 173.258057][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.361288][ T966] usb 5-1: USB disconnect, device number 9 [ 173.583043][ T7671] loop1: detected capacity change from 0 to 40427 [ 173.614845][ T7671] F2FS-fs (loop1): invalid crc value [ 173.660370][ T7671] F2FS-fs (loop1): Found nat_bits in checkpoint [ 173.723930][ T113] ------------[ cut here ]------------ [ 173.730093][ T113] WARNING: CPU: 1 PID: 113 at fs/jfs/jfs_dmap.c:2875 dbAdjTree+0x448/0x4d0 [ 173.738919][ T113] Modules linked in: [ 173.743673][ T113] CPU: 1 PID: 113 Comm: jfsCommit Not tainted syzkaller #0 [ 173.751076][ T113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 173.761236][ T113] RIP: 0010:dbAdjTree+0x448/0x4d0 [ 173.766362][ T113] Code: e8 bd d5 db fe e9 5a ff ff ff e8 e3 9e 83 fe eb 05 e8 dc 9e 83 fe 48 83 c4 28 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 c8 9e 83 fe <0f> 0b eb e8 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c ee fb ff ff 4c [ 173.787806][ T113] RSP: 0018:ffffc90002cc7648 EFLAGS: 00010293 [ 173.793934][ T113] RAX: ffffffff83038338 RBX: ffff8880629c5010 RCX: ffff88801a711e00 [ 173.802506][ T113] RDX: 0000000000000000 RSI: 0000000000000155 RDI: 0000000000020056 [ 173.810584][ T113] RBP: 0000000000020056 R08: ffffea00018a7147 R09: 1ffffd4000314e28 [ 173.818656][ T113] R10: dffffc0000000000 R11: fffff94000314e29 R12: ffff8880629c5018 [ 173.826747][ T113] R13: dffffc0000000000 R14: 0000000000000004 R15: 0000000000000155 [ 173.834824][ T113] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 173.844761][ T113] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 173.851402][ T113] CR2: 0000000000000000 CR3: 000000005a7e4000 CR4: 00000000003506e0 [ 173.859732][ T113] Call Trace: [ 173.863056][ T113] [ 173.866071][ T113] ? lock_page+0x2a0/0x2a0 [ 173.870531][ T113] dbJoin+0x238/0x300 [ 173.874573][ T113] dbFreeBits+0x4e1/0xda0 [ 173.878959][ T113] dbFree+0x332/0x650 [ 173.883008][ T113] txFreeMap+0x9e6/0xde0 [ 173.887351][ T113] ? do_raw_spin_unlock+0x121/0x230 [ 173.892597][ T113] xtTruncate+0xd27/0x2ec0 [ 173.897136][ T113] ? xtInitRoot+0x170/0x170 [ 173.901733][ T113] ? __lock_acquire+0x7d40/0x7d40 [ 173.906845][ T113] ? do_raw_spin_lock+0x11f/0x2c0 [ 173.911947][ T113] ? __asan_memset+0x22/0x40 [ 173.916621][ T113] ? __dquot_initialize+0x217/0xcd0 [ 173.921873][ T113] jfs_free_zero_link+0x35c/0x4c0 [ 173.927030][ T113] ? inode_wait_for_writeback+0x1e3/0x230 [ 173.932795][ T113] ? jfs_write_failed+0x190/0x190 [ 173.937906][ T113] ? sb_clear_inode_writeback+0x360/0x360 [ 173.943683][ T113] ? do_raw_spin_lock+0x11f/0x2c0 [ 173.949974][ T113] ? bit_waitqueue+0x30/0x30 [ 173.954735][ T113] jfs_evict_inode+0x35d/0x440 [ 173.959543][ T113] ? evict+0x4c4/0x8d0 [ 173.963673][ T113] ? jfs_write_inode+0x220/0x220 [ 173.968738][ T113] evict+0x4ca/0x8d0 [ 173.972699][ T113] ? proc_nr_inodes+0x230/0x230 [ 173.977656][ T113] ? do_raw_spin_unlock+0x121/0x230 [ 173.982919][ T113] ? _raw_spin_unlock+0x28/0x40 [ 173.987844][ T113] ? iput+0x706/0x920 [ 173.991865][ T113] jfs_lazycommit+0x429/0xa70 [ 173.996625][ T113] ? txFreelock+0x5a0/0x5a0 [ 174.001193][ T113] ? do_task_dead+0xd0/0xd0 [ 174.005855][ T113] ? __kthread_parkme+0x7a/0x1c0 [ 174.010840][ T113] kthread+0x2fa/0x390 [ 174.014994][ T113] ? txFreelock+0x5a0/0x5a0 [ 174.019533][ T113] ? kthread_blkcg+0xd0/0xd0 [ 174.024198][ T113] ret_from_fork+0x48/0x80 [ 174.028738][ T113] ? kthread_blkcg+0xd0/0xd0 [ 174.033373][ T113] ret_from_fork_asm+0x11/0x20 [ 174.038302][ T113] [ 174.041382][ T113] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 174.048788][ T113] CPU: 1 PID: 113 Comm: jfsCommit Not tainted syzkaller #0 [ 174.056022][ T113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 174.066126][ T113] Call Trace: [ 174.069415][ T113] [ 174.072356][ T113] dump_stack_lvl+0x18c/0x250 [ 174.077067][ T113] ? show_regs_print_info+0x20/0x20 [ 174.082282][ T113] ? load_image+0x420/0x420 [ 174.086838][ T113] panic+0x2dc/0x730 [ 174.090764][ T113] ? bpf_jit_dump+0xd0/0xd0 [ 174.095292][ T113] ? ret_from_fork_asm+0x11/0x20 [ 174.100253][ T113] __warn+0x2e0/0x470 [ 174.104253][ T113] ? dbAdjTree+0x448/0x4d0 [ 174.108691][ T113] ? dbAdjTree+0x448/0x4d0 [ 174.113126][ T113] report_bug+0x2be/0x4f0 [ 174.117479][ T113] ? dbAdjTree+0x448/0x4d0 [ 174.121905][ T113] ? dbAdjTree+0x448/0x4d0 [ 174.126338][ T113] ? dbAdjTree+0x44a/0x4d0 [ 174.130764][ T113] handle_bug+0xcf/0x120 [ 174.135049][ T113] exc_invalid_op+0x1a/0x50 [ 174.139572][ T113] asm_exc_invalid_op+0x1a/0x20 [ 174.144438][ T113] RIP: 0010:dbAdjTree+0x448/0x4d0 [ 174.149488][ T113] Code: e8 bd d5 db fe e9 5a ff ff ff e8 e3 9e 83 fe eb 05 e8 dc 9e 83 fe 48 83 c4 28 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 c8 9e 83 fe <0f> 0b eb e8 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c ee fb ff ff 4c [ 174.169213][ T113] RSP: 0018:ffffc90002cc7648 EFLAGS: 00010293 [ 174.175327][ T113] RAX: ffffffff83038338 RBX: ffff8880629c5010 RCX: ffff88801a711e00 [ 174.183319][ T113] RDX: 0000000000000000 RSI: 0000000000000155 RDI: 0000000000020056 [ 174.191311][ T113] RBP: 0000000000020056 R08: ffffea00018a7147 R09: 1ffffd4000314e28 [ 174.199319][ T113] R10: dffffc0000000000 R11: fffff94000314e29 R12: ffff8880629c5018 [ 174.207303][ T113] R13: dffffc0000000000 R14: 0000000000000004 R15: 0000000000000155 [ 174.215296][ T113] ? dbAdjTree+0x448/0x4d0 [ 174.219745][ T113] ? dbAdjTree+0x448/0x4d0 [ 174.224171][ T113] ? lock_page+0x2a0/0x2a0 [ 174.228613][ T113] dbJoin+0x238/0x300 [ 174.232616][ T113] dbFreeBits+0x4e1/0xda0 [ 174.236965][ T113] dbFree+0x332/0x650 [ 174.240966][ T113] txFreeMap+0x9e6/0xde0 [ 174.245232][ T113] ? do_raw_spin_unlock+0x121/0x230 [ 174.250451][ T113] xtTruncate+0xd27/0x2ec0 [ 174.254921][ T113] ? xtInitRoot+0x170/0x170 [ 174.259465][ T113] ? __lock_acquire+0x7d40/0x7d40 [ 174.264537][ T113] ? do_raw_spin_lock+0x11f/0x2c0 [ 174.269593][ T113] ? __asan_memset+0x22/0x40 [ 174.274329][ T113] ? __dquot_initialize+0x217/0xcd0 [ 174.279570][ T113] jfs_free_zero_link+0x35c/0x4c0 [ 174.284618][ T113] ? inode_wait_for_writeback+0x1e3/0x230 [ 174.290358][ T113] ? jfs_write_failed+0x190/0x190 [ 174.295417][ T113] ? sb_clear_inode_writeback+0x360/0x360 [ 174.301152][ T113] ? do_raw_spin_lock+0x11f/0x2c0 [ 174.306202][ T113] ? bit_waitqueue+0x30/0x30 [ 174.310813][ T113] jfs_evict_inode+0x35d/0x440 [ 174.315596][ T113] ? evict+0x4c4/0x8d0 [ 174.319705][ T113] ? jfs_write_inode+0x220/0x220 [ 174.324669][ T113] evict+0x4ca/0x8d0 [ 174.328594][ T113] ? proc_nr_inodes+0x230/0x230 [ 174.333472][ T113] ? do_raw_spin_unlock+0x121/0x230 [ 174.338694][ T113] ? _raw_spin_unlock+0x28/0x40 [ 174.343580][ T113] ? iput+0x706/0x920 [ 174.347590][ T113] jfs_lazycommit+0x429/0xa70 [ 174.352288][ T113] ? txFreelock+0x5a0/0x5a0 [ 174.356811][ T113] ? do_task_dead+0xd0/0xd0 [ 174.361328][ T113] ? __kthread_parkme+0x7a/0x1c0 [ 174.366284][ T113] kthread+0x2fa/0x390 [ 174.370362][ T113] ? txFreelock+0x5a0/0x5a0 [ 174.374898][ T113] ? kthread_blkcg+0xd0/0xd0 [ 174.379503][ T113] ret_from_fork+0x48/0x80 [ 174.383958][ T113] ? kthread_blkcg+0xd0/0xd0 [ 174.388581][ T113] ret_from_fork_asm+0x11/0x20 [ 174.393391][ T113] [ 174.396983][ T113] Kernel Offset: disabled [ 174.401411][ T113] Rebooting in 86400 seconds..