last executing test programs: 24.890133661s ago: executing program 0 (id=528): mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000000000)=0xec7f, 0x10001, 0x2) 24.606005146s ago: executing program 0 (id=534): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100153a42908f00a71729188010203010902240001060000000904020002ffffff0009050b0000000000000905", @ANYRES16=r0], 0x0) 21.581518749s ago: executing program 0 (id=546): prlimit64(0x0, 0xe, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x1, 0x28}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1d4}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r3, 0x300f000, 0xe, 0x0, &(0x7f0000000080)="0069c2704ade28eddb0000200000", 0x0, 0x48b8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 21.205104412s ago: executing program 0 (id=548): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x282, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r1, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x404, &(0x7f0000000280)={[{@errors_remount}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@barrier}, {@lazytime}, {@quota}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") r3 = creat(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x192) fcntl$setstatus(r3, 0x4, 0x6100) write$cgroup_type(r3, &(0x7f0000000200), 0x175d9003) 20.698283536s ago: executing program 0 (id=550): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2d19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x160) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x569, &(0x7f00000002c0)="$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") r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) 19.073515058s ago: executing program 0 (id=555): setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x3, @mcast1, 0xa}}, 0x0, 0x0, 0xa, 0x0, "bb02a3c364ca41d6e5415445244742bd4c0b42a21d6e14bf92594925208a0e2f96e830192d4596ef614993fc269b2df3ee818a118a7c49462189316d8b6d2ccd0000001100"}, 0xd8) r0 = socket$kcm(0x23, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) listen(r0, 0x800) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$tun(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff000000"], 0x78) 14.846537886s ago: executing program 3 (id=580): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x400aee2, 0x400, 0xffffffff, 0xbfe00000}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47f6, 0x0, 0x2, 0x0, 0x300) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x40000) 14.644104073s ago: executing program 3 (id=581): socket$inet6_tcp(0xa, 0x1, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000340)=ANY=[], 0x118) socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f0000000800)={{0x12, 0x1, 0x0, 0x96, 0x5d, 0x6, 0x40, 0x133e, 0x815, 0x7e66, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xff, 0x87, 0x28, 0x0, [], [{{0x9, 0x5, 0x5, 0x3}}]}}]}}]}}, 0x0) 13.544863949s ago: executing program 1 (id=588): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_genetlink_get_family_id$ipvs(0x0, r0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) io_setup(0x6, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e2a, 0xffffffff, @mcast2, 0x9}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000200), 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x14, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x68, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x68}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="14060a6bb3b7d91f02165b8c5ac222b72a0000000201054000000000000000eb"], 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_DYING(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171, 0x0, 0x0, 0x3a}}], 0x400000000000172, 0x4001c00) syz_emit_ethernet(0x4a, &(0x7f0000000380)={@broadcast, @dev, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "72b2af", 0x4, 0x2f, 0x0, @dev, @mcast2, {[], {0x0, 0x883e, 0x10, 0x0, @gue={{0x2}}}}}}}}, 0x0) syz_mount_image$nilfs2(&(0x7f0000000a40), &(0x7f0000000000)='./file1\x00', 0x14880, &(0x7f0000000ac0)=ANY=[], 0x3, 0xa14, &(0x7f0000001540)="$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") 12.61964483s ago: executing program 3 (id=589): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8082, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS(r1, 0x4068aea3, &(0x7f0000000a80)={0x74, 0x0, 0x30}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, 0x0}], 0x1, 0x5b, 0x0, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f00000000c0)={0x22}) 12.555508565s ago: executing program 1 (id=590): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) syz_mount_image$xfs(&(0x7f0000015a80), &(0x7f0000015ac0)='./file0\x00', 0x0, &(0x7f0000015b00), 0x1, 0x15a5b, &(0x7f0000015b40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x5c) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x4010586e, &(0x7f00000000c0)={0x6e41, 0x300000000000020, 0x0, 0x7, 0x1}) 3.378818095s ago: executing program 32 (id=555): setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x3, @mcast1, 0xa}}, 0x0, 0x0, 0xa, 0x0, "bb02a3c364ca41d6e5415445244742bd4c0b42a21d6e14bf92594925208a0e2f96e830192d4596ef614993fc269b2df3ee818a118a7c49462189316d8b6d2ccd0000001100"}, 0xd8) r0 = socket$kcm(0x23, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) listen(r0, 0x800) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$tun(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff000000"], 0x78) 3.359375867s ago: executing program 1 (id=593): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x30, 0x0, @in6={0x1b, 0x4e23, 0x2, @empty, 0x3}, @ib={0x1b, 0xfffe, 0x8000000, {"7d900600080000000900"}, 0x0, 0x0, 0x6}}}, 0x118) write$RDMA_USER_CM_CMD_QUERY(r0, 0x0, 0x0) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000002c0)='veth0_to_hsr\x00', 0x10) syz_emit_ethernet(0x46, &(0x7f0000000200)={@link_local={0x3, 0x80, 0xc2, 0x0, 0x0, 0x2}, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @empty}, "00186371ae9b1c03"}}}}}, 0x0) 3.356551107s ago: executing program 2 (id=594): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x282, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r1, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000740)=[{&(0x7f0000002640)=""/102389, 0x18ff5}], 0x1, 0x1903d}}], 0x48}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x404, &(0x7f0000000280)={[{@errors_remount}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@barrier}, {@lazytime}, {@quota}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") r3 = creat(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x192) fcntl$setstatus(r3, 0x4, 0x6100) write$cgroup_type(r3, &(0x7f0000000200), 0x175d9003) 3.339792548s ago: executing program 3 (id=595): syz_mount_image$reiserfs(&(0x7f0000000180), &(0x7f00000005c0)='./file0\x00', 0x1804098, &(0x7f00000002c0), 0xfe, 0x10f4, &(0x7f00000022c0)="$eJzs2LGK1FAUBuD/JqNgNXK3DwtaKMjiMr7AFgrTWFjbDVZ2TqXM4/g4spX9sg+wxYK9ksToCoIsGxwYvg9Ccn9ycnLLcwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC9RXI/yVGT1ClrkpSk687Xl0m6KX/4pW1S8ubdevvyw+rVdnwtfdak9FXDup4+qnVVV/W0vjg6e1y3Hz+9b2+0LOlycb3bPHh9NetW+t7trF8EAACAw/D9zpZ77g8AAAD8y2wHCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAzqNNDk6QkXXe+vkzS7fe3AAAAgDsqafJ2+bd8PAb47Vm+LsuQT74Ni+f5PNY/vX33e7cvAQAAgANVbszjT7L4NZf32XEWOTkZ1z9vuTpL2mEy/9PF9W4zXMe7TfmfGwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH6wA8cCAAAAAML8rdPo2AAAAAAAAAAAAAAAgKkCAAD//4CP0SQ=") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 3.132075767s ago: executing program 1 (id=596): syz_mount_image$jfs(&(0x7f0000000700), &(0x7f0000000000)='./bus\x00', 0x2000002, &(0x7f0000000100)=ANY=[], 0xfe, 0x60a1, &(0x7f0000001600)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0185879, 0x0) 2.935455974s ago: executing program 2 (id=597): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) syz_mount_image$ext4(&(0x7f0000000640)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x0, &(0x7f00000006c0), 0x1, 0x62f, &(0x7f0000000700)="$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") 2.604211432s ago: executing program 2 (id=598): socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) bind$can_raw(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003d000b08d25a80648c7494f90324fc600b0002400a000a00053582c137153e3719ac018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 2.17184505s ago: executing program 2 (id=599): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a31000000001400048008000240e7b140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) syz_mount_image$hpfs(&(0x7f000000a000), &(0x7f0000009ec0)='./file1\x00', 0x3200041, &(0x7f0000000080)=ANY=[@ANYBLOB="6561733d6e6f2c6561733d6e6f2c636173653d617369732c636865636b3d6e6f6e652c007680afe8eaed0b3c589f1daf0fe389a4c0a839d3c96e249534fa8c59f66f0cc85c3f06a689df8de150e8fafa3625335e4b43e7531b74c008bda93c795f58e5e86b52a1af8fccc1c69527b2e4334c33bd8a3ace83266d463402c750b85ae0b07ec332198c13b68e9ae20cb684c8515f951156f670f39e3896fd7b3b16b737398cde6ae247e1eeb5d0a5dc27a235f1f0540ae603751adc5ebd6e760979e44a"], 0x1, 0x9e29, &(0x7f0000013e80)="$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") r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4ea4, 0x0, @local, 0x3}, 0x1c) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xffd0}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 1.997147835s ago: executing program 3 (id=600): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001240)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0x8}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@newtfilter={0x38, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xc}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x2, 0x2e}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000010}, 0x10000840) 1.82741067s ago: executing program 2 (id=601): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) fsopen(&(0x7f0000000040)='afs\x00', 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000480)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x20}, 0x5000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x6c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x40, 0x3, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x30, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x10000}]}}}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xd0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) tgkill(r1, r1, 0x41) syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/vlan1\x00') 1.667979454s ago: executing program 1 (id=602): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$netlink(0x10, 0x3, 0x15) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)="39000000130003470fbb65e1c3e4ffff060060001600000056000000250000001900b3c0b6d20300070a0000000084db26b9e4e20000000000", 0x39}], 0x1) 698.208559ms ago: executing program 1 (id=603): syz_usb_connect(0x2, 0x2d, &(0x7f0000000a00)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400fb015c291d00090509"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$audion(&(0x7f00000011c0), 0x3, 0x8c4201) 531.670463ms ago: executing program 3 (id=604): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) 0s ago: executing program 2 (id=605): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x282, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r1, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x404, &(0x7f0000000280)={[{@errors_remount}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@barrier}, {@lazytime}, {@quota}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") r3 = creat(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x192) fcntl$setstatus(r3, 0x4, 0x6100) write$cgroup_type(r3, &(0x7f0000000200), 0x175d9003) kernel console output (not intermixed with test programs): devsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.896617][ T1095] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.913182][ T1095] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.918003][ T5852] loop3: detected capacity change from 0 to 40427 [ 71.971470][ T5852] F2FS-fs (loop3): Found nat_bits in checkpoint [ 72.049135][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.069390][ T5852] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 72.087416][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.139033][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.150320][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.232692][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.245694][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.320472][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.354129][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.392724][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.424883][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.830805][ T5873] loop2: detected capacity change from 0 to 128 [ 72.882892][ T51] Bluetooth: hci3: command tx timeout [ 72.883007][ T5776] Bluetooth: hci1: command tx timeout [ 72.888507][ T51] Bluetooth: hci2: command tx timeout [ 72.888593][ T51] Bluetooth: hci0: command tx timeout [ 73.345318][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 73.825942][ T5880] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 323) [ 73.835012][ T5880] FAT-fs (loop2): Filesystem has been set read-only [ 74.060344][ T27] audit: type=1800 audit(1767957829.886:2): pid=5880 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.8" name="file2" dev="loop2" ino=1048594 res=0 errno=0 [ 74.690060][ T5891] loop3: detected capacity change from 0 to 4096 [ 74.745537][ T5891] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [ 74.956722][ T51] Bluetooth: hci0: command tx timeout [ 74.970383][ T51] Bluetooth: hci1: command tx timeout [ 74.976077][ T51] Bluetooth: hci2: command tx timeout [ 74.982173][ T51] Bluetooth: hci3: command tx timeout [ 75.304285][ T5891] ntfs3: loop3: $Secure::$SII is corrupted. [ 75.359195][ T5891] ntfs3: loop3: Failed to initialize $Secure (-22). [ 75.637015][ T5910] libceph: resolve '4.' (ret=-3): failed [ 75.997069][ T5828] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 76.203056][ T5828] usb 2-1: Using ep0 maxpacket: 8 [ 76.226991][ T5828] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 76.243670][ T5908] loop2: detected capacity change from 0 to 32768 [ 76.266429][ T5828] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 76.306352][ T5828] usb 2-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.10 [ 76.319333][ T5828] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.324126][ T5908] XFS (loop2): DAX unsupported by block device. Turning off DAX. [ 76.327642][ T5828] usb 2-1: Product: syz [ 76.327681][ T5828] usb 2-1: Manufacturer: syz [ 76.327696][ T5828] usb 2-1: SerialNumber: syz [ 76.355731][ T5828] usb 2-1: config 0 descriptor?? [ 76.368934][ T5828] radioshark2 2-1:0.0: Invalid radioSHARK2 device [ 76.376090][ T5828] radioshark2: probe of 2-1:0.0 failed with error -22 [ 76.383271][ T5828] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 76.394321][ T5908] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 76.544273][ T5908] XFS (loop2): Ending clean mount [ 76.592564][ T5828] usb 2-1: USB disconnect, device number 2 [ 76.598847][ T5908] XFS (loop2): Quotacheck needed: Please wait. [ 76.769859][ T5908] XFS (loop2): Quotacheck: Done. [ 76.940145][ T5767] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 78.868086][ T5958] loop1: detected capacity change from 0 to 2048 [ 78.925629][ T5958] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 79.639142][ T5972] loop2: detected capacity change from 0 to 599 [ 79.716947][ T27] audit: type=1326 audit(1767957835.786:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5968 comm="syz.1.43" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61e718f749 code=0x7ffc0000 [ 79.739931][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 79.751876][ T27] audit: type=1326 audit(1767957835.826:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5968 comm="syz.1.43" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61e718f749 code=0x7ffc0000 [ 79.796477][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 79.898961][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 80.309209][ T5977] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 80.326072][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 80.326467][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 81.377074][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 81.392471][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 81.435448][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 81.538649][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 81.857983][ T42] cfg80211: failed to load regulatory.db [ 82.092815][ T5987] loop3: detected capacity change from 0 to 40427 [ 82.104476][ T5987] ======================================================= [ 82.104476][ T5987] WARNING: The mand mount option has been deprecated and [ 82.104476][ T5987] and is ignored by this kernel. Remove the mand [ 82.104476][ T5987] option from the mount to silence this warning. [ 82.104476][ T5987] ======================================================= [ 82.251001][ T5987] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 82.276524][ T5987] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 82.443536][ T5987] F2FS-fs (loop3): invalid crc value [ 82.855021][ T5987] F2FS-fs (loop3): Found nat_bits in checkpoint [ 83.066392][ T5987] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 83.074029][ T5987] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 83.102637][ T6019] loop0: detected capacity change from 0 to 512 [ 83.158782][ T6019] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 83.189730][ T6019] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 83.214800][ T6019] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2872: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 83.717673][ T6019] EXT4-fs (loop0): 1 truncate cleaned up [ 83.725232][ T6019] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.014375][ T5763] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.045241][ T5759] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 84.053981][ T5759] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 84.063357][ T5759] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 84.096419][ T5759] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 84.142759][ T5759] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 84.154952][ T5759] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 84.165301][ T5759] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix. [ 84.204591][ T6036] syz.0.62 uses obsolete (PF_INET,SOCK_PACKET) [ 84.300212][ T6040] comedi comedi0: Minor 6 could not be opened [ 86.351356][ T6058] loop1: detected capacity change from 0 to 512 [ 86.360358][ T6058] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 86.449711][ T6058] EXT4-fs (loop1): 1 truncate cleaned up [ 86.482661][ T6058] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.845264][ T5760] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.685233][ T6062] loop2: detected capacity change from 0 to 32768 [ 87.723986][ T6064] loop0: detected capacity change from 0 to 40427 [ 87.770083][ T6062] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 87.793104][ T6064] F2FS-fs (loop0): Wrong SSA boundary, start(3584) end(4096) blocks(0) [ 87.907814][ T6064] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 88.037088][ T6064] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x6 [ 88.135143][ T6080] netlink: 8 bytes leftover after parsing attributes in process `syz.3.74'. [ 88.144156][ T6080] netlink: 12 bytes leftover after parsing attributes in process `syz.3.74'. [ 88.247580][ T6064] F2FS-fs (loop0): invalid crc value [ 88.285867][ T6064] F2FS-fs (loop0): Found nat_bits in checkpoint [ 88.394687][ T6064] F2FS-fs (loop0): Start checkpoint disabled! [ 88.410176][ T6062] XFS (loop2): Ending clean mount [ 88.478270][ T6062] XFS (loop2): Quotacheck needed: Please wait. [ 88.498161][ T6064] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 88.582835][ T6064] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 88.622225][ T6092] loop6: detected capacity change from 0 to 7 [ 88.636046][ T6092] Dev loop6: unable to read RDB block 7 [ 88.642340][ T6092] loop6: unable to read partition table [ 88.648764][ T6092] loop6: partition table beyond EOD, truncated [ 88.655039][ T6092] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 89.125303][ T6062] XFS (loop2): Quotacheck: Done. [ 89.469197][ T5767] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 89.582469][ T12] kworker/u4:1: attempt to access beyond end of device [ 89.582469][ T12] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 89.602512][ T12] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 89.611900][ T12] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 90.075334][ T6098] loop3: detected capacity change from 0 to 4096 [ 90.150275][ T6104] loop2: detected capacity change from 0 to 512 [ 90.164368][ T6098] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 90.176951][ T6104] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 90.210897][ T6098] ntfs3: loop3: Failed to initialize $Extend/$Reparse. [ 90.271608][ T6104] EXT4-fs (loop2): 1 truncate cleaned up [ 90.288647][ T6104] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.235025][ T5767] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.409773][ T6120] netlink: 132 bytes leftover after parsing attributes in process `syz.0.87'. [ 92.042548][ T6135] loop0: detected capacity change from 0 to 4096 [ 92.138717][ T6139] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 92.152325][ T6135] NILFS (loop0): corrupt root inode [ 92.392649][ T6142] netlink: 76 bytes leftover after parsing attributes in process `syz.0.93'. [ 92.687810][ T6144] loop0: detected capacity change from 0 to 512 [ 92.724664][ T6144] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 93.021983][ T6144] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.94: inode has both inline data and extents flags [ 93.266991][ T6144] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.94: couldn't read orphan inode 15 (err -117) [ 93.437909][ T6151] loop2: detected capacity change from 0 to 512 [ 93.448498][ T6151] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 93.461796][ T6144] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.490492][ T6151] EXT4-fs (loop2): 1 truncate cleaned up [ 93.564989][ T6151] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.817088][ T6156] EXT4-fs error (device loop0): ext4_lookup:1858: inode #15: comm syz.0.94: inode has both inline data and extents flags [ 93.902188][ T6157] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 94.371537][ T5767] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.385503][ T5763] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.876478][ T42] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 95.191584][ T6165] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 95.200929][ T6165] batadv_slave_0: entered promiscuous mode [ 95.256335][ T42] usb 2-1: Using ep0 maxpacket: 8 [ 95.275055][ T42] usb 2-1: config 1 interface 0 altsetting 189 endpoint 0x81 has invalid wMaxPacketSize 0 [ 95.306345][ T42] usb 2-1: config 1 interface 0 altsetting 189 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 95.331222][ T42] usb 2-1: config 1 interface 0 has no altsetting 0 [ 95.350732][ T42] usb 2-1: language id specifier not provided by device, defaulting to English [ 95.374139][ T42] usb 2-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.40 [ 95.385930][ T42] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.399111][ T42] usb 2-1: Product: Ὶ㴒죏湬砆証쯍ゥߜᮢ衐༿쭠㕗嵬뾍☖讥벰牼࣓ἺNJ긭⨨緊䉟뱅劐祊୴婁ẽ謐企ꨛ沛㇁᤹ꫬ륟醀䇯濌ꭢ༉巇啰㕊Ŭ쩵땩Tﵰ㪥ᶿ㌳䈁륩钰 [ 95.427312][ T42] usb 2-1: Manufacturer: Р [ 95.431874][ T42] usb 2-1: SerialNumber:  [ 95.441666][ T3064] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 95.638763][ T3064] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.656380][ T3064] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 95.686234][ T3064] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 95.706268][ T3064] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 95.725986][ T3064] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.757519][ T3064] usb 1-1: config 0 descriptor?? [ 96.133551][ T6178] loop2: detected capacity change from 0 to 512 [ 96.145868][ T6178] EXT4-fs: Ignoring removed i_version option [ 96.157172][ T6178] EXT4-fs: Ignoring removed oldalloc option [ 96.165772][ T6178] EXT4-fs: Ignoring removed nomblk_io_submit option [ 96.184420][ T6178] EXT4-fs (loop2): Test dummy encryption mode enabled [ 96.210626][ T3064] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x6 [ 96.234142][ T3064] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 96.252682][ T6178] EXT4-fs (loop2): 1 truncate cleaned up [ 96.265670][ T6178] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.272691][ T3064] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 96.375253][ T6178] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.105: invalid indirect mapped block 234881024 (level 0) [ 96.437400][ T6178] EXT4-fs (loop2): Remounting filesystem read-only [ 96.574739][ T5767] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.664353][ T6187] loop2: detected capacity change from 0 to 512 [ 96.675842][ T6187] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 96.703469][ T6187] EXT4-fs (loop2): 1 truncate cleaned up [ 96.711058][ T6187] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.805361][ T5767] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.206873][ T3064] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 97.222858][ T42] usbhid 2-1:1.0: can't add hid device: -71 [ 97.230546][ T42] usbhid: probe of 2-1:1.0 failed with error -71 [ 97.245115][ T42] usb 2-1: USB disconnect, device number 3 [ 97.399101][ T3064] usb 3-1: Using ep0 maxpacket: 32 [ 97.422280][ T3064] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 97.434349][ T6196] loop3: detected capacity change from 0 to 2048 [ 97.448397][ T3064] usb 3-1: language id specifier not provided by device, defaulting to English [ 97.461630][ T3064] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 97.471872][ T3064] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.480817][ T3064] usb 3-1: Product: syz [ 97.485292][ T3064] usb 3-1: Manufacturer: 糲 [ 97.490592][ T3064] usb 3-1: SerialNumber: syz [ 97.504555][ T6196] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 97.516754][ T6196] UDF-fs: Scanning with blocksize 512 failed [ 97.542018][ T6196] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 97.744525][ T3064] cdc_ncm 3-1:1.0: bind() failure [ 97.768149][ T3064] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 97.775122][ T3064] cdc_ncm 3-1:1.1: bind() failure [ 97.813469][ T3064] usb 3-1: USB disconnect, device number 2 [ 97.957200][ T6203] loop3: detected capacity change from 0 to 256 [ 97.976605][ T6203] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 97.992119][ T6203] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 98.010662][ T6203] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 98.225778][ T6207] loop3: detected capacity change from 0 to 512 [ 98.252609][ T6207] EXT4-fs: Ignoring removed i_version option [ 98.277080][ T6207] EXT4-fs: Ignoring removed oldalloc option [ 98.292024][ T6207] EXT4-fs: Ignoring removed nomblk_io_submit option [ 98.309055][ T6207] EXT4-fs (loop3): Test dummy encryption mode enabled [ 98.355403][ T5152] usb 1-1: USB disconnect, device number 2 [ 98.375134][ T6207] EXT4-fs (loop3): 1 truncate cleaned up [ 98.410232][ T6212] loop1: detected capacity change from 0 to 512 [ 98.426671][ T6207] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.450624][ T6212] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 98.460630][ T6216] loop0: detected capacity change from 0 to 1024 [ 98.492533][ T6212] EXT4-fs (loop1): 1 truncate cleaned up [ 98.500021][ T6212] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.551459][ T6207] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.115: invalid indirect mapped block 234881024 (level 0) [ 98.597408][ T6207] EXT4-fs (loop3): Remounting filesystem read-only [ 98.629193][ T27] audit: type=1800 audit(1767957854.706:5): pid=6216 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.118" name="file1" dev="loop0" ino=20 res=0 errno=0 [ 98.712153][ T5760] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.732079][ T5759] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.479768][ T6225] loop3: detected capacity change from 0 to 4096 [ 99.612442][ T27] audit: type=1800 audit(1767957855.686:6): pid=6225 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.123" name="file1" dev="loop3" ino=30 res=0 errno=0 [ 99.630453][ T6225] syz.3.123 (6225) used greatest stack depth: 20848 bytes left [ 99.644558][ T27] audit: type=1804 audit(1767957855.696:7): pid=6225 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.123" name="/newroot/24/file0/file1" dev="loop3" ino=30 res=1 errno=0 [ 99.716355][ T42] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 99.926353][ T42] usb 3-1: Using ep0 maxpacket: 8 [ 99.933660][ T42] usb 3-1: no configurations [ 99.946312][ T42] usb 3-1: can't read configurations, error -22 [ 100.045013][ T6228] loop0: detected capacity change from 0 to 40427 [ 100.065234][ T6228] F2FS-fs (loop0): Wrong segment_count / block_count (31 > 0) [ 100.095621][ T6228] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 100.116528][ T42] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 100.147005][ T6228] F2FS-fs (loop0): invalid crc value [ 100.278774][ T6228] F2FS-fs (loop0): Found nat_bits in checkpoint [ 100.349051][ T6228] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 100.356455][ T6228] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 100.381323][ T42] usb 3-1: Using ep0 maxpacket: 8 [ 100.391454][ T42] usb 3-1: no configurations [ 100.404716][ T42] usb 3-1: can't read configurations, error -22 [ 100.436362][ T42] usb usb3-port1: attempt power cycle [ 100.453816][ T27] audit: type=1800 audit(1767957856.526:8): pid=6228 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.124" name="file1" dev="loop0" ino=10 res=0 errno=0 [ 100.570279][ T5763] syz-executor: attempt to access beyond end of device [ 100.570279][ T5763] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 100.697370][ T5763] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 101.517149][ T42] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 101.577139][ T42] usb 3-1: Using ep0 maxpacket: 8 [ 101.596034][ T42] usb 3-1: no configurations [ 101.600779][ T42] usb 3-1: can't read configurations, error -22 [ 101.712267][ T6250] loop1: detected capacity change from 0 to 512 [ 101.746355][ T6250] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 101.756601][ T42] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 101.856727][ T6250] EXT4-fs (loop1): 1 truncate cleaned up [ 101.925431][ T42] usb 3-1: device descriptor read/8, error -71 [ 101.958735][ T6250] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.079660][ T42] usb usb3-port1: unable to enumerate USB device [ 102.262838][ T5760] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.788367][ T6261] sched: RT throttling activated [ 105.015347][ T6272] loop1: detected capacity change from 0 to 512 [ 105.022705][ T6272] EXT4-fs: Ignoring removed i_version option [ 105.030373][ T6272] EXT4-fs: Ignoring removed oldalloc option [ 105.036916][ T6272] EXT4-fs: Ignoring removed nomblk_io_submit option [ 105.044436][ T6272] EXT4-fs (loop1): Test dummy encryption mode enabled [ 105.126495][ T6272] EXT4-fs (loop1): 1 truncate cleaned up [ 105.133350][ T6272] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.281761][ T6272] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.132: invalid indirect mapped block 234881024 (level 0) [ 105.329031][ T6272] EXT4-fs (loop1): Remounting filesystem read-only [ 105.402214][ T5760] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.661057][ T6291] loop3: detected capacity change from 0 to 512 [ 105.682639][ T6291] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 105.726023][ T6291] EXT4-fs (loop3): 1 truncate cleaned up [ 105.742069][ T6291] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.957406][ T5759] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.221882][ T6289] loop1: detected capacity change from 0 to 32768 [ 106.886123][ T6289] add_index: next_index = 0. Resetting! [ 106.934186][ T6289] non-latin1 character 0x3ff found in JFS file name [ 106.957179][ T6308] warning: `syz.2.149' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 106.986356][ T6289] mount with iocharset=utf8 to access [ 107.236122][ T6312] loop2: detected capacity change from 0 to 512 [ 107.257178][ T6312] EXT4-fs: Ignoring removed i_version option [ 107.276664][ T6312] EXT4-fs: Ignoring removed oldalloc option [ 107.282680][ T6312] EXT4-fs: Ignoring removed nomblk_io_submit option [ 107.402420][ T6312] EXT4-fs (loop2): Test dummy encryption mode enabled [ 107.486856][ T6312] EXT4-fs (loop2): 1 truncate cleaned up [ 107.487616][ T6303] loop0: detected capacity change from 0 to 32768 [ 107.493638][ T6312] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.566406][ T6303] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 107.639147][ T6312] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.151: invalid indirect mapped block 234881024 (level 0) [ 107.657759][ T6312] EXT4-fs (loop2): Remounting filesystem read-only [ 107.772017][ T5767] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.789231][ T6303] XFS (loop0): Ending clean mount [ 107.901200][ T5763] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 107.923192][ T6330] loop2: detected capacity change from 0 to 512 [ 107.932467][ T6330] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 108.007390][ T6330] EXT4-fs (loop2): 1 truncate cleaned up [ 108.037901][ T6330] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.173415][ T5767] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.410806][ T6340] loop0: detected capacity change from 0 to 16 [ 108.530698][ T6340] erofs: (device loop0): mounted with root inode @ nid 36. [ 108.572126][ T6345] netlink: 12 bytes leftover after parsing attributes in process `syz.2.161'. [ 108.576869][ T6340] erofs: (device loop0): z_erofs_fill_inode_lazy: unknown HEAD2 format 8 for nid 36, please upgrade kernel [ 108.615401][ T6340] erofs: (device loop0): z_erofs_fill_inode_lazy: unknown HEAD2 format 8 for nid 36, please upgrade kernel [ 108.646264][ T6340] erofs: (device loop0): z_erofs_read_folio: read error -95 @ 8200 of nid 36 [ 108.685151][ T6348] loop1: detected capacity change from 0 to 512 [ 108.728879][ T6348] EXT4-fs: Ignoring removed i_version option [ 108.734945][ T6348] EXT4-fs: Ignoring removed oldalloc option [ 108.762860][ T6348] EXT4-fs: Ignoring removed nomblk_io_submit option [ 108.788786][ T6348] EXT4-fs (loop1): Test dummy encryption mode enabled [ 108.847794][ T6348] EXT4-fs (loop1): 1 truncate cleaned up [ 108.863503][ T6348] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.781369][ T5760] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.010969][ T6342] loop3: detected capacity change from 0 to 32768 [ 110.034755][ T6363] loop1: detected capacity change from 0 to 512 [ 110.057402][ T6363] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 110.076624][ T6342] add_index: next_index = 0. Resetting! [ 110.098802][ T6342] non-latin1 character 0x3ff found in JFS file name [ 110.114728][ T6363] EXT4-fs (loop1): 1 truncate cleaned up [ 110.124604][ T6342] mount with iocharset=utf8 to access [ 110.128040][ T6363] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.387924][ T5760] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.564499][ T6371] program syz.1.171 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 110.581525][ T6373] loop3: detected capacity change from 0 to 256 [ 110.625722][ T6361] loop0: detected capacity change from 0 to 32768 [ 110.640575][ T6373] exfat: Deprecated parameter 'utf8' [ 110.741702][ T6361] find_entry called with index >= next_index [ 110.748240][ T6373] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xd9b3646f, utbl_chksum : 0xe619d30d) [ 110.770027][ T6361] find_entry called with index >= next_index [ 110.776054][ T6361] find_entry called with index >= next_index [ 110.826271][ T6361] find_entry called with index >= next_index [ 110.865478][ T6361] find_entry called with index >= next_index [ 110.909457][ T6361] ERROR: (device loop0): jfs_readdir: JFS:Dtree error: ino = 2, bn=48, index = 1 [ 110.909457][ T6361] [ 110.938064][ T6381] loop2: detected capacity change from 0 to 512 [ 110.947614][ T6381] EXT4-fs: Ignoring removed i_version option [ 110.953945][ T6381] EXT4-fs: Ignoring removed oldalloc option [ 110.977672][ T6361] ERROR: (device loop0): remounting filesystem as read-only [ 110.984101][ T6381] EXT4-fs: Ignoring removed nomblk_io_submit option [ 110.995605][ T6381] EXT4-fs (loop2): Test dummy encryption mode enabled [ 111.002151][ T6361] ERROR: (device loop0): jfs_readdir: JFS:Dtree error: ino = 2, bn=48, index = 4 [ 111.002151][ T6361] [ 111.035346][ T6381] EXT4-fs (loop2): 1 truncate cleaned up [ 111.041661][ T6361] ERROR: (device loop0): jfs_readdir: JFS:Dtree error: ino = 2, bn=48, index = 5 [ 111.041661][ T6361] [ 111.065500][ T6381] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.240987][ T6387] loop3: detected capacity change from 0 to 512 [ 111.251795][ T5767] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.298567][ T6387] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 111.450092][ T6387] EXT4-fs (loop3): 1 truncate cleaned up [ 111.487483][ T6387] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.542454][ T5759] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.877739][ T6398] loop1: detected capacity change from 0 to 4096 [ 112.055057][ T6400] loop3: detected capacity change from 0 to 128 [ 112.093040][ T6400] befs: (loop3): invalid blocksize: 2066842815 [ 113.847385][ T6395] loop0: detected capacity change from 0 to 32768 [ 114.744371][ T6395] add_index: next_index = 0. Resetting! [ 114.850065][ T6395] non-latin1 character 0x3ff found in JFS file name [ 115.059840][ T6395] mount with iocharset=utf8 to access [ 115.494330][ T6413] loop0: detected capacity change from 0 to 512 [ 115.523829][ T6413] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 115.541883][ T6417] loop3: detected capacity change from 0 to 512 [ 115.549497][ T6417] EXT4-fs: Ignoring removed i_version option [ 115.563683][ T6417] EXT4-fs: Ignoring removed oldalloc option [ 115.572067][ T6413] EXT4-fs (loop0): 1 truncate cleaned up [ 115.581103][ T6413] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.588718][ T6417] EXT4-fs: Ignoring removed nomblk_io_submit option [ 115.750927][ T6417] EXT4-fs (loop3): Test dummy encryption mode enabled [ 115.781663][ T5763] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.785076][ T6417] EXT4-fs (loop3): 1 truncate cleaned up [ 115.807523][ T6417] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.921975][ T5759] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.991635][ T6426] macsec1: entered promiscuous mode [ 116.006436][ T6426] macvlan0: entered promiscuous mode [ 116.039650][ T6426] macvlan0: left promiscuous mode [ 116.487630][ T6423] loop2: detected capacity change from 0 to 32768 [ 116.915537][ T6441] loop3: detected capacity change from 0 to 2048 [ 117.108051][ T5808] IPVS: starting estimator thread 0... [ 117.123123][ T6441] NILFS (loop3): invalid segment: Inconsistency found [ 117.178840][ T6441] NILFS (loop3): trying rollback from an earlier position [ 117.216424][ T6445] IPVS: using max 24 ests per chain, 57600 per kthread [ 117.225543][ T6441] NILFS (loop3): recovery complete [ 117.276972][ T6449] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 118.855400][ T6450] loop2: detected capacity change from 0 to 32768 [ 118.869701][ T6457] Invalid ELF header magic: != ELF [ 118.952120][ T6460] loop1: detected capacity change from 0 to 512 [ 118.962591][ T6450] add_index: next_index = 0. Resetting! [ 118.978742][ T6460] EXT4-fs: Ignoring removed i_version option [ 118.994457][ T6460] EXT4-fs: Ignoring removed oldalloc option [ 119.005236][ T6450] non-latin1 character 0x3ff found in JFS file name [ 119.036619][ T6460] EXT4-fs: Ignoring removed nomblk_io_submit option [ 119.037338][ T6450] mount with iocharset=utf8 to access [ 119.106301][ T6460] EXT4-fs (loop1): Test dummy encryption mode enabled [ 119.154746][ T6460] EXT4-fs (loop1): 1 truncate cleaned up [ 119.199676][ T6460] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.398035][ T5760] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.556998][ T6470] capability: warning: `syz.1.211' uses deprecated v2 capabilities in a way that may be insecure [ 119.757506][ T6476] netlink: 188 bytes leftover after parsing attributes in process `syz.0.213'. [ 120.118490][ T6486] netlink: 40 bytes leftover after parsing attributes in process `syz.2.209'. [ 120.138899][ T6486] netlink: 40 bytes leftover after parsing attributes in process `syz.2.209'. [ 120.761519][ T6488] loop0: detected capacity change from 0 to 1024 [ 120.807382][ T6488] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.162149][ T6496] o2cb: This node has not been configured. [ 121.168909][ T6496] o2cb: Cluster check failed. Fix errors before retrying. [ 121.176460][ T6496] (syz.0.217,6496,0):user_dlm_register:674 ERROR: status = -22 [ 121.184085][ T6496] (syz.0.217,6496,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file1" [ 121.564245][ T6500] loop1: detected capacity change from 0 to 512 [ 121.627706][ T5763] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.662007][ T6498] loop2: detected capacity change from 0 to 1024 [ 121.689149][ T6500] EXT4-fs: Ignoring removed i_version option [ 121.695233][ T6500] EXT4-fs: Ignoring removed oldalloc option [ 121.723673][ T6500] EXT4-fs: Ignoring removed nomblk_io_submit option [ 121.815133][ T6500] EXT4-fs (loop1): Test dummy encryption mode enabled [ 121.817507][ T6498] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.927542][ T6500] EXT4-fs (loop1): 1 truncate cleaned up [ 121.934336][ T6500] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.132001][ T5760] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.241997][ T1156] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 123.292430][ T1156] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1800 with error 28 [ 123.320127][ T1156] EXT4-fs (loop2): This should not happen!! Data will be lost [ 123.320127][ T1156] [ 123.366322][ T1156] EXT4-fs (loop2): Total free blocks count 0 [ 123.372470][ T1156] EXT4-fs (loop2): Free/Dirty block details [ 123.385698][ T1156] EXT4-fs (loop2): free_blocks=68451041280 [ 123.396134][ T1156] EXT4-fs (loop2): dirty_blocks=1808 [ 123.406907][ T1156] EXT4-fs (loop2): Block reservation details [ 123.413079][ T1156] EXT4-fs (loop2): i_reserved_data_blocks=113 [ 123.491885][ T5767] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.618270][ T6525] netlink: 40 bytes leftover after parsing attributes in process `syz.3.232'. [ 123.801612][ T6531] loop2: detected capacity change from 0 to 512 [ 123.837867][ T6531] EXT4-fs: Ignoring removed i_version option [ 123.843934][ T6531] EXT4-fs: Ignoring removed oldalloc option [ 123.880876][ T6531] EXT4-fs: Ignoring removed nomblk_io_submit option [ 123.908710][ T6531] EXT4-fs (loop2): Test dummy encryption mode enabled [ 123.968283][ T6531] EXT4-fs (loop2): 1 truncate cleaned up [ 123.975190][ T6531] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 124.176776][ T5767] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.248243][ T6529] loop3: detected capacity change from 0 to 32768 [ 124.313276][ T6529] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 scanned by syz.3.234 (6529) [ 124.412422][ T6529] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 124.549725][ T6529] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 124.621614][ T6529] BTRFS info (device loop3): force zlib compression, level 3 [ 124.732759][ T6529] BTRFS info (device loop3): force clearing of disk cache [ 124.862324][ T6529] BTRFS info (device loop3): setting nodatasum [ 124.966788][ T6529] BTRFS info (device loop3): allowing degraded mounts [ 125.077688][ T6529] BTRFS info (device loop3): enabling disk space caching [ 125.096306][ T6529] BTRFS info (device loop3): disk space caching is enabled [ 125.324983][ T6529] BTRFS info (device loop3): auto enabling async discard [ 125.378071][ T6529] BTRFS info (device loop3): rebuilding free space tree [ 125.473252][ T6529] BTRFS info (device loop3): disabling free space tree [ 125.489014][ T6529] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 125.511479][ T6566] loop0: detected capacity change from 0 to 2048 [ 125.516593][ T6529] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 125.575637][ T6566] EXT4-fs (loop0): unsupported inode size: 84 [ 125.603340][ T6566] EXT4-fs (loop0): blocksize: 4096 [ 125.654515][ T6569] netlink: 64 bytes leftover after parsing attributes in process `syz.1.241'. [ 125.677492][ T6566] veth1_macvtap: left promiscuous mode [ 125.698729][ T6569] block nbd0: not configured, cannot reconfigure [ 125.713588][ T6566] macsec0: entered promiscuous mode [ 125.798039][ T5759] BTRFS info (device loop3): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 125.974786][ T6576] loop0: detected capacity change from 0 to 512 [ 126.073864][ T6576] EXT4-fs: Ignoring removed i_version option [ 126.189862][ T6576] EXT4-fs: Ignoring removed oldalloc option [ 126.302616][ T6576] EXT4-fs: Ignoring removed nomblk_io_submit option [ 126.439685][ T6576] EXT4-fs (loop0): Test dummy encryption mode enabled [ 126.676684][ T6576] EXT4-fs (loop0): 1 truncate cleaned up [ 126.753661][ T6576] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 126.897309][ T6585] loop1: detected capacity change from 0 to 512 [ 126.990745][ T6585] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 127.030249][ T5763] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.087782][ T6585] EXT4-fs (loop1): 1 truncate cleaned up [ 127.117558][ T6585] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.315284][ T5760] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.725734][ T6589] loop3: detected capacity change from 0 to 32768 [ 127.760028][ T6589] [ 127.760028][ T6589] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 127.760028][ T6589] [ 128.415898][ T6604] Cannot find add_set index 0 as target [ 129.184348][ T6589] ERROR: (device loop3): dtSearch: stack overrun! [ 129.184348][ T6589] [ 129.235326][ T6607] loop1: detected capacity change from 0 to 512 [ 129.241809][ T6589] btstack dump: [ 129.245298][ T6589] bn = 0, index = 0 [ 129.266318][ T6589] bn = 0, index = 0 [ 129.276564][ T6589] bn = 0, index = 0 [ 129.280428][ T6589] bn = 0, index = 0 [ 129.284259][ T6589] bn = 0, index = 0 [ 129.306884][ T6589] bn = 0, index = 0 [ 129.313008][ T6589] bn = 0, index = 0 [ 129.346378][ T6589] bn = 0, index = 0 [ 129.354417][ T6589] jfs_rename did not expect dtDelete to return rc = -5 [ 129.378107][ T6589] ERROR: (device loop3): jfs_rename: [ 129.378107][ T6589] [ 129.439506][ T6607] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.486673][ T6015] ERROR: (device loop3): diWrite: ixpxd invalid [ 129.486673][ T6015] [ 129.497297][ T6607] ext4 filesystem being mounted at /73/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 129.511885][ T6015] ERROR: (device loop3): txCommit: [ 129.511885][ T6015] [ 129.526407][ T6015] jfs_write_inode: jfs_commit_inode failed! [ 129.533012][ T5759] [ 129.533012][ T5759] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 129.533012][ T5759] [ 129.552449][ T6611] loop2: detected capacity change from 0 to 512 [ 129.582042][ T5759] [ 129.582042][ T5759] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 129.582042][ T5759] [ 129.589772][ T6607] EXT4-fs error (device loop1): ext4_do_update_inode:5244: inode #2: comm syz.1.256: corrupted inode contents [ 129.640531][ T6611] EXT4-fs: Ignoring removed i_version option [ 129.686894][ T6607] EXT4-fs error (device loop1): ext4_dirty_inode:6120: inode #2: comm syz.1.256: mark_inode_dirty error [ 129.700000][ T6611] EXT4-fs: Ignoring removed oldalloc option [ 129.705998][ T6611] EXT4-fs: Ignoring removed nomblk_io_submit option [ 129.707778][ T6607] EXT4-fs error (device loop1): ext4_do_update_inode:5244: inode #2: comm syz.1.256: corrupted inode contents [ 129.725674][ T6611] EXT4-fs (loop2): Test dummy encryption mode enabled [ 129.751599][ T6611] EXT4-fs (loop2): 1 truncate cleaned up [ 129.777389][ T6612] EXT4-fs error (device loop1): ext4_do_update_inode:5244: inode #2: comm syz.1.256: corrupted inode contents [ 129.797431][ T6611] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.873101][ T6612] EXT4-fs error (device loop1): ext4_dirty_inode:6120: inode #2: comm syz.1.256: mark_inode_dirty error [ 129.925221][ T6612] EXT4-fs error (device loop1): ext4_do_update_inode:5244: inode #2: comm syz.1.256: corrupted inode contents [ 129.966666][ T6612] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #2: comm syz.1.256: mark_inode_dirty error [ 129.997177][ T6612] EXT4-fs error (device loop1): ext4_do_update_inode:5244: inode #2: comm syz.1.256: corrupted inode contents [ 130.020503][ T6612] EXT4-fs error (device loop1): ext4_dirty_inode:6120: inode #2: comm syz.1.256: mark_inode_dirty error [ 130.022580][ T5767] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.687000][ T5760] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.083241][ T6630] loop2: detected capacity change from 0 to 512 [ 131.128003][ T6630] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 131.237740][ T6630] EXT4-fs (loop2): 1 truncate cleaned up [ 131.244614][ T6630] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.480368][ T5767] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.521447][ T6641] loop1: detected capacity change from 0 to 512 [ 131.537229][ T6641] EXT4-fs: Ignoring removed i_version option [ 131.549875][ T6641] EXT4-fs: Ignoring removed oldalloc option [ 131.557230][ T6641] EXT4-fs: Ignoring removed nomblk_io_submit option [ 131.579163][ T6641] EXT4-fs (loop1): Test dummy encryption mode enabled [ 131.601599][ T6641] EXT4-fs (loop1): 1 truncate cleaned up [ 131.621187][ T6641] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.771450][ T5760] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.955042][ T6649] netlink: 'syz.1.271': attribute type 10 has an invalid length. [ 131.971159][ T6649] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 132.056244][ T6650] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 132.147682][ T6653] loop0: detected capacity change from 0 to 512 [ 132.161378][ T6653] EXT4-fs: Ignoring removed i_version option [ 132.194158][ T6653] EXT4-fs: Ignoring removed oldalloc option [ 132.248170][ T6653] EXT4-fs: Ignoring removed nomblk_io_submit option [ 132.358808][ T6653] EXT4-fs (loop0): Test dummy encryption mode enabled [ 132.553002][ T6653] EXT4-fs (loop0): 1 truncate cleaned up [ 132.664449][ T6653] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.091372][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.152255][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.284116][ T5763] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.603774][ T6673] loop0: detected capacity change from 0 to 512 [ 133.647092][ T6673] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 133.697027][ T6673] EXT4-fs (loop0): 1 truncate cleaned up [ 133.724270][ T6673] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.082080][ T5763] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.698945][ T6691] loop1: detected capacity change from 0 to 512 [ 134.722823][ T6691] EXT4-fs: Ignoring removed i_version option [ 134.845153][ T6691] EXT4-fs: Ignoring removed oldalloc option [ 134.853828][ T6691] EXT4-fs: Ignoring removed nomblk_io_submit option [ 134.907605][ T6691] EXT4-fs (loop1): Test dummy encryption mode enabled [ 135.835313][ T6691] EXT4-fs (loop1): 1 truncate cleaned up [ 135.855869][ T6691] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.955550][ T6703] netlink: 'syz.0.288': attribute type 12 has an invalid length. [ 135.964744][ T6703] netlink: 'syz.0.288': attribute type 29 has an invalid length. [ 135.975714][ T6703] netlink: 148 bytes leftover after parsing attributes in process `syz.0.288'. [ 136.083236][ T6705] loop2: detected capacity change from 0 to 512 [ 136.089389][ T5760] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.135560][ T6705] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.164891][ T6705] ext4 filesystem being mounted at /64/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 136.203815][ T6711] loop0: detected capacity change from 0 to 512 [ 136.251739][ T6711] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 136.273246][ T6705] EXT4-fs error (device loop2): ext4_get_first_dir_block:3584: inode #12: comm syz.2.289: Directory hole found for htree leaf block 0 [ 136.306474][ T6705] EXT4-fs (loop2): Remounting filesystem read-only [ 136.313358][ T6711] EXT4-fs (loop0): 1 truncate cleaned up [ 136.324214][ T6711] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.467399][ T5763] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.546406][ T5152] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 136.729615][ T6723] loop0: detected capacity change from 0 to 1024 [ 136.736288][ T5152] usb 2-1: Using ep0 maxpacket: 16 [ 136.741360][ T5152] usb 2-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 136.762457][ T5152] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.773370][ T6723] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.776205][ T5152] usb 2-1: Product: syz [ 136.800106][ T5152] usb 2-1: Manufacturer: syz [ 136.804745][ T5152] usb 2-1: SerialNumber: syz [ 136.821134][ T5152] usb 2-1: config 0 descriptor?? [ 136.829413][ T5152] appledisplay 2-1:0.0: Could not find int-in endpoint [ 136.840720][ T5152] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 136.997790][ T5767] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.021374][ T6015] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 137.039757][ T6015] Quota error (device loop2): write_blk: dquota write failed [ 137.047913][ T6015] Quota error (device loop2): remove_free_dqentry: Can't write block (5) with free entries [ 137.052254][ T5152] usb 2-1: USB disconnect, device number 4 [ 137.058118][ T6015] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 137.058175][ T6015] Quota error (device loop2): write_blk: dquota write failed [ 137.058188][ T6015] Quota error (device loop2): free_dqentry: Can't move quota data block (5) to free list [ 137.097004][ T6015] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 137.111580][ T6015] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 137.191037][ T5763] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.631674][ T6738] netlink: 12 bytes leftover after parsing attributes in process `syz.3.300'. [ 138.193909][ T6740] loop0: detected capacity change from 0 to 512 [ 138.201369][ T6740] EXT4-fs: Ignoring removed i_version option [ 138.207559][ T6740] EXT4-fs: Ignoring removed oldalloc option [ 138.214312][ T6740] EXT4-fs: Ignoring removed nomblk_io_submit option [ 138.236435][ T6740] EXT4-fs (loop0): Test dummy encryption mode enabled [ 138.313956][ T6745] loop1: detected capacity change from 0 to 512 [ 138.322860][ T6740] EXT4-fs (loop0): 1 truncate cleaned up [ 138.329878][ T6740] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.338736][ T6745] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 138.832110][ T6745] EXT4-fs (loop1): 1 truncate cleaned up [ 138.855459][ T6745] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.926225][ T27] audit: type=1326 audit(1767957894.996:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6741 comm="syz.2.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd1258f749 code=0x7ffc0000 [ 138.953170][ T5763] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.013335][ T27] audit: type=1326 audit(1767957894.996:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6741 comm="syz.2.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd1258f749 code=0x7ffc0000 [ 139.157541][ T27] audit: type=1326 audit(1767957894.996:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6741 comm="syz.2.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7efd1258f749 code=0x7ffc0000 [ 139.271926][ T27] audit: type=1326 audit(1767957894.996:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6741 comm="syz.2.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd1258f749 code=0x7ffc0000 [ 139.362494][ T27] audit: type=1326 audit(1767957894.996:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6741 comm="syz.2.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd1258f749 code=0x7ffc0000 [ 139.473942][ T5760] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.630354][ T6760] loop1: detected capacity change from 0 to 1024 [ 141.725378][ T6781] loop1: detected capacity change from 0 to 512 [ 141.732798][ T6777] loop0: detected capacity change from 0 to 1024 [ 141.748778][ T6781] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 141.810535][ T6781] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 141.824182][ T6777] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.951774][ T6777] EXT4-fs (loop0): shut down requested (2) [ 142.030390][ T6781] EXT4-fs (loop1): 1 truncate cleaned up [ 142.040143][ T6781] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.178025][ T5763] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.273504][ T5760] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.439291][ T6788] loop0: detected capacity change from 0 to 512 [ 142.460884][ T6790] loop2: detected capacity change from 0 to 1024 [ 142.468986][ T6788] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 142.520780][ T6788] EXT4-fs (loop0): 1 truncate cleaned up [ 142.585115][ T6788] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.810599][ T49] hfsplus: b-tree write err: -5, ino 4 [ 142.919196][ T5763] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.047851][ T6800] netlink: 'syz.2.321': attribute type 1 has an invalid length. [ 143.097483][ T6800] netlink: 'syz.2.321': attribute type 2 has an invalid length. [ 143.105729][ T6803] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 143.128293][ T6800] Zero length message leads to an empty skb [ 143.176884][ T6800] syz.2.321 (6800) used greatest stack depth: 20360 bytes left [ 143.501882][ T6795] loop1: detected capacity change from 0 to 32768 [ 143.788404][ T6812] (null): rxe_set_mtu: Set mtu to 256 [ 143.804393][ T6812] vxcan1 speed is unknown, defaulting to 1000 [ 143.837917][ T6812] vxcan1 speed is unknown, defaulting to 1000 [ 143.864744][ T6812] vxcan1 speed is unknown, defaulting to 1000 [ 144.309647][ T6812] infiniband syz2: set active [ 144.314677][ T6812] infiniband syz2: added vxcan1 [ 144.328276][ T5801] vxcan1 speed is unknown, defaulting to 1000 [ 144.378400][ T6812] RDS/IB: syz2: added [ 144.382996][ T6812] smc: adding ib device syz2 with port count 1 [ 144.389908][ T6812] smc: ib device syz2 port 1 has pnetid [ 144.399201][ T6812] vxcan1 speed is unknown, defaulting to 1000 [ 144.480571][ T6812] vxcan1 speed is unknown, defaulting to 1000 [ 144.562528][ T6812] vxcan1 speed is unknown, defaulting to 1000 [ 144.643704][ T6812] vxcan1 speed is unknown, defaulting to 1000 [ 144.773741][ T5801] vxcan1 speed is unknown, defaulting to 1000 [ 144.968395][ T6795] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 145.218842][ T6820] loop0: detected capacity change from 0 to 4096 [ 145.251211][ T6820] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [ 145.302402][ T5760] ocfs2: Unmounting device (7,1) on (node local) [ 145.353803][ T6827] loop2: detected capacity change from 0 to 512 [ 145.394875][ T6827] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 145.621348][ T6827] EXT4-fs (loop2): 1 truncate cleaned up [ 145.651703][ T6827] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.237860][ T5767] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.313619][ T6825] loop3: detected capacity change from 0 to 32768 [ 146.359064][ T6835] loop1: detected capacity change from 0 to 4096 [ 146.406933][ T27] kauditd_printk_skb: 63 callbacks suppressed [ 146.406947][ T27] audit: type=1800 audit(1767957902.476:77): pid=6825 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.329" name="file1" dev="loop3" ino=4 res=0 errno=0 [ 149.024931][ T6862] loop2: detected capacity change from 0 to 512 [ 149.057676][ T6862] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 149.094696][ T6862] EXT4-fs (loop2): 1 truncate cleaned up [ 149.113279][ T6862] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.216946][ T5767] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.307421][ T5861] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 149.380435][ T6869] loop2: detected capacity change from 0 to 512 [ 149.410190][ T6869] EXT4-fs: Ignoring removed i_version option [ 149.427091][ T6869] EXT4-fs: Ignoring removed oldalloc option [ 149.453783][ T6869] EXT4-fs: Ignoring removed nomblk_io_submit option [ 149.478485][ T6869] EXT4-fs (loop2): Test dummy encryption mode enabled [ 149.505183][ T6869] EXT4-fs (loop2): 1 truncate cleaned up [ 149.520734][ T6869] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.536341][ T5861] usb 4-1: Using ep0 maxpacket: 16 [ 149.562712][ T5861] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 149.584620][ T5861] usb 4-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 149.623241][ T6866] loop1: detected capacity change from 0 to 32768 [ 149.631671][ T5861] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.671459][ T6866] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 149.698695][ T5861] usb 4-1: config 0 descriptor?? [ 149.779003][ T6866] XFS (loop1): Ending clean mount [ 149.786514][ T5767] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.821994][ T6866] XFS (loop1): Quotacheck needed: Please wait. [ 149.943638][ T6866] XFS (loop1): Quotacheck: Done. [ 150.002297][ T6866] XFS (loop1): User initiated shutdown received. [ 150.017595][ T6866] XFS (loop1): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:501). Shutting down filesystem. [ 150.042129][ T6866] XFS (loop1): Please unmount the filesystem and rectify the problem(s) [ 150.123418][ T5760] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 150.160415][ T5861] greenasia 0003:0E8F:0012.0002: unknown main item tag 0x2 [ 150.177174][ T5861] greenasia 0003:0E8F:0012.0002: item fetching failed at offset 4/5 [ 150.185955][ T5861] greenasia 0003:0E8F:0012.0002: parse failed [ 150.220531][ T5861] greenasia: probe of 0003:0E8F:0012.0002 failed with error -22 [ 150.500593][ T5861] usb 4-1: USB disconnect, device number 2 [ 152.550387][ T6902] loop1: detected capacity change from 0 to 512 [ 152.576064][ T6902] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 152.586108][ T5861] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 152.621241][ T6902] EXT4-fs (loop1): 1 truncate cleaned up [ 152.635809][ T6902] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.795806][ T5861] usb 4-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 152.813380][ T5861] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.856671][ T5861] usb 4-1: config 0 descriptor?? [ 152.945728][ T5760] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.109085][ T5861] kaweth 4-1:0.0: Firmware present in device. [ 153.114892][ T6906] loop1: detected capacity change from 0 to 512 [ 153.135065][ T6906] EXT4-fs: Ignoring removed i_version option [ 153.158044][ T6906] EXT4-fs: Ignoring removed oldalloc option [ 153.189047][ T6906] EXT4-fs: Ignoring removed nomblk_io_submit option [ 153.219533][ T6906] EXT4-fs (loop1): Test dummy encryption mode enabled [ 153.254368][ T6906] EXT4-fs (loop1): 1 truncate cleaned up [ 153.286027][ T5861] kaweth 4-1:0.0: Statistics collection: 0 [ 153.287069][ T6906] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 153.306393][ T5861] kaweth 4-1:0.0: Multicast filter limit: 0 [ 153.312426][ T5861] kaweth 4-1:0.0: MTU: 0 [ 153.317475][ T5861] kaweth 4-1:0.0: Read MAC address 00:00:00:00:00:00 [ 153.498949][ T5861] kaweth: probe of 4-1:0.0 failed with error -5 [ 153.509315][ T5861] usb 4-1: USB disconnect, device number 3 [ 153.563517][ T5760] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.829942][ T6916] loop1: detected capacity change from 0 to 8 [ 153.917586][ T6916] SQUASHFS error: xz decompression failed, data probably corrupt [ 153.925770][ T6916] SQUASHFS error: Failed to read block 0x108: -5 [ 153.952582][ T6916] SQUASHFS error: Unable to read metadata cache entry [106] [ 153.972700][ T6908] loop2: detected capacity change from 0 to 32768 [ 153.979458][ T6916] SQUASHFS error: Unable to read inode 0x11f [ 154.045186][ T6908] ERROR: (device loop2): dbAllocBits: leaf page corrupt [ 154.045186][ T6908] [ 154.074626][ T6908] ERROR: (device loop2): remounting filesystem as read-only [ 154.102409][ T6908] ERROR: (device loop2): dbAllocBits: leaf page corrupt [ 154.102409][ T6908] [ 154.139735][ T6908] ERROR: (device loop2): dbAllocBits: leaf page corrupt [ 154.139735][ T6908] [ 154.166800][ T6908] ERROR: (device loop2): dbAllocBits: leaf page corrupt [ 154.166800][ T6908] [ 154.289475][ T6908] blkno = b00, nblocks = 400 [ 154.294565][ T6908] ERROR: (device loop2): dbFree: block to be freed is outside the map [ 154.294565][ T6908] [ 154.308792][ T6908] blkno = b00, nblocks = 400 [ 154.313428][ T6908] ERROR: (device loop2): dbFree: block to be freed is outside the map [ 154.313428][ T6908] [ 154.329335][ T6908] blkno = b00, nblocks = 400 [ 154.334224][ T6908] ERROR: (device loop2): dbFree: block to be freed is outside the map [ 154.334224][ T6908] [ 154.865592][ T6914] loop0: detected capacity change from 0 to 40427 [ 154.951424][ T6914] F2FS-fs (loop0): Found nat_bits in checkpoint [ 154.970468][ T6924] loop3: detected capacity change from 0 to 512 [ 155.025606][ T6924] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 155.077506][ T6914] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 155.166287][ T6924] EXT4-fs (loop3): 1 truncate cleaned up [ 155.215927][ T6924] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 155.252942][ T6914] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 155.373341][ T5763] syz-executor: attempt to access beyond end of device [ 155.373341][ T5763] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 155.393829][ T6924] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5916: Corrupt filesystem [ 155.436356][ T5763] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 155.446309][ T6924] EXT4-fs (loop3): Remounting filesystem read-only [ 155.498680][ T5759] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.583161][ T6935] loop1: detected capacity change from 0 to 512 [ 155.617310][ T6935] EXT4-fs: Ignoring removed i_version option [ 155.623385][ T6935] EXT4-fs: Ignoring removed oldalloc option [ 155.660427][ T6935] EXT4-fs: Ignoring removed nomblk_io_submit option [ 155.830473][ T6935] EXT4-fs (loop1): Test dummy encryption mode enabled [ 156.180893][ T6935] EXT4-fs (loop1): 1 truncate cleaned up [ 156.199174][ T6935] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 156.281947][ T6929] loop2: detected capacity change from 0 to 32768 [ 156.336499][ T6929] XFS (loop2): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 156.385921][ T5760] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.463594][ T6929] XFS (loop2): Ending clean mount [ 156.489860][ T6952] loop1: detected capacity change from 0 to 1024 [ 156.669868][ T59] hfsplus: b-tree write err: -5, ino 4 [ 156.684447][ T5767] XFS (loop2): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 156.706434][ T6955] loop0: detected capacity change from 0 to 512 [ 156.718577][ T6955] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 156.758355][ T6955] EXT4-fs (loop0): 1 truncate cleaned up [ 156.768222][ T6955] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.928167][ T6961] loop3: detected capacity change from 0 to 64 [ 157.044564][ T5763] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.180789][ T6965] loop0: detected capacity change from 0 to 512 [ 157.209613][ T6965] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 157.240751][ T6965] EXT4-fs (loop0): 1 truncate cleaned up [ 157.251974][ T6965] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.838296][ T5763] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.186751][ T9] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 158.400693][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 158.524360][ T9] usb 2-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 158.681500][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.837615][ T9] usb 2-1: config 0 descriptor?? [ 158.891632][ T6981] loop3: detected capacity change from 0 to 512 [ 158.899007][ T6981] EXT4-fs: Ignoring removed i_version option [ 158.905056][ T6981] EXT4-fs: Ignoring removed oldalloc option [ 158.911141][ T6981] EXT4-fs: Ignoring removed nomblk_io_submit option [ 158.922599][ T6981] EXT4-fs (loop3): Test dummy encryption mode enabled [ 158.957548][ T6981] EXT4-fs (loop3): 1 truncate cleaned up [ 158.964475][ T6981] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.056929][ T6985] process 'syz.0.377' launched './file0' with NULL argv: empty string added [ 159.058387][ T5759] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.264030][ T6989] loop3: detected capacity change from 0 to 4096 [ 159.280692][ T6989] EXT4-fs: Ignoring removed mblk_io_submit option [ 159.309490][ T9] dragonrise 0003:0079:0006.0003: item fetching failed at offset 2/5 [ 159.327554][ T9] dragonrise 0003:0079:0006.0003: parse failed [ 159.344065][ T9] dragonrise: probe of 0003:0079:0006.0003 failed with error -22 [ 159.420695][ T6989] EXT4-fs (loop3): Test dummy encryption mode enabled [ 159.455282][ T6989] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.511209][ T9] usb 2-1: USB disconnect, device number 5 [ 159.578634][ T5759] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.862261][ T7005] loop2: detected capacity change from 0 to 512 [ 159.879182][ T7005] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 159.895103][ T7005] EXT4-fs (loop2): 1 truncate cleaned up [ 159.903029][ T7005] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.821859][ T5767] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.922545][ T7017] loop0: detected capacity change from 0 to 512 [ 160.949579][ T7017] EXT4-fs: Ignoring removed i_version option [ 161.543599][ T7017] EXT4-fs: Ignoring removed oldalloc option [ 161.776963][ T7017] EXT4-fs: Ignoring removed nomblk_io_submit option [ 161.840851][ T7017] EXT4-fs (loop0): Test dummy encryption mode enabled [ 161.928281][ T7017] EXT4-fs (loop0): 1 truncate cleaned up [ 161.964858][ T7017] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.243379][ T7038] loop2: detected capacity change from 0 to 256 [ 162.381980][ T5763] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.465082][ T7038] FAT-fs (loop2): Directory bread(block 64) failed [ 162.472224][ T7038] FAT-fs (loop2): Directory bread(block 65) failed [ 162.479644][ T7038] FAT-fs (loop2): Directory bread(block 66) failed [ 162.486293][ T7038] FAT-fs (loop2): Directory bread(block 67) failed [ 162.493282][ T7038] FAT-fs (loop2): Directory bread(block 68) failed [ 162.499950][ T7038] FAT-fs (loop2): Directory bread(block 69) failed [ 162.506966][ T7038] FAT-fs (loop2): Directory bread(block 70) failed [ 162.513566][ T7038] FAT-fs (loop2): Directory bread(block 71) failed [ 162.520543][ T7038] FAT-fs (loop2): Directory bread(block 72) failed [ 162.527298][ T7038] FAT-fs (loop2): Directory bread(block 73) failed [ 162.723335][ T7042] loop0: detected capacity change from 0 to 190 [ 162.732703][ T7040] bridge0: entered promiscuous mode [ 162.736549][ T7042] ntfs: (device loop0): is_boot_sector_ntfs(): Invalid boot sector checksum. [ 162.742320][ T7040] vlan2: entered promiscuous mode [ 162.801559][ T7042] ntfs: (device loop0): ntfs_read_locked_inode(): $STANDARD_INFORMATION attribute is missing. [ 162.835059][ T7042] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 162.876019][ T7042] ntfs: (device loop0): load_system_files(): Failed to load $MFTMirr. Will not be able to remount read-write. Run ntfsfix and/or chkdsk. [ 162.905652][ T7042] ntfs: volume version 3.1. [ 162.914778][ T7042] ntfs: (device loop0): load_system_files(): Volume is dirty. Will not be able to remount read-write. Run chkdsk and mount in Windows. [ 162.933336][ T7042] ntfs: (device loop0): ntfs_read_locked_inode(): Inode is an extent inode! [ 162.946275][ T5861] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 162.977358][ T7042] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x2 as bad. Run chkdsk. [ 163.010122][ T7042] ntfs: (device loop0): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 163.055522][ T7042] ntfs: (device loop0): ntfs_lookup_inode_by_name(): No index allocation attribute but index entry requires one. Directory inode 0x5 is corrupt or driver bug. [ 163.089243][ T7042] ntfs: (device loop0): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 163.120418][ T7042] syz.0.395: attempt to access beyond end of device [ 163.120418][ T7042] loop0: rw=0, sector=224, nr_sectors = 8 limit=190 [ 163.129313][ T7046] loop3: detected capacity change from 0 to 512 [ 163.140021][ T5861] usb 2-1: Using ep0 maxpacket: 32 [ 163.160693][ T5861] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 163.175948][ T5861] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.192015][ T7046] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 163.204364][ T5861] usb 2-1: config 0 descriptor?? [ 163.217826][ T7046] EXT4-fs (loop3): 1 truncate cleaned up [ 163.225118][ T7046] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.377769][ T7049] IPVS: set_ctl: invalid protocol: 59 224.0.0.1:20003 [ 163.632271][ T5861] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 163.978835][ T5861] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 164.065009][ T5759] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.105354][ T5861] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 164.213760][ T5861] usb 2-1: media controller created [ 164.411772][ T5861] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 166.151132][ T5861] az6027: usb out operation failed. (-71) [ 166.205213][ T5861] stb0899_attach: Driver disabled by Kconfig [ 166.241522][ T5861] az6027: no front-end attached [ 166.241522][ T5861] [ 166.250840][ T5861] az6027: usb out operation failed. (-71) [ 166.268424][ T5861] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 166.280740][ T5861] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input5 [ 166.317149][ T5861] dvb-usb: schedule remote query interval to 400 msecs. [ 166.334182][ T7069] loop3: detected capacity change from 0 to 256 [ 166.345614][ T5861] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 166.366754][ T5861] usb 2-1: USB disconnect, device number 6 [ 166.396945][ T7069] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001e4a3, chksum : 0xe65d9f0a, utbl_chksum : 0x7319d30d) [ 166.534514][ T5861] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 166.693536][ T7077] loop3: detected capacity change from 0 to 512 [ 166.717163][ T7077] EXT4-fs: Ignoring removed i_version option [ 166.736439][ T7077] EXT4-fs: Ignoring removed oldalloc option [ 166.746601][ T7077] EXT4-fs: Ignoring removed nomblk_io_submit option [ 166.792769][ T7077] EXT4-fs (loop3): Test dummy encryption mode enabled [ 166.844025][ T7077] EXT4-fs (loop3): 1 truncate cleaned up [ 166.865224][ T7077] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.893808][ T7088] loop1: detected capacity change from 0 to 128 [ 166.915752][ T7088] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 166.947570][ T7088] hpfs: filesystem error: improperly stopped [ 166.963520][ T7088] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 166.991623][ T7088] hpfs: You really don't want any checks? You are crazy... [ 167.019929][ T7088] hpfs: hpfs_map_sector(): read error [ 167.022634][ T5759] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.031100][ T7088] hpfs: code page support is disabled [ 167.088396][ T7088] hpfs: hpfs_map_4sectors(): unaligned read [ 167.094702][ T7088] hpfs: hpfs_map_4sectors(): unaligned read [ 167.135436][ T7088] hpfs: filesystem error: unable to find root dir [ 167.296910][ T7095] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 167.405051][ T7098] loop3: detected capacity change from 0 to 512 [ 167.427975][ T7098] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 167.500847][ T7100] ptrace attach of "./syz-executor exec"[5760] was attempted by " [ 167.543513][ T7100] hpfs: hpfs_map_4sectors(): unaligned read [ 167.654755][ T7101] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 167.824461][ T7098] EXT4-fs (loop3): 1 truncate cleaned up [ 167.879782][ T7098] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.171260][ T5759] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.189898][ T7115] netlink: 'syz.1.413': attribute type 12 has an invalid length. [ 168.520918][ T5861] libceph: connect (1)[c::]:6789 error -101 [ 168.521559][ T5861] libceph: mon0 (1)[c::]:6789 connect error [ 168.619366][ T7131] vxfs: WRONG superblock magic 00000000 at 1 [ 168.642282][ T7131] vxfs: WRONG superblock magic 00000000 at 8 [ 168.648461][ T7131] vxfs: can't find superblock. [ 168.687175][ T7134] loop1: detected capacity change from 0 to 512 [ 168.695484][ T7134] EXT4-fs: Ignoring removed i_version option [ 168.703891][ T7134] EXT4-fs: Ignoring removed oldalloc option [ 168.725300][ T7134] EXT4-fs: Ignoring removed nomblk_io_submit option [ 168.762346][ T7134] EXT4-fs (loop1): Test dummy encryption mode enabled [ 168.786617][ T5861] libceph: connect (1)[c::]:6789 error -101 [ 168.815343][ T5861] libceph: mon0 (1)[c::]:6789 connect error [ 168.834331][ T7134] EXT4-fs (loop1): 1 truncate cleaned up [ 168.882787][ T7134] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.951002][ T7123] ceph: No mds server is up or the cluster is laggy [ 169.083564][ T7143] netlink: 8 bytes leftover after parsing attributes in process `syz.3.419'. [ 169.126439][ T7143] netlink: 8 bytes leftover after parsing attributes in process `syz.3.419'. [ 169.142817][ T5760] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.782074][ T7159] loop1: detected capacity change from 0 to 1024 [ 169.843862][ T7156] loop3: detected capacity change from 0 to 8192 [ 169.963100][ T7156] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 170.006099][ T7156] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 170.017282][ T7156] REISERFS (device loop3): using ordered data mode [ 170.023818][ T7156] reiserfs: using flush barriers [ 170.033990][ T7156] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 170.059929][ T7156] REISERFS (device loop3): checking transaction log (loop3) [ 170.085161][ T7156] REISERFS (device loop3): Using r5 hash to sort names [ 170.118966][ T7156] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 170.140830][ T7169] loop1: detected capacity change from 0 to 512 [ 170.191097][ T7169] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 170.256559][ T7169] EXT4-fs (loop1): 1 truncate cleaned up [ 170.263428][ T7169] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.460154][ T5760] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.685652][ T7182] loop1: detected capacity change from 0 to 512 [ 170.715387][ T7182] EXT4-fs: Ignoring removed i_version option [ 170.756515][ T7182] EXT4-fs: Ignoring removed oldalloc option [ 170.780283][ T7182] EXT4-fs: Ignoring removed nomblk_io_submit option [ 170.804807][ T7184] vxcan1 speed is unknown, defaulting to 1000 [ 170.823342][ T7182] EXT4-fs (loop1): Test dummy encryption mode enabled [ 170.866095][ T7182] EXT4-fs (loop1): 1 truncate cleaned up [ 170.873146][ T7182] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.003942][ T7191] loop0: detected capacity change from 0 to 128 [ 171.013798][ T7191] FAT-fs (loop0): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 171.127285][ T7180] loop2: detected capacity change from 0 to 32768 [ 171.139715][ T5760] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.215596][ T7180] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 171.425349][ T7195] loop0: detected capacity change from 0 to 4096 [ 171.463131][ T7195] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 171.482255][ T5767] ocfs2: Unmounting device (7,2) on (node local) [ 171.534043][ T7195] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 4096) [ 171.589594][ T7195] NILFS (loop0): invalid segment: Checksum error in segment payload [ 171.622976][ T7195] NILFS (loop0): unable to fall back to spare super block [ 171.664680][ T7195] NILFS (loop0): error -22 while searching super root [ 171.893835][ T7204] loop2: detected capacity change from 0 to 512 [ 171.941431][ T7204] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 171.994675][ T7204] EXT4-fs (loop2): 1 truncate cleaned up [ 172.040889][ T7204] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.151971][ T7197] loop1: detected capacity change from 0 to 32768 [ 172.209660][ T7197] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 172.226236][ T3064] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 172.247281][ T7197] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 172.294245][ T5767] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.320817][ T7197] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 172.365385][ T5861] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 172.387759][ T5861] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 172.418777][ T7216] loop2: detected capacity change from 0 to 512 [ 172.427995][ T7216] EXT4-fs: Ignoring removed i_version option [ 172.448729][ T7216] EXT4-fs: Ignoring removed oldalloc option [ 172.463148][ T7216] EXT4-fs: Ignoring removed nomblk_io_submit option [ 172.474396][ T5861] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 86ms [ 172.475746][ T7216] EXT4-fs (loop2): Test dummy encryption mode enabled [ 172.489423][ T3064] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 172.503320][ T7216] EXT4-fs (loop2): 1 truncate cleaned up [ 172.503563][ T5861] gfs2: fsid=syz:syz.0: jid=0: Done [ 172.514461][ T3064] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 172.524719][ T7216] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.526914][ T7197] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 172.547458][ T3064] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 172.560497][ T3064] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 172.590140][ T3064] usb 1-1: SerialNumber: syz [ 172.614558][ T3064] usb 1-1: 0:2 : does not exist [ 172.699607][ T5767] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.727998][ T7223] loop0: detected capacity change from 0 to 2048 [ 173.762767][ T7223] UDF-fs: warning (device loop0): udf_fill_super: No partition found (2) [ 175.366996][ T7241] 9pnet: p9_errstr2errno: server reported unknown error @cDB|0x0000000000000004 [ 175.533202][ T7250] loop2: detected capacity change from 0 to 512 [ 175.544058][ T7250] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 175.569346][ T7250] EXT4-fs (loop2): 1 truncate cleaned up [ 175.594607][ T7250] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.615942][ T7254] loop1: detected capacity change from 0 to 512 [ 175.624125][ T7254] EXT4-fs: Ignoring removed i_version option [ 175.630582][ T7254] EXT4-fs: Ignoring removed oldalloc option [ 175.637899][ T7254] EXT4-fs: Ignoring removed nomblk_io_submit option [ 175.681376][ T7254] EXT4-fs (loop1): Test dummy encryption mode enabled [ 175.709307][ T7254] EXT4-fs (loop1): 1 truncate cleaned up [ 175.720412][ T7257] loop3: detected capacity change from 0 to 256 [ 175.729962][ T7254] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 175.732283][ T5767] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.760974][ T7257] exfat: Deprecated parameter 'namecase' [ 175.802099][ T7257] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e0d861, utbl_chksum : 0xe619d30d) [ 175.892326][ T5760] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.027459][ T5861] usb 1-1: USB disconnect, device number 3 [ 176.162929][ T7266] loop0: detected capacity change from 0 to 512 [ 176.204100][ T7266] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 176.249975][ T7266] EXT4-fs (loop0): 1 truncate cleaned up [ 176.270584][ T7266] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 176.385452][ T7273] loop3: detected capacity change from 0 to 4096 [ 176.393137][ T7273] ntfs3: Bad value for 'gid' [ 176.438443][ T5763] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.550363][ T7277] loop1: detected capacity change from 0 to 512 [ 176.575130][ T7277] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 176.592572][ T7277] EXT4-fs (loop1): 1 truncate cleaned up [ 176.605827][ T7277] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.680785][ T7282] loop0: detected capacity change from 0 to 512 [ 176.697275][ T7282] EXT4-fs: Ignoring removed i_version option [ 176.726396][ T7282] EXT4-fs: Ignoring removed oldalloc option [ 176.732545][ T7282] EXT4-fs: Ignoring removed nomblk_io_submit option [ 176.765136][ T7282] EXT4-fs (loop0): Test dummy encryption mode enabled [ 176.766733][ T5760] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.782086][ T5861] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 176.806603][ T7282] EXT4-fs (loop0): 1 truncate cleaned up [ 176.832952][ T7282] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 177.001271][ T5763] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.077484][ T5861] usb 4-1: Using ep0 maxpacket: 8 [ 177.090539][ T5861] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 177.103995][ T5861] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 177.114495][ T5861] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 177.128307][ T5861] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 177.138451][ T5861] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 177.151681][ T5861] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 177.160890][ T5861] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.296303][ T5808] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 177.379852][ T5861] usb 4-1: GET_CAPABILITIES returned 0 [ 177.390848][ T5861] usbtmc 4-1:16.0: can't read capabilities [ 177.452160][ T7292] loop0: detected capacity change from 0 to 32768 [ 177.464035][ T7292] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.468 (7292) [ 177.489793][ T7292] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 177.500914][ T7292] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 177.511764][ T7292] BTRFS info (device loop0): use zlib compression, level 3 [ 177.521223][ T7292] BTRFS info (device loop0): using free space tree [ 177.528723][ T5808] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 177.539297][ T5808] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 177.553337][ T5808] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 177.563287][ T5808] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 177.575940][ T5808] usb 2-1: SerialNumber: syz [ 177.603597][ T5808] usb 2-1: 0:2 : does not exist [ 177.609375][ T7273] usbtmc 4-1:16.0: usbtmc488_ioctl_trigger returned -90 [ 177.625280][ T5861] usb 4-1: USB disconnect, device number 4 [ 177.634398][ T7292] BTRFS info (device loop0): enabling ssd optimizations [ 177.680221][ T7292] BTRFS info (device loop0): auto enabling async discard [ 179.113173][ T7315] loop1: detected capacity change from 0 to 2048 [ 179.536230][ T7315] UDF-fs: warning (device loop1): udf_fill_super: No partition found (2) [ 180.182549][ T5861] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 180.235978][ T5763] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 180.388311][ T5861] usb 3-1: Using ep0 maxpacket: 8 [ 180.411460][ T5861] usb 3-1: config 4 has an invalid interface number: 7 but max is 0 [ 180.441298][ T5861] usb 3-1: config 4 has no interface number 0 [ 180.473036][ T5861] usb 3-1: config 4 interface 7 has no altsetting 0 [ 180.511143][ T5861] usb 3-1: New USB device found, idVendor=084f, idProduct=0001, bcdDevice=71.76 [ 180.548669][ T5861] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.583953][ T5861] usb 3-1: Product: syz [ 180.610951][ T5861] usb 3-1: Manufacturer: syz [ 180.620565][ T5861] usb 3-1: SerialNumber: syz [ 180.875042][ T5861] empeg 3-1:4.7: empeg converter detected [ 180.893896][ T5861] usb 3-1: active config #4 != 1 ?? [ 180.929494][ T5861] usb 3-1: USB disconnect, device number 7 [ 181.183781][ T7322] loop0: detected capacity change from 0 to 32768 [ 181.230890][ T7322] XFS (loop0): DAX unsupported by block device. Turning off DAX. [ 181.257624][ T7322] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 181.326797][ T7334] loop3: detected capacity change from 0 to 256 [ 181.376656][ T7322] XFS (loop0): Ending clean mount [ 181.390850][ T7322] XFS (loop0): Quotacheck needed: Please wait. [ 181.501399][ T5828] usb 2-1: USB disconnect, device number 7 [ 181.561549][ T7334] FAT-fs (loop3): Directory bread(block 64) failed [ 181.590348][ T7334] FAT-fs (loop3): Directory bread(block 65) failed [ 181.608993][ T7322] XFS (loop0): Quotacheck: Done. [ 181.633752][ T7334] FAT-fs (loop3): Directory bread(block 66) failed [ 181.651288][ T7334] FAT-fs (loop3): Directory bread(block 67) failed [ 181.665561][ T7334] FAT-fs (loop3): Directory bread(block 68) failed [ 181.679153][ T7337] loop1: detected capacity change from 0 to 512 [ 181.692221][ T7338] loop2: detected capacity change from 0 to 512 [ 181.695533][ T7334] FAT-fs (loop3): Directory bread(block 69) failed [ 181.709014][ T7337] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 181.721117][ T5763] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 181.727744][ T7338] EXT4-fs: Ignoring removed i_version option [ 181.731438][ T7334] FAT-fs (loop3): Directory bread(block 70) failed [ 181.760880][ T7334] FAT-fs (loop3): Directory bread(block 71) failed [ 181.775437][ T7334] FAT-fs (loop3): Directory bread(block 72) failed [ 181.780166][ T7338] EXT4-fs: Ignoring removed oldalloc option [ 181.783976][ T7334] FAT-fs (loop3): Directory bread(block 73) failed [ 181.809475][ T7338] EXT4-fs: Ignoring removed nomblk_io_submit option [ 181.831106][ T7338] EXT4-fs (loop2): Test dummy encryption mode enabled [ 181.834314][ T7337] EXT4-fs (loop1): 1 truncate cleaned up [ 181.864351][ T7337] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.915197][ T7338] EXT4-fs (loop2): 1 truncate cleaned up [ 181.926264][ T7338] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 182.067503][ T5760] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.090430][ T5767] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.782260][ T7372] loop1: detected capacity change from 0 to 512 [ 184.817889][ T7372] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 184.908779][ T7372] EXT4-fs (loop1): 1 truncate cleaned up [ 184.929737][ T7372] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 185.180009][ T5760] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.419536][ T7376] loop1: detected capacity change from 0 to 512 [ 185.449523][ T7376] EXT4-fs: Ignoring removed i_version option [ 185.482787][ T7376] EXT4-fs: Ignoring removed oldalloc option [ 185.506657][ T7376] EXT4-fs: Ignoring removed nomblk_io_submit option [ 185.538428][ T7370] loop0: detected capacity change from 0 to 32768 [ 185.587815][ T7370] [ 185.587815][ T7370] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 185.587815][ T7370] [ 185.589113][ T7376] EXT4-fs (loop1): Test dummy encryption mode enabled [ 185.700098][ T7376] EXT4-fs (loop1): 1 truncate cleaned up [ 185.727790][ T7370] [ 185.727790][ T7370] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 185.727790][ T7370] [ 185.749055][ T7376] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 185.787243][ T7370] [ 185.787243][ T7370] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 185.787243][ T7370] [ 185.993378][ T5760] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.201823][ T7383] loop1: detected capacity change from 0 to 128 [ 186.253293][ T7383] affs: Error parsing options [ 186.326446][ T5801] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 186.529876][ T5801] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 186.553679][ T5801] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 186.578607][ T5801] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 186.611689][ T5801] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 186.625605][ T5801] usb 3-1: SerialNumber: syz [ 186.659928][ T5801] usb 3-1: 0:2 : does not exist [ 186.705612][ T7394] loop1: detected capacity change from 0 to 4096 [ 186.765381][ T7395] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 188.037606][ T7400] loop2: detected capacity change from 0 to 2048 [ 189.229712][ T7400] UDF-fs: warning (device loop2): udf_fill_super: No partition found (2) [ 189.237743][ T7394] syz.1.495 (7394) used greatest stack depth: 18192 bytes left [ 189.308702][ T7405] loop3: detected capacity change from 0 to 512 [ 189.318870][ T7405] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 189.389129][ T7405] EXT4-fs (loop3): 1 truncate cleaned up [ 189.403624][ T7405] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 189.553147][ T7409] loop0: detected capacity change from 0 to 512 [ 189.565278][ T7409] EXT4-fs: Ignoring removed i_version option [ 189.577996][ T7409] EXT4-fs: Ignoring removed oldalloc option [ 189.595418][ T7409] EXT4-fs: Ignoring removed nomblk_io_submit option [ 189.596717][ T5759] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.651417][ T7409] EXT4-fs (loop0): Test dummy encryption mode enabled [ 189.701458][ T7409] EXT4-fs (loop0): 1 truncate cleaned up [ 189.709339][ T7409] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 189.840452][ T7416] loop3: detected capacity change from 0 to 512 [ 189.944665][ T5763] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.959789][ T7416] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 189.990679][ T7416] EXT4-fs (loop3): 1 truncate cleaned up [ 189.998424][ T7416] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 190.019213][ T7416] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.866455][ T3064] usb 3-1: USB disconnect, device number 8 [ 191.449879][ T5774] Bluetooth: hci1: command 0x0406 tx timeout [ 191.456079][ T5765] Bluetooth: hci2: command 0x0406 tx timeout [ 191.463138][ T5773] Bluetooth: hci3: command 0x0406 tx timeout [ 191.470310][ T5762] Bluetooth: hci0: command 0x0406 tx timeout [ 191.659979][ T7435] loop3: detected capacity change from 0 to 512 [ 191.678405][ T7435] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 191.746422][ T7435] EXT4-fs (loop3): 1 truncate cleaned up [ 191.767140][ T7435] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.967240][ T5759] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.113073][ T7445] loop3: detected capacity change from 0 to 512 [ 192.157354][ T7445] EXT4-fs: Ignoring removed i_version option [ 192.163451][ T7445] EXT4-fs: Ignoring removed oldalloc option [ 192.188476][ T7445] EXT4-fs: Ignoring removed nomblk_io_submit option [ 192.195627][ T7427] loop0: detected capacity change from 0 to 32768 [ 192.211675][ T7445] EXT4-fs (loop3): Test dummy encryption mode enabled [ 192.240701][ T7445] EXT4-fs (loop3): 1 truncate cleaned up [ 192.252609][ T7427] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 192.266027][ T7445] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 192.395854][ T7427] XFS (loop0): Ending clean mount [ 192.453420][ T5759] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.551615][ T7439] loop2: detected capacity change from 0 to 32768 [ 192.563069][ T5763] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 192.583620][ T7439] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.509 (7439) [ 192.672508][ T7439] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 192.704134][ T7439] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 192.723690][ T7439] BTRFS info (device loop2): metadata ratio 2 [ 192.757130][ T7439] BTRFS info (device loop2): allowing degraded mounts [ 192.763956][ T7439] BTRFS info (device loop2): force zlib compression, level 3 [ 192.775278][ T7439] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 192.786859][ T7439] BTRFS info (device loop2): use zstd compression, level 3 [ 192.803192][ T7439] BTRFS info (device loop2): force clearing of disk cache [ 192.813897][ T7439] BTRFS info (device loop2): turning on flush-on-commit [ 192.845319][ T7439] BTRFS warning (device loop2): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 192.856267][ T9] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 192.889991][ T7439] BTRFS info (device loop2): trying to use backup root at mount time [ 192.915687][ T7439] BTRFS info (device loop2): using free space tree [ 193.035778][ T7439] BTRFS info (device loop2): enabling ssd optimizations [ 193.038329][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 193.078155][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 193.078354][ T7439] BTRFS info (device loop2): rebuilding free space tree [ 193.120018][ T9] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 193.146232][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 193.164981][ T9] usb 4-1: SerialNumber: syz [ 193.198664][ T9] usb 4-1: 0:2 : does not exist [ 193.367619][ T5767] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 193.438201][ T7489] loop0: detected capacity change from 0 to 512 [ 193.478597][ T7489] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 193.670193][ T7489] EXT4-fs (loop0): 1 truncate cleaned up [ 193.695150][ T7489] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.549126][ T7493] loop3: detected capacity change from 0 to 2048 [ 194.624771][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.638408][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.684145][ T7493] UDF-fs: warning (device loop3): udf_fill_super: No partition found (2) [ 195.509698][ T5861] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 195.637049][ T5763] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.749753][ T5861] usb 3-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 195.759095][ T5861] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.768424][ T5861] usb 3-1: Product: syz [ 195.772651][ T5861] usb 3-1: Manufacturer: syz [ 195.777350][ T5861] usb 3-1: SerialNumber: syz [ 195.783610][ T5861] usb 3-1: config 0 descriptor?? [ 195.793557][ T5861] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 195.804779][ T5861] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 195.814645][ T5861] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 195.824739][ T5861] usb 3-1: media controller created [ 195.843681][ T5861] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 195.883981][ T5861] DVB: Unable to find symbol mt352_attach() [ 195.913389][ T5861] DVB: Unable to find symbol nxt6000_attach() [ 195.921254][ T5861] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 195.934057][ T5861] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input6 [ 195.951447][ T5861] dvb-usb: schedule remote query interval to 1000 msecs. [ 195.958656][ T5861] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 195.968851][ T5861] dvb-usb: bulk message failed: -22 (7/0) [ 195.974626][ T5861] dvb-usb: bulk message failed: -22 (7/0) [ 196.028194][ T5828] usb 3-1: USB disconnect, device number 9 [ 196.063501][ T5828] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 196.685498][ T7505] loop0: detected capacity change from 0 to 512 [ 196.692871][ T5861] usb 4-1: USB disconnect, device number 5 [ 196.759071][ T7505] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 196.760490][ T7504] loop1: detected capacity change from 0 to 2048 [ 196.827324][ T7504] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 196.841296][ T7507] loop2: detected capacity change from 0 to 512 [ 196.857130][ T7505] EXT4-fs (loop0): 1 truncate cleaned up [ 196.865804][ T7507] EXT4-fs: Ignoring removed i_version option [ 196.872234][ T7507] EXT4-fs: Ignoring removed oldalloc option [ 196.881699][ T7507] EXT4-fs: Ignoring removed nomblk_io_submit option [ 196.889854][ T7505] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.941411][ T7507] EXT4-fs (loop2): Test dummy encryption mode enabled [ 196.960374][ T7507] EXT4-fs (loop2): 1 truncate cleaned up [ 196.978007][ T7507] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 197.055197][ T5763] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.178071][ T5767] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.408976][ T27] kauditd_printk_skb: 9 callbacks suppressed [ 197.408990][ T27] audit: type=1326 audit(1767957953.486:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7526 comm="syz.1.535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61e718f749 code=0x7ffc0000 [ 197.462004][ T27] audit: type=1326 audit(1767957953.516:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7526 comm="syz.1.535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61e718f749 code=0x7ffc0000 [ 197.504619][ T27] audit: type=1326 audit(1767957953.516:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7526 comm="syz.1.535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f61e718f749 code=0x7ffc0000 [ 197.545335][ T27] audit: type=1326 audit(1767957953.516:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7526 comm="syz.1.535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61e718f749 code=0x7ffc0000 [ 197.607613][ T27] audit: type=1326 audit(1767957953.516:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7526 comm="syz.1.535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61e718f749 code=0x7ffc0000 [ 197.672090][ T7533] loop1: detected capacity change from 0 to 1024 [ 197.681377][ T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 197.708504][ T7533] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 197.720805][ T7533] ext4 filesystem being mounted at /149/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 197.749295][ T7538] loop2: detected capacity change from 0 to 512 [ 197.767516][ T7538] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 197.893475][ T7538] EXT4-fs (loop2): 1 truncate cleaned up [ 197.905404][ T7538] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.976255][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 197.983947][ T9] usb 1-1: config 6 has an invalid interface number: 2 but max is 0 [ 197.992071][ T9] usb 1-1: config 6 has no interface number 0 [ 197.998654][ T9] usb 1-1: config 6 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 198.009996][ T9] usb 1-1: config 6 interface 2 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 198.393314][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805bcbcc00: rx timeout, send abort [ 198.404942][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805bcbe400: rx timeout, send abort [ 198.414306][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805bcbe400: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 198.502295][ T5767] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.626328][ T9] usb 1-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 198.627025][ T5760] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.635695][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.664409][ T9] usb 1-1: Product: syz [ 198.668876][ T9] usb 1-1: Manufacturer: syz [ 198.673489][ T9] usb 1-1: SerialNumber: syz [ 198.684581][ T9] hso 1-1:6.2: Failed to find INT IN ep [ 198.745010][ T7545] loop1: detected capacity change from 0 to 512 [ 198.753248][ T7545] EXT4-fs: Ignoring removed i_version option [ 198.759419][ T7545] EXT4-fs: Ignoring removed oldalloc option [ 198.765473][ T7545] EXT4-fs: Ignoring removed nomblk_io_submit option [ 198.786568][ T7545] EXT4-fs (loop1): Test dummy encryption mode enabled [ 198.821785][ T7545] EXT4-fs (loop1): 1 truncate cleaned up [ 198.832977][ T7545] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 198.893800][ T9] usb 1-1: USB disconnect, device number 4 [ 198.903530][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805bcbcc00: abort rx timeout. Force session deactivation [ 198.975578][ T5760] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.332712][ T7547] loop2: detected capacity change from 0 to 32768 [ 200.384309][ T7547] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 scanned by syz.2.542 (7547) [ 200.446478][ T7547] BTRFS info (device loop2): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 200.469980][ T7547] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 200.504514][ T7547] BTRFS info (device loop2): force zlib compression, level 3 [ 200.522482][ T7547] BTRFS info (device loop2): force clearing of disk cache [ 200.544339][ T7547] BTRFS info (device loop2): setting nodatasum [ 200.560957][ T7547] BTRFS info (device loop2): allowing degraded mounts [ 200.575504][ T7547] BTRFS info (device loop2): enabling disk space caching [ 200.594920][ T7547] BTRFS info (device loop2): disk space caching is enabled [ 200.740972][ T7547] BTRFS info (device loop2): auto enabling async discard [ 200.760697][ T7547] BTRFS info (device loop2): rebuilding free space tree [ 200.797289][ T7582] loop0: detected capacity change from 0 to 512 [ 200.818618][ T7547] BTRFS info (device loop2): disabling free space tree [ 200.837640][ T7582] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 200.856576][ T7547] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 200.901843][ T7547] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 200.943395][ T7582] EXT4-fs (loop0): 1 truncate cleaned up [ 200.982145][ T7582] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.014285][ T7564] loop1: detected capacity change from 0 to 32768 [ 201.033781][ T7564] Only 4K block size supported! [ 201.072820][ T7564] Mount JFS Failure: -22 [ 201.095146][ T7564] jfs_mount failed w/return code = -22 [ 201.233684][ T5763] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.247817][ T5767] BTRFS info (device loop2): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 201.569345][ T5770] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 12 /dev/loop2 scanned by udevd (5770) [ 201.807042][ T7588] loop0: detected capacity change from 0 to 1024 [ 202.531873][ T7597] loop3: detected capacity change from 0 to 512 [ 202.539243][ T7597] EXT4-fs: Ignoring removed i_version option [ 202.545422][ T7597] EXT4-fs: Ignoring removed oldalloc option [ 202.578303][ T7597] EXT4-fs: Ignoring removed nomblk_io_submit option [ 202.586751][ T7588] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 202.593917][ T7597] EXT4-fs (loop3): Test dummy encryption mode enabled [ 202.618684][ T7597] EXT4-fs (loop3): 1 truncate cleaned up [ 202.625533][ T7597] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 203.060916][ T5759] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.071307][ T5763] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.734260][ T7612] loop2: detected capacity change from 0 to 256 [ 204.122226][ T7612] FAT-fs (loop2): count of clusters too big (66845694) [ 204.129261][ T7612] FAT-fs (loop2): Can't find a valid FAT filesystem [ 204.430107][ T7614] loop1: detected capacity change from 0 to 512 [ 204.455639][ T7614] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 204.554946][ T7614] EXT4-fs (loop1): 1 truncate cleaned up [ 204.578982][ T7614] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 204.629415][ T7611] loop2: detected capacity change from 0 to 32768 [ 204.648387][ T7611] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 204.656791][ T7611] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 204.677550][ T7611] syz.2.558: attempt to access beyond end of device [ 204.677550][ T7611] loop2: rw=12288, sector=549755814040, nr_sectors = 8 limit=32768 [ 204.692104][ T7611] gfs2: fsid=syz:syz.0: can't acquire journal inode glock: -5 [ 204.947860][ T5760] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.973474][ T7623] netlink: 'syz.3.563': attribute type 1 has an invalid length. [ 205.022183][ T7623] bond2: entered promiscuous mode [ 205.027889][ T7623] bond2: entered allmulticast mode [ 205.034275][ T7623] 8021q: adding VLAN 0 to HW filter on device bond2 [ 205.068230][ T7623] macvlan2: entered promiscuous mode [ 205.074634][ T7623] macvlan2: entered allmulticast mode [ 205.088867][ T7623] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 205.349541][ T7636] loop2: detected capacity change from 0 to 256 [ 205.432025][ T7636] FAT-fs (loop2): Directory bread(block 64) failed [ 205.455537][ T7638] loop1: detected capacity change from 0 to 512 [ 205.462387][ T7636] FAT-fs (loop2): Directory bread(block 65) failed [ 205.470052][ T7636] FAT-fs (loop2): Directory bread(block 66) failed [ 205.487109][ T7638] EXT4-fs: Ignoring removed oldalloc option [ 205.493682][ T7636] FAT-fs (loop2): Directory bread(block 67) failed [ 205.501709][ T7638] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 205.514472][ T7636] FAT-fs (loop2): Directory bread(block 68) failed [ 205.530416][ T7636] FAT-fs (loop2): Directory bread(block 69) failed [ 205.537224][ T7636] FAT-fs (loop2): Directory bread(block 70) failed [ 205.545369][ T7636] FAT-fs (loop2): Directory bread(block 71) failed [ 205.553348][ T7636] FAT-fs (loop2): Directory bread(block 72) failed [ 205.554764][ T7638] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2816c018, mo2=0002] [ 205.572554][ T7636] FAT-fs (loop2): Directory bread(block 73) failed [ 205.588092][ T7638] System zones: 1-3, 19-19, 35-38 [ 205.607854][ T7638] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.624987][ T7638] ext4 filesystem being mounted at /159/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 205.802915][ T5760] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.905415][ T7649] loop2: detected capacity change from 0 to 512 [ 205.925251][ T7649] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 205.977865][ T7649] EXT4-fs (loop2): 1 truncate cleaned up [ 205.984745][ T7649] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.986556][ T7651] loop1: detected capacity change from 0 to 4096 [ 206.008426][ T7653] sock: sock_timestamping_bind_phc: sock not bind to device [ 206.120463][ T5767] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.643610][ T7658] loop2: detected capacity change from 0 to 32768 [ 206.671271][ T7658] Mount JFS Failure: -5 [ 207.027649][ T7661] loop2: detected capacity change from 0 to 8 [ 207.422160][ T7672] loop1: detected capacity change from 0 to 512 [ 207.431213][ T7672] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 207.460451][ T7672] EXT4-fs (loop1): 1 truncate cleaned up [ 207.471481][ T7672] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 207.527291][ T5760] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.588881][ T5808] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 207.685704][ T7678] Malformed UNC in devname [ 207.685704][ T7678] [ 207.693393][ T7678] CIFS: VFS: Malformed UNC in devname [ 207.715708][ T5828] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 207.833493][ T5808] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 207.892967][ T5808] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 207.966494][ T5828] usb 3-1: Using ep0 maxpacket: 16 [ 208.028133][ T5828] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 208.099746][ T5808] usb 4-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=7e.66 [ 208.112855][ T5828] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.133040][ T5808] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.147480][ T5828] usb 3-1: Product: syz [ 208.154726][ T5808] usb 4-1: Product: syz [ 208.163535][ T5828] usb 3-1: Manufacturer: syz [ 208.171316][ T5808] usb 4-1: Manufacturer: syz [ 208.175942][ T5808] usb 4-1: SerialNumber: syz [ 208.183316][ T5828] usb 3-1: SerialNumber: syz [ 208.194176][ T5828] usb 3-1: config 0 descriptor?? [ 208.200339][ T5808] usb 4-1: config 0 descriptor?? [ 208.229565][ T5808] snd-usb-audio: probe of 4-1:0.0 failed with error -90 [ 208.517376][ T5808] usb 4-1: USB disconnect, device number 6 [ 208.558803][ T7686] loop1: detected capacity change from 0 to 2048 [ 208.654675][ T7686] NILFS (loop1): error -5 while loading last checkpoint (checkpoint number=2) [ 208.721638][ T5828] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 208.851986][ T5828] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 208.929899][ T5828] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 208.940082][ T7674] dtv5100: wlen = 0, aborting. [ 208.993379][ T5828] usb 3-1: media controller created [ 209.120403][ T6252] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 209.267779][ T5828] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 209.431019][ T5828] zl10353_read_register: readreg error (reg=127, ret==0) [ 209.463312][ T5828] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 209.472992][ T5828] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 209.522359][ T5828] usb 3-1: USB disconnect, device number 10 [ 209.628040][ T5828] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 209.708047][ T7693] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 209.716192][ T7693] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 210.279778][ T7688] loop1: detected capacity change from 0 to 131072 [ 210.307036][ T7688] XFS (loop1): Mounting V5 Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846 [ 210.382536][ T7688] XFS (loop1): Starting recovery (logdev: internal) [ 210.425977][ T7688] XFS (loop1): Ending recovery (logdev: internal) [ 210.452687][ T7688] XFS (loop1): EXPERIMENTAL online shrink feature in use. Use at your own risk! [ 210.488643][ T5760] XFS (loop1): Unmounting Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846 [ 218.642001][ T7707] loop2: detected capacity change from 0 to 512 [ 218.668899][ T7707] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 218.742060][ T7707] EXT4-fs (loop2): 1 truncate cleaned up [ 218.782175][ T7708] loop3: detected capacity change from 0 to 8192 [ 218.791773][ T7707] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 218.813724][ T7708] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 218.896216][ T7708] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 218.936557][ T7708] REISERFS (device loop3): using ordered data mode [ 218.943104][ T7708] reiserfs: using flush barriers [ 218.969478][ T5767] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.997810][ T7708] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 219.062870][ T7708] REISERFS (device loop3): checking transaction log (loop3) [ 219.203528][ T7718] loop2: detected capacity change from 0 to 1024 [ 219.214696][ T7718] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (23577!=28264) [ 219.224955][ T7718] EXT4-fs (loop2): group descriptors corrupted! [ 219.276050][ T7712] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 219.442173][ T5769] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 219.471729][ T5769] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 219.480820][ T5769] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 219.491104][ T7708] REISERFS (device loop3): Using tea hash to sort names [ 219.499146][ T7708] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 219.515329][ T7708] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 219.525935][ T5769] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 219.532248][ T7724] netlink: 'syz.2.598': attribute type 1 has an invalid length. [ 219.549019][ T5769] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 219.556270][ T7724] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.598'. [ 219.565979][ T5769] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 219.582805][ T7708] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 6) not found (pos 2) [ 219.607334][ T7708] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 7) not found (pos 2) [ 219.665151][ T7719] vxcan1 speed is unknown, defaulting to 1000 [ 219.707261][ T7708] overlayfs: upper fs needs to support d_type. [ 219.722034][ T7708] overlayfs: upper fs does not support tmpfile. [ 219.739530][ T7708] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 219.759536][ T7726] loop2: detected capacity change from 0 to 128 [ 219.795007][ T7726] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 219.824623][ T7726] hpfs: filesystem error: improperly stopped [ 219.841180][ T7726] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 219.861411][ T7726] hpfs: You really don't want any checks? You are crazy... [ 219.878378][ T7726] hpfs: hpfs_map_sector(): read error [ 219.898687][ T7726] hpfs: code page support is disabled [ 219.904641][ T7726] hpfs: hpfs_map_4sectors(): unaligned read [ 219.921604][ T7726] hpfs: hpfs_map_4sectors(): unaligned read [ 219.940543][ T7726] hpfs: filesystem error: unable to find root dir [ 220.009537][ T7716] loop1: detected capacity change from 0 to 32768 [ 220.044020][ T5759] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 220.120699][ T5759] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 221.228281][ T7737] netlink: 4 bytes leftover after parsing attributes in process `syz.3.600'. [ 221.266361][ T7719] chnl_net:caif_netlink_parms(): no params data found [ 221.475400][ T7719] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.483568][ T7719] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.493894][ T7719] bridge_slave_0: entered allmulticast mode [ 221.500992][ T7719] bridge_slave_0: entered promiscuous mode [ 221.519681][ T7719] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.533959][ T7719] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.545306][ T7719] bridge_slave_1: entered allmulticast mode [ 221.552592][ T7719] bridge_slave_1: entered promiscuous mode [ 221.576414][ T5861] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 221.655504][ T7719] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 221.677142][ T5769] Bluetooth: hci4: command tx timeout [ 221.698794][ T7719] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 221.803725][ T7719] team0: Port device team_slave_0 added [ 221.818892][ T5861] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 221.842155][ T7719] team0: Port device team_slave_1 added [ 221.842422][ T5861] usb 2-1: config 0 interface 0 has no altsetting 0 [ 221.864701][ T5861] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 221.878318][ T5861] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 221.889770][ T5861] usb 2-1: Product: syz [ 221.894214][ T5861] usb 2-1: Manufacturer: syz [ 221.900121][ T5861] usb 2-1: SerialNumber: syz [ 221.924163][ T5861] usb 2-1: config 0 descriptor?? [ 221.959821][ T5861] usb 2-1: selecting invalid altsetting 0 [ 221.978484][ T7719] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 221.985932][ T7719] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 222.055637][ T7748] loop2: detected capacity change from 0 to 512 [ 222.069132][ T7719] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 222.080924][ T7748] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 222.124616][ T7719] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 222.148419][ T7748] EXT4-fs (loop2): 1 truncate cleaned up [ 222.159211][ T7719] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 222.327969][ T7748] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 222.359673][ T7719] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 222.481660][ T7719] hsr_slave_0: entered promiscuous mode [ 222.520363][ T7719] hsr_slave_1: entered promiscuous mode [ 222.572654][ T7719] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 222.600582][ T7719] Cannot create hsr debugfs directory [ 222.680165][ T7753] [ 222.682536][ T7753] ============================================ [ 222.688684][ T7753] WARNING: possible recursive locking detected [ 222.694841][ T7753] syzkaller #0 Not tainted [ 222.699269][ T7753] -------------------------------------------- [ 222.705413][ T7753] syz.1.603/7753 is trying to acquire lock: [ 222.711300][ T7753] ffff88801eaf6b30 (&chip->mutex){+.+.}-{3:3}, at: snd_usb_endpoint_close+0x3c/0x4c0 [ 222.720819][ T7753] [ 222.720819][ T7753] but task is already holding lock: [ 222.728177][ T7753] ffff88801eaf6b30 (&chip->mutex){+.+.}-{3:3}, at: snd_usb_endpoint_set_params+0x6d/0x2b50 [ 222.738197][ T7753] [ 222.738197][ T7753] other info that might help us debug this: [ 222.746252][ T7753] Possible unsafe locking scenario: [ 222.746252][ T7753] [ 222.753697][ T7753] CPU0 [ 222.756971][ T7753] ---- [ 222.760244][ T7753] lock(&chip->mutex); [ 222.764403][ T7753] lock(&chip->mutex); [ 222.768557][ T7753] [ 222.768557][ T7753] *** DEADLOCK *** [ 222.768557][ T7753] [ 222.776689][ T7753] May be due to missing lock nesting notation [ 222.776689][ T7753] [ 222.784999][ T7753] 3 locks held by syz.1.603/7753: [ 222.790017][ T7753] #0: ffff88807edbf4e0 (&runtime->oss.params_lock){+.+.}-{3:3}, at: snd_pcm_oss_sync+0x2a7/0xc20 [ 222.800654][ T7753] #1: ffff88807edbf238 (&runtime->buffer_mutex){+.+.}-{3:3}, at: snd_pcm_hw_params+0x15a/0x1c50 [ 222.811198][ T7753] #2: ffff88801eaf6b30 (&chip->mutex){+.+.}-{3:3}, at: snd_usb_endpoint_set_params+0x6d/0x2b50 [ 222.821651][ T7753] [ 222.821651][ T7753] stack backtrace: [ 222.827547][ T7753] CPU: 0 PID: 7753 Comm: syz.1.603 Not tainted syzkaller #0 [ 222.834830][ T7753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 222.844889][ T7753] Call Trace: [ 222.848157][ T7753] [ 222.851102][ T7753] dump_stack_lvl+0x16c/0x230 [ 222.855782][ T7753] ? show_regs_print_info+0x20/0x20 [ 222.860980][ T7753] ? print_deadlock_bug+0x435/0x5d0 [ 222.866169][ T7753] __lock_acquire+0x5d40/0x7c80 [ 222.871012][ T7753] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 222.876984][ T7753] ? verify_lock_unused+0x140/0x140 [ 222.882167][ T7753] ? mark_lock+0x94/0x320 [ 222.886483][ T7753] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 222.892449][ T7753] ? trace_irq_disable+0x37/0xe0 [ 222.897375][ T7753] ? lock_chain_count+0x20/0x20 [ 222.902212][ T7753] lock_acquire+0x197/0x410 [ 222.906700][ T7753] ? snd_usb_endpoint_close+0x3c/0x4c0 [ 222.912150][ T7753] ? __might_sleep+0xe0/0xe0 [ 222.916725][ T7753] ? read_lock_is_recursive+0x20/0x20 [ 222.922089][ T7753] ? wait_clear_urbs+0x27f/0x390 [ 222.927019][ T7753] ? snd_usb_endpoint_sync_pending_stop+0x30/0x30 [ 222.933432][ T7753] __mutex_lock+0x129/0xcc0 [ 222.937924][ T7753] ? snd_usb_endpoint_close+0x3c/0x4c0 [ 222.943377][ T7753] ? usb_free_coherent+0x5d/0x90 [ 222.948332][ T7753] ? release_urbs+0x3fe/0x4a0 [ 222.953022][ T7753] ? snd_usb_endpoint_close+0x3c/0x4c0 [ 222.958514][ T7753] ? mutex_lock_nested+0x20/0x20 [ 222.963446][ T7753] ? snd_usb_endpoint_set_params+0x407/0x2b50 [ 222.969517][ T7753] snd_usb_endpoint_close+0x3c/0x4c0 [ 222.974805][ T7753] snd_usb_hw_params+0x1357/0x19c0 [ 222.979921][ T7753] ? snd_usb_pcm_close+0x300/0x300 [ 222.985026][ T7753] ? snd_pcm_lib_malloc_pages+0x270/0x690 [ 222.990742][ T7753] snd_pcm_hw_params+0x835/0x1c50 [ 222.995760][ T7753] ? lock_chain_count+0x20/0x20 [ 223.000602][ T7753] ? lockdep_hardirqs_on+0x98/0x150 [ 223.005785][ T7753] ? snd_pcm_forward+0x6d0/0x6d0 [ 223.010715][ T7753] ? snd_pcm_kernel_ioctl+0xf7/0x370 [ 223.015989][ T7753] snd_pcm_oss_change_params_locked+0x2144/0x3d30 [ 223.022433][ T7753] ? snd_pcm_oss_read2+0x3d0/0x3d0 [ 223.027534][ T7753] ? ima_file_free+0x154/0x450 [ 223.032283][ T7753] ? mutex_lock_nested+0x20/0x20 [ 223.037207][ T7753] ? __fsnotify_parent+0x651/0x720 [ 223.042310][ T7753] snd_pcm_oss_sync+0x363/0xc20 [ 223.047151][ T7753] snd_pcm_oss_release+0x102/0x240 [ 223.052257][ T7753] ? snd_pcm_oss_open+0x1b40/0x1b40 [ 223.057443][ T7753] __fput+0x234/0x970 [ 223.061419][ T7753] task_work_run+0x1ce/0x250 [ 223.066004][ T7753] ? task_work_cancel+0x240/0x240 [ 223.071015][ T7753] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 223.077102][ T7753] exit_to_user_mode_loop+0xe6/0x110 [ 223.082398][ T7753] exit_to_user_mode_prepare+0xf6/0x180 [ 223.087935][ T7753] syscall_exit_to_user_mode+0x1a/0x50 [ 223.093384][ T7753] do_syscall_64+0x61/0xb0 [ 223.097784][ T7753] ? clear_bhb_loop+0x40/0x90 [ 223.102537][ T7753] ? clear_bhb_loop+0x40/0x90 [ 223.107201][ T7753] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 223.113081][ T7753] RIP: 0033:0x7f61e718df90 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 223.117495][ T7753] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 223.137174][ T7753] RSP: 002b:00007f61e808db70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 223.145591][ T7753] RAX: ffffffffffffffea RBX: 00000000008c4201 RCX: 00007f61e718df90 [ 223.153558][ T7753] RDX: 00000000008c4201 RSI: 00007f61e808dc10 RDI: 00000000ffffff9c [ 223.161519][ T7753] RBP: 00007f61e808dc10 R08: 0000000000000000 R09: 00236f696475612f [ 223.169482][ T7753] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd [ 223.177443][ T7753] R13: 00007f61e73e6218 R14: 00007f61e73e6180 R15: 00007ffebef5f388 [ 223.185412][ T7753] [ 223.277679][ T5767] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.625538][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.702437][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.757031][ T5769] Bluetooth: hci4: command tx timeout [ 223.833541][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.923230][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.855267][ T11] hsr_slave_0: left promiscuous mode [ 224.861505][ T11] hsr_slave_1: left promiscuous mode [ 224.868061][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 224.875576][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 224.883097][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 224.891095][ T11] bridge_slave_1: left allmulticast mode [ 224.897339][ T11] bridge_slave_1: left promiscuous mode [ 224.903078][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.911234][ T11] bridge_slave_0: left allmulticast mode [ 224.918707][ T11] bridge_slave_0: left promiscuous mode [ 224.924365][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.934325][ T11] veth1_macvtap: left promiscuous mode [ 224.939961][ T11] veth0_macvtap: left promiscuous mode [ 224.945464][ T11] veth1_vlan: left promiscuous mode [ 224.950752][ T11] veth0_vlan: left promiscuous mode [ 225.142423][ T11] team0 (unregistering): Port device team_slave_1 removed [ 225.168756][ T11] team0 (unregistering): Port device team_slave_0 removed [ 225.199763][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 225.226622][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 225.282817][ T11] bond0 (unregistering): Released all slaves [ 225.715006][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.771147][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.832314][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.891045][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.937123][ T11] hsr_slave_0: left promiscuous mode [ 226.943070][ T11] hsr_slave_1: left promiscuous mode [ 226.962200][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 226.995658][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 227.003579][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 227.012943][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 227.021469][ T11] bridge_slave_1: left allmulticast mode [ 227.028447][ T11] bridge_slave_1: left promiscuous mode [ 227.034150][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.042959][ T11] bridge_slave_0: left allmulticast mode [ 227.050493][ T11] bridge_slave_0: left promiscuous mode [ 227.056391][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.065088][ T11] hsr_slave_0: left promiscuous mode [ 227.073401][ T11] hsr_slave_1: left promiscuous mode [ 227.079272][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 227.087814][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 227.095258][ T11] bridge_slave_1: left allmulticast mode [ 227.101039][ T11] bridge_slave_1: left promiscuous mode [ 227.106931][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.114818][ T11] bridge_slave_0: left allmulticast mode [ 227.120826][ T11] bridge_slave_0: left promiscuous mode [ 227.126621][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.136384][ T11] veth1_macvtap: left promiscuous mode [ 227.141883][ T11] veth0_macvtap: left promiscuous mode [ 227.147913][ T11] veth1_vlan: left promiscuous mode [ 227.153282][ T11] veth0_vlan: left promiscuous mode [ 227.311256][ T11] bond2 (unregistering): Released all slaves [ 227.321047][ T11] bond1 (unregistering): Released all slaves [ 227.441218][ T11] team0 (unregistering): Port device team_slave_1 removed [ 227.469970][ T11] team0 (unregistering): Port device team_slave_0 removed [ 227.494370][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 227.523312][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 227.587826][ T11] bond0 (unregistering): Released all slaves [ 227.660571][ T11] team0 (unregistering): Port device team_slave_1 removed [ 227.672513][ T11] team0 (unregistering): Port device team_slave_0 removed [ 227.685708][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 227.701909][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 227.749991][ T11] bond0 (unregistering): Released all slaves