last executing test programs: 8.896557708s ago: executing program 4 (id=789): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x12, 0x18}, [@ldst={0x4, 0x3, 0x5, 0x0, 0x2, 0x10}]}, &(0x7f0000003ff6)='GPL\x00', 0xa, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) 7.021018692s ago: executing program 4 (id=807): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@newtaction={0xd4, 0x30, 0xc96f2b0dc02612b1, 0x70bd2d, 0x25dfdbff, {}, [{0xc0, 0x1, [@m_nat={0xbc, 0x17, 0x0, 0x0, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0x8, 0x7, 0x3, 0x80000000}, @private=0xa010101, @remote, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x3, 0xffffffffffffffff, 0x3, 0x6}, @remote, @rand_addr=0x64010100, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x8, 0x3, 0x2, 0x128, 0x4}, @broadcast, @broadcast, 0xffffff00}}]}, {0x19, 0x6, "b7e5307681464d8557d780071307f7c6a1d3bec622"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4004801}, 0x50) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x8804, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 6.743360806s ago: executing program 4 (id=812): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x142ba3) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/mem_sleep', 0xb883, 0xb2) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000000)={r1, 0x0, {0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0xf, 0x14, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f9858c1a7bedabd69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30d50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc20d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x2, 0x9]}}) ioctl$LOOP_CHANGE_FD(r0, 0x4c09, r1) 6.290905747s ago: executing program 4 (id=819): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000340)='./file0/../file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0xb101e, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x8000, &(0x7f0000000180)={0x80, 0x0, 0x40000}, 0x20) 6.120546983s ago: executing program 4 (id=821): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x244, 0x65, 0x800, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_RATE={0x6, 0x5, {0x8, 0x81}}, @filter_kind_options=@f_bpf={{0x8}, {0x208, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x1f0, 0x1, [@m_ct={0x13c, 0xa, 0x0, 0x0, {{0x7}, {0x8c, 0x2, 0x0, 0x1, [@TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e22}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @loopback}, @TCA_CT_LABELS={0x14, 0x7, "efe7377efb339bc59f350c7b025a3b71"}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x9}, @TCA_CT_PARMS={0x18, 0x1, {0x9, 0x1c, 0x0, 0x7, 0x1000}}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @private=0xa010101}, @TCA_CT_ACTION={0x6, 0x3, 0x1}, @TCA_CT_ACTION={0x6, 0x3, 0x8}, @TCA_CT_PARMS={0x18, 0x1, {0xf, 0x101, 0x10000000, 0x0, 0x2}}, @TCA_CT_LABELS={0x14, 0x7, "075abac8315d88d707c2ed5fc953392e"}]}, {0x89, 0x6, "a9b0373813e0f2da6e8f5cd5c2f0e993b814de8645c7545f5f50c5380480ed4ef5013ca2d00164d47399225c275c36df8b272a85bb6c9c930de5c21cfca20d72ffe99adec2667fa15f5dc9985c817cb94e99bf8eae0ce64edfaa10bc97d348e5ca551e710bda8f076cf48aeee6d7cc33aeaa9d11c113860c15a1e0dee5e6a21d9402e17eba"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_mirred={0xb0, 0x0, 0x0, 0x0, {{0xb}, {0x84, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x80000000, 0x7, 0x4, 0x3, 0xfeb}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3ff, 0x7, 0xffffffffffffffff, 0x2, 0x2}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x800, 0x6, 0x0, 0x306, 0x3b7}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x365, 0xfffffff9, 0x20000000, 0x3, 0x6}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x244}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 5.644873991s ago: executing program 4 (id=828): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="030000000400000004eca6141f198e9dd6000000", @ANYRES32=0x1, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000002"], 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="ac000000", @ANYRES16=r1, @ANYBLOB="01060000000000000000090000002c0004801300010062726f6164636173742d6c696e6b00001400078008000600"], 0xac}}, 0x0) 5.644570307s ago: executing program 3 (id=829): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x200000, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@remote, 0x200000, 0x2, 0x0, 0xb, 0x3, 0x6}, 0x20) 5.13174494s ago: executing program 32 (id=828): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="030000000400000004eca6141f198e9dd6000000", @ANYRES32=0x1, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000002"], 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="ac000000", @ANYRES16=r1, @ANYBLOB="01060000000000000000090000002c0004801300010062726f6164636173742d6c696e6b00001400078008000600"], 0xac}}, 0x0) 5.099733055s ago: executing program 3 (id=834): syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbb0180c200000008060001080006040002aaaaaaaaa68322ec14bbaaaaaaaaaa00ac1414aa"], 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) 4.991170786s ago: executing program 0 (id=835): syz_mount_image$xfs(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x4800802, &(0x7f0000000040)={[{@gqnoenforce}]}, 0x4, 0x9869, &(0x7f00000133c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x143040, 0x30) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x181142, 0x94) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f00000000c0)={{r0}, 0x2823}) 4.898566601s ago: executing program 3 (id=836): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000075f84c1071042703a461000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f0000001500)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 4.502735651s ago: executing program 2 (id=838): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x11, &(0x7f0000000200)={[{@delalloc}, {@nobarrier}, {@i_version}]}, 0x1, 0x522, &(0x7f00000007c0)="$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") r0 = socket(0x11, 0x3, 0xff) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000140)=0xc) quotactl$Q_GETQUOTA(0xffffffff80000700, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, r1, 0x0) 4.094786097s ago: executing program 2 (id=842): r0 = socket(0x2, 0x1, 0x0) listen(r0, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000454ff0)={0x0, 0x2710}, 0x10) accept4$unix(r0, 0x0, 0x0, 0x800) 3.737952991s ago: executing program 2 (id=843): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) sendmmsg$inet(r0, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0xc4}, 0x1, 0x1000000, 0x0, 0x40488d5}, 0x0) 3.508653208s ago: executing program 1 (id=844): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x1810754, &(0x7f00000001c0)={[{@jqfmt_vfsold}, {@errors_continue}, {@delalloc}, {@prjquota}, {@usrquota}, {@resuid={'resuid', 0x3d, 0xee00}}, {@usrjquota, 0x5}, {@min_batch_time={'min_batch_time', 0x3d, 0xfffffffc}}, {@nodiscard}, {@test_dummy_encryption}]}, 0xff, 0x46e, &(0x7f0000000e40)="$eJzs281vFOUfAPDvzG7L249fKyIKgjSisfGlpQWVgxeNJh40MdEDHmtbCLJQQ2sihGg1Bo+GxLvxaOJf4MmTUU8mXvVuSIgSE9CYsGZmZ9ruslsK3bKE/XySaZ9n59mZ57vzPDPPzLMbQN8ayf4kEf+LiF8jYqiRbS4w0vh37cr56b+vnJ9Ool5/84/BvNzVK+eny6Ll+7YVmdE0Iv00KXbSbP7suZNTtdrsmSI/vnDqvfH5s+eeOXFq6vjs8dnTk0eOHD408fxzk892Jc4svqt7Ppzbu/vVty++Pn304js/fpPVd9e+xvqVcXTLSBb4n/Vc67rHu72zHrteX44zqfa6NqxVJSKywzWQ9/+hqMTywRuKVz7paeWADZWdsze1ebn4v1gH7mFJ9LoGQG+UF/zs/rdc7uDwo+cuv9i4AcrivlYsjTXVSIsyAxu4/5GIOLr4z5fZEi3PIZaOz+AGVgAA6DvfZeOfp9uN/9LYtaLc/4u5oeGIuC8idkTE/RGxMyIeiMjLPhgRD93i/lunhm4cf6aXbiuwNcrGfy8Uc1vN479y9BfDlSK3PY9/IDl2ojZ7sPhMRmNgU5afaLfxchMv//J5p/2vHP9lS7b/cixYbORSteUB3czUwlS3BqWXP47YU20Xf7I0E5BExO6I2LPmrS5G8fHkTjz59d5OJW8e/yq6MM9U/yriicbxX4yW+EvJ6vOT45ujNntwvGwVN/rp5wtvdNp/2/ivb19/YGuUHf+tze1/aV0l/zv0V7JyvnY+bvmG5MJvn3W8p6zeZvsfTN7K53TLmnwwtbBwZiJiMHktovX1yeX3lvmyfBb/6IH2/X9H8Z4s/ocjImvE+yLikYjYHxH/FvfQj0bEgVXi/+Glx97ttG5d7T9iyxrLdZTFP9P2/LfU/oebj/+tJyonv//29uPPjv/hPDVavJKf/26ic3U2FyWWWzMAAADc69L8u/FJOraUTtOxscZ3+HfG1rQ2N7/w1LG590/PNL5DPxwDafmka2jF89CJZLHYYiM/WTwrLtcfKp4bf1HZkufHpudqMz2OHfrdtub+v7/s/5nfK72uHbDh/F4L+ldr/097VA/gznP9h/6l/0P/0v+hf7Xr/x+15M0FwL3J9R/6l/4P/Uv/h/6l/0NfWs/v+jcqUV3l1/sSd0si0ruiGhItiUgaF/RN6+zdvT4zAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMd/AQAA///gq/is") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0xd2f0}) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x81c0, 0x8103) 3.185980659s ago: executing program 2 (id=845): r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_buf(r0, 0x0, 0x2a, 0x0, 0x0) 2.783368772s ago: executing program 1 (id=846): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r1, 0x0) write$sndseq(r0, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) 2.660689059s ago: executing program 3 (id=847): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000dc3f6e4013080100083a000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000006c0)={0x44, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 2.658081532s ago: executing program 0 (id=848): syz_mount_image$msdos(&(0x7f00000008c0), &(0x7f0000001200)='./file0\x00', 0x4000, &(0x7f00000000c0)=ANY=[@ANYBLOB="646973636172642c646f74732c646f74732c6e6f646f74732c636865636b3d7374726963742c646f74732c0080fcdc5c3dd34a5bee25f099008bade73ed878442a18112f260a6de8f9de23ca03128aff6e01"], 0x1, 0x11ce, &(0x7f0000002440)="$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") lsetxattr(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='b[rgs4}%.'], 0x0, 0x0, 0x3) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) 2.420967936s ago: executing program 1 (id=849): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2210010, &(0x7f0000000080), 0xfc, 0x582, &(0x7f0000000400)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8000c61) lseek(r0, 0x8000, 0x3) 1.857565051s ago: executing program 2 (id=850): syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000000)='./bus\x00', 0x300000a, &(0x7f0000000080)={[{@nodatacow}, {@thread_pool={'thread_pool', 0x3d, 0x3}}, {@nodiscard}, {@clear_cache}, {@ssd_spread}, {@clear_cache}, {@nobarrier}, {@thread_pool={'thread_pool', 0x3d, 0x8}}, {@nospace_cache}, {@enospc_debug}, {@ssd_spread}, {@nossd}]}, 0x3, 0x55a3, &(0x7f000000e0c0)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f00000000c0)=""/31, 0x1f) getdents(r0, 0x0, 0x58) 1.686928112s ago: executing program 0 (id=851): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x94, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x94}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={0xa4, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x10, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}]}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4040081}, 0x0) 1.577056606s ago: executing program 1 (id=852): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)=0x1) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) 1.486518804s ago: executing program 0 (id=853): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@block_validity}, {}, {@auto_da_alloc}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f0000000100), &(0x7f0000001400)=ANY=[], 0x835, 0x0) rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00') 1.057412956s ago: executing program 0 (id=854): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) 719.868808ms ago: executing program 3 (id=855): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000002c0), 0x10) readv(r0, &(0x7f0000000340)=[{&(0x7f0000000300)=""/60, 0x3c}], 0x1) sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05000000030800"/16, @ANYRES64=0x0, @ANYRES64=r0], 0x80}}, 0x0) 649.193659ms ago: executing program 0 (id=856): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000280)={'veth1_virt_wifi\x00', &(0x7f0000000040)=@ethtool_stats}) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000280)={'bridge0\x00', 0x0}) 439.325651ms ago: executing program 1 (id=857): syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000140)='./file2\x00', 0x320c8cc, &(0x7f00000003c0)=ANY=[], 0x1, 0x1f3, &(0x7f0000001880)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x1c1) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x80086601, 0x0) 431.205604ms ago: executing program 3 (id=858): syz_usb_connect(0x2, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12011001c7a67d40b1134200ec000102030109022400013600000009049a00027ed72592090503"], 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 297.924723ms ago: executing program 2 (id=859): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1e) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 0s ago: executing program 1 (id=860): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x18}, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r1, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) kernel console output (not intermixed with test programs): ): Can't find valid F2FS filesystem in 1th superblock [ 105.890476][ T6197] BTRFS warning (device loop3): try to load backup roots slot 2 [ 105.924449][ T1152] BTRFS error (device loop3): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 105.940016][ T5824] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 105.964751][ T6197] BTRFS warning (device loop3): couldn't read tree root [ 105.996061][ T6197] BTRFS warning (device loop3): try to load backup roots slot 3 [ 106.177030][ T6197] BTRFS info (device loop3): rebuilding free space tree [ 106.240317][ T6197] BTRFS info (device loop3): checking UUID tree [ 106.265244][ T6197] BTRFS info (device loop3): enabling ssd optimizations [ 106.286588][ T6197] BTRFS info (device loop3): turning off barriers [ 106.293120][ T6197] BTRFS info (device loop3): turning on async discard [ 106.327507][ T6197] BTRFS info (device loop3): enabling free space tree [ 106.346455][ T6197] BTRFS info (device loop3): force clearing of disk cache [ 106.372963][ T6197] BTRFS info (device loop3): enabling auto defrag [ 106.399600][ T6197] BTRFS info (device loop3): trying to use backup root at mount time [ 106.420916][ T6197] BTRFS info (device loop3): max_inline set to 0 [ 106.423459][ T6193] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 106.480258][ T6193] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 106.504181][ T6193] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 106.619637][ T5825] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 106.936739][ T1331] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.139236][ T1331] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.368868][ T1331] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.415945][ T6243] warning: `syz.4.82' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 107.568561][ T1331] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.685231][ T5838] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 107.696245][ T5838] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 107.705344][ T5838] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 107.731622][ T5838] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 107.739810][ T5838] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 108.046027][ T6258] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.063326][ T29] Process accounting resumed [ 108.087431][ T24] Process accounting resumed [ 108.288278][ T6271] Illegal XDP return value 4294967294 on prog (id 9) dev N/A, expect packet loss! [ 108.358485][ T1331] bridge_slave_1: left allmulticast mode [ 108.392345][ T1331] bridge_slave_1: left promiscuous mode [ 108.421190][ T1331] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.456508][ T6279] loop4: detected capacity change from 0 to 64 [ 108.470891][ T1331] bridge_slave_0: left allmulticast mode [ 108.477057][ T1331] bridge_slave_0: left promiscuous mode [ 108.484604][ T1331] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.674706][ T6286] loop3: detected capacity change from 0 to 512 [ 108.774879][ T6286] EXT4-fs (loop3): 1 truncate cleaned up [ 108.790426][ T6286] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.027171][ T30] audit: type=1800 audit(1770068434.744:2): pid=6286 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.96" name="file1" dev="loop3" ino=13 res=0 errno=0 [ 109.036213][ T6286] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.96: bg 0: block 465: padding at end of block bitmap is not set [ 109.071081][ T6286] EXT4-fs (loop3): Delayed block allocation failed for inode 13 at logical offset 2 with max blocks 10 with error 28 [ 109.136417][ T6286] EXT4-fs (loop3): This should not happen!! Data will be lost [ 109.136417][ T6286] [ 109.146130][ T6286] EXT4-fs (loop3): Total free blocks count 0 [ 109.206318][ T6286] EXT4-fs (loop3): Free/Dirty block details [ 109.246372][ T6286] EXT4-fs (loop3): free_blocks=0 [ 109.251546][ T6286] EXT4-fs (loop3): dirty_blocks=10 [ 109.276563][ T6286] EXT4-fs (loop3): Block reservation details [ 109.292945][ T6286] EXT4-fs (loop3): i_reserved_data_blocks=10 [ 109.385975][ T5825] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.575825][ T6276] loop0: detected capacity change from 0 to 32768 [ 109.657317][ T6276] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 109.788873][ T5838] Bluetooth: hci0: command tx timeout [ 109.953631][ T6276] XFS (loop0): Ending clean mount [ 109.999886][ T6276] XFS (loop0): Quotacheck needed: Please wait. [ 110.079382][ T6276] XFS (loop0): Quotacheck: Done. [ 110.161364][ T5823] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 110.248477][ T1331] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 110.343023][ T1331] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 110.390031][ T1331] bond0 (unregistering): Released all slaves [ 110.556632][ T6320] loop4: detected capacity change from 0 to 32768 [ 110.633932][ T6320] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 110.642911][ T6333] capability: warning: `syz.0.107' uses 32-bit capabilities (legacy support in use) [ 110.700503][ T6333] program syz.0.107 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 110.700743][ T6325] loop3: detected capacity change from 0 to 32768 [ 110.723237][ T6320] XFS (loop4): Ending clean mount [ 110.780790][ T6320] XFS (loop4): Quotacheck needed: Please wait. [ 110.807259][ T6326] loop2: detected capacity change from 0 to 32768 [ 110.870904][ T6326] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 110.947301][ T6320] XFS (loop4): Quotacheck: Done. [ 111.092970][ T6326] XFS (loop2): Ending clean mount [ 111.159897][ T6326] XFS (loop2): Quotacheck needed: Please wait. [ 111.198517][ T5831] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 111.296084][ T6326] XFS (loop2): Quotacheck: Done. [ 111.465635][ T5824] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 111.523486][ T6254] chnl_net:caif_netlink_parms(): no params data found [ 111.747753][ T6360] loop0: detected capacity change from 0 to 1024 [ 111.797251][ T6360] EXT4-fs: Ignoring removed nobh option [ 111.871055][ T5838] Bluetooth: hci0: command tx timeout [ 111.885593][ T1331] hsr_slave_0: left promiscuous mode [ 111.934264][ T6360] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.001757][ T1331] hsr_slave_1: left promiscuous mode [ 112.046017][ T1331] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 112.053676][ T1331] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 112.096912][ T1331] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 112.104358][ T1331] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 112.121819][ T5823] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.211711][ T6375] process 'syz.4.115' launched './file0' with NULL argv: empty string added [ 112.223717][ T6374] netlink: 8 bytes leftover after parsing attributes in process `syz.2.112'. [ 112.261001][ T1331] veth1_macvtap: left promiscuous mode [ 112.292797][ T1331] veth0_macvtap: left promiscuous mode [ 112.301446][ T1331] veth1_vlan: left promiscuous mode [ 112.312046][ T1331] veth0_vlan: left promiscuous mode [ 112.361152][ T6377] loop3: detected capacity change from 0 to 2048 [ 112.403049][ T6380] loop0: detected capacity change from 0 to 8 [ 112.446745][ T6377] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 112.475978][ T6380] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 112.596058][ T6377] syz.3.117: attempt to access beyond end of device [ 112.596058][ T6377] loop3: rw=8912896, sector=33554430, nr_sectors = 2 limit=2048 [ 112.598400][ T6386] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 112.838145][ T6377] syz.3.117: attempt to access beyond end of device [ 112.838145][ T6377] loop3: rw=8388608, sector=33554430, nr_sectors = 2 limit=2048 [ 112.869807][ T6377] NILFS (loop3): I/O error reading meta-data file (ino=6, block-offset=3) [ 112.882950][ T6377] NILFS (loop3): error -5 reading inode: ino=15 [ 112.895191][ T6395] syz.3.117: attempt to access beyond end of device [ 112.895191][ T6395] loop3: rw=8388608, sector=33554430, nr_sectors = 2 limit=2048 [ 112.943845][ T6395] NILFS (loop3): I/O error reading meta-data file (ino=6, block-offset=3) [ 113.009097][ T6400] loop0: detected capacity change from 0 to 512 [ 113.016181][ T6395] NILFS (loop3): error -5 reading inode: ino=15 [ 113.023330][ T6400] EXT4-fs: Ignoring removed nomblk_io_submit option [ 113.049524][ T6400] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 113.099565][ T6400] EXT4-fs (loop0): 1 truncate cleaned up [ 113.128053][ T6400] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.503058][ T6407] program syz.3.125 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 113.551779][ T5823] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.946439][ T5838] Bluetooth: hci0: command tx timeout [ 114.195520][ T6423] loop3: detected capacity change from 0 to 512 [ 114.235956][ T6423] EXT4-fs (loop3): Cannot use DAX on a filesystem that may contain inline data [ 114.589436][ T1331] team0 (unregistering): Port device team_slave_1 removed [ 114.603726][ T6432] loop2: detected capacity change from 0 to 1024 [ 114.642434][ T6432] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 114.686476][ T6432] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.757942][ T1331] team0 (unregistering): Port device team_slave_0 removed [ 114.870195][ T5824] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 115.022961][ T6443] netlink: 8 bytes leftover after parsing attributes in process `syz.2.140'. [ 115.192508][ T6434] loop3: detected capacity change from 0 to 32768 [ 115.200388][ T6434] xfs: Deprecated parameter 'attr2' [ 115.205743][ T6434] XFS: attr2 mount option is deprecated. [ 115.223265][ T6434] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 115.290025][ T6434] XFS (loop3): Ending clean mount [ 115.303644][ T6434] XFS (loop3): Quotacheck needed: Please wait. [ 115.369359][ T6434] XFS (loop3): Quotacheck: Done. [ 115.465963][ T5825] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 115.553776][ T6413] netlink: 8 bytes leftover after parsing attributes in process `syz.0.127'. [ 115.595825][ T6443] sit0: Master is either lo or non-ether device [ 115.637001][ T6443] netlink: 8 bytes leftover after parsing attributes in process `syz.2.140'. [ 115.646120][ T6443] sit0: Master is either lo or non-ether device [ 115.900708][ T6254] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.951234][ T6254] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.974622][ T6254] bridge_slave_0: entered allmulticast mode [ 115.999331][ T6254] bridge_slave_0: entered promiscuous mode [ 116.025106][ T6254] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.032381][ T5838] Bluetooth: hci0: command tx timeout [ 116.046672][ T6254] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.064378][ T6254] bridge_slave_1: entered allmulticast mode [ 116.078949][ T6254] bridge_slave_1: entered promiscuous mode [ 116.228430][ T6471] loop4: detected capacity change from 0 to 512 [ 116.274079][ T6471] EXT4-fs (loop4): blocks per group (95) and clusters per group (32768) inconsistent [ 116.342756][ T6254] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 116.409136][ T6471] netlink: 153524 bytes leftover after parsing attributes in process `syz.4.146'. [ 116.448296][ T6254] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 116.704527][ T6254] team0: Port device team_slave_0 added [ 116.739306][ T6254] team0: Port device team_slave_1 added [ 116.755638][ T6486] netlink: 165 bytes leftover after parsing attributes in process `syz.3.152'. [ 116.865354][ T6254] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 116.891534][ T6254] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 116.938045][ T5926] kernel write not supported for file /comedi4 (pid: 5926 comm: kworker/0:6) [ 116.976866][ T6254] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 117.016915][ T6254] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 117.050478][ T6254] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 117.106810][ T6254] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 117.345895][ T6254] hsr_slave_0: entered promiscuous mode [ 117.398760][ T6254] hsr_slave_1: entered promiscuous mode [ 117.406202][ T6254] debugfs: 'hsr0' already exists in 'hsr' [ 117.453019][ T6254] Cannot create hsr debugfs directory [ 117.731990][ T6484] loop4: detected capacity change from 0 to 40427 [ 117.779310][ T6484] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 117.810647][ T6484] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 117.850020][ T6484] F2FS-fs (loop4): invalid crc value [ 118.037437][ T6515] loop2: detected capacity change from 0 to 256 [ 118.050634][ T6513] nbd0: detected capacity change from 0 to 127 [ 118.084374][ T5838] block nbd0: Receive control failed (result -32) [ 118.148380][ T5967] block nbd0: Dead connection, failed to find a fallback [ 118.161241][ T5967] block nbd0: shutting down sockets [ 118.185231][ T6484] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 118.201336][ T5967] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 118.243045][ T5967] Buffer I/O error on dev nbd0, logical block 0, async page read [ 118.284843][ T5967] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 118.313157][ T6484] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 118.344655][ T6484] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 118.346445][ T5967] Buffer I/O error on dev nbd0, logical block 1, async page read [ 118.405400][ T5967] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 118.453475][ T5967] Buffer I/O error on dev nbd0, logical block 2, async page read [ 118.493018][ T5967] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 118.518007][ T5967] Buffer I/O error on dev nbd0, logical block 3, async page read [ 118.542819][ T5967] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 118.583545][ T5967] Buffer I/O error on dev nbd0, logical block 0, async page read [ 118.606451][ T5967] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 118.649139][ T6505] loop3: detected capacity change from 0 to 32768 [ 118.661019][ T5967] Buffer I/O error on dev nbd0, logical block 1, async page read [ 118.672610][ T6505] BTRFS warning: excessive commit interval 2147483648, use with care [ 118.686443][ T5967] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 118.696040][ T5967] Buffer I/O error on dev nbd0, logical block 2, async page read [ 118.718453][ T6505] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.158 (6505) [ 118.753998][ T5967] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 118.779569][ T5967] Buffer I/O error on dev nbd0, logical block 3, async page read [ 118.818495][ T5967] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 118.868252][ T6505] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 118.879953][ T5967] Buffer I/O error on dev nbd0, logical block 0, async page read [ 118.897525][ T6505] BTRFS info (device loop3): using crc32c checksum algorithm [ 118.927301][ T5967] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 118.958802][ T5967] Buffer I/O error on dev nbd0, logical block 1, async page read [ 118.967718][ T5967] ldm_validate_partition_table(): Disk read failed. [ 118.975225][ T5967] Dev nbd0: unable to read RDB block 0 [ 118.984561][ T5967] nbd0: unable to read partition table [ 118.995500][ T5967] ldm_validate_partition_table(): Disk read failed. [ 119.053837][ T5967] Dev nbd0: unable to read RDB block 0 [ 119.114441][ T5967] nbd0: unable to read partition table [ 119.148901][ T13] BTRFS warning (device loop3): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 119.283531][ T6505] BTRFS error (device loop3): failed to load root extent [ 119.306469][ T6505] BTRFS warning (device loop3): try to load backup roots slot 1 [ 119.339784][ T12] BTRFS warning (device loop3): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 119.418153][ T6505] BTRFS warning (device loop3): couldn't read tree root [ 119.425265][ T6505] BTRFS warning (device loop3): try to load backup roots slot 2 [ 119.454881][ T13] BTRFS error (device loop3): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 119.520128][ T6505] BTRFS warning (device loop3): couldn't read tree root [ 119.566794][ T6505] BTRFS warning (device loop3): try to load backup roots slot 3 [ 119.584205][ T6558] loop2: detected capacity change from 0 to 128 [ 119.623116][ T6558] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 119.698184][ T6505] BTRFS info (device loop3): checking UUID tree [ 119.723525][ T6505] BTRFS info (device loop3): enabling ssd optimizations [ 119.776430][ T6558] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 119.785682][ T6505] BTRFS info (device loop3): using spread ssd allocation scheme [ 119.816487][ T6505] BTRFS info (device loop3): turning on sync discard [ 119.823248][ T6505] BTRFS info (device loop3): enabling free space tree [ 119.873712][ T6505] BTRFS info (device loop3): enabling auto defrag [ 119.889031][ T6505] BTRFS info (device loop3): trying to use backup root at mount time [ 119.929167][ T6567] loop0: detected capacity change from 0 to 128 [ 119.955627][ T6567] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 119.988343][ T6254] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 119.996883][ T30] audit: type=1326 audit(1770068445.724:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6569 comm="syz.4.166" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1bf299aeb9 code=0x0 [ 120.076696][ T6567] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 120.112992][ T6254] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 120.189278][ T6254] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 120.201083][ T5825] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 120.273669][ T6254] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 120.362915][ T49] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 120.820915][ T6254] 8021q: adding VLAN 0 to HW filter on device bond0 [ 120.946414][ T6254] 8021q: adding VLAN 0 to HW filter on device team0 [ 121.025200][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.032489][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.107699][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.115016][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.495038][ T6604] loop2: detected capacity change from 0 to 4096 [ 121.534351][ T6609] loop3: detected capacity change from 0 to 1024 [ 121.660860][ T6611] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 121.750090][ T6609] hfsplus: bad catalog entry type [ 121.911826][ T49] hfsplus: b-tree write err: -5, ino 4 [ 122.091541][ T6588] loop0: detected capacity change from 0 to 32768 [ 122.137211][ T6588] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.175 (6588) [ 122.281869][ T6254] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 122.304002][ T6588] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 122.346341][ T6588] BTRFS info (device loop0): using blake2b checksum algorithm [ 122.743669][ T6588] BTRFS info (device loop0): enabling ssd optimizations [ 122.786106][ T6254] veth0_vlan: entered promiscuous mode [ 122.791876][ T6588] BTRFS info (device loop0): turning on async discard [ 122.841643][ T6588] BTRFS info (device loop0): enabling free space tree [ 122.849420][ T6651] sctp: [Deprecated]: syz.4.186 (pid 6651) Use of struct sctp_assoc_value in delayed_ack socket option. [ 122.849420][ T6651] Use struct sctp_sack_info instead [ 122.875971][ T6254] veth1_vlan: entered promiscuous mode [ 122.883014][ T6588] BTRFS info (device loop0): use zlib compression, level 3 [ 123.037197][ T5900] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 123.103347][ T6254] veth0_macvtap: entered promiscuous mode [ 123.171571][ T6662] loop4: detected capacity change from 0 to 256 [ 123.178966][ T6254] veth1_macvtap: entered promiscuous mode [ 123.195222][ T6662] exfat: Deprecated parameter 'namecase' [ 123.222358][ T6662] exfat: Deprecated parameter 'utf8' [ 123.239311][ T6662] exfat: Deprecated parameter 'utf8' [ 123.276002][ T5900] usb 3-1: Using ep0 maxpacket: 16 [ 123.295973][ T5900] usb 3-1: config 0 has an invalid interface number: 251 but max is 0 [ 123.314717][ T5900] usb 3-1: config 0 has no interface number 0 [ 123.331040][ T5823] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 123.335271][ T5900] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 123.355507][ T6662] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x3f800a9b, utbl_chksum : 0xe619d30d) [ 123.384586][ T6254] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 123.392273][ T5900] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 123.421955][ T6254] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 123.433445][ T5900] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 123.448246][ T5900] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.515674][ T5900] usb 3-1: Product: syz [ 123.525491][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.528524][ T30] audit: type=1800 audit(1770068449.264:4): pid=6662 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.189" name="file1" dev="loop4" ino=1048614 res=0 errno=0 [ 123.556934][ T5900] usb 3-1: Manufacturer: syz [ 123.562844][ T5900] usb 3-1: SerialNumber: syz [ 123.577221][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.581682][ T5900] usb 3-1: config 0 descriptor?? [ 123.625773][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.637102][ T6654] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 123.650266][ T6654] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 123.682427][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.924012][ T6654] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 123.982251][ T6654] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 124.027738][ T6671] xt_hashlimit: size too large, truncated to 1048576 [ 124.072951][ T6648] loop3: detected capacity change from 0 to 32768 [ 124.108087][ T6648] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.187 (6648) [ 124.175557][ T6648] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 124.200742][ T6672] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 124.216548][ T6648] BTRFS info (device loop3): using sha256 checksum algorithm [ 124.248339][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.300742][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.442013][ T6648] BTRFS info (device loop3): rebuilding free space tree [ 124.483717][ T3030] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.541984][ T6648] BTRFS info (device loop3): turning off barriers [ 124.556398][ T3030] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.593244][ T6648] BTRFS info (device loop3): turning on async discard [ 124.636439][ T6648] BTRFS info (device loop3): enabling free space tree [ 124.672374][ T5900] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 124.694644][ T6648] BTRFS info (device loop3): force clearing of disk cache [ 124.702010][ T5900] asix 3-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 124.733864][ T6648] BTRFS info (device loop3): max_inline set to 17 [ 124.744471][ T5900] asix 3-1:0.251: probe with driver asix failed with error -71 [ 124.820948][ T5900] usb 3-1: USB disconnect, device number 3 [ 124.989359][ T5825] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 125.055184][ T6705] block nbd1: Unsupported socket: should be TCP or UNIX. [ 125.443479][ T6718] loop0: detected capacity change from 0 to 1024 [ 125.510092][ T6718] EXT4-fs: Ignoring removed bh option [ 125.615089][ T6718] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.885096][ T6736] Bluetooth: MGMT ver 1.23 [ 125.969631][ T6737] EXT4-fs error (device loop0): mb_free_blocks:2047: group 0, inode 15: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 126.202880][ T5823] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.761041][ T6763] netlink: 4 bytes leftover after parsing attributes in process `syz.2.212'. [ 127.484526][ T6746] loop3: detected capacity change from 0 to 32768 [ 127.493124][ T6789] netlink: 'syz.0.221': attribute type 4 has an invalid length. [ 127.508510][ T6791] loop2: detected capacity change from 0 to 512 [ 127.515315][ T6745] loop4: detected capacity change from 0 to 32768 [ 127.593958][ T6791] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.222: invalid indirect mapped block 4294967295 (level 1) [ 127.614408][ T6791] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 127.616687][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 127.632676][ C1] EXT4-fs (loop2): initial error at time 1770068453: ext4_free_branches:1023: inode 11 [ 127.642594][ C1] EXT4-fs (loop2): last error at time 1770068453: ext4_free_branches:1023: inode 11 [ 127.654065][ T6746] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 127.665116][ T6791] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.222: invalid indirect mapped block 4294967295 (level 1) [ 127.679957][ T6791] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 127.691559][ T6791] EXT4-fs (loop2): 2 truncates cleaned up [ 127.738020][ T6745] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 127.761160][ T6791] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.812557][ T6746] XFS (loop3): Ending clean mount [ 127.850498][ T6746] XFS (loop3): Metadata CRC error detected at xfs_inobt_read_verify+0x42/0xe0, xfs_finobt block 0x10 [ 127.986845][ T6746] XFS (loop3): Unmount and run xfs_repair [ 128.032640][ T6813] loop0: detected capacity change from 0 to 2048 [ 128.046386][ T6746] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 128.061678][ T6745] XFS (loop4): Ending clean mount [ 128.064442][ T6746] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff FIB3............ [ 128.105486][ T6813] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 128.126393][ T6746] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 10 ................ [ 128.138172][ T5824] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.150635][ T6746] 00000020: d7 dc 42 4e 79 90 42 cb 9f 91 9c b7 20 0a 10 1d ..BNy.B..... ... [ 128.154710][ T6745] XFS (loop4): Quotacheck needed: Please wait. [ 128.200744][ T6746] 00000030: 00 00 00 00 0f 8d d2 a2 00 00 18 00 00 00 40 37 ..............@7 [ 128.211333][ T6817] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 128.236413][ T6746] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00 ................ [ 128.306411][ T6746] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 128.315356][ T6746] 00000060: 00 00 00 00 00 f0 00 00 00 00 00 00 00 00 00 00 ................ [ 128.339740][ T6746] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 128.368558][ T6746] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x2b0/0x490" at daddr 0x10 len 4 error 74 [ 128.382104][ T6745] XFS (loop4): Quotacheck: Done. [ 128.402588][ T6746] loop3: lost filesystem error report for type 5 error -117 [ 128.402720][ T6746] XFS (loop3): Failed to initialize disk quotas, err -117. [ 128.487980][ T5831] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 128.635272][ T5823] NILFS (loop0): DAT doesn't have a block to manage vblocknr = 8796093022222 [ 128.671745][ T6787] loop1: detected capacity change from 0 to 32768 [ 128.688637][ T5825] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 128.697841][ T5823] NILFS error (device loop0): nilfs_bmap_truncate: broken bmap (inode number=16) [ 128.732246][ T6787] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.220 (6787) [ 128.751391][ T5825] XFS (loop3): Uncorrected metadata errors detected; please run xfs_repair. [ 128.767143][ T5823] Remounting filesystem read-only [ 128.772331][ T5823] NILFS (loop0): error -5 truncating bmap (ino=16) [ 128.809842][ T6787] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 128.884439][ T6787] BTRFS info (device loop1): using crc32c checksum algorithm [ 128.897368][ T5823] NILFS (loop0): disposed unprocessed dirty file(s) when detaching log writer [ 128.918227][ T6824] loop2: detected capacity change from 0 to 2048 [ 128.994678][ T6824] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 129.006324][ T6824] UDF-fs: Scanning with blocksize 512 failed [ 129.075740][ T6824] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 129.193815][ T6787] BTRFS info (device loop1): turning off barriers [ 129.251245][ T6787] BTRFS info (device loop1): enabling free space tree [ 129.288004][ T6787] BTRFS info (device loop1): use zstd compression, level 3 [ 129.545290][ T6851] loop2: detected capacity change from 0 to 128 [ 129.552609][ T6855] loop3: detected capacity change from 0 to 512 [ 129.592476][ T6855] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 129.616880][ T6851] EXT4-fs: Ignoring removed nobh option [ 129.635781][ T6854] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 129.720019][ T6254] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 129.785429][ T6851] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 129.807197][ T6855] EXT4-fs (loop3): 1 orphan inode deleted [ 129.823436][ T6853] loop0: detected capacity change from 0 to 4096 [ 129.850249][ T6855] EXT4-fs (loop3): 1 truncate cleaned up [ 129.889714][ T6851] ext4 filesystem being mounted at /56/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 129.934312][ T6855] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.000551][ T6855] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 130.090551][ T5824] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 130.113051][ T6855] EXT4-fs (loop3): Remounting filesystem read-only [ 130.156751][ T6855] EXT4-fs (loop3): error restoring inline_data for inode -- potential data loss! (inode 17, error -30) [ 130.224782][ T6853] ntfs3(loop0): ino=5, "/" mi_enum_attr [ 130.353185][ T5825] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.468068][ T3030] ntfs3(loop0): ino=5, mi_enum_attr [ 130.690615][ T6880] loop2: detected capacity change from 0 to 256 [ 130.747451][ T6880] exfat: Deprecated parameter 'utf8' [ 130.826608][ T6880] exfat: Deprecated parameter 'utf8' [ 130.832052][ T6880] exfat: Deprecated parameter 'utf8' [ 130.858608][ T6874] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 130.920197][ T6880] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 131.024753][ T6874] ntfs3(loop3): Inode r=19 is not in use! [ 131.031015][ T6874] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 131.051090][ T6874] ntfs3(loop3): Failed to initialize $Extend/$Reparse. [ 131.194139][ T6874] ntfs3(loop3): ino=1b, mi_enum_attr [ 131.220109][ T6874] ntfs3(loop3): ino=1b, mi_enum_attr [ 131.234208][ T6874] overlayfs: failed to get redirect (-22) [ 131.645952][ T6877] F2FS-fs (loop1): build fault injection rate: 771 [ 131.659911][ T6877] F2FS-fs (loop1): invalid crc value [ 131.871079][ T6877] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 131.892957][ T6877] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 131.951370][ T29] af_packet: tpacket_rcv: packet too big, clamped from 80 to 4294967272. macoff=96 [ 132.108717][ T6254] syz-executor: attempt to access beyond end of device [ 132.108717][ T6254] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 132.156332][ T6254] CPU: 0 UID: 0 PID: 6254 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 132.156366][ T6254] Tainted: [L]=SOFTLOCKUP [ 132.156373][ T6254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 132.156394][ T6254] Call Trace: [ 132.156406][ T6254] [ 132.156415][ T6254] dump_stack_lvl+0xe8/0x150 [ 132.156449][ T6254] f2fs_handle_critical_error+0x37c/0x540 [ 132.156481][ T6254] f2fs_write_end_io+0xcdb/0xff0 [ 132.156525][ T6254] __submit_merged_bio+0x256/0x700 [ 132.156558][ T6254] __submit_merged_write_cond+0x3c3/0x4e0 [ 132.156592][ T6254] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 132.156642][ T6254] f2fs_write_data_pages+0x2970/0x35e0 [ 132.156710][ T6254] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 132.156754][ T6254] ? css_rstat_updated+0x23a/0x530 [ 132.156804][ T6254] ? rcu_is_watching+0x15/0xb0 [ 132.156835][ T6254] ? mod_memcg_lruvec_state+0x1a7/0x360 [ 132.156867][ T6254] ? __lock_acquire+0x6b5/0x2cf0 [ 132.156910][ T6254] ? __lock_acquire+0x6b5/0x2cf0 [ 132.156942][ T6254] ? do_raw_spin_lock+0x12b/0x2f0 [ 132.156975][ T6254] ? do_raw_spin_unlock+0xf5/0x210 [ 132.156998][ T6254] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 132.157040][ T6254] do_writepages+0x32e/0x550 [ 132.157080][ T6254] ? do_raw_spin_unlock+0xf5/0x210 [ 132.157107][ T6254] filemap_fdatawrite+0x1e9/0x2f0 [ 132.157141][ T6254] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 132.157217][ T6254] ? do_raw_spin_unlock+0xf5/0x210 [ 132.157244][ T6254] f2fs_sync_dirty_inodes+0x30e/0x860 [ 132.157291][ T6254] f2fs_write_checkpoint+0x9cf/0x2680 [ 132.157358][ T6254] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 132.157431][ T6254] ? kfree+0x1c1/0x630 [ 132.157459][ T6254] ? f2fs_stop_gc_thread+0x7f/0xb0 [ 132.157501][ T6254] kill_f2fs_super+0x314/0x720 [ 132.157538][ T6254] ? __pfx_kill_f2fs_super+0x10/0x10 [ 132.157582][ T6254] ? lockdep_hardirqs_on+0x7a/0x110 [ 132.157621][ T6254] deactivate_locked_super+0xbc/0x130 [ 132.157655][ T6254] cleanup_mnt+0x437/0x4d0 [ 132.157675][ T6254] ? _raw_spin_unlock_irq+0x23/0x50 [ 132.157700][ T6254] task_work_run+0x1d9/0x270 [ 132.157727][ T6254] ? __pfx_task_work_run+0x10/0x10 [ 132.157761][ T6254] exit_to_user_mode_loop+0xed/0x480 [ 132.157787][ T6254] ? rcu_is_watching+0x15/0xb0 [ 132.157819][ T6254] do_syscall_64+0x32d/0xf80 [ 132.157842][ T6254] ? trace_irq_disable+0x3b/0x150 [ 132.157871][ T6254] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.157892][ T6254] ? clear_bhb_loop+0x40/0x90 [ 132.157918][ T6254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.157938][ T6254] RIP: 0033:0x7f710379c117 [ 132.157972][ T6254] Code: a2 c7 05 7c 94 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 132.157989][ T6254] RSP: 002b:00007ffc7c7f99b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 132.158011][ T6254] RAX: 0000000000000000 RBX: 00007f710380471f RCX: 00007f710379c117 [ 132.158032][ T6254] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc7c7f9a70 [ 132.158045][ T6254] RBP: 00007ffc7c7f9a70 R08: 00007ffc7c7faa70 R09: 00000000ffffffff [ 132.158059][ T6254] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc7c7fab00 [ 132.158072][ T6254] R13: 00007f710380471f R14: 000000000002037f R15: 00007ffc7c7fab40 [ 132.158106][ T6254] [ 132.161356][ T6254] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 132.532851][ T6897] set_capacity_and_notify: 2 callbacks suppressed [ 132.532871][ T6897] loop2: detected capacity change from 0 to 32768 [ 132.596958][ T6897] [ 132.596958][ T6897] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 132.596958][ T6897] [ 132.658931][ T6897] ERROR: (device loop2): diWrite: ixpxd invalid [ 132.658931][ T6897] [ 132.716618][ T6897] ERROR: (device loop2): txCommit: [ 132.716618][ T6897] [ 132.792783][ T6919] ERROR: (device loop2): dbFree: error in block map [ 132.792783][ T6919] [ 132.892115][ T6919] ERROR: (device loop2): dbFree: error in block map [ 132.892115][ T6919] [ 133.137912][ T5824] [ 133.137912][ T5824] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 133.137912][ T5824] [ 133.165394][ T5824] [ 133.165394][ T5824] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 133.165394][ T5824] [ 133.641335][ T6922] loop4: detected capacity change from 0 to 32768 [ 133.714177][ T6922] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 133.815348][ T6922] XFS (loop4): Ending clean mount [ 133.897125][ T5831] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 134.066480][ T794] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 134.209296][ T6955] loop4: detected capacity change from 0 to 4096 [ 134.217496][ T6955] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512). [ 134.246407][ T794] usb 2-1: Using ep0 maxpacket: 8 [ 134.263370][ T794] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 134.284482][ T794] usb 2-1: config 1 interface 0 altsetting 129 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 134.336388][ T794] usb 2-1: config 1 interface 0 has no altsetting 0 [ 134.355155][ T794] usb 2-1: New USB device found, idVendor=05ac, idProduct=0243, bcdDevice= 0.40 [ 134.365565][ T794] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.377401][ T794] usb 2-1: Product: syz [ 134.381668][ T794] usb 2-1: Manufacturer: syz [ 134.386371][ T794] usb 2-1: SerialNumber: syz [ 134.651228][ T794] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input6 [ 134.682139][ T5178] bcm5974 2-1:1.0: could not read from device [ 134.690712][ T6969] loop4: detected capacity change from 0 to 512 [ 134.703227][ T6969] EXT4-fs (loop4): Test dummy encryption mode enabled [ 134.710595][ T6969] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 134.753908][ T5178] bcm5974 2-1:1.0: could not read from device [ 134.790693][ T6969] EXT4-fs (loop4): 1 truncate cleaned up [ 134.820993][ T6969] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.849679][ T5178] bcm5974 2-1:1.0: could not read from device [ 134.858581][ T5900] kernel read not supported for file /bus/input/devices (pid: 5900 comm: kworker/1:5) [ 134.894570][ T794] usb 2-1: USB disconnect, device number 2 [ 135.118663][ T5831] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.307802][ T6986] sp0: Synchronizing with TNC [ 135.523084][ T6989] loop4: detected capacity change from 0 to 4096 [ 136.101247][ T6991] loop0: detected capacity change from 0 to 32768 [ 136.267601][ T6991] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 136.367931][ T6991] JBD2: Ignoring recovery information on journal [ 136.398391][ T6994] loop1: detected capacity change from 0 to 32768 [ 136.604615][ T6994] XFS (loop1): DAX unsupported by block device. Turning off DAX. [ 136.677998][ T6994] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 136.694572][ T6991] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 136.892371][ T6994] XFS (loop1): Ending clean mount [ 136.968231][ T6994] XFS (loop1): Quotacheck needed: Please wait. [ 137.101261][ T7023] loop3: detected capacity change from 0 to 4096 [ 137.144121][ T6994] XFS (loop1): Quotacheck: Done. [ 137.172269][ T7028] (syz.0.279,7028,1):ocfs2_check_dir_entry:314 ERROR: directory entry (#65: offset=512) too close to end or out-of-bounds [ 137.172349][ T7028] (syz.0.279,7028,1):ocfs2_rename:1703 ERROR: status = -2 [ 137.681192][ T6254] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 137.949494][ T5823] ocfs2: Unmounting device (7,0) on (node local) [ 137.977284][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.988725][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.501945][ T7017] loop4: detected capacity change from 0 to 262144 [ 138.518522][ T7017] F2FS-fs (loop4): invalid crc value [ 138.626848][ T7017] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 138.636712][ T7017] F2FS-fs (loop4): Start checkpoint disabled! [ 138.713659][ T7017] F2FS-fs (loop4): f2fs_disable_checkpoint() finish, err:0 [ 138.738007][ T7017] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 139.605531][ T7069] loop0: detected capacity change from 0 to 1024 [ 139.702190][ T7069] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.731861][ T7066] loop3: detected capacity change from 0 to 4096 [ 139.830057][ T7039] loop2: detected capacity change from 0 to 32768 [ 139.883589][ T7066] ntfs3(loop3): ino=18, mi_enum_attr [ 139.897326][ T7039] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 139.940852][ T7066] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 140.000327][ T7066] ntfs3(loop3): ino=1a, mi_enum_attr [ 140.169481][ T7039] XFS (loop2): Ending clean mount [ 140.205460][ T7039] XFS (loop2): Quotacheck needed: Please wait. [ 140.251793][ T5823] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.280502][ T7039] XFS (loop2): Quotacheck: Done. [ 140.509779][ T5824] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 140.521502][ T7059] loop1: detected capacity change from 0 to 32768 [ 140.573732][ T7063] loop4: detected capacity change from 0 to 32768 [ 140.624923][ T7059] syz.1.290: attempt to access beyond end of device [ 140.624923][ T7059] loop1: rw=2049, sector=2621792, nr_sectors = 8 limit=32768 [ 140.699991][ T7063] XFS (loop4): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 140.914563][ T110] blkno = 5002c, nblocks = 1 [ 140.943604][ T7063] XFS (loop4): Starting recovery (logdev: internal) [ 140.951537][ T110] ERROR: (device loop1): dbUpdatePMap: blocks are outside the map [ 140.951537][ T110] [ 140.999906][ T110] ERROR: (device loop1): remounting filesystem as read-only [ 141.021516][ T7063] XFS (loop4): Ending recovery (logdev: internal) [ 141.155119][ T5831] XFS (loop4): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 142.006362][ T29] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 142.132108][ T7119] netlink: 60 bytes leftover after parsing attributes in process `syz.1.313'. [ 142.142896][ T7092] loop3: detected capacity change from 0 to 40427 [ 142.198680][ T29] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 142.200907][ T7092] F2FS-fs (loop3): invalid crc value [ 142.215177][ T29] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 142.255763][ T7103] loop2: detected capacity change from 0 to 32768 [ 142.263928][ T29] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 142.306326][ T29] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 142.350494][ T29] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 142.367069][ T29] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 142.386495][ T29] usb 1-1: Manufacturer: syz [ 142.401408][ T29] usb 1-1: config 0 descriptor?? [ 142.407048][ T7103] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 142.540770][ T7134] loop4: detected capacity change from 0 to 128 [ 142.578047][ T7103] XFS (loop2): Ending clean mount [ 142.598154][ T7103] XFS (loop2): Quotacheck needed: Please wait. [ 142.645551][ T7092] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 142.695704][ T7103] XFS (loop2): Quotacheck: Done. [ 142.698548][ T7092] F2FS-fs (loop3): Start checkpoint disabled! [ 142.748178][ T7092] F2FS-fs (loop3): f2fs_disable_checkpoint() finish, err:0 [ 142.763750][ T7092] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 142.773896][ T29] rc_core: IR keymap rc-hauppauge not found [ 142.798992][ T29] Registered IR keymap rc-empty [ 142.804354][ T29] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 142.876418][ T29] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 142.910293][ T29] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 142.949902][ T5824] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 142.970581][ T29] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input7 [ 143.027406][ T1331] kworker/u8:8: attempt to access beyond end of device [ 143.027406][ T1331] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 143.045047][ T1331] CPU: 0 UID: 0 PID: 1331 Comm: kworker/u8:8 Tainted: G L syzkaller #0 PREEMPT(full) [ 143.045080][ T1331] Tainted: [L]=SOFTLOCKUP [ 143.045087][ T1331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 143.045101][ T1331] Workqueue: writeback wb_workfn (flush-7:3) [ 143.045132][ T1331] Call Trace: [ 143.045141][ T1331] [ 143.045150][ T1331] dump_stack_lvl+0xe8/0x150 [ 143.045183][ T1331] f2fs_handle_critical_error+0x37c/0x540 [ 143.045219][ T1331] f2fs_write_end_io+0xcdb/0xff0 [ 143.045270][ T1331] __submit_merged_bio+0x256/0x700 [ 143.045303][ T1331] __submit_merged_write_cond+0x3c3/0x4e0 [ 143.045339][ T1331] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 143.045396][ T1331] f2fs_write_data_pages+0x2970/0x35e0 [ 143.045473][ T1331] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 143.045519][ T1331] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 143.045620][ T1331] ? update_load_avg+0x1b0/0x1ec0 [ 143.045680][ T1331] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 143.045710][ T1331] do_writepages+0x32e/0x550 [ 143.045748][ T1331] ? reacquire_held_locks+0x104/0x190 [ 143.045777][ T1331] ? writeback_sb_inodes+0x43d/0x19a0 [ 143.045811][ T1331] __writeback_single_inode+0x133/0x11a0 [ 143.045846][ T1331] ? do_raw_spin_unlock+0xf5/0x210 [ 143.045872][ T1331] writeback_sb_inodes+0x944/0x19a0 [ 143.045925][ T1331] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 143.045946][ T1331] ? do_raw_spin_lock+0x12b/0x2f0 [ 143.046012][ T1331] ? rcu_is_watching+0x15/0xb0 [ 143.046049][ T1331] wb_writeback+0x456/0xb70 [ 143.046076][ T1331] ? queue_io+0x1f1/0x4a0 [ 143.046111][ T1331] ? __pfx_wb_writeback+0x10/0x10 [ 143.046134][ T1331] ? do_raw_spin_lock+0x12b/0x2f0 [ 143.046177][ T1331] wb_workfn+0x414/0xf50 [ 143.046202][ T1331] ? look_up_lock_class+0x57/0x110 [ 143.046246][ T1331] ? __pfx_wb_workfn+0x10/0x10 [ 143.046270][ T1331] ? __pfx___schedule+0x10/0x10 [ 143.046294][ T1331] ? irqentry_exit+0x59e/0x620 [ 143.046314][ T1331] ? trace_irq_disable+0x3b/0x150 [ 143.046362][ T1331] ? preempt_schedule_thunk+0x16/0x30 [ 143.046393][ T1331] ? process_one_work+0x87c/0x1650 [ 143.046420][ T1331] process_one_work+0x949/0x1650 [ 143.046462][ T1331] ? trace_hardirqs_off_finish+0x20/0x30 [ 143.046505][ T1331] ? __pfx_process_one_work+0x10/0x10 [ 143.046529][ T1331] ? do_raw_spin_lock+0x12b/0x2f0 [ 143.046574][ T1331] worker_thread+0xb46/0x1140 [ 143.046616][ T1331] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 143.046656][ T1331] kthread+0x388/0x470 [ 143.046678][ T1331] ? __pfx_worker_thread+0x10/0x10 [ 143.046704][ T1331] ? __pfx_kthread+0x10/0x10 [ 143.046727][ T1331] ret_from_fork+0x51e/0xb90 [ 143.046760][ T1331] ? __pfx_ret_from_fork+0x10/0x10 [ 143.046786][ T1331] ? __switch_to+0xc7d/0x1450 [ 143.046816][ T1331] ? __pfx_kthread+0x10/0x10 [ 143.046845][ T1331] ret_from_fork_asm+0x1a/0x30 [ 143.046893][ T1331] [ 143.354761][ T29] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 143.369809][ T1331] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 143.429257][ T29] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 143.514779][ T29] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 143.556779][ T29] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 143.658372][ T7148] loop1: detected capacity change from 0 to 64 [ 143.678593][ T29] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 143.708462][ T29] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 143.720983][ T7149] veth1_macvtap: left promiscuous mode [ 143.748185][ T29] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 143.761298][ T7149] macsec0: entered promiscuous mode [ 143.798117][ T29] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 143.820637][ T7151] veth1_macvtap: entered promiscuous mode [ 143.856559][ T29] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 143.865953][ T7151] macsec0: left promiscuous mode [ 143.877313][ T29] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 143.930563][ T29] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 143.983546][ T29] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 144.024872][ T29] usb 1-1: USB disconnect, device number 2 [ 144.676687][ T29] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 144.840091][ T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 144.886543][ T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 144.949385][ T29] usb 5-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 144.996353][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.039383][ T29] usb 5-1: config 0 descriptor?? [ 145.087853][ T7160] loop3: detected capacity change from 0 to 32768 [ 145.096660][ T7160] xfs: Deprecated parameter 'noikeep' [ 145.102134][ T7160] XFS: noikeep mount option is deprecated. [ 145.169011][ T7160] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 145.278495][ T7160] XFS (loop3): Ending clean mount [ 145.319534][ T7160] XFS (loop3): Quotacheck needed: Please wait. [ 145.368932][ T7160] XFS (loop3): Quotacheck: Done. [ 145.459748][ T5825] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 145.508700][ T29] cypress 0003:04B4:DE61.0001: unknown main item tag 0x5 [ 145.596422][ T29] cypress 0003:04B4:DE61.0001: hidraw0: USB HID v0.00 Device [HID 04b4:de61] on usb-dummy_hcd.4-1/input0 [ 145.622461][ T7191] sp0: Synchronizing with TNC [ 145.797024][ T29] usb 5-1: USB disconnect, device number 2 [ 145.834161][ T7197] loop2: detected capacity change from 0 to 7 [ 145.856172][ C0] blk_print_req_error: 138 callbacks suppressed [ 145.856191][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 145.872361][ C0] buffer_io_error: 138 callbacks suppressed [ 145.872378][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 145.893871][ T7195] fido_id[7195]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 145.917240][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 145.927455][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 145.936387][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 145.946006][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 145.962604][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 145.972379][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 145.998640][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 146.008338][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 146.017399][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 146.027099][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 146.040024][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 146.049717][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 146.058278][ T7197] ldm_validate_partition_table(): Disk read failed. [ 146.067032][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 146.076716][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 146.086542][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 146.096200][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 146.104313][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 146.113992][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 146.126308][ T7197] Dev loop2: unable to read RDB block 0 [ 146.165176][ T7197] loop2: unable to read partition table [ 146.191228][ T7197] loop2: partition table beyond EOD, truncated [ 146.206164][ T7197] loop_reread_partitions: partition scan of loop2 (úùƒå¡™‰ü¾SêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆŠ5) failed (rc=-5) [ 146.269302][ T5193] ldm_validate_partition_table(): Disk read failed. [ 146.311152][ T5193] Dev loop2: unable to read RDB block 0 [ 146.339103][ T5193] loop2: unable to read partition table [ 146.365364][ T5193] loop2: partition table beyond EOD, truncated [ 147.396348][ T30] audit: type=1326 audit(1770068473.114:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7244 comm="syz.2.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd7399aeb9 code=0x7ffc0000 [ 147.438269][ T7249] netlink: 8 bytes leftover after parsing attributes in process `syz.0.355'. [ 147.491207][ T30] audit: type=1326 audit(1770068473.124:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7244 comm="syz.2.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd7399aeb9 code=0x7ffc0000 [ 147.514396][ T7249] netlink: 'syz.0.355': attribute type 30 has an invalid length. [ 147.566446][ T30] audit: type=1326 audit(1770068473.134:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7244 comm="syz.2.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7efd7399aeb9 code=0x7ffc0000 [ 147.580604][ T7249] netlink: 4 bytes leftover after parsing attributes in process `syz.0.355'. [ 147.647060][ T30] audit: type=1326 audit(1770068473.134:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7244 comm="syz.2.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd7399aeb9 code=0x7ffc0000 [ 147.673358][ T7252] loop3: detected capacity change from 0 to 4096 [ 147.724030][ T30] audit: type=1326 audit(1770068473.134:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7244 comm="syz.2.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=128 compat=0 ip=0x7efd7399aeb9 code=0x7ffc0000 [ 147.783680][ T7252] EXT4-fs: Ignoring removed bh option [ 147.819703][ T30] audit: type=1326 audit(1770068473.214:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7244 comm="syz.2.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7efd7393c2d9 code=0x7ffc0000 [ 147.894656][ T7252] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 147.908900][ T30] audit: type=1326 audit(1770068473.214:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7244 comm="syz.2.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7efd7393c2d9 code=0x7ffc0000 [ 147.967070][ T30] audit: type=1326 audit(1770068473.214:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7244 comm="syz.2.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7efd7393c2d9 code=0x7ffc0000 [ 147.989770][ T30] audit: type=1326 audit(1770068473.214:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7244 comm="syz.2.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7efd7393c2d9 code=0x7ffc0000 [ 148.014430][ T30] audit: type=1326 audit(1770068473.214:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7244 comm="syz.2.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7efd7393c2d9 code=0x7ffc0000 [ 148.069118][ T7252] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.346531][ T5825] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.639679][ T7238] loop1: detected capacity change from 0 to 32768 [ 148.714679][ T7238] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 148.801738][ T7238] XFS (loop1): Ending clean mount [ 148.840078][ T7238] XFS (loop1): Quotacheck needed: Please wait. [ 148.901092][ T7255] loop4: detected capacity change from 0 to 32768 [ 148.964404][ T7238] XFS (loop1): Quotacheck: Done. [ 149.054636][ T7255] ocfs2: Slot 0 on device (7,4) was already allocated to this node! [ 149.090376][ T7255] JBD2: Ignoring recovery information on journal [ 149.109789][ T7285] loop3: detected capacity change from 0 to 4096 [ 149.184463][ T7285] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 149.272190][ T7255] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 149.279481][ T6254] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 149.372118][ T7285] ntfs3(loop3): ino=19, mi_enum_attr [ 149.450989][ T7255] (syz.4.357,7255,0):ocfs2_check_dir_entry:314 ERROR: directory entry (#65: offset=512) too close to end or out-of-bounds [ 149.451034][ T7255] (syz.4.357,7255,0):ocfs2_find_dir_space_el:3540 ERROR: status = -2 [ 149.510676][ T7285] ntfs3(loop3): failed to convert "c46c" to cp1250 [ 149.598140][ T7285] ntfs3(loop3): ino=20, mi_enum_attr [ 149.598583][ T7255] (syz.4.357,7255,0):ocfs2_prepare_dir_for_insert:4336 ERROR: status = -2 [ 149.658074][ T7255] (syz.4.357,7255,0):ocfs2_symlink:1880 ERROR: status = -2 [ 149.697169][ T7255] (syz.4.357,7255,0):ocfs2_symlink:2081 ERROR: status = -2 [ 149.927244][ T5831] ocfs2: Unmounting device (7,4) on (node local) [ 150.001666][ T7305] loop1: detected capacity change from 0 to 16 [ 150.046121][ T7305] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 150.097559][ T7307] loop0: detected capacity change from 0 to 512 [ 150.215132][ T7307] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.269771][ T7307] ext4 filesystem being mounted at /87/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 150.767953][ T5823] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.011007][ T7329] loop0: detected capacity change from 0 to 2048 [ 151.044934][ T7329] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 151.087022][ T7331] capability: warning: `syz.2.376' uses deprecated v2 capabilities in a way that may be insecure [ 151.585718][ T7321] loop1: detected capacity change from 0 to 32768 [ 151.657505][ T7321] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 151.832978][ T7321] XFS (loop1): Ending clean mount [ 151.983443][ T6254] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 152.045588][ T7371] loop4: detected capacity change from 0 to 1024 [ 152.057634][ T7371] EXT4-fs: Ignoring removed orlov option [ 152.066556][ T7371] ext4: Unknown parameter 'nouser_xattr' [ 152.359163][ T7376] loop2: detected capacity change from 0 to 1024 [ 152.388797][ T5900] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 152.562838][ T12] hfsplus: b-tree write err: -5, ino 4 [ 152.569040][ T5900] usb 5-1: Using ep0 maxpacket: 32 [ 152.595637][ T5900] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 223, changing to 11 [ 152.618780][ T5900] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 42636, setting to 1024 [ 152.655944][ T5900] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 152.690877][ T5900] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.735513][ T5900] usb 5-1: config 0 descriptor?? [ 152.758676][ T7371] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 152.788873][ T5900] hub 5-1:0.0: USB hub found [ 153.004464][ T5900] hub 5-1:0.0: 1 port detected [ 153.202775][ T5900] hub 5-1:0.0: hub_hub_status failed (err = -71) [ 153.221780][ T5900] hub 5-1:0.0: config failed, can't get hub status (err -71) [ 153.261689][ T5900] usbhid 5-1:0.0: can't add hid device: -71 [ 153.275599][ T5900] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 153.349025][ T5900] usb 5-1: USB disconnect, device number 3 [ 153.592913][ T7404] loop2: detected capacity change from 0 to 4096 [ 153.619064][ T7404] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 153.723665][ T7404] ntfs3(loop2): ino=19, mi_enum_attr [ 154.061848][ T7404] ntfs3: Cannot load iocharset cp94./file1 [ 154.586212][ T7425] block nbd4: shutting down sockets [ 154.952545][ T7442] loop2: detected capacity change from 0 to 2048 [ 154.975618][ T7442] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 155.000458][ T7442] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 155.193662][ T7450] loop4: detected capacity change from 0 to 1024 [ 155.230690][ T7450] EXT4-fs: Ignoring removed bh option [ 155.278220][ T7450] EXT4-fs: inline encryption not supported [ 155.332759][ T7450] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 155.386488][ T7450] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 155.446139][ T7450] EXT4-fs error (device loop4): ext4_map_blocks:776: inode #3: block 2: comm syz.4.428: lblock 2 mapped to illegal pblock 2 (length 1) [ 155.496070][ T7450] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 155.506300][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 155.521946][ C1] EXT4-fs (loop4): initial error at time 1770068481: ext4_map_blocks:776: inode 3: block 2 [ 155.532060][ C1] EXT4-fs (loop4): last error at time 1770068481: ext4_map_blocks:776: inode 3: block 2 [ 155.542728][ T7450] __quota_error: 1289 callbacks suppressed [ 155.542747][ T7450] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 155.557278][ T7450] EXT4-fs error (device loop4): ext4_map_blocks:776: inode #3: block 48: comm syz.4.428: lblock 0 mapped to illegal pblock 48 (length 1) [ 155.571454][ T7450] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 155.579986][ T7450] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 155.607210][ T7450] EXT4-fs error (device loop4): ext4_acquire_dquot:7006: comm syz.4.428: Failed to acquire dquot type 0 [ 155.622017][ T7450] loop4: lost filesystem error report for type 5 error -117 [ 155.634295][ T7450] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6273: Corrupt filesystem [ 155.646550][ T7450] loop4: lost filesystem error report for type 5 error -117 [ 155.649467][ T7450] EXT4-fs error (device loop4): ext4_evict_inode:255: inode #11: comm syz.4.428: mark_inode_dirty error [ 155.690555][ T7450] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 155.690902][ T7450] EXT4-fs warning (device loop4): ext4_evict_inode:258: couldn't mark inode dirty (err -117) [ 155.711682][ T7450] EXT4-fs (loop4): 1 orphan inode deleted [ 155.721441][ T7450] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.736141][ T12] EXT4-fs error (device loop4): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 155.761994][ T5925] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 155.815111][ T12] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 155.834121][ T12] EXT4-fs error (device loop4): ext4_release_dquot:7042: comm kworker/u8:0: Failed to release dquot type 0 [ 155.884677][ T7450] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 155.929165][ T7466] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 155.947333][ T7466] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e84ce118, mo2=0000] [ 155.980403][ T5925] usb 4-1: Using ep0 maxpacket: 8 [ 156.002630][ T5925] usb 4-1: config 3 has an invalid interface number: 151 but max is 1 [ 156.021918][ T7453] loop0: detected capacity change from 0 to 32768 [ 156.046337][ T5925] usb 4-1: config 3 has an invalid interface number: 216 but max is 1 [ 156.053343][ T7453] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.429 (7453) [ 156.065112][ T5925] usb 4-1: config 3 has no interface number 0 [ 156.074763][ T5925] usb 4-1: config 3 has no interface number 1 [ 156.082849][ T5831] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.099377][ T5925] usb 4-1: config 3 interface 151 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 156.114816][ T5925] usb 4-1: config 3 interface 216 altsetting 121 has a duplicate endpoint with address 0xC, skipping [ 156.126337][ T5925] usb 4-1: config 3 interface 151 has no altsetting 0 [ 156.133426][ T5925] usb 4-1: config 3 interface 216 has no altsetting 0 [ 156.144836][ T7453] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 156.162860][ T7453] BTRFS info (device loop0): using blake2b checksum algorithm [ 156.207381][ T5925] usb 4-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice=f1.5f [ 156.241322][ T5925] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.278909][ T5925] usb 4-1: Product: syz [ 156.305439][ T7488] loop4: detected capacity change from 0 to 512 [ 156.306125][ T5925] usb 4-1: Manufacturer: syz [ 156.317284][ T7488] EXT4-fs: Ignoring removed nomblk_io_submit option [ 156.338303][ T7488] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 156.373905][ T7453] BTRFS info (device loop0): enabling ssd optimizations [ 156.381928][ T5925] usb 4-1: SerialNumber: syz [ 156.412554][ T7453] BTRFS info (device loop0): turning on async discard [ 156.445260][ T7488] EXT4-fs (loop4): 1 truncate cleaned up [ 156.457945][ T7453] BTRFS info (device loop0): enabling free space tree [ 156.490521][ T7488] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 156.508930][ T7453] BTRFS info (device loop0): use zstd compression, level 3 [ 156.608173][ T7488] syz.4.438 (pid 7488) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 156.641701][ T7488] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 211 vs 220 free clusters [ 156.683991][ T7478] loop2: detected capacity change from 0 to 32768 [ 156.691593][ T5925] kalmia 4-1:3.151: probe with driver kalmia failed with error -22 [ 156.724514][ T5925] option 4-1:3.151: GSM modem (1-port) converter detected [ 156.783988][ T5831] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.795850][ T5823] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 156.810965][ T7478] ERROR: (device loop2): dbFindCtl: Corrupt dmapctl page [ 156.810965][ T7478] [ 156.821169][ T5925] kalmia 4-1:3.216 (unnamed net_device) (uninitialized): Error sending init packet. Status -22 [ 156.842299][ T5925] kalmia 4-1:3.216: probe with driver kalmia failed with error -22 [ 156.870462][ T5925] usb 4-1: USB disconnect, device number 2 [ 156.879640][ T7478] ERROR: (device loop2): remounting filesystem as read-only [ 156.898897][ T7478] jfs_mkdir: dtInsert returned -EIO [ 156.920258][ T7478] ERROR: (device loop2): jfs_mkdir: [ 156.920258][ T7478] [ 156.979984][ T5925] option 4-1:3.151: device disconnected [ 157.073921][ T7495] loop4: detected capacity change from 0 to 512 [ 157.099256][ T7478] ERROR: (device loop2): dbFindCtl: Corrupt dmapctl page [ 157.099256][ T7478] [ 157.141065][ T7495] EXT4-fs: Ignoring removed bh option [ 157.203487][ T7495] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 157.402891][ T7497] loop1: detected capacity change from 0 to 4096 [ 157.891323][ T7510] netlink: 'syz.1.447': attribute type 6 has an invalid length. [ 158.402661][ T7530] random: crng reseeded on system resumption [ 158.457654][ T7532] netlink: 64 bytes leftover after parsing attributes in process `syz.1.456'. [ 158.599457][ T7538] netlink: 4 bytes leftover after parsing attributes in process `syz.3.459'. [ 158.748891][ T7508] loop4: detected capacity change from 0 to 32768 [ 158.783660][ T7532] syz.1.456 (7532) used greatest stack depth: 17600 bytes left [ 158.849137][ T7508] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 158.948673][ T7554] loop2: detected capacity change from 0 to 512 [ 158.987915][ T7554] EXT4-fs: Ignoring removed i_version option [ 158.994086][ T7554] EXT4-fs: Ignoring removed bh option [ 159.001205][ T7554] EXT4-fs: inline encryption not supported [ 159.008836][ T7554] EXT4-fs: Ignoring removed mblk_io_submit option [ 159.030031][ T7554] EXT4-fs (loop2): Test dummy encryption mode enabled [ 159.037171][ T7554] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 159.081260][ T7554] EXT4-fs (loop2): 1 truncate cleaned up [ 159.103067][ T7560] loop3: detected capacity change from 0 to 128 [ 159.134975][ T7508] XFS (loop4): Ending clean mount [ 159.141750][ T7554] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.239808][ T7554] fscrypt: AES-256-XTS using implementation "xts-aes-aesni-avx" [ 159.330056][ T5824] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.342117][ T5831] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 159.381622][ T7566] program syz.3.468 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 159.560460][ T7568] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 159.628993][ T7572] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 159.648209][ T7568] EXT4-fs (loop2): 1 truncate cleaned up [ 159.662163][ T7568] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.732415][ T30] audit: type=1800 audit(1770068485.464:1304): pid=7568 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.469" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 159.806681][ T5926] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 159.841087][ T5824] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.971402][ T5926] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 159.992315][ T5926] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.019006][ T5926] usb 4-1: Product: syz [ 160.033558][ T5926] usb 4-1: Manufacturer: syz [ 160.049504][ T5926] usb 4-1: SerialNumber: syz [ 160.073542][ T5926] usb 4-1: config 0 descriptor?? [ 160.459720][ T7590] netlink: 'syz.2.479': attribute type 1 has an invalid length. [ 160.476505][ T7590] netlink: 'syz.2.479': attribute type 2 has an invalid length. [ 160.510792][ T5926] usb 4-1: Firmware: major: 0, minor: 3, hardware type: UNKNOWN (64) [ 160.741753][ T5926] usb 4-1: failed to fetch extended address, random address set [ 160.766693][ T5926] usb 4-1: atusb_probe: initialization failed, error = -524 [ 160.787427][ T5926] atusb 4-1:0.0: probe with driver atusb failed with error -524 [ 160.828385][ T5926] usb 4-1: USB disconnect, device number 3 [ 161.560339][ T7617] netlink: 8 bytes leftover after parsing attributes in process `syz.0.491'. [ 162.261765][ T7638] set_capacity_and_notify: 1 callbacks suppressed [ 162.261783][ T7638] loop4: detected capacity change from 0 to 2048 [ 162.282634][ T7638] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 162.366634][ T7638] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 162.374592][ T7638] UDF-fs: Scanning with blocksize 512 failed [ 162.388029][ T7638] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 162.558608][ T7645] loop1: detected capacity change from 0 to 64 [ 162.761397][ T7631] loop3: detected capacity change from 0 to 32768 [ 162.770182][ T7631] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.497 (7631) [ 162.853542][ T7631] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 162.875468][ T7631] BTRFS info (device loop3): using sha256 checksum algorithm [ 162.947193][ T5925] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 163.036746][ T7660] 9pnet: Found fid 0 not clunked [ 163.079569][ T7631] BTRFS info (device loop3): rebuilding free space tree [ 163.116385][ T5925] usb 5-1: Using ep0 maxpacket: 16 [ 163.142026][ T7631] BTRFS info (device loop3): turning off barriers [ 163.150174][ T5925] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 163.156974][ T7631] BTRFS info (device loop3): turning on async discard [ 163.166844][ T5925] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.175106][ T5925] usb 5-1: Product: syz [ 163.180103][ T5925] usb 5-1: Manufacturer: syz [ 163.184757][ T5925] usb 5-1: SerialNumber: syz [ 163.190361][ T7631] BTRFS info (device loop3): enabling free space tree [ 163.211901][ T7631] BTRFS info (device loop3): force clearing of disk cache [ 163.232441][ T5925] r8152-cfgselector 5-1: Unknown version 0x0000 [ 163.238848][ T7631] BTRFS info (device loop3): max_inline set to 17 [ 163.246397][ T5925] r8152-cfgselector 5-1: config 0 descriptor?? [ 163.485851][ T5925] r8152-cfgselector 5-1: Needed 1 retries to read version [ 163.564519][ T5825] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 163.630433][ T7685] syz.1.516 uses obsolete (PF_INET,SOCK_PACKET) [ 163.700926][ T5892] r8152-cfgselector 5-1: USB disconnect, device number 4 [ 164.465261][ T7704] netlink: 'syz.3.523': attribute type 12 has an invalid length. [ 164.764585][ T7713] loop1: detected capacity change from 0 to 4096 [ 164.767459][ T30] audit: type=1326 audit(1770068490.484:1305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7716 comm="syz.0.529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feeb8d9aeb9 code=0x7ffc0000 [ 164.821629][ T7713] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 164.880652][ T30] audit: type=1326 audit(1770068490.494:1306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7716 comm="syz.0.529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feeb8d9aeb9 code=0x7ffc0000 [ 164.880998][ T7713] UDF-fs: Scanning with blocksize 512 failed [ 164.979404][ T30] audit: type=1326 audit(1770068490.524:1307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7716 comm="syz.0.529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7feeb8d9aeb9 code=0x7ffc0000 [ 164.986620][ T7721] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.531'. [ 165.068613][ T30] audit: type=1326 audit(1770068490.524:1308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7716 comm="syz.0.529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feeb8d9aeb9 code=0x7ffc0000 [ 165.106468][ T7713] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 165.150736][ T30] audit: type=1326 audit(1770068490.524:1309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7716 comm="syz.0.529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feeb8d9aeb9 code=0x7ffc0000 [ 165.266314][ T30] audit: type=1326 audit(1770068490.534:1310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7716 comm="syz.0.529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7feeb8d9aeb9 code=0x7ffc0000 [ 165.344559][ T30] audit: type=1326 audit(1770068490.534:1311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7716 comm="syz.0.529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feeb8d9aeb9 code=0x7ffc0000 [ 165.353848][ T7725] loop3: detected capacity change from 0 to 64 [ 165.403032][ T30] audit: type=1326 audit(1770068490.544:1312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7716 comm="syz.0.529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=166 compat=0 ip=0x7feeb8d9aeb9 code=0x7ffc0000 [ 165.492207][ T30] audit: type=1326 audit(1770068490.574:1313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7716 comm="syz.0.529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feeb8d9aeb9 code=0x7ffc0000 [ 165.519765][ T30] audit: type=1800 audit(1770068490.924:1314): pid=7713 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.527" name="file1" dev="loop1" ino=1334 res=0 errno=0 [ 165.564272][ T7728] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. leaving read-only. [ 165.653071][ T7732] loop0: detected capacity change from 0 to 2048 [ 165.698179][ T7732] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 165.713089][ T5877] udevd[5877]: incorrect nilfs2 checksum on /dev/loop0 [ 165.738481][ T7733] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 165.815811][ T7705] loop4: detected capacity change from 0 to 32768 [ 165.846338][ T5925] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 165.865612][ T7705] XFS (loop4): DAX unsupported by block device. Turning off DAX. [ 165.877820][ T7705] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 165.950364][ T7719] loop2: detected capacity change from 0 to 32768 [ 165.968543][ T7719] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.530 (7719) [ 165.986452][ T7705] XFS (loop4): Ending clean mount [ 166.007611][ T7719] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 166.030642][ T5925] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 166.044273][ T7719] BTRFS info (device loop2): using blake2b checksum algorithm [ 166.044495][ T5925] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 166.062824][ T7705] XFS (loop4): Quotacheck needed: Please wait. [ 166.064609][ T5925] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 166.081053][ T5925] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 255, setting to 64 [ 166.092129][ T5925] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 166.108143][ T5925] usb 2-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 166.118028][ T5925] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.126779][ T5925] usb 2-1: Product: syz [ 166.131582][ T5925] usb 2-1: Manufacturer: syz [ 166.143831][ T5925] usb 2-1: SerialNumber: syz [ 166.161104][ T5925] usb 2-1: config 0 descriptor?? [ 166.170612][ T7730] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 166.205040][ T5925] input: KB Gear Tablet as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input9 [ 166.304524][ T7705] XFS (loop4): Quotacheck: Done. [ 166.370179][ T7719] BTRFS info (device loop2): enabling ssd optimizations [ 166.415047][ T7719] BTRFS info (device loop2): turning on async discard [ 166.445961][ T7719] BTRFS info (device loop2): enabling free space tree [ 166.466598][ T7761] netlink: 20 bytes leftover after parsing attributes in process `syz.0.538'. [ 166.487561][ T7719] BTRFS info (device loop2): use zstd compression, level 3 [ 166.539174][ T5925] usb 2-1: USB disconnect, device number 3 [ 166.545312][ T5831] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 166.748381][ T5900] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 166.902372][ T5824] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 166.938176][ T5900] usb 4-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 166.966541][ T5900] usb 4-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 166.993150][ T5900] usb 4-1: config 0 interface 0 has no altsetting 0 [ 167.002797][ T5900] usb 4-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 167.019964][ T5900] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.040840][ T5900] usb 4-1: config 0 descriptor?? [ 167.046409][ T24] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 167.245904][ T24] usb 1-1: config index 0 descriptor too short (expected 215, got 45) [ 167.275028][ T24] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 167.290408][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.332608][ T24] usb 1-1: Product: syz [ 167.337738][ T24] usb 1-1: Manufacturer: syz [ 167.342515][ T24] usb 1-1: SerialNumber: syz [ 167.477986][ T5900] holtek 0003:1241:5015.0002: report_id 941343636 is invalid [ 167.485475][ T5900] holtek 0003:1241:5015.0002: item 0 4 1 8 parsing failed [ 167.507198][ T5900] holtek 0003:1241:5015.0002: parse failed [ 167.512796][ T5838] block nbd1: Receive control failed (result -32) [ 167.513179][ T5900] holtek 0003:1241:5015.0002: probe with driver holtek failed with error -22 [ 167.701620][ T29] usb 4-1: USB disconnect, device number 4 [ 167.824641][ T24] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 167.838101][ T24] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 168.064343][ T24] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000010. ret = -EPROTO [ 168.104476][ T24] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 168.144973][ T24] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 168.156790][ T7798] Invalid source name [ 168.163746][ T7798] UBIFS error (pid: 7798): cannot open "./file0", error -22 [ 168.196362][ T24] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 168.323664][ T24] usb 1-1: USB disconnect, device number 3 [ 168.858631][ T7827] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 168.858631][ T7827] The task syz.4.567 (7827) triggered the difference, watch for misbehavior. [ 168.923589][ T7828] loop2: detected capacity change from 0 to 512 [ 168.974267][ T7828] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.569: bg 0: block 288: padding at end of block bitmap is not set [ 168.986579][ T7834] program syz.3.571 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 169.002420][ T7828] loop2: lost filesystem error report for type 5 error -117 [ 169.006275][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 169.020306][ C1] EXT4-fs (loop2): initial error at time 1770068494: ext4_validate_block_bitmap:441 [ 169.026622][ T922] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 169.029889][ C1] EXT4-fs (loop2): last error at time 1770068494: ext4_validate_block_bitmap:441 [ 169.046882][ T7828] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6687: Corrupt filesystem [ 169.055720][ T7828] loop2: lost filesystem error report for type 5 error -117 [ 169.095450][ T7828] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.569: attempt to clear invalid blocks 1024 len 1 [ 169.119517][ T7836] netlink: 28 bytes leftover after parsing attributes in process `syz.3.572'. [ 169.186451][ T7828] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 169.188521][ T7828] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.569: invalid indirect mapped block 1819239214 (level 0) [ 169.214370][ T7828] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 169.215101][ T7828] EXT4-fs (loop2): 1 truncate cleaned up [ 169.236488][ T7828] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.296937][ T922] usb 1-1: Using ep0 maxpacket: 32 [ 169.312714][ T922] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 169.322106][ T922] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.338495][ T7840] program syz.3.574 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 169.367382][ T922] usb 1-1: config 0 descriptor?? [ 169.515213][ T5824] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.585834][ T922] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 169.675319][ T922] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 169.729906][ T922] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 169.750330][ T922] usb 1-1: media controller created [ 169.792731][ T7821] az6027: more than 2 i2c messages at a time is not handled yet. TODO. [ 169.805794][ T922] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 169.854126][ T7843] mac80211_hwsim hwsim10 wlan1: entered promiscuous mode [ 169.898049][ T7843] macsec1: entered allmulticast mode [ 169.903527][ T7843] mac80211_hwsim hwsim10 wlan1: entered allmulticast mode [ 169.971685][ T922] az6027: usb out operation failed. (-71) [ 169.988325][ T922] az6027: usb out operation failed. (-71) [ 170.001568][ T922] stb0899_attach: Driver disabled by Kconfig [ 170.009095][ T922] az6027: no front-end attached [ 170.009095][ T922] [ 170.016737][ T922] az6027: usb out operation failed. (-71) [ 170.022673][ T922] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 170.035470][ T7843] mac80211_hwsim hwsim10 wlan1: left allmulticast mode [ 170.043832][ T922] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input10 [ 170.076186][ T7843] mac80211_hwsim hwsim10 wlan1: left promiscuous mode [ 170.112627][ T922] dvb-usb: schedule remote query interval to 400 msecs. [ 170.136565][ T922] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 170.163489][ T922] usb 1-1: USB disconnect, device number 4 [ 170.299016][ T7856] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 4, id = 0 [ 170.318850][ T922] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 170.692972][ T7849] loop4: detected capacity change from 0 to 32768 [ 170.703971][ T7866] program syz.3.585 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 170.782458][ T7849] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 170.899480][ T7849] XFS (loop4): Ending clean mount [ 170.910984][ T7877] loop1: detected capacity change from 0 to 256 [ 170.953937][ T7879] loop0: detected capacity change from 0 to 64 [ 170.963087][ T7849] XFS (loop4): Quotacheck needed: Please wait. [ 170.972692][ T7877] FAT-fs (loop1): Directory bread(block 64) failed [ 170.981064][ T7877] FAT-fs (loop1): Directory bread(block 65) failed [ 171.013241][ T7877] FAT-fs (loop1): Directory bread(block 66) failed [ 171.055044][ T7877] FAT-fs (loop1): Directory bread(block 67) failed [ 171.061782][ T7849] XFS (loop4): Quotacheck: Done. [ 171.096432][ T7877] FAT-fs (loop1): Directory bread(block 68) failed [ 171.103346][ T7880] pim6reg: tun_chr_ioctl cmd 1074025681 [ 171.113993][ T7877] FAT-fs (loop1): Directory bread(block 69) failed [ 171.155712][ T7877] FAT-fs (loop1): Directory bread(block 70) failed [ 171.173798][ T7855] loop2: detected capacity change from 0 to 32768 [ 171.187876][ T7877] FAT-fs (loop1): Directory bread(block 71) failed [ 171.212426][ T7877] FAT-fs (loop1): Directory bread(block 72) failed [ 171.230026][ T7855] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.581 (7855) [ 171.240996][ T7877] FAT-fs (loop1): Directory bread(block 73) failed [ 171.318153][ T7855] BTRFS info (device loop2): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 171.343380][ T7855] BTRFS info (device loop2): using crc32c checksum algorithm [ 171.352093][ T7855] BTRFS warning (device loop2): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 171.439428][ T5831] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 171.591137][ T7855] BTRFS info (device loop2): rebuilding free space tree [ 171.758969][ T7855] BTRFS info (device loop2): disabling free space tree [ 171.816414][ T7855] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 171.842971][ T7855] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 171.912032][ T7855] BTRFS info (device loop2): enabling ssd optimizations [ 171.936425][ T7855] BTRFS info (device loop2): turning on async discard [ 171.956461][ T7855] BTRFS info (device loop2): enabling disk space caching [ 171.963571][ T7855] BTRFS info (device loop2): force clearing of disk cache [ 172.016321][ T7855] BTRFS info (device loop2): use zstd compression, level 3 [ 172.079158][ T7910] macvlan0: entered promiscuous mode [ 172.105699][ T7910] netlink: 'syz.0.597': attribute type 1 has an invalid length. [ 172.146727][ T7910] netlink: 'syz.0.597': attribute type 2 has an invalid length. [ 172.400511][ T5824] BTRFS info (device loop2): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 173.018957][ T7926] loop1: detected capacity change from 0 to 8192 [ 173.066599][ T7926] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 173.083176][ T7926] UDF-fs: Scanning with blocksize 512 failed [ 173.129865][ T7926] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 173.159023][ T7926] UDF-fs: Scanning with blocksize 1024 failed [ 173.201692][ T7926] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 173.227443][ T7926] UDF-fs: Scanning with blocksize 2048 failed [ 173.253292][ T7926] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 173.518509][ T7924] loop0: detected capacity change from 0 to 32768 [ 173.545791][ T7924] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 173.703193][ T7952] netlink: 'syz.1.608': attribute type 12 has an invalid length. [ 173.712710][ T7952] netlink: 190972 bytes leftover after parsing attributes in process `syz.1.608'. [ 173.848603][ T7924] XFS (loop0): Ending clean mount [ 174.070412][ T5823] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 174.282695][ T7971] loop1: detected capacity change from 0 to 512 [ 174.322012][ T7971] EXT4-fs: Ignoring removed mblk_io_submit option [ 174.338397][ T7971] EXT4-fs: Ignoring removed bh option [ 174.384141][ T7971] EXT4-fs (loop1): Test dummy encryption mode enabled [ 174.406428][ T7971] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 174.476510][ T7971] EXT4-fs (loop1): 1 truncate cleaned up [ 174.515397][ T7971] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 174.640206][ T6254] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.134357][ T7965] loop4: detected capacity change from 0 to 32768 [ 175.228699][ T7991] loop0: detected capacity change from 0 to 4096 [ 175.246724][ T7965] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 175.388959][ T8004] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 175.429463][ T8006] netlink: 12 bytes leftover after parsing attributes in process `syz.2.630'. [ 175.457060][ T7965] XFS (loop4): Ending clean mount [ 175.633835][ T5831] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 175.749943][ T8007] loop1: detected capacity change from 0 to 8192 [ 175.957587][ T8015] netlink: 8 bytes leftover after parsing attributes in process `syz.3.635'. [ 176.395642][ T8026] loop0: detected capacity change from 0 to 4096 [ 176.548044][ T8026] ntfs3(loop0): failed to convert "0080" to cp850 [ 176.598439][ T8026] ntfs3(loop0): failed to convert name for inode 1e. [ 176.614106][ T8026] ntfs3(loop0): ino=1f, mi_enum_attr [ 176.626418][ T8026] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 176.805495][ T8034] loop2: detected capacity change from 0 to 64 [ 176.874831][ T8034] hfs: get root inode failed [ 177.852082][ T8047] loop0: detected capacity change from 0 to 32768 [ 177.876138][ T8047] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.649 (8047) [ 177.895423][ T8064] loop2: detected capacity change from 0 to 64 [ 177.924193][ T8047] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 177.967715][ T8047] BTRFS info (device loop0): using sha256 checksum algorithm [ 178.142372][ T8047] BTRFS info (device loop0): enabling ssd optimizations [ 178.157478][ T8054] loop1: detected capacity change from 0 to 40427 [ 178.169295][ T8054] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 178.179930][ T8054] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 178.188981][ T8047] BTRFS info (device loop0): turning on async discard [ 178.199223][ T8047] BTRFS info (device loop0): enabling free space tree [ 178.210387][ T8054] F2FS-fs (loop1): invalid crc value [ 178.320069][ T8054] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 178.416889][ T8054] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 178.425232][ T8054] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 178.484260][ T5823] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 179.059439][ T8103] loop6: detected capacity change from 0 to 7 [ 179.153575][ C1] blk_print_req_error: 25 callbacks suppressed [ 179.153598][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 179.169585][ C1] buffer_io_error: 25 callbacks suppressed [ 179.169605][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 179.229024][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 179.238751][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 179.254664][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 179.264372][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 179.272617][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 179.282545][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 179.291980][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 179.301828][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 179.312372][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 179.322047][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 179.331907][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 179.341574][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 179.352687][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 179.362394][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 179.370380][ T8103] ldm_validate_partition_table(): Disk read failed. [ 179.387474][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 179.397159][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 179.406162][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 179.415899][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 179.425881][ T8103] Dev loop6: unable to read RDB block 0 [ 179.459081][ T8103] loop6: unable to read partition table [ 179.464994][ T8103] loop6: partition table beyond EOD, truncated [ 179.476468][ T8103] loop_reread_partitions: partition scan of loop6 (úùƒå¡™‰ü¾SêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆŠ5) failed (rc=-5) [ 179.654996][ T5892] hid-generic 0005:04F3:0401.0003: item fetching failed at offset 0/1 [ 179.694577][ T5892] hid-generic 0005:04F3:0401.0003: probe with driver hid-generic failed with error -22 [ 179.962378][ T8099] loop0: detected capacity change from 0 to 32768 [ 179.991781][ T8099] ERROR: (device loop0): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 3 [ 179.991781][ T8099] [ 180.021229][ T8099] ERROR: (device loop0): remounting filesystem as read-only [ 180.111520][ T8102] loop4: detected capacity change from 0 to 32768 [ 180.167346][ T8102] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 180.251092][ T8102] XFS (loop4): Ending clean mount [ 180.290951][ T8102] XFS (loop4): Quotacheck needed: Please wait. [ 180.390255][ T8102] XFS (loop4): Quotacheck: Done. [ 180.531471][ T5831] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 180.912077][ T8113] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 181.130600][ T8134] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 181.176196][ T8138] tap0: tun_chr_ioctl cmd 1074025677 [ 181.186783][ T8138] tap0: linktype set to 270 [ 181.489250][ T8146] dummy0: mtu less than device minimum [ 181.725828][ T8143] loop4: detected capacity change from 0 to 32768 [ 181.736428][ T5925] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 181.751033][ T8143] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.678 (8143) [ 181.797828][ T8143] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 181.826332][ T8143] BTRFS info (device loop4): using sha256 checksum algorithm [ 181.926757][ T5925] usb 3-1: Using ep0 maxpacket: 16 [ 181.955393][ T5925] usb 3-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 181.961384][ T8143] BTRFS info (device loop4): rebuilding free space tree [ 181.976815][ T5925] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.984887][ T5925] usb 3-1: Product: syz [ 181.996187][ T5925] usb 3-1: Manufacturer: syz [ 182.001149][ T5925] usb 3-1: SerialNumber: syz [ 182.023931][ T8143] BTRFS info (device loop4): disabling free space tree [ 182.034338][ T8149] loop0: detected capacity change from 0 to 32768 [ 182.040609][ T8143] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 182.040869][ T8143] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 182.103369][ T8143] BTRFS info (device loop4): setting nodatasum [ 182.127971][ T8143] BTRFS info (device loop4): setting nodatacow [ 182.144693][ T8149] [ 182.144693][ T8149] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 182.144693][ T8149] [ 182.164262][ T8143] BTRFS info (device loop4): turning off barriers [ 182.199512][ T8143] BTRFS info (device loop4): force clearing of disk cache [ 182.212258][ T8168] netlink: 24 bytes leftover after parsing attributes in process `syz.1.683'. [ 182.245238][ T8168] netlink: 32 bytes leftover after parsing attributes in process `syz.1.683'. [ 182.259908][ T8149] [ 182.259908][ T8149] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 182.259908][ T8149] [ 182.292281][ T8170] ERROR: (device loop0): diWrite: ixpxd invalid [ 182.292281][ T8170] [ 182.308331][ T8149] JFS: metapage_get_blocks failed [ 182.334538][ T5925] usb 3-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 182.335750][ T8149] [ 182.335750][ T8149] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 182.335750][ T8149] [ 182.395797][ T5925] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 182.436128][ T5925] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 182.436621][ T8170] ERROR: (device loop0): txCommit: [ 182.436621][ T8170] [ 182.455052][ T5925] usb 3-1: media controller created [ 182.466630][ T8149] [ 182.466630][ T8149] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 182.466630][ T8149] [ 182.520530][ T5925] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 182.538735][ T8149] [ 182.538735][ T8149] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 182.538735][ T8149] [ 182.540500][ T8170] ERROR: (device loop0): diFree: invalid inoext [ 182.540500][ T8170] [ 182.587674][ T8176] loop1: detected capacity change from 0 to 22 [ 182.599660][ T8149] [ 182.599660][ T8149] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 182.599660][ T8149] [ 182.612874][ T8176] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 182.629453][ T5925] zl10353_read_register: readreg error (reg=127, ret==-71) [ 182.646406][ T8176] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 182.715546][ T5831] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 182.780371][ T3014] ERROR: (device loop0): diWrite: ixpxd invalid [ 182.780371][ T3014] [ 182.801437][ T3014] ERROR: (device loop0): txCommit: [ 182.801437][ T3014] [ 182.812096][ T3014] jfs_write_inode: jfs_commit_inode failed! [ 182.855627][ T5823] [ 182.855627][ T5823] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 182.855627][ T5823] [ 182.856182][ T5925] dvb_usb_gl861 3-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 182.905030][ T5823] [ 182.905030][ T5823] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 182.905030][ T5823] [ 182.946813][ T5925] usb 3-1: USB disconnect, device number 4 [ 183.455625][ T8190] loop4: detected capacity change from 0 to 256 [ 183.471572][ T8184] loop2: detected capacity change from 0 to 8192 [ 183.489547][ T8192] loop0: detected capacity change from 0 to 1024 [ 183.508020][ T8184] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 183.586142][ T8194] netlink: 36 bytes leftover after parsing attributes in process `syz.3.695'. [ 183.716663][ T8192] hfsplus: inconsistency in B*Tree (1,0,1,0,2) [ 183.769201][ T8200] program syz.1.696 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 183.856528][ T8202] netlink: 'syz.3.698': attribute type 2 has an invalid length. [ 183.916785][ T8205] netlink: 'syz.3.698': attribute type 2 has an invalid length. [ 184.018280][ T8202] ‚#{6c: entered promiscuous mode [ 184.045280][ T8205] ‚#{6c: left promiscuous mode [ 184.552645][ T8218] netlink: 8 bytes leftover after parsing attributes in process `syz.1.705'. [ 184.856009][ T8226] random: crng reseeded on system resumption [ 184.908412][ T8227] netlink: 64 bytes leftover after parsing attributes in process `syz.2.708'. [ 185.320623][ T8220] loop3: detected capacity change from 0 to 32768 [ 185.352168][ T8220] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.706 (8220) [ 185.388951][ T8220] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 185.410650][ T8220] BTRFS info (device loop3): using sha256 checksum algorithm [ 185.510361][ T8220] BTRFS info (device loop3): enabling ssd optimizations [ 185.525977][ T8254] loop2: detected capacity change from 0 to 256 [ 185.530911][ T8220] BTRFS info (device loop3): turning on async discard [ 185.555951][ T8220] BTRFS info (device loop3): enabling free space tree [ 185.631130][ T8254] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x389acbd6, utbl_chksum : 0xe619d30d) [ 185.798301][ T5825] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 185.835277][ T8254] exFAT-fs (loop2): start_clu is invalid cluster(0x0) [ 186.806560][ T8290] loop0: detected capacity change from 0 to 64 [ 187.199499][ T8274] loop1: detected capacity change from 0 to 32768 [ 187.212802][ T8274] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.722 (8274) [ 187.292313][ T8274] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 187.307904][ T8274] BTRFS info (device loop1): using blake2b checksum algorithm [ 187.378453][ T8274] BTRFS info (device loop1): enabling ssd optimizations [ 187.396703][ T8274] BTRFS info (device loop1): turning on async discard [ 187.410442][ T8274] BTRFS info (device loop1): enabling free space tree [ 187.725508][ T6254] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 188.118464][ T8332] loop2: detected capacity change from 0 to 4096 [ 188.204220][ T8332] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 188.264887][ T8332] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 188.415424][ T8326] loop4: detected capacity change from 0 to 32768 [ 188.462936][ T8326] [ 188.462936][ T8326] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 188.462936][ T8326] [ 188.559518][ T5824] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.653795][ T5831] [ 188.653795][ T5831] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 188.653795][ T5831] [ 188.703653][ T5831] [ 188.703653][ T5831] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 188.703653][ T5831] [ 188.892442][ T8352] program syz.2.747 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 189.181273][ T8358] netlink: 16 bytes leftover after parsing attributes in process `syz.3.752'. [ 189.313871][ T8336] loop1: detected capacity change from 0 to 32768 [ 189.416639][ T8336] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 189.458924][ T8336] JBD2: Ignoring recovery information on journal [ 189.485448][ T8363] loop3: detected capacity change from 0 to 4096 [ 189.579434][ T8336] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 189.832456][ T8376] loop0: detected capacity change from 0 to 256 [ 190.031226][ T8376] FAT-fs (loop0): Directory bread(block 64) failed [ 190.056982][ T6254] ocfs2: Unmounting device (7,1) on (node local) [ 190.094782][ T8376] FAT-fs (loop0): Directory bread(block 65) failed [ 190.131536][ T8376] FAT-fs (loop0): Directory bread(block 66) failed [ 190.142230][ T8376] FAT-fs (loop0): Directory bread(block 67) failed [ 190.149026][ T8376] FAT-fs (loop0): Directory bread(block 68) failed [ 190.155606][ T8376] FAT-fs (loop0): Directory bread(block 69) failed [ 190.164316][ T8376] FAT-fs (loop0): Directory bread(block 70) failed [ 190.206430][ T8376] FAT-fs (loop0): Directory bread(block 71) failed [ 190.213198][ T8376] FAT-fs (loop0): Directory bread(block 72) failed [ 190.246315][ T8376] FAT-fs (loop0): Directory bread(block 73) failed [ 190.448218][ T8390] loop4: detected capacity change from 0 to 64 [ 191.092859][ T8413] loop3: detected capacity change from 0 to 1024 [ 191.161494][ T8413] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 191.197287][ T8419] loop6: detected capacity change from 0 to 524288000 [ 191.245810][ T8421] loop1: detected capacity change from 0 to 1024 [ 191.320878][ T8421] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 191.471425][ T5825] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.503546][ T6254] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.544361][ T8402] loop4: detected capacity change from 0 to 32768 [ 191.563912][ T8402] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.768 (8402) [ 191.636117][ T8402] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 191.646977][ T5925] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 191.683372][ T8402] BTRFS info (device loop4): using sha256 checksum algorithm [ 191.710499][ T5892] kernel read not supported for file /331/oom_adj (pid: 5892 comm: kworker/0:4) [ 191.830347][ T5925] usb 3-1: config index 0 descriptor too short (expected 39, got 27) [ 191.851165][ T5925] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 191.869574][ T5925] usb 3-1: config 0 interface 0 has no altsetting 0 [ 191.888878][ T5925] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 191.898528][ T5925] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 191.906995][ T5925] usb 3-1: Product: syz [ 191.911477][ T8402] BTRFS info (device loop4): enabling ssd optimizations [ 191.912524][ T5925] usb 3-1: Manufacturer: syz [ 191.923486][ T5925] usb 3-1: SerialNumber: syz [ 191.940959][ T5925] usb 3-1: config 0 descriptor?? [ 191.948796][ T5925] hub 3-1:0.0: bad descriptor, ignoring hub [ 191.952399][ T8402] BTRFS info (device loop4): turning on async discard [ 191.954765][ T5925] hub 3-1:0.0: probe with driver hub failed with error -5 [ 191.997265][ T5925] usb 3-1: selecting invalid altsetting 0 [ 191.997382][ T8402] BTRFS info (device loop4): enabling free space tree [ 192.349191][ T5925] usb 3-1: USB disconnect, device number 5 [ 192.357035][ T3014] BTRFS info (device loop4): qgroup scan completed (inconsistency flag cleared) [ 192.619732][ T5831] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 192.911838][ T5925] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 193.051635][ T8477] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 193.108948][ T5925] usb 3-1: config index 0 descriptor too short (expected 39, got 27) [ 193.117292][ T5925] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 193.139269][ T5925] usb 3-1: config 0 interface 0 has no altsetting 0 [ 193.156977][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 193.171370][ T5925] usb 3-1: string descriptor 0 read error: -22 [ 193.178113][ T5925] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 193.207542][ T5925] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 193.247028][ T5925] usb 3-1: config 0 descriptor?? [ 193.285087][ T5925] hub 3-1:0.0: bad descriptor, ignoring hub [ 193.325572][ T5925] hub 3-1:0.0: probe with driver hub failed with error -5 [ 193.372396][ T5925] usb 3-1: selecting invalid altsetting 0 [ 193.488450][ T0] NOHZ tick-stop error: local softirq work is pending, handler #01!!! [ 193.655379][ T8485] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 193.734128][ T8489] loop3: detected capacity change from 0 to 164 [ 193.774906][ T5925] usb 3-1: USB disconnect, device number 6 [ 194.122047][ T8496] loop0: detected capacity change from 0 to 4096 [ 194.156821][ T8496] EXT4-fs: Conflicting test_dummy_encryption options [ 194.296705][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 194.763735][ T8518] loop7: detected capacity change from 0 to 6 [ 194.857043][ T8518] Invalid logical block size (4) [ 194.889579][ C1] blk_print_req_error: 11 callbacks suppressed [ 194.889600][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x880700 phys_seg 1 prio class 2 [ 194.930541][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 194.940219][ C1] buffer_io_error: 11 callbacks suppressed [ 194.940237][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 194.958698][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 194.968383][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 194.978758][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 194.988411][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 194.997859][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 195.007517][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 195.016440][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 195.026086][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 195.412347][ T922] kernel read not supported for file /input/mouse0 (pid: 922 comm: kworker/0:2) [ 195.710120][ T8549] loop2: detected capacity change from 0 to 128 [ 195.764856][ T8549] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 195.814571][ T8549] ext4 filesystem being mounted at /190/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 195.868947][ T8549] EXT4-fs warning (device loop2): verify_group_input:137: Cannot add at group 1949724777 (only 1 groups) [ 195.963426][ T8527] loop0: detected capacity change from 0 to 32768 [ 195.972987][ T5824] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 196.090473][ T1152] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.230903][ T1152] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.434828][ T1152] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.626563][ T5840] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 196.637922][ T5840] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 196.647731][ T5840] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 196.657800][ T5840] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 196.665531][ T5840] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 196.765927][ T8573] loop1: detected capacity change from 0 to 764 [ 196.859208][ T1152] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.967856][ T5900] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 197.005583][ T8575] loop2: detected capacity change from 0 to 512 [ 197.053704][ T8575] EXT4-fs: Ignoring removed i_version option [ 197.102343][ T8575] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 197.147711][ T5900] usb 4-1: Using ep0 maxpacket: 16 [ 197.192311][ T5900] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 197.246341][ T5900] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.277616][ T5900] usb 4-1: config 0 descriptor?? [ 197.310627][ T5900] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 197.349023][ T5824] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.403643][ T8583] loop1: detected capacity change from 0 to 4096 [ 197.515379][ T8583] ntfs3(loop1): ino=3, ntfs_set_state failed, -22. [ 197.526785][ T8583] ntfs3(loop1): Failed to initialize $Extend/$ObjId. [ 197.604122][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 197.604143][ T30] audit: type=1800 audit(1770068523.334:1316): pid=8583 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.841" name="file1" dev="loop1" ino=30 res=0 errno=0 [ 197.635366][ T8583] ntfs3(loop1): ino=1e, "file1" attr_set_size [ 197.720097][ T30] audit: type=1800 audit(1770068523.364:1317): pid=8583 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.841" name="file1" dev="loop1" ino=30 res=0 errno=0 [ 197.755741][ T1152] bridge_slave_1: left promiscuous mode [ 197.757390][ T8567] loop0: detected capacity change from 0 to 32768 [ 197.774874][ T8583] ntfs3(loop1): ino=1e, "file1" attr_set_size [ 197.782555][ T1152] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.830254][ T1152] bridge_slave_0: left allmulticast mode [ 197.858065][ T1152] bridge_slave_0: left promiscuous mode [ 197.864102][ T1152] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.879125][ T1331] ntfs3(loop1): ino=3, ntfs3_write_inode failed, -22. [ 197.904919][ T8567] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 197.929292][ T6254] ntfs3(loop1): ino=3, ntfs_set_state failed, -22. [ 197.957482][ T6254] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 197.965325][ T6254] ntfs3(loop1): ino=3, ntfs_set_state failed, -22. [ 198.037959][ T1331] ntfs3(loop1): ino=3, ntfs3_write_inode failed, -22. [ 198.071170][ T8567] XFS (loop0): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 198.126878][ T5900] gspca_sonixj: reg_r err -71 [ 198.136426][ T5900] sonixj 4-1:0.0: probe with driver sonixj failed with error -71 [ 198.161296][ T5900] usb 4-1: USB disconnect, device number 5 [ 198.203051][ T8600] loop1: detected capacity change from 0 to 512 [ 198.231733][ T8600] EXT4-fs (loop1): Test dummy encryption mode enabled [ 198.249123][ T8567] XFS (loop0): Starting recovery (logdev: internal) [ 198.312844][ T8600] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 198.331375][ T8600] EXT4-fs (loop1): Errors on filesystem, clearing orphan list. [ 198.334539][ T8567] XFS (loop0): Ending recovery (logdev: internal) [ 198.390399][ T8567] XFS (loop0): Quotacheck needed: Please wait. [ 198.401443][ T8600] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.492081][ T8567] XFS (loop0): Quotacheck: Done. [ 198.588925][ T30] audit: type=1804 audit(1770068524.314:1318): pid=8567 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.835" name="/newroot/181/file1/file2" dev="loop0" ino=4423 res=1 errno=0 [ 198.642976][ T6254] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.760405][ T5840] Bluetooth: hci4: command tx timeout [ 198.806025][ T5823] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 199.066475][ T5926] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 199.085314][ T8618] loop1: detected capacity change from 0 to 1024 [ 199.134013][ T8618] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 199.189825][ T1152] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 199.208757][ T1152] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 199.228651][ T1152] bond0 (unregistering): Released all slaves [ 199.254460][ T8618] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 199.286861][ T8618] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 131075 with max blocks 1 with error 28 [ 199.305030][ T5926] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 199.343123][ T5926] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.391022][ T5926] usb 4-1: config 0 descriptor?? [ 199.404583][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.417957][ T8618] EXT4-fs (loop1): This should not happen!! Data will be lost [ 199.417957][ T8618] [ 199.419064][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.463442][ T5926] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 199.474256][ T8618] EXT4-fs (loop1): Total free blocks count 0 [ 199.497019][ T8618] EXT4-fs (loop1): Free/Dirty block details [ 199.505261][ T8625] loop0: detected capacity change from 0 to 8192 [ 199.532509][ T8618] EXT4-fs (loop1): free_blocks=68451041280 [ 199.579927][ T8618] EXT4-fs (loop1): dirty_blocks=32 [ 199.585127][ T8618] EXT4-fs (loop1): Block reservation details [ 199.647550][ T8618] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 199.812513][ T8568] chnl_net:caif_netlink_parms(): no params data found [ 199.823150][ T3014] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 199.879842][ T5926] cpia1 4-1:0.0: unexpected state after lo power cmd: 00 [ 200.053315][ T8635] loop0: detected capacity change from 0 to 1024 [ 200.076019][ T8635] EXT4-fs: Ignoring removed orlov option [ 200.082578][ T5926] gspca_cpia1: usb_control_msg 01, error -32 [ 200.103409][ T5926] gspca_cpia1: usb_control_msg 01, error -71 [ 200.145246][ T5926] cpia1 4-1:0.0: only firmware version 1 is supported (got: 0) [ 200.165734][ T8635] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 200.207290][ T5926] usb 4-1: USB disconnect, device number 6 [ 200.245840][ T8631] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.850 (8631) [ 200.279336][ T8631] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 200.299878][ T8631] BTRFS info (device loop2): using sha256 checksum algorithm [ 200.359262][ T5823] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.514767][ T8631] BTRFS info (device loop2): rebuilding free space tree [ 200.588186][ T1152] hsr_slave_0: left promiscuous mode [ 200.621006][ T8631] BTRFS info (device loop2): disabling free space tree [ 200.646359][ T8631] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 200.657939][ T1152] hsr_slave_1: left promiscuous mode [ 200.664146][ T1152] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 200.706372][ T8631] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 200.716411][ T1152] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 200.755338][ T1152] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 200.787521][ T8631] BTRFS info (device loop2): setting nodatasum [ 200.806366][ T1152] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 200.806398][ T8631] BTRFS info (device loop2): setting nodatacow [ 200.826697][ T5840] Bluetooth: hci4: command tx timeout [ 200.839084][ T8631] BTRFS info (device loop2): turning off barriers [ 200.849925][ T8631] BTRFS info (device loop2): force clearing of disk cache [ 200.974010][ T1152] veth1_macvtap: left promiscuous mode [ 201.011456][ T1152] veth0_macvtap: left promiscuous mode [ 201.043046][ T1152] veth1_vlan: left promiscuous mode [ 201.076569][ T1152] veth0_vlan: left promiscuous mode [ 201.110906][ T8677] set_capacity_and_notify: 1 callbacks suppressed [ 201.110926][ T8677] loop1: detected capacity change from 0 to 16 [ 201.148073][ T5824] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 201.206000][ T8677] erofs (device loop1): mounted with root inode @ nid 36. [ 201.376335][ T29] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 201.396087][ T6254] VFS_WARN_ON_INODE(strlen(link) != linklen): inode:ffff88805a92aa48 fs:erofs mode:120777 opflags:0x8 flags:0x0 state:0x1 count:1 [ 201.458422][ T6254] ------------[ cut here ]------------ [ 201.464931][ T6254] 1 [ 201.464961][ T6254] WARNING: ./include/linux/fs.h:953 at erofs_iget+0x1fce/0x2c00, CPU#0: syz-executor/6254 [ 201.478605][ T6254] Modules linked in: [ 201.483287][ T6254] CPU: 0 UID: 0 PID: 6254 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 201.494427][ T6254] Tainted: [L]=SOFTLOCKUP [ 201.498846][ T6254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 201.508977][ T6254] RIP: 0010:erofs_iget+0x1fce/0x2c00 [ 201.514326][ T6254] Code: 0f 8c e4 e1 ff ff 48 89 df e8 be 60 dd fd e9 d7 e1 ff ff e8 94 91 73 fd 48 8b 7c 24 10 48 c7 c6 00 99 1e 8c e8 73 0f f8 fd 90 <0f> 0b 90 e9 3c fe ff ff e8 75 91 73 fd 48 8b 7c 24 10 48 c7 c6 80 [ 201.534259][ T6254] RSP: 0018:ffffc90003e3f780 EFLAGS: 00010246 [ 201.540458][ T6254] RAX: e36218b954a5e200 RBX: 0000000000000017 RCX: e36218b954a5e200 [ 201.565323][ T6254] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 201.574117][ T29] usb 4-1: config 54 has an invalid interface number: 154 but max is 0 [ 201.574148][ T29] usb 4-1: config 54 has an invalid descriptor of length 0, skipping remainder of the config [ 201.574169][ T29] usb 4-1: config 54 has no interface number 0 [ 201.574210][ T29] usb 4-1: config 54 interface 154 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 201.574236][ T29] usb 4-1: config 54 interface 154 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 201.580535][ T29] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice= 0.ec [ 201.584608][ T6254] RBP: ffffc90003e3f9a0 R08: ffffc90003e3f367 R09: 1ffff920007c7e6c [ 201.639716][ T6254] R10: dffffc0000000000 R11: fffff520007c7e6d R12: 0000000000000027 [ 201.647876][ T6254] R13: 1ffff1100b525553 R14: 0000000000000027 R15: ffff88802a339e00 [ 201.655983][ T6254] FS: 000055555b468500(0000) GS:ffff888125472000(0000) knlGS:0000000000000000 [ 201.665999][ T6254] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 201.666611][ T29] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.674504][ T6254] CR2: 00007f2d23a22000 CR3: 0000000022f7e000 CR4: 00000000003526f0 [ 201.688819][ T6254] Call Trace: [ 201.692146][ T6254] [ 201.695189][ T6254] ? erofs_put_metabuf+0x17a/0x290 [ 201.700440][ T6254] ? __pfx_erofs_iget+0x10/0x10 [ 201.705353][ T6254] ? __pfx_erofs_namei+0x10/0x10 [ 201.710411][ T6254] ? __pfx_d_alloc_parallel+0x10/0x10 [ 201.715839][ T6254] erofs_lookup+0x186/0x360 [ 201.720506][ T6254] __lookup_slow+0x2b7/0x410 [ 201.725161][ T6254] ? __pfx___lookup_slow+0x10/0x10 [ 201.730402][ T6254] ? down_read+0x272/0x2e0 [ 201.733808][ T29] usb 4-1: Product: syz [ 201.734863][ T6254] lookup_slow+0x53/0x70 [ 201.743373][ T6254] path_lookupat+0x3f5/0x8c0 [ 201.748118][ T6254] filename_lookup+0x256/0x5d0 [ 201.752956][ T6254] ? __pfx_filename_lookup+0x10/0x10 [ 201.754964][ T29] usb 4-1: Manufacturer: syz [ 201.758367][ T6254] ? strncpy_from_user+0x150/0x2b0 [ 201.758404][ T6254] ? do_getname+0x151/0x250 [ 201.758435][ T6254] user_path_at+0x40/0x160 [ 201.758470][ T6254] __x64_sys_umount+0xf6/0x170 [ 201.776072][ T29] usb 4-1: SerialNumber: syz [ 201.779836][ T6254] ? __pfx___x64_sys_umount+0x10/0x10 [ 201.793107][ T6254] do_syscall_64+0x14d/0xf80 [ 201.797773][ T6254] ? trace_irq_disable+0x3b/0x150 [ 201.802845][ T6254] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.809055][ T6254] ? clear_bhb_loop+0x40/0x90 [ 201.813790][ T6254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.819844][ T6254] RIP: 0033:0x7f710379c117 [ 201.824300][ T6254] Code: a2 c7 05 7c 94 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 201.825480][ T8681] input: syz1 as /devices/virtual/input/input12 [ 201.844052][ T6254] RSP: 002b:00007ffc7c7f77d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 201.844086][ T6254] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f710379c117 [ 201.844103][ T6254] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc7c7f7890 [ 201.844117][ T6254] RBP: 00007ffc7c7f7890 R08: 00007ffc7c7f8890 R09: 00000000ffffffff [ 201.844132][ T6254] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc7c7f8980 [ 201.844147][ T6254] R13: 00007f710380471f R14: 000055555b4684e8 R15: 00007ffc7c7fab40 [ 201.844180][ T6254] [ 201.844191][ T6254] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 201.844209][ T6254] CPU: 0 UID: 0 PID: 6254 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 201.844254][ T6254] Tainted: [L]=SOFTLOCKUP [ 201.844279][ T6254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 201.844335][ T6254] Call Trace: [ 201.844365][ T6254] [ 201.844405][ T6254] vpanic+0x56c/0xa60 [ 201.844507][ T6254] ? __pfx__printk+0x10/0x10 [ 201.844561][ T6254] ? __pfx_vpanic+0x10/0x10 [ 201.844626][ T6254] ? is_bpf_text_address+0x292/0x2b0 [ 201.844687][ T6254] ? is_bpf_text_address+0x26/0x2b0 [ 201.844765][ T6254] panic+0xc5/0xd0 [ 201.844838][ T6254] ? __pfx_panic+0x10/0x10 [ 201.844960][ T6254] __warn+0x315/0x4f0 [ 201.845035][ T6254] ? erofs_iget+0x1fce/0x2c00 [ 201.845097][ T6254] ? erofs_iget+0x1fce/0x2c00 [ 201.845159][ T6254] __report_bug+0x29a/0x540 [ 201.845242][ T6254] ? erofs_iget+0x1fce/0x2c00 [ 201.845299][ T6254] ? __pfx___report_bug+0x10/0x10 [ 201.845364][ T6254] ? strncpy_from_kernel_nofault+0x103/0x1c0 [ 201.845439][ T6254] ? dump_inode+0x379/0x450 [ 201.845545][ T6254] ? erofs_iget+0x1fce/0x2c00 [ 201.845607][ T6254] report_bug+0x16a/0x220 [ 201.845670][ T6254] ? erofs_iget+0x1fce/0x2c00 [ 201.845732][ T6254] ? erofs_iget+0x1fd0/0x2c00 [ 201.845808][ T6254] handle_bug+0x98/0x200 [ 201.845899][ T6254] exc_invalid_op+0x1a/0x50 [ 201.845967][ T6254] asm_exc_invalid_op+0x1a/0x20 [ 201.846031][ T6254] RIP: 0010:erofs_iget+0x1fce/0x2c00 [ 201.846094][ T6254] Code: 0f 8c e4 e1 ff ff 48 89 df e8 be 60 dd fd e9 d7 e1 ff ff e8 94 91 73 fd 48 8b 7c 24 10 48 c7 c6 00 99 1e 8c e8 73 0f f8 fd 90 <0f> 0b 90 e9 3c fe ff ff e8 75 91 73 fd 48 8b 7c 24 10 48 c7 c6 80 [ 201.846146][ T6254] RSP: 0018:ffffc90003e3f780 EFLAGS: 00010246 [ 201.846195][ T6254] RAX: e36218b954a5e200 RBX: 0000000000000017 RCX: e36218b954a5e200 [ 201.846242][ T6254] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 201.846285][ T6254] RBP: ffffc90003e3f9a0 R08: ffffc90003e3f367 R09: 1ffff920007c7e6c [ 201.846327][ T6254] R10: dffffc0000000000 R11: fffff520007c7e6d R12: 0000000000000027 [ 201.846369][ T6254] R13: 1ffff1100b525553 R14: 0000000000000027 R15: ffff88802a339e00 [ 201.846453][ T6254] ? erofs_put_metabuf+0x17a/0x290 [ 201.846562][ T6254] ? __pfx_erofs_iget+0x10/0x10 [ 201.846634][ T6254] ? __pfx_erofs_namei+0x10/0x10 [ 201.846733][ T6254] ? __pfx_d_alloc_parallel+0x10/0x10 [ 201.846810][ T6254] erofs_lookup+0x186/0x360 [ 201.846893][ T6254] __lookup_slow+0x2b7/0x410 [ 201.846981][ T6254] ? __pfx___lookup_slow+0x10/0x10 [ 201.847102][ T6254] ? down_read+0x272/0x2e0 [ 201.847210][ T6254] lookup_slow+0x53/0x70 [ 201.847305][ T6254] path_lookupat+0x3f5/0x8c0 [ 201.847427][ T6254] filename_lookup+0x256/0x5d0 [ 201.847514][ T6254] ? __pfx_filename_lookup+0x10/0x10 [ 201.847657][ T6254] ? strncpy_from_user+0x150/0x2b0 [ 201.847742][ T6254] ? do_getname+0x151/0x250 [ 201.847816][ T6254] user_path_at+0x40/0x160 [ 201.847910][ T6254] __x64_sys_umount+0xf6/0x170 [ 201.847977][ T6254] ? __pfx___x64_sys_umount+0x10/0x10 [ 201.848092][ T6254] do_syscall_64+0x14d/0xf80 [ 201.848146][ T6254] ? trace_irq_disable+0x3b/0x150 [ 201.848235][ T6254] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.848284][ T6254] ? clear_bhb_loop+0x40/0x90 [ 201.848355][ T6254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.848408][ T6254] RIP: 0033:0x7f710379c117 [ 201.848461][ T6254] Code: a2 c7 05 7c 94 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 201.848519][ T6254] RSP: 002b:00007ffc7c7f77d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 201.848592][ T6254] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f710379c117 [ 201.848646][ T6254] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc7c7f7890 [ 201.848678][ T6254] RBP: 00007ffc7c7f7890 R08: 00007ffc7c7f8890 R09: 00000000ffffffff [ 201.848719][ T6254] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc7c7f8980 [ 201.848759][ T6254] R13: 00007f710380471f R14: 000055555b4684e8 R15: 00007ffc7c7fab40 [ 201.848843][ T6254] [ 201.851052][ T6254] Kernel Offset: disabled