last executing test programs: 15m15.469164438s ago: executing program 32 (id=655): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) sendmmsg(r0, &(0x7f0000002940)=[{{0x0, 0x4a, &(0x7f0000000100)=[{&(0x7f00000001c0)}], 0x1}}], 0x1, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d2, &(0x7f0000000100)) 13m31.498554255s ago: executing program 33 (id=996): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000000)="5766b1b827f6003300", 0x10) shutdown(r0, 0x0) 13m23.527728729s ago: executing program 4 (id=1022): syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000300)='./file2\x00', 0x0, &(0x7f00000002c0)=ANY=[], 0x1, 0xab4, &(0x7f0000000340)="$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") r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x90009427, &(0x7f0000000040)={0xb, 0xfffffffb, 0x8000003a, 0xfffffffe, 0x96a}) 13m22.01038542s ago: executing program 4 (id=1025): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x48, r1, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x48844) 13m20.952460652s ago: executing program 4 (id=1029): syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000e80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000400)={[{@utf8}, {@shortname_mixed}, {@utf8no}, {@shortname_lower}, {@utf8}, {@fat=@fmask={'fmask', 0x3d, 0xcf6}}, {@shortname_mixed}, {@shortname_lower}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}, {@shortname_win95}, {@utf8no}, {@fat=@errors_remount}, {@fat=@allow_utime={'allow_utime', 0x3d, 0xb}}, {@utf8}, {@rodir}]}, 0x1, 0x2b2, &(0x7f0000002880)="$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") socket$netlink(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) 13m19.95066442s ago: executing program 4 (id=1032): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x8002, &(0x7f0000000380)={[{@max_batch_time={'max_batch_time', 0x3d, 0x87}}, {@quota}, {@resuid}, {@oldalloc}, {@lazytime}, {@debug}, {@data_err_abort}, {@noquota}]}, 0x1, 0x5d8, &(0x7f0000001200)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0/../file0/../file0\x00', 0x0, 0x2000030, &(0x7f0000000380)=ANY=[]) 13m18.194326525s ago: executing program 4 (id=1038): r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x280, &(0x7f0000000a80)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x8008, 0x1, 0x0, r0, 0x0}]) 13m16.83173025s ago: executing program 4 (id=1042): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, 0x0}}], 0x90}, 0x0) 13m12.89975771s ago: executing program 34 (id=1042): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, 0x0}}], 0x90}, 0x0) 12m6.74505965s ago: executing program 5 (id=1235): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$bcachefs(&(0x7f0000000080), &(0x7f0000000000)='./file1\x00', 0x800000, &(0x7f0000005d00)={[{@acl}, {@read_only}, {@btree_node_mem_ptr_optimization}, {@inodes_use_key_cache}, {@journal_flush_disabled}, {@wide_macs}, {@version_upgrade={'version_upgrade', 0x3d, 'incompatible'}}, {@shared_inode_numbers}, {@norecovery}, {@discard}], [{@euid_eq}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}]}, 0x0, 0x5922, &(0x7f00000003c0)="$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") 12m4.323562152s ago: executing program 5 (id=1240): r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r0, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) 11m59.07074987s ago: executing program 5 (id=1257): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003"], 0x7c}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="300000001900010000000000000000001c140000fe000001"], 0x30}}, 0x0) 11m58.225650567s ago: executing program 5 (id=1262): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000400)={[{@discard}, {@discard}, {@gid}, {@errors_continue}, {@iocharset={'iocharset', 0x3d, 'koi8-u'}}, {@errors_continue}, {@gid}, {@iocharset={'iocharset', 0x3d, 'iso8859-1'}}, {@errors_continue}, {@errors_remount}, {@iocharset={'iocharset', 0x3d, 'macroman'}}, {}, {@errors_remount}, {@iocharset={'iocharset', 0x3d, 'koi8-u'}}, {@dmask={'dmask', 0x3d, 0x8}}], [{@subj_role={'subj_role', 0x3d, '.log\x00'}}]}, 0x1, 0x1524, &(0x7f0000002280)="$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") mount$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100), 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1b8a877, 0x0) 11m56.311444337s ago: executing program 5 (id=1268): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000680), 0x22c00, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000040)=0x2) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000140)) 11m55.030213042s ago: executing program 5 (id=1272): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) unshare(0x28000600) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB='7\x00\x00'], 0x20) 11m52.25180464s ago: executing program 35 (id=1272): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) unshare(0x28000600) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB='7\x00\x00'], 0x20) 7m42.063735855s ago: executing program 3 (id=2098): unshare(0x8040600) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r0, 0x11, 0x1000000000000) 7m41.017622458s ago: executing program 3 (id=2102): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x7ff, @dev={0xfe, 0x80, '\x00', 0x14}, 0x7}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000022c0)='dctcp\x00', 0x51) 7m39.52868671s ago: executing program 3 (id=2109): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a0b0400000000000000000200000034000480300001800a0001006d617463680000002000028008000240000000010b000100736f636b6574000005000300000100000900010073797a30000000000900020073797a32"], 0x88}, 0x1, 0x0, 0x0, 0x40480a0}, 0x0) 7m38.544866374s ago: executing program 3 (id=2114): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1400c, &(0x7f0000000840)={[{@stripe={'stripe', 0x3d, 0x3d}}, {@init_itable}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x44c, &(0x7f0000000340)="$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") syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) 7m36.4776641s ago: executing program 3 (id=2122): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000001000000200001801400020073797a5f74756e000000000000000000080003000300000014000380"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0) 7m35.061185191s ago: executing program 3 (id=2127): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a0b040000000000000000020022000900010073797a30000000002800048024000180090001006d65746100000000140002800800014000000008080002400000001b0900020073797a3200000000050007"], 0x84}}, 0x0) 7m29.043360522s ago: executing program 36 (id=2127): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a0b040000000000000000020022000900010073797a30000000002800048024000180090001006d65746100000000140002800800014000000008080002400000001b0900020073797a3200000000050007"], 0x84}}, 0x0) 5m37.503756423s ago: executing program 1 (id=2495): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)) r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x121001) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="040000000000000093"]) 5m36.43234953s ago: executing program 1 (id=2500): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) 5m35.532985443s ago: executing program 1 (id=2504): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd1, &(0x7f0000000000)=0x9, 0x4) getsockopt$MRT6(r0, 0x29, 0xd0, 0x0, 0x0) 5m34.355260234s ago: executing program 1 (id=2509): syz_mount_image$ext4(&(0x7f0000000800)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000a80)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xffc}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@acl}, {@resgid}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x3, 0x43a, &(0x7f0000000340)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2081413, 0x0, 0x1, 0x0, &(0x7f0000000080)) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000200), 0x40, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './file0'}}], [], 0x2c}) 5m31.896437164s ago: executing program 1 (id=2515): r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) sendmmsg$inet(r0, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000fc0)="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", 0x35b}, {&(0x7f00000000c0)="ab29d92826349952eb8f7a2a74f535bc9739c1df57144c51a3391625b8b5354134b06ef1355506aeae96e3f097503998f375a054cf3d7de4fe53ea51518955349cdbadca60e1c65cc18dbe99369be03e492fb55fc9067bb6f7f7c3ee1720000000054a63ac58225ed0502f5ac8999e0c74a5dbb320bd54ec813e8bee6bfa5cbfb0726ac1b6ad97d802d5fae186f0769421fb965c7396854e2a3ac844a3769f8449901ba5e2b2da1ff6119aeb26ac204cfc6b54be73b6f195491ae2c0cb26b0cba61dae7a17740e8112ff188919c6e2e31a2a074863edba4a0e58b61faec4a42c29d7f9e48a43b8cb7d3c5a1e5aa67f87538140f8d633a54bceb8b1dda2397ea147d3b26e903f608b6ab1844ea7cf630d828118bba0f0f85e2e6316ae1ed9a2a7d08a05c170cb76bf111930df0cf760f7768571afdefe82a95296cee7c010f748a97046efcc774e7d85edbd5058104fef4942fb4430da89f67d1fea33bf2acfb7630932206960e9076c7d7fc99fce018701c50d39b811a7427a7a9fcb340c2755541f228462010ec40ba945a0febd460dad5d548f1be090f5dbaa8ae8835dc47ed2537681827f6129759272574cf58f2f33e47a0e416573cfdcfb44ed9dd4ce41af4de9c471c432f2f4777c65b1574826727f5f62f842a3bedb18ec4aa931dfa0fc47e4dca15ec180d04cfdfff82fd9c6066fe65322c8c0b733c091c7ab9f8e1b60f6c37ef36acd509dec18fcc274d0334c8fa81809a5ddb27cc891a22c5978b8df086393396bf972ffd3", 0x22a}], 0x2, 0x0, 0x0, 0x900}}], 0x1, 0x0) 5m30.572473343s ago: executing program 1 (id=2518): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000001c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) 5m27.120067724s ago: executing program 37 (id=2518): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000001c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) 4m9.021239811s ago: executing program 9 (id=2776): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x103, 0x1}, 0x20) sendmsg$inet6(r0, &(0x7f0000000100)={&(0x7f0000000040)={0xa, 0x4e24, 0x0, @dev}, 0x1c, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="6000000000000000290000000b0000000008000000000000c910fe8000000000000000000000000000bbc9100000000000000000000000000000000107200000000006000000bb2c00000000000000000000000000000000000000000000000018000000000000002900000004000000000000000000000008010000000000002900000037"], 0x180}, 0x0) 4m7.958161067s ago: executing program 9 (id=2780): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000600)={0x9, 0x8, 0x2, 0x4, 0x10, 0x0, 0xfffffffe}, 0x20) sendto$inet(r0, &(0x7f0000000140)="ab", 0xffe0, 0x4000815, &(0x7f0000000100)={0x2, 0x4e22, @local}, 0x10) 4m6.739525524s ago: executing program 9 (id=2784): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xf}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}}, 0x0) 4m5.45601199s ago: executing program 9 (id=2790): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x8000, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x1, 0x1221, &(0x7f0000002300)="$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") mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x2837481, 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./file1\x00', 0x0, 0x2804, 0x0) 4m2.144946734s ago: executing program 9 (id=2800): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) syz_mount_image$sysv(&(0x7f00000000c0), &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x300c800, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYRES64=r0, @ANYRESOCT=r0, @ANYRESDEC], 0x3, 0x9e9a, &(0x7f0000000200)="$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") getsockopt$bt_hci(r0, 0x84, 0x7b, &(0x7f0000001280)=""/4107, &(0x7f00000000c0)=0x100b) 4m1.145217416s ago: executing program 9 (id=2804): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$EXT4_IOC_GETSTATE(r0, 0x40046629, &(0x7f0000000640)) 3m56.561702571s ago: executing program 38 (id=2804): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$EXT4_IOC_GETSTATE(r0, 0x40046629, &(0x7f0000000640)) 5.830906214s ago: executing program 8 (id=3630): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000080)=0x2000000) 5.31035477s ago: executing program 2 (id=3633): r0 = socket$nl_route(0x10, 0x3, 0x0) connect$netlink(r0, &(0x7f0000000280)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$nl_route(r0, &(0x7f0000000300)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000021000f0000f901000000000002"], 0x1c}}, 0x0) 4.956949108s ago: executing program 7 (id=3634): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r0, &(0x7f0000000000)={0x27, 0x0, 0x3, 0x0, 0x0, 0x0, "0f0390fc31f3da6d5c430000ffffff017fffde00cc4ded69ba6fbf01fa9a9d32c7627ffe7a5400000000000000060000000000000000deff00", 0x1}, 0x60) setsockopt$nfc_llcp_NFC_LLCP_RW(r0, 0x118, 0x0, 0x0, 0x0) 4.805473615s ago: executing program 6 (id=3635): r0 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) sendmmsg$inet(r0, &(0x7f0000001200)=[{{&(0x7f00000000c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10, 0x0}}], 0x1, 0x2000c054) 4.738193203s ago: executing program 8 (id=3636): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x49) sendmsg$kcm(r0, &(0x7f00000001c0)={&(0x7f0000000540)=@phonet={0x23, 0x0, 0x0, 0xd}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000180)="27050200160014000600002fb96d", 0xe}, {&(0x7f00000007c0)="000000000000000000007fb3e2ef73546f5c0d9e04e0b760", 0x18}], 0x2}, 0x20048085) 4.466370823s ago: executing program 2 (id=3637): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c40)={0x38, r1, 0xc4fc9e906872338b, 0x20, 0x0, {{0x15}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0x24, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x1c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x0, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xff, 0x2004, 0x7, 0x45b, 0x4, 0x8, 0x8, 0x4]}}]}]}]}]}]}, 0x38}}, 0x0) 4.253920029s ago: executing program 7 (id=3638): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000007c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd6000000000002d9300000c000180080003"], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x20040814) 4.211891534s ago: executing program 0 (id=3639): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.self_freezing\x00', 0x275a, 0x0) sync_file_range(r0, 0x6, 0x0, 0x6) 4.13868664s ago: executing program 8 (id=3640): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xa}}, {@data_err_ignore}, {@usrquota}, {@noblock_validity}, {@user_xattr}, {@bh}, {@stripe={'stripe', 0x3d, 0x74}}]}, 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000100), 0x0, 0x0, 0x1) setxattr$trusted_overlay_upper(&(0x7f0000000140)='./file1\x00', &(0x7f0000000180), &(0x7f0000000380)={0x0, 0xfb, 0x15, 0x3, 0xf6, "c115fa0da10cd1364e0c5082ccfc3a94"}, 0x15, 0x2) 3.589413005s ago: executing program 2 (id=3641): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000040), 0x3, 0x483, &(0x7f00000003c0)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f00000001c0)=""/55, 0x37) 3.485231261s ago: executing program 7 (id=3642): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x28002) r1 = dup(r0) mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000002300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 3.405669183s ago: executing program 0 (id=3643): clock_gettime(0x38d178915807e004, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @local, @val, {@ipv6}}, 0x0) syz_emit_ethernet(0x13c7, &(0x7f00000024c0)=ANY=[@ANYRES64=0x0], 0x0) 3.329822911s ago: executing program 6 (id=3644): unshare(0x2c020400) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xe, 0x0, 0x0) 2.833070546s ago: executing program 8 (id=3645): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000001a40)=[@in={0x2, 0x80, @dev={0xac, 0x14, 0x14, 0x12}}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}], 0x20) sendto$inet(r0, &(0x7f0000000080)="d3", 0x1, 0x20000050, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10) 2.675564206s ago: executing program 7 (id=3646): r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, 0x0, 0x112) 2.505418581s ago: executing program 0 (id=3647): syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x1200001, &(0x7f0000000140)={[{@gid}, {@codepage={'codepage', 0x3d, 'euc-jp'}}, {@creator={'creator', 0x3d, "a46a806f"}}, {@iocharset={'iocharset', 0x3d, 'iso8859-9'}}]}, 0x2, 0x33c, &(0x7f0000001f80)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 2.415848552s ago: executing program 2 (id=3648): syz_mount_image$romfs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f00000001c0)=ANY=[], 0x1, 0x161, &(0x7f0000000300)="$eJzs2rFK81AUB/Dz9bNY+ghOhd6hDm3SRKvgLghOPoBY2nvjxcRIIkg7BV9AcYiP4Oqqm4/Q2c1NXVwdJJLkVtukIFQkQ/+/oTn05J7khsuZTtNznbbwm0SrwdXec8lznVrH3OiJtuhSaoeIanEwiqLrFuUcfOVHUdDK3VC/V9eGFe7eCWlzI18DAAAAAAAAAAAAAAAAAAAAAGBB1F9UUD0M3Rshbd6eyPqD4VHXtrnnj/9hpGZ0SITulpCMm1P1Gu9ELJnfkeH2eVxPn8qzuFIlSrxR9nnaqXOi+YNhUzpdi1v82DDMjr6m6+uGltTSshXZpXonokr88y+zP3b7PU/0qOfniaiaXpZWZHhxllQvz9r/PEHwu+UIFj14eiWanaqoA8o9vzx5Vv+n92zuJ6mCXv4jKv7T/XWQ7R/UXzbrD3H/aPVcu/9T/xivnufhJbU205kBivYZAAD//z4LLWc=") chdir(&(0x7f00000000c0)='./file0\x00') chdir(&(0x7f00000000c0)='./file0\x00') 2.314283513s ago: executing program 6 (id=3649): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r0) sendmsg$IEEE802154_SCAN_REQ(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r1, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x6}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0xa}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4008010) 1.845479598s ago: executing program 7 (id=3650): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000040)='l', 0x1, 0x7ddfdbdfafa51cdd, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xffffffff}, 0x1c) recvfrom(r0, 0x0, 0x0, 0x40008143, 0x0, 0x0) 1.704856815s ago: executing program 8 (id=3651): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$dsp(r0, &(0x7f00000001c0)=""/173, 0xad) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000480)=0x8) 1.563502742s ago: executing program 6 (id=3652): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_END_FF_ERASE(r0, 0x400c55cb, 0x0) ioctl$UI_END_FF_ERASE(r0, 0x400c55cb, 0x0) 1.530629817s ago: executing program 0 (id=3653): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x20, 0x1, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040091}, 0x40) 1.037413997s ago: executing program 2 (id=3654): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@loopback={0xfec0ffffffffffff}, 0x46, r1}) 1.037275181s ago: executing program 7 (id=3655): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0)=0x1) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)=0x9) 934.070364ms ago: executing program 6 (id=3656): r0 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x12, r0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) 799.034757ms ago: executing program 0 (id=3657): r0 = fsopen(&(0x7f00000001c0)='exfat\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 261.112704ms ago: executing program 2 (id=3658): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x2e3, &(0x7f0000000280)="$eJzs3M9LG2kYwPEnMYkxoslh2WUXFh92L7uXQbP3paEolAYq1pT+gNJRJ23INJFMsKSU2p56Lf0jehCP3oTWf8BLbz310puXQg/1UDol8yNGjdXGH/HH9wPyvvq8T+Z9Z1Sed2Bm4+bLh+WiYxTNukSTKhERkU2RjEQlFAnaqNdPSLtn8u/g5/d/Xr91+2ounx+fUp3ITf+XVdXhkTePngwEw1b7ZT1zd+NT9uP6r+u/b3ybflBytORopVpXU2eqH+rmjG3pXMkpG6qTtmU6lpYqjlXz41U/XrSr8/MNNStzQ6n5muU4alYaWrYaWq9qvdZQ875ZqqhhGDqUEuynsDQ1Zea6TJ494sngmNRqObNPRAZ2RQpLPZkQAADoqaD+b1X70WZJ3039H+tY/y//tVYfvLEyHNT/q4lm/S/SVv/f2/qsbfV/UkSOvf7fXRGdL6774/ih6n+cEc36PxX8/Xqe31ke9TrU/wAAAAAAAAAAAAAAAAAAAAAAnAWbrpt2XTcdtuFXv4gkvSdI/O97PU8cD67/xbb14o7YsIj9YqGwUPDbYMCaiNhiyaik5av3+xBo9hOi3iBtyshbezHIX1wo9HmRXFFKXv6YpCWzM991J67kx8fUtz0/Lqn2/Kyk5ZfO+dmd+fFmm5B//m7LNyQt72alKrbMBU/GhflPx1QvX8vvOP6ANw4AAAAAgPPA0JbW/r2/PW7sjvv7Yz/e2l93vD/g769HO+7vY/JHrFerBgAAAADgYnEaj8umbVu1c9cJV3jQrPC9xnuMiUhkr9ARdMKDn4JTFz/QGYt2NdWRxE9elI6d8LbRXmNksptPdtMihz2Hv716/eXorsX/K8l9VtptJ7HfSuMn9x8IAAAAwEnZKvrDn1zq7YQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALiATuLFcr1eIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHBafA8AAP//ohEIjg==") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x2) getdents64(r0, &(0x7f000003f980)=""/4088, 0xff8) 143.883985ms ago: executing program 6 (id=3659): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000005c0)={0x4c, r1, 0x1, 0x0, 0x0, {0x24}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xab}}, {0x8}, {0x6}}]}, 0x4c}}, 0x0) 49.437255ms ago: executing program 8 (id=3660): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x67d}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f0000a35000/0x1000)=nil, 0x400000, 0x40390e38500dded, 0x6040000}) 0s ago: executing program 0 (id=3661): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000480)=0x2, 0x4) syz_genetlink_get_family_id$ipvs(&(0x7f0000000600), r0) kernel console output (not intermixed with test programs): ][ T5794] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1057.691116][ T5794] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1057.705674][ T5794] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1057.818684][ T8554] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1058.892053][ T3676] IPVS: stop unused estimator thread 0... [ 1059.813046][T11957] Bluetooth: hci3: command tx timeout [ 1059.901482][T13054] chnl_net:caif_netlink_parms(): no params data found [ 1060.611145][T13087] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2538'. [ 1061.016570][T11957] Bluetooth: hci0: command 0x0405 tx timeout [ 1061.031458][T13089] loop9: detected capacity change from 0 to 256 [ 1061.271123][T13089] exFAT-fs (loop9): failed to load upcase table (idx : 0x00011f50, chksum : 0xa6aae999, utbl_chksum : 0xe619d30d) [ 1061.764248][T13099] loop6: detected capacity change from 0 to 164 [ 1061.892490][ T5794] Bluetooth: hci3: command tx timeout [ 1062.107808][T13054] bridge0: port 1(bridge_slave_0) entered blocking state [ 1062.115968][T13054] bridge0: port 1(bridge_slave_0) entered disabled state [ 1062.124098][T13054] bridge_slave_0: entered allmulticast mode [ 1062.133862][T13054] bridge_slave_0: entered promiscuous mode [ 1062.247904][T13054] bridge0: port 2(bridge_slave_1) entered blocking state [ 1062.255990][T13054] bridge0: port 2(bridge_slave_1) entered disabled state [ 1062.264091][T13054] bridge_slave_1: entered allmulticast mode [ 1062.352978][T13101] loop8: detected capacity change from 0 to 128 [ 1062.390078][T13054] bridge_slave_1: entered promiscuous mode [ 1062.409221][T13101] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 1062.634148][T13101] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100) [ 1062.642556][T13101] FAT-fs (loop8): Filesystem has been set read-only [ 1062.878002][T13054] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1062.916351][T13054] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1063.167998][ T9492] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100) [ 1063.299255][T13054] team0: Port device team_slave_0 added [ 1063.337725][T13054] team0: Port device team_slave_1 added [ 1063.721376][ T30] audit: type=1326 audit(2000000175.750:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13113 comm="syz.6.2548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f247c18d169 code=0x7ffc0000 [ 1063.744656][ T30] audit: type=1326 audit(2000000175.750:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13113 comm="syz.6.2548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f247c18d169 code=0x7ffc0000 [ 1063.767582][ T30] audit: type=1326 audit(2000000175.790:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13113 comm="syz.6.2548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7f247c18d169 code=0x7ffc0000 [ 1063.790449][ T30] audit: type=1326 audit(2000000175.790:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13113 comm="syz.6.2548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f247c18d169 code=0x7ffc0000 [ 1063.924917][T13054] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1063.932662][T13054] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1063.959642][T13054] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1064.012064][ T5794] Bluetooth: hci3: command tx timeout [ 1064.118543][T13054] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1064.126107][T13054] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1064.152661][T13054] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1064.889422][T13054] hsr_slave_0: entered promiscuous mode [ 1064.900083][T13054] hsr_slave_1: entered promiscuous mode [ 1064.909197][T13054] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1064.917129][T13054] Cannot create hsr debugfs directory [ 1065.064400][ T5831] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 1065.332797][ T5831] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1065.392744][ T5831] usb 9-1: config 6 has an invalid interface number: 200 but max is 0 [ 1065.403300][ T5831] usb 9-1: config 6 has no interface number 0 [ 1065.409696][ T5831] usb 9-1: config 6 interface 200 has no altsetting 0 [ 1065.567591][ T5831] usb 9-1: New USB device found, idVendor=05d8, idProduct=810c, bcdDevice=18.5f [ 1065.578344][ T5831] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1065.587014][ T5831] usb 9-1: Product: syz [ 1065.591450][ T5831] usb 9-1: Manufacturer: syz [ 1065.596546][ T5831] usb 9-1: SerialNumber: syz [ 1066.053011][ T5794] Bluetooth: hci3: command tx timeout [ 1067.434356][ T11] usb 10-1: new full-speed USB device number 3 using dummy_hcd [ 1067.790833][ T11] usb 10-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1067.803939][ T11] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1067.825564][ T11] usb 10-1: config 0 descriptor?? [ 1067.850426][ T11] cp210x 10-1:0.0: cp210x converter detected [ 1068.471776][ T5831] dvb-usb: found a 'Artec T14 - USB2.0 DVB-T' in warm state. [ 1068.480859][ T11] usb 10-1: cp210x converter now attached to ttyUSB0 [ 1068.600752][ T8771] usb 10-1: USB disconnect, device number 3 [ 1068.630358][ T5831] dvb-usb: bulk message failed: -71 (3/0) [ 1068.865956][ T5831] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1068.869834][ T5831] dvbdev: DVB: registering new adapter (Artec T14 - USB2.0 DVB-T) [ 1068.869995][ T5831] usb 9-1: media controller created [ 1068.937726][ T5831] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1069.043878][ T8771] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1069.108630][ T8771] cp210x 10-1:0.0: device disconnected [ 1069.487338][ T5831] dvb-usb: bulk message failed: -71 (6/0) [ 1069.602232][ T5831] dvb-usb: bulk message failed: -71 (6/0) [ 1069.608727][ T5831] dvb-usb: no frontend was attached by 'Artec T14 - USB2.0 DVB-T' [ 1069.687943][ T5831] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.8/usb9/9-1/input/input23 [ 1069.789186][ T5831] dvb-usb: schedule remote query interval to 150 msecs. [ 1069.796688][ T5831] dvb-usb: Artec T14 - USB2.0 DVB-T successfully initialized and connected. [ 1069.973051][T11972] dvb-usb: bulk message failed: -71 (1/0) [ 1069.979110][T11972] dvb-usb: error while querying for an remote control event. [ 1070.026093][ T5831] usb 9-1: USB disconnect, device number 9 [ 1070.200293][T13054] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1070.304256][T13054] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1070.424996][T13054] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1070.503229][T13054] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1070.676924][ T5831] dvb-usb: Artec T14 - USB2.0 DVB-T successfully deinitialized and disconnected. [ 1072.590310][T13054] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1073.014721][T13054] 8021q: adding VLAN 0 to HW filter on device team0 [ 1073.126552][ T8343] bridge0: port 1(bridge_slave_0) entered blocking state [ 1073.134427][ T8343] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1073.358860][ T8343] bridge0: port 2(bridge_slave_1) entered blocking state [ 1073.366773][ T8343] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1073.625045][T13195] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 1073.625045][T13195] The task syz.9.2576 (13195) triggered the difference, watch for misbehavior. [ 1074.771930][T13207] loop6: detected capacity change from 0 to 128 [ 1074.929311][T13207] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 1075.342545][T13215] loop7: detected capacity change from 0 to 64 [ 1075.437692][T13207] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1075.546614][T13218] loop9: detected capacity change from 0 to 64 [ 1075.746989][T13215] bio_check_eod: 90 callbacks suppressed [ 1075.747082][T13215] syz.7.2581: attempt to access beyond end of device [ 1075.747082][T13215] loop7: rw=0, sector=268435468, nr_sectors = 2 limit=64 [ 1075.767459][T13215] Buffer I/O error on dev loop7, logical block 134217734, async page read [ 1076.101230][T13211] loop8: detected capacity change from 0 to 40427 [ 1076.164438][T13211] F2FS-fs (loop8): Wrong SIT boundary, start(1536) end(2560) blocks(0) [ 1076.173377][T13211] F2FS-fs (loop8): Can't find valid F2FS filesystem in 2th superblock [ 1076.223196][T13211] F2FS-fs (loop8): invalid crc value [ 1076.239533][T13211] F2FS-fs (loop8): Found nat_bits in checkpoint [ 1076.892693][T13211] F2FS-fs (loop8): Try to recover 2th superblock, ret: 0 [ 1076.900204][T13211] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 1076.977199][T13215] Trying to free block not in datazone [ 1078.131236][T13239] loop9: detected capacity change from 0 to 4096 [ 1078.427661][T13242] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1078.466111][T13054] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1079.384331][T13054] veth0_vlan: entered promiscuous mode [ 1079.553104][T13054] veth1_vlan: entered promiscuous mode [ 1080.018941][ T5831] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 1080.176603][T13054] veth0_macvtap: entered promiscuous mode [ 1080.272560][T13054] veth1_macvtap: entered promiscuous mode [ 1080.311095][ T5831] usb 10-1: Using ep0 maxpacket: 16 [ 1080.358532][T13258] loop8: detected capacity change from 0 to 256 [ 1080.365548][ T5831] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1080.378169][ T5831] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1080.388605][ T5831] usb 10-1: New USB device found, idVendor=1e71, idProduct=170e, bcdDevice= 0.00 [ 1080.400900][ T5831] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1080.576532][T13054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1080.588352][T13054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1080.602134][T13054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1080.614693][T13054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1080.625095][T13054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1080.636020][T13054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1080.647230][T13054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1080.660777][T13054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1080.677279][T13054] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1080.695786][ T5831] usb 10-1: config 0 descriptor?? [ 1081.268213][ T5831] nzxt-kraken2 0003:1E71:170E.001D: unbalanced delimiter at end of report description [ 1081.385562][T13054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1081.397015][T13054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1081.407387][T13054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1081.422667][T13054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1081.433129][T13054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1081.443947][T13054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1081.454219][T13054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1081.465140][T13054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1081.484072][T13054] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1081.498663][ T5831] nzxt-kraken2 0003:1E71:170E.001D: hid parse failed with -22 [ 1081.507081][ T5831] nzxt-kraken2 0003:1E71:170E.001D: probe with driver nzxt-kraken2 failed with error -22 [ 1081.658505][ T5831] usb 10-1: USB disconnect, device number 4 [ 1081.965128][T13054] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1081.974641][T13054] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1081.985767][T13054] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1081.997489][T13054] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1082.121970][T13268] loop8: detected capacity change from 0 to 256 [ 1082.308131][T13271] netlink: 56 bytes leftover after parsing attributes in process `syz.6.2592'. [ 1083.507355][T13283] loop7: detected capacity change from 0 to 256 [ 1088.705596][ T8709] IPVS: starting estimator thread 0... [ 1088.813011][T13345] IPVS: using max 192 ests per chain, 9600 per kthread [ 1089.882303][T13355] loop9: detected capacity change from 0 to 2048 [ 1089.906562][T13359] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2621'. [ 1090.188512][T13363] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1092.226387][T13387] loop7: detected capacity change from 0 to 128 [ 1092.390024][T13387] VFS: Found a Xenix FS (block size = 1024) on device loop7 [ 1092.832180][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1092.840376][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1092.966007][ T8702] sysv_free_block: flc_count > flc_size [ 1092.973331][ T8702] sysv_free_block: flc_count > flc_size [ 1092.979123][ T8702] sysv_free_block: flc_count > flc_size [ 1092.990164][ T8702] sysv_free_block: flc_count > flc_size [ 1093.004062][ T8702] sysv_free_block: flc_count > flc_size [ 1093.009853][ T8702] sysv_free_block: flc_count > flc_size [ 1093.016952][ T8702] sysv_free_block: flc_count > flc_size [ 1093.022946][ T8702] sysv_free_block: flc_count > flc_size [ 1093.028704][ T8702] sysv_free_block: flc_count > flc_size [ 1093.034610][ T8702] sysv_free_block: flc_count > flc_size [ 1093.041323][ T8702] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 1093.236542][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1093.245320][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1093.610725][T13398] loop8: detected capacity change from 0 to 512 [ 1093.638547][T13401] loop6: detected capacity change from 0 to 256 [ 1093.752547][T13401] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1093.764066][T13401] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 1093.778053][T13398] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e01c, mo2=0002] [ 1093.825085][T13398] System zones: 1-12 [ 1093.862816][T13398] EXT4-fs error (device loop8): dx_probe:823: inode #2: comm syz.8.2633: Directory hole found for htree index block 0 [ 1093.933796][T13398] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -117 [ 1093.942848][T13398] EXT4-fs error (device loop8): dx_probe:823: inode #2: comm syz.8.2633: Directory hole found for htree index block 0 [ 1094.062994][T13398] EXT4-fs (loop8): Cannot turn on journaled quota: type 1: error -117 [ 1094.076628][T13398] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1094.154702][T13401] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d) [ 1094.285486][T13398] EXT4-fs error (device loop8): dx_probe:823: inode #2: comm syz.8.2633: Directory hole found for htree index block 0 [ 1094.652530][T13410] loop9: detected capacity change from 0 to 1024 [ 1094.800824][ T9492] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1094.847974][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 1094.854906][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 1095.524728][ T12] hfsplus: b-tree write err: -5, ino 4 [ 1095.550823][T13418] loop6: detected capacity change from 0 to 1024 [ 1095.804928][T13418] hfsplus: failed to load root directory [ 1099.226294][T13453] loop9: detected capacity change from 0 to 32768 [ 1099.284383][T13453] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.2652 (13453) [ 1099.316101][T13453] BTRFS info (device loop9 state S): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1099.327616][T13453] BTRFS info (device loop9 state S): using sha256 (sha256-generic) checksum algorithm [ 1099.344300][T13453] BTRFS info (device loop9 state S): using free-space-tree [ 1099.691823][T13453] BTRFS info (device loop9 state S): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1100.675067][T13485] loop8: detected capacity change from 0 to 1024 [ 1102.046517][T13501] loop2: detected capacity change from 0 to 8 [ 1102.240262][T13501] SQUASHFS error: Unable to read directory block [2c0:35] [ 1103.715522][T13511] loop9: detected capacity change from 0 to 40427 [ 1103.732269][T13511] F2FS-fs (loop9): journaled quota format not specified [ 1104.118271][T13518] tipc: Invalid UDP bearer configuration [ 1104.118507][T13518] tipc: Enabling of bearer rejected, failed to enable media [ 1104.909087][T13524] loop7: detected capacity change from 0 to 256 [ 1105.009422][T13524] exfat: Deprecated parameter 'namecase' [ 1105.024742][T13524] exfat: Deprecated parameter 'utf8' [ 1105.341031][T13524] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 1105.603593][T13535] loop8: detected capacity change from 0 to 128 [ 1105.878163][T13535] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1105.995349][T13535] ext4 filesystem being mounted at /274/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1106.574091][ T9492] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1107.233347][T13553] netlink: 332 bytes leftover after parsing attributes in process `syz.8.2683'. [ 1108.478492][T13567] loop7: detected capacity change from 0 to 16 [ 1108.564198][T13566] loop8: detected capacity change from 0 to 256 [ 1108.632970][T13566] exFAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1108.644187][T13566] exFAT-fs (loop8): Medium has reported failures. Some data may be lost. [ 1108.670501][T13567] erofs (device loop7): mounted with root inode @ nid 36. [ 1108.795928][T13568] loop2: detected capacity change from 0 to 1024 [ 1108.997037][T13566] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d) [ 1109.995010][T13573] loop9: detected capacity change from 0 to 32768 [ 1110.262925][ T8343] hfsplus: b-tree write err: -5, ino 4 [ 1110.446174][T13573] bcachefs (loop9): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,erasure_code,norecovery,nojournal_transaction_names,nocow [ 1110.467434][T13573] bcachefs (loop9): recovering from clean shutdown, journal seq 10 [ 1110.477228][T13573] bcachefs (loop9): Version upgrade required: [ 1110.477228][T13573] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 1110.477228][T13573] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.20: directory_size [ 1110.477228][T13573] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 1110.664768][T13573] bcachefs (loop9): error validating btree node on loop9 at btree alloc level 0/0 [ 1110.664910][T13573] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0 [ 1110.665030][T13573] node offset 0/24: got wrong btree node: got [ 1110.665115][T13573] btree=alloc level=0 seq 10001 1 [ 1110.665188][T13573] min: POS_MIN [ 1110.665251][T13573] max: SPOS_MAX [ 1110.712472][T13573] bcachefs (loop9): running explicit recovery pass check_topology (2), currently at recovery_pass_empty (0) [ 1110.724729][T13573] bcachefs (loop9): flagging btree alloc lost data [ 1110.733728][T13573] error reading btree root btree=alloc level=0: btree_node_read_error, fixing [ 1110.887622][T13573] bcachefs (loop9): error validating btree node on loop9 at btree freespace level 0/0 [ 1110.887742][T13573] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq e81e1ed936acf3df written 32 min_key 0:3703155162349568:0 durability: 1 ptr: 0:29:0 gen 0 [ 1110.887873][T13573] node offset 0/32 bset u64s 0: checksum error, type none: got should be , shutting down [ 1110.927755][T13573] bcachefs (loop9): inconsistency detected - emergency read only at journal seq 10 [ 1110.937676][T13573] bcachefs (loop9): flagging btree freespace lost data [ 1110.946856][T13573] error reading btree root btree=freespace level=0: btree_node_read_error, fixing [ 1111.035289][T13573] bcachefs (loop9): check_topology... done [ 1111.042624][T13573] bcachefs (loop9): accounting_read... done [ 1111.054209][T13573] bcachefs (loop9): alloc_read... done [ 1111.060145][T13573] bcachefs (loop9): stripes_read... done [ 1111.066732][T13573] bcachefs (loop9): snapshots_read... done [ 1111.082467][T13573] bcachefs (loop9): done starting filesystem [ 1111.262024][T11954] bcachefs (loop9): shutting down [ 1111.431300][T11954] bcachefs (loop9): shutdown complete [ 1112.636741][T13602] loop2: detected capacity change from 0 to 64 [ 1113.403716][T13610] netlink: 260 bytes leftover after parsing attributes in process `syz.6.2704'. [ 1113.413525][T13610] netlink: 260 bytes leftover after parsing attributes in process `syz.6.2704'. [ 1114.065433][T13615] loop2: detected capacity change from 0 to 512 [ 1114.124889][T13615] ext3: Unknown parameter 'func' [ 1114.843585][T13619] loop6: detected capacity change from 0 to 1024 [ 1115.136984][T13619] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1115.223615][T13619] EXT4-fs error (device loop6): ext4_xattr_inode_iget:440: inode #11: comm syz.6.2708: missing EA_INODE flag [ 1115.288213][T13619] EXT4-fs (loop6): Remounting filesystem read-only [ 1115.954900][ T8554] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1118.170372][T13659] loop9: detected capacity change from 0 to 512 [ 1118.305166][T13659] EXT4-fs: Ignoring removed nobh option [ 1118.438250][T13659] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1119.088432][T13671] usb usb8: usbfs: process 13671 (syz.2.2722) did not claim interface 0 before use [ 1119.227208][T11954] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1119.358153][T13677] loop6: detected capacity change from 0 to 24 [ 1119.389354][T13677] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 1120.541263][T13688] loop6: detected capacity change from 0 to 64 [ 1121.787519][T13703] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 1122.432937][T13713] loop9: detected capacity change from 0 to 64 [ 1123.102306][T13716] loop8: detected capacity change from 0 to 1024 [ 1123.462527][T13723] sp0: Synchronizing with TNC [ 1123.754493][ T3599] hfsplus: b-tree write err: -5, ino 4 [ 1124.728031][T13735] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1125.375718][T13733] loop2: detected capacity change from 0 to 40427 [ 1125.403354][T13733] F2FS-fs (loop2): Invalid segment/section count (24 != 24 * 3) [ 1125.411333][T13733] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1125.459356][T13733] F2FS-fs (loop2): invalid crc value [ 1125.465280][T13733] F2FS-fs (loop2): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 1125.529331][T13733] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1125.872513][T13733] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 1125.879954][T13733] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1126.247688][T13750] program syz.9.2751 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1127.978935][T13761] loop9: detected capacity change from 0 to 1024 [ 1128.106307][T13756] loop8: detected capacity change from 0 to 32768 [ 1128.144842][T13756] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.2754 (13756) [ 1128.179088][T13756] BTRFS info (device loop8 state S): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1128.191209][T13756] BTRFS info (device loop8 state S): using crc32c (crc32c-x86_64) checksum algorithm [ 1128.201422][T13756] BTRFS info (device loop8 state S): using free-space-tree [ 1128.615042][ T1326] BTRFS warning (device loop8 state S): checksum verify failed on logical 1052672 mirror 1 wanted 0x37e030f7 found 0xf6479a7e level 0, ignored [ 1128.636120][ T1003] BTRFS warning (device loop8 state S): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0xa602d4b1 level 0, ignored [ 1128.793821][ T1003] BTRFS warning (device loop8 state S): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0x5b46211a level 0, ignored [ 1128.896859][ T1003] BTRFS warning (device loop8 state CS): checksum verify failed on logical 5328896 mirror 1 wanted 0x51ec978b found 0x08e90fae level 0, ignored [ 1129.038649][T13756] BTRFS info (device loop8 state CS): bdev /dev/loop8 errs: wr 0, rd 4, flush 1048576, corrupt 0, gen 0 [ 1129.054027][T13756] BTRFS error (device loop8 state CS): block group 1048576 len 4194304 type flags 0x1 mismatch with chunk type flags 0x2 [ 1129.088527][T13756] BTRFS warning (device loop8 state CS): failed to read fs tree: -2 [ 1129.234622][T13756] BTRFS error (device loop8 state CS): open_ctree failed: -2 [ 1130.144111][T13793] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2760'. [ 1130.450812][T13798] loop6: detected capacity change from 0 to 64 [ 1131.225666][T13802] loop2: detected capacity change from 0 to 2048 [ 1131.578421][T12160] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 1131.681924][T13810] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1131.836794][T12160] usb 10-1: Using ep0 maxpacket: 32 [ 1131.944548][T12160] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1131.958121][T12160] usb 10-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 1131.974692][T12160] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1132.153256][T12160] usb 10-1: config 0 descriptor?? [ 1132.812395][T12160] steelseries 0003:1038:1410.001E: missing HID_OUTPUT_REPORT 0 [ 1132.952047][T12160] usb 10-1: USB disconnect, device number 5 [ 1134.273972][ T30] audit: type=1326 audit(2000000246.320:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13828 comm="syz.7.2774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd76d8d169 code=0x7ffc0000 [ 1134.298462][ T30] audit: type=1326 audit(2000000246.320:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13828 comm="syz.7.2774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd76d8d169 code=0x7ffc0000 [ 1134.642584][T12160] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 1134.910933][T12160] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 1134.919891][T12160] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1134.929405][T12160] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1134.943404][T12160] usb 3-1: config 220 has no interface number 2 [ 1134.953232][T12160] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1134.966862][T12160] usb 3-1: config 220 interface 0 has no altsetting 0 [ 1134.976702][T12160] usb 3-1: config 220 interface 76 has no altsetting 0 [ 1134.985074][T12160] usb 3-1: config 220 interface 1 has no altsetting 0 [ 1135.424204][T12160] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1135.433866][T12160] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1135.442401][T12160] usb 3-1: Product: syz [ 1135.446870][T12160] usb 3-1: Manufacturer: syz [ 1135.451900][T12160] usb 3-1: SerialNumber: syz [ 1135.874727][T12160] usb 3-1: selecting invalid altsetting 0 [ 1135.881394][T12160] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 1135.888669][T12160] usb 3-1: No valid video chain found. [ 1136.113392][T12160] usb 3-1: selecting invalid altsetting 0 [ 1136.119556][T12160] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 1136.243429][T12160] usb 3-1: USB disconnect, device number 4 [ 1136.378544][T13851] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2783'. [ 1136.484064][T13851] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2783'. [ 1138.408681][T13863] loop2: detected capacity change from 0 to 4096 [ 1138.466402][T13863] ntfs3(loop2): Different NTFS sector size (2048) and media sector size (512). [ 1138.868160][T13878] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2794'. [ 1139.274554][T13869] loop9: detected capacity change from 0 to 8192 [ 1139.377667][T13863] ntfs3(loop2): Failed to initialize $Extend/$ObjId. [ 1139.455648][T13877] loop7: detected capacity change from 0 to 32768 [ 1139.533510][T13863] ntfs3: Cannot use different iocharset when remounting! [ 1140.338141][T13885] loop8: detected capacity change from 0 to 512 [ 1140.394751][T13885] EXT4-fs: Ignoring removed i_version option [ 1140.522327][T13885] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1140.656251][T11954] FAT-fs (loop9): error, corrupted directory (invalid entries) [ 1140.665065][T11954] FAT-fs (loop9): Filesystem has been set read-only [ 1140.743108][T11954] FAT-fs (loop9): error, corrupted directory (invalid entries) [ 1140.825569][T13885] EXT4-fs: Ignoring sb option on remount [ 1140.832180][T13885] EXT4-fs: Ignoring removed orlov option [ 1140.838463][T13885] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 1140.848425][T13885] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1141.141775][T13885] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 1141.153376][T13885] ext4 filesystem being remounted at /301/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1141.542860][ T1307] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1141.848660][ T9492] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1142.005717][ T1307] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1142.331732][T13900] loop6: detected capacity change from 0 to 32768 [ 1142.436454][ T1307] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1142.682515][T13900] bcachefs (loop6): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=xxhash,data_checksum=xxhash,compression=zstd,metadata_target=invalid device 255,noinodes_use_key_cache,very_degraded,no_splitbrain_check,norecovery,noexcl,reconstruct_alloc [ 1142.712689][T13900] bcachefs (loop6): recovering from clean shutdown, journal seq 10 [ 1142.722477][T13900] bcachefs (loop6): Version upgrade required: [ 1142.722477][T13900] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 1142.722477][T13900] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.20: directory_size [ 1142.722477][T13900] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 1142.800804][T13900] bcachefs (loop6): dropping and reconstructing all alloc info [ 1142.876943][ T1307] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1142.988515][T13900] bcachefs (loop6): accounting_read... done [ 1142.998801][T13900] bcachefs (loop6): alloc_read... done [ 1143.005210][T13900] bcachefs (loop6): stripes_read... done [ 1143.011359][T13900] bcachefs (loop6): snapshots_read... done [ 1143.030649][T13900] bcachefs (loop6): done starting filesystem [ 1143.239215][ T8554] bcachefs (loop6): shutting down [ 1143.282028][ T8554] bcachefs (loop6): shutdown complete [ 1143.408810][T13914] loop8: detected capacity change from 0 to 512 [ 1143.671325][T13914] EXT4-fs warning (device loop8): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1143.754342][T13914] EXT4-fs (loop8): mount failed [ 1143.771953][ T1307] bridge_slave_1: left allmulticast mode [ 1143.782051][ T1307] bridge_slave_1: left promiscuous mode [ 1143.788832][ T1307] bridge0: port 2(bridge_slave_1) entered disabled state [ 1143.972893][ T1307] bridge_slave_0: left allmulticast mode [ 1143.985882][ T1307] bridge_slave_0: left promiscuous mode [ 1143.993270][ T1307] bridge0: port 1(bridge_slave_0) entered disabled state [ 1145.588764][ T1307] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1145.700422][ T1307] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1145.768507][ T1307] bond0 (unregistering): Released all slaves [ 1146.761779][ T1307] hsr_slave_0: left promiscuous mode [ 1146.803783][ T1307] hsr_slave_1: left promiscuous mode [ 1146.812494][ T1307] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1146.820276][ T1307] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1146.918755][ T1307] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1146.926768][ T1307] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1147.088426][ T1307] veth1_macvtap: left promiscuous mode [ 1147.095052][ T1307] veth0_macvtap: left promiscuous mode [ 1147.101030][ T1307] veth1_vlan: left promiscuous mode [ 1147.110359][ T1307] veth0_vlan: left promiscuous mode [ 1147.990675][T13935] loop2: detected capacity change from 0 to 128 [ 1148.014205][T13933] loop8: detected capacity change from 0 to 256 [ 1148.134345][T11957] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1148.147902][T13935] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 1148.164247][T11957] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1148.174511][T11957] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1148.176512][T13933] exfat: Deprecated parameter 'namecase' [ 1148.190941][T13933] exfat: Deprecated parameter 'utf8' [ 1148.223384][T11957] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1148.240469][T11957] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1148.253229][T11957] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1148.392905][T13935] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1148.539958][T13933] exFAT-fs (loop8): failed to load upcase table (idx : 0x0001ff53, chksum : 0xd72bb7d8, utbl_chksum : 0xe619d30d) [ 1149.085056][ T1307] team0 (unregistering): Port device team_slave_1 removed [ 1149.214368][ T1307] team0 (unregistering): Port device team_slave_0 removed [ 1149.890777][ T30] audit: type=1326 audit(2000000261.910:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13950 comm="syz.8.2816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80c038d169 code=0x7ffc0000 [ 1149.914312][ T30] audit: type=1326 audit(2000000261.940:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13950 comm="syz.8.2816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80c038d169 code=0x7ffc0000 [ 1149.939831][ T30] audit: type=1326 audit(2000000261.940:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13950 comm="syz.8.2816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f80c038d169 code=0x7ffc0000 [ 1149.963745][ T30] audit: type=1326 audit(2000000261.940:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13950 comm="syz.8.2816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f80c038d1a3 code=0x7ffc0000 [ 1149.989043][ T30] audit: type=1326 audit(2000000261.940:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13950 comm="syz.8.2816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f80c038bc1f code=0x7ffc0000 [ 1150.012617][ T30] audit: type=1326 audit(2000000261.940:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13950 comm="syz.8.2816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f80c038d1f7 code=0x7ffc0000 [ 1150.037899][ T30] audit: type=1326 audit(2000000262.020:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13950 comm="syz.8.2816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f80c038bad0 code=0x7ffc0000 [ 1150.062226][ T30] audit: type=1326 audit(2000000262.040:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13950 comm="syz.8.2816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f80c038cd6b code=0x7ffc0000 [ 1150.072474][T13952] loop8: detected capacity change from 0 to 8 [ 1150.431852][T11957] Bluetooth: hci0: command tx timeout [ 1150.499867][ T30] audit: type=1326 audit(2000000262.260:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13950 comm="syz.8.2816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f80c038bdca code=0x7ffc0000 [ 1150.522896][ T30] audit: type=1326 audit(2000000262.260:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13950 comm="syz.8.2816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f80c038bdca code=0x7ffc0000 [ 1151.640281][T13957] loop7: detected capacity change from 0 to 32768 [ 1151.666505][T13957] (syz.7.2817,13957,1):ocfs2_verify_volume:2300 ERROR: found superblock with bad version: found 1536.0, should be 0.90 [ 1151.680083][T13957] (syz.7.2817,13957,1):ocfs2_verify_volume:2328 ERROR: status = -22 [ 1151.690130][T13957] (syz.7.2817,13957,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 1151.699385][T13957] (syz.7.2817,13957,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 1152.452668][T11957] Bluetooth: hci0: command tx timeout [ 1152.780672][T13969] loop7: detected capacity change from 0 to 2048 [ 1152.922807][T13972] loop2: detected capacity change from 0 to 1024 [ 1152.985140][T13975] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1153.012486][T13972] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1153.154618][T13936] chnl_net:caif_netlink_parms(): no params data found [ 1153.219794][T13972] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.2822: Invalid block bitmap block 0 in block_group 0 [ 1153.333115][T13972] EXT4-fs (loop2): Remounting filesystem read-only [ 1153.366765][T13969] NILFS error (device loop7): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 1153.378849][T13972] EXT4-fs (loop2): 1 orphan inode deleted [ 1153.407391][T13972] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1153.459444][T13969] Remounting filesystem read-only [ 1153.467691][T13969] NILFS error (device loop7): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 1154.072736][ T8702] NILFS (loop7): disposed unprocessed dirty file(s) when detaching log writer [ 1154.113670][T13054] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1154.186754][T13983] loop8: detected capacity change from 0 to 16 [ 1154.304808][T13983] erofs (device loop8): mounted with root inode @ nid 36. [ 1154.532890][T11957] Bluetooth: hci0: command tx timeout [ 1155.644179][T13936] bridge0: port 1(bridge_slave_0) entered blocking state [ 1155.654722][T13936] bridge0: port 1(bridge_slave_0) entered disabled state [ 1155.667640][T13936] bridge_slave_0: entered allmulticast mode [ 1155.732100][ T9] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 1155.816838][T13936] bridge_slave_0: entered promiscuous mode [ 1155.890399][T13936] bridge0: port 2(bridge_slave_1) entered blocking state [ 1155.898833][T13936] bridge0: port 2(bridge_slave_1) entered disabled state [ 1155.906945][T13936] bridge_slave_1: entered allmulticast mode [ 1155.916767][T13936] bridge_slave_1: entered promiscuous mode [ 1155.983702][ T9] usb 9-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1155.993344][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1156.034094][ T9] usb 9-1: config 0 descriptor?? [ 1156.092449][ T9] cp210x 9-1:0.0: cp210x converter detected [ 1156.284840][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 1156.292746][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 1156.589322][ T9] usb 9-1: cp210x converter now attached to ttyUSB0 [ 1156.612351][T11957] Bluetooth: hci0: command tx timeout [ 1156.709713][T13936] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1156.779978][ T45] usb 9-1: USB disconnect, device number 10 [ 1156.848193][ T45] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1156.859082][T13936] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1156.859650][ T45] cp210x 9-1:0.0: device disconnected [ 1157.414999][T13936] team0: Port device team_slave_0 added [ 1157.519768][T13936] team0: Port device team_slave_1 added [ 1157.979419][T13936] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1157.988139][T13936] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1158.017657][T13936] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1158.166564][T13936] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1158.179011][T13936] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1158.207510][T13936] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1158.473393][T14025] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 32 [ 1159.003113][T13936] hsr_slave_0: entered promiscuous mode [ 1159.014703][T13936] hsr_slave_1: entered promiscuous mode [ 1159.023749][T13936] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1159.031715][T13936] Cannot create hsr debugfs directory [ 1161.120375][T14054] loop6: detected capacity change from 0 to 256 [ 1161.315150][T14054] FAT-fs (loop6): error, clusters badly computed (0 != 128) [ 1161.323064][T14054] FAT-fs (loop6): Filesystem has been set read-only [ 1161.329956][T14054] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 1161.481801][ T45] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 1161.723217][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1161.796603][ T45] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1161.808824][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1161.818876][ T45] usb 3-1: Product: syz [ 1161.823634][ T45] usb 3-1: Manufacturer: syz [ 1161.828509][ T45] usb 3-1: SerialNumber: syz [ 1161.916910][ T45] usb 3-1: config 0 descriptor?? [ 1162.147708][T14061] IPv6: Can't replace route, no match found [ 1162.423926][ T9] usb 3-1: USB disconnect, device number 5 [ 1162.874016][T14066] loop7: detected capacity change from 0 to 1024 [ 1162.903917][T14066] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1162.984190][T13936] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1163.043411][T13936] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1163.163961][T14066] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1163.244948][T13936] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1163.363969][T13936] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1164.094050][ T9457] udevd[9457]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1164.460000][ T8702] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1165.242260][T14090] loop8: detected capacity change from 0 to 16 [ 1165.502524][T13936] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1165.727271][T13936] 8021q: adding VLAN 0 to HW filter on device team0 [ 1165.867013][ T1307] bridge0: port 1(bridge_slave_0) entered blocking state [ 1165.874940][ T1307] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1166.058872][ T1307] bridge0: port 2(bridge_slave_1) entered blocking state [ 1166.066758][ T1307] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1166.656076][T14104] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 32 [ 1168.880725][T14132] loop2: detected capacity change from 0 to 1024 [ 1168.907295][T14132] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 1168.953104][T14132] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1168.964552][T14132] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 1168.978659][T14132] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (7003!=20869) [ 1168.988781][T14132] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 1169.003121][T14132] EXT4-fs error (device loop2): ext4_ext_check_inode:524: inode #17: comm syz.2.2877: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 1169.024776][T14132] EXT4-fs (loop2): no journal found [ 1169.250607][T13936] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1169.573392][T14134] loop6: detected capacity change from 0 to 1024 [ 1169.719785][T14134] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1169.814836][T13936] veth0_vlan: entered promiscuous mode [ 1169.958120][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 1169.958212][ T30] audit: type=1800 audit(2000000282.000:102): pid=14134 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2878" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 1169.997552][T13936] veth1_vlan: entered promiscuous mode [ 1170.561590][T13936] veth0_macvtap: entered promiscuous mode [ 1170.584640][ T8554] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1170.747351][T13936] veth1_macvtap: entered promiscuous mode [ 1171.068364][T13936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1171.082404][T13936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1171.093006][T13936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1171.103853][T13936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1171.114134][T13936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1171.128297][T13936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1171.139667][T13936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1171.150567][T13936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1171.168117][T13936] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1171.864551][T13936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1171.875692][T13936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1171.886303][T13936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1171.899519][T13936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1171.911025][T13936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1171.921990][T13936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1171.932680][T13936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1171.946829][T13936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1171.964004][T13936] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1172.200417][T13936] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1172.209975][T13936] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1172.220567][T13936] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1172.229867][T13936] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1174.101925][ T5837] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 1174.209018][T14182] loop7: detected capacity change from 0 to 64 [ 1174.318842][ T5837] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1174.331341][ T5837] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1174.342005][ T5837] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1174.351389][ T5837] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1174.521119][ T5837] usb 3-1: config 0 descriptor?? [ 1175.063476][ T5837] keytouch 0003:0926:3333.001F: fixing up Keytouch IEC report descriptor [ 1175.150924][ T5837] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.001F/input/input25 [ 1175.464365][ T5837] keytouch 0003:0926:3333.001F: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 1175.576067][ T5837] usb 3-1: USB disconnect, device number 6 [ 1175.961344][T14187] loop8: detected capacity change from 0 to 4096 [ 1176.213524][T14187] NILFS (loop8): invalid segment: Checksum error in segment payload [ 1176.222507][T14187] NILFS (loop8): trying rollback from an earlier position [ 1176.336155][T14187] NILFS (loop8): recovery complete [ 1176.427051][T14197] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1181.043491][T14238] loop2: detected capacity change from 0 to 4096 [ 1181.121849][T14238] ntfs3(loop2): Different NTFS sector size (2048) and media sector size (512). [ 1183.716993][T14277] netlink: 156 bytes leftover after parsing attributes in process `syz.7.2919'. [ 1183.727054][T14277] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2919'. [ 1183.842073][ T3676] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1183.850210][ T3676] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1183.898033][ T5794] Bluetooth: hci3: command 0x0406 tx timeout [ 1184.086649][T14279] loop2: detected capacity change from 0 to 1024 [ 1184.239323][ T1321] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1184.247781][ T1321] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1185.578285][T14291] loop8: detected capacity change from 0 to 1024 [ 1186.398273][ T14] hfsplus: b-tree write err: -5, ino 4 [ 1188.625705][T14336] loop8: detected capacity change from 0 to 1024 [ 1188.715235][T14336] EXT4-fs: Ignoring removed mblk_io_submit option [ 1188.909846][T14336] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1189.153177][T14336] EXT4-fs error (device loop8): ext4_expand_extra_isize_ea:2793: inode #2: comm syz.8.2941: corrupted in-inode xattr: bad e_name length [ 1189.203406][T14336] EXT4-fs (loop8): Remounting filesystem read-only [ 1189.610871][T14351] loop6: detected capacity change from 0 to 512 [ 1189.720662][ T9492] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1189.777680][T14351] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1189.939735][T14351] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 1189.953304][T14351] ext4 filesystem being mounted at /410/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1190.482842][ T8554] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 1192.223173][T14379] loop0: detected capacity change from 0 to 1024 [ 1192.474838][T14379] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1192.491241][T14379] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1193.265639][T14395] loop8: detected capacity change from 0 to 512 [ 1193.383843][T13936] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1193.544734][T14395] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1193.561254][T14395] ext4 filesystem being mounted at /337/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1193.697408][T14395] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2959'. [ 1193.708291][T14395] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2959'. [ 1194.302804][ T9492] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1195.753936][T14422] new mount options do not match the existing superblock, will be ignored [ 1195.836275][T14422] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 1199.538597][T14467] loop2: detected capacity change from 0 to 2048 [ 1199.655838][T14467] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 1199.665263][T14467] UDF-fs: Scanning with blocksize 512 failed [ 1199.873775][T14467] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1205.649048][T14541] loop7: detected capacity change from 0 to 1024 [ 1205.778393][T14544] loop6: detected capacity change from 0 to 1024 [ 1206.006845][T14544] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1206.110713][ T60] hfsplus: b-tree write err: -5, ino 4 [ 1206.779106][ T8554] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1207.242702][T14567] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3024'. [ 1207.252339][T14567] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3024'. [ 1210.068058][T14588] loop8: detected capacity change from 0 to 16 [ 1210.115336][T14587] loop7: detected capacity change from 0 to 8 [ 1210.168449][T14588] erofs (device loop8): mounted with root inode @ nid 36. [ 1210.305310][T14588] erofs (device loop8): readahead error at folio 3604 @ nid 36 [ 1210.313672][T14588] erofs (device loop8): readahead error at folio 3603 @ nid 36 [ 1210.321748][T14588] erofs (device loop8): readahead error at folio 3602 @ nid 36 [ 1210.329606][T14588] erofs (device loop8): readahead error at folio 3601 @ nid 36 [ 1210.340620][T14588] erofs (device loop8): readahead error at folio 3600 @ nid 36 [ 1210.349700][T14588] erofs (device loop8): readahead error at folio 3599 @ nid 36 [ 1211.302619][T14590] loop0: detected capacity change from 0 to 32768 [ 1211.323986][T14590] (syz.0.3034,14590,0):ocfs2_find_entry:1075 ERROR: status = -117 [ 1211.333922][T14590] (syz.0.3034,14590,0):ocfs2_inode_is_valid_to_delete:886 ERROR: Skipping delete of system file 66 [ 1211.345524][T14590] (syz.0.3034,14590,0):ocfs2_init_global_system_inodes:465 ERROR: status = -22 [ 1211.354918][T14590] (syz.0.3034,14590,0):ocfs2_init_global_system_inodes:467 ERROR: Unable to load system inode 1, possibly corrupt fs? [ 1211.355116][T14590] (syz.0.3034,14590,0):ocfs2_init_global_system_inodes:476 ERROR: status = -22 [ 1211.381068][T14590] (syz.0.3034,14590,0):ocfs2_initialize_super:2195 ERROR: status = -22 [ 1211.392907][T14590] (syz.0.3034,14590,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 1212.622171][ T8771] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1212.858404][T14597] loop8: detected capacity change from 0 to 32768 [ 1212.893440][T14597] bcachefs (/dev/loop8): error validating superblock: Invalid superblock section journal_v2: duplicate journal buckets in ranges 9-10, 9-16 [ 1212.893440][T14597] journal_v2 (size 40): [ 1212.893440][T14597] Buckets: 9-16 9-10 [ 1212.893440][T14597] [ 1212.923095][T14597] bcachefs: bch2_fs_get_tree() error: invalid_sb_journal [ 1212.964184][ T8771] usb 7-1: Using ep0 maxpacket: 32 [ 1213.079850][ T8771] usb 7-1: config 0 has an invalid interface number: 51 but max is 0 [ 1213.088549][ T8771] usb 7-1: config 0 has no interface number 0 [ 1213.201343][ T8771] usb 7-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1213.213856][ T8771] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1213.223629][ T8771] usb 7-1: Product: syz [ 1213.228079][ T8771] usb 7-1: Manufacturer: syz [ 1213.233270][ T8771] usb 7-1: SerialNumber: syz [ 1213.407547][ T8771] usb 7-1: config 0 descriptor?? [ 1213.507160][T14605] loop0: detected capacity change from 0 to 128 [ 1213.620123][T14605] EXT4-fs: Ignoring removed nobh option [ 1213.806821][T14605] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1213.937037][T14605] ext4 filesystem being mounted at /25/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1214.269880][T14603] loop2: detected capacity change from 0 to 32768 [ 1214.301106][T14603] bcachefs (/dev/loop2): error validating superblock: Invalid superblock section members_v1: device 0: too many buckets (got 16981954538416098692, max 2147483583) [ 1214.301106][T14603] members_v1 (size 152): [ 1214.301106][T14603] Device: 0 [ 1214.301106][T14603] Label: (bad disk labels section) [ 1214.301106][T14603] UUID: 88000000-0000-0000-7af6-772b00de4159 [ 1214.301106][T14603] Size: 0 [ 1214.301106][T14603] read errors: 0 [ 1214.301106][T14603] write errors: 0 [ 1214.301106][T14603] checksum errors: 0 [ 1214.301106][T14603] seqread iops: 1611530240 [ 1214.301106][T14603] seqwrite iops: 0 [ 1214.301106][T14603] randread iops: 0 [ 1214.301106][T14603] randwrite iops: 0 [ 1214.301106][T14603] Bucket size: 0 [ 1214.301106][T14603] First bucket: 128 [ 1214.301106][T14603] Buckets: 16981954538416098692 [ 1214.301106][T14603] Last mount: 34376515584 [ 1214.301106][T14603] Last superblock write: 0 [ 1214.301106][T14603] State: spare [ 1214.301106][T14603] Data allowed: free,sb,journal [ 1214.301106][T14603] Has data: journal,btree,user [ 1214.301106][T14603] Btree allocated bitmap blocksize:1 [ 1214.301106][T14603] Btree allocated bitmap: 00000000 [ 1214.302431][T14603] bcachefs: bch2_fs_get_tree() error: invalid_sb_members [ 1214.928700][ T8771] quatech2 7-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1214.996057][ T8771] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1215.167376][ C1] usb 7-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1215.168924][T13936] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1215.262524][ T8771] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1215.539745][ T8771] usb 7-1: USB disconnect, device number 9 [ 1215.612071][ T8771] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1215.753644][ T8771] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1215.773770][ T8771] quatech2 7-1:0.51: device disconnected [ 1216.106678][T14617] loop0: detected capacity change from 0 to 164 [ 1217.413697][T14628] netlink: 260 bytes leftover after parsing attributes in process `syz.2.3050'. [ 1217.423522][T14628] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3050'. [ 1217.695543][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 1217.702669][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 1218.183497][T14632] netlink: 204 bytes leftover after parsing attributes in process `syz.7.3052'. [ 1218.552585][T14640] debugfs: Bad value for 'uid' [ 1218.557663][T14640] debugfs: Bad value for 'uid' [ 1219.708337][T14649] loop2: detected capacity change from 0 to 1024 [ 1220.697787][ T3676] hfsplus: b-tree write err: -5, ino 4 [ 1221.240962][T14660] loop2: detected capacity change from 0 to 256 [ 1221.272205][T14654] loop8: detected capacity change from 0 to 4096 [ 1221.550954][T14662] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1221.794054][T14660] FAT-fs (loop2): Directory bread(block 64) failed [ 1221.801356][T14660] FAT-fs (loop2): Directory bread(block 65) failed [ 1221.812249][T14660] FAT-fs (loop2): Directory bread(block 66) failed [ 1221.819097][T14660] FAT-fs (loop2): Directory bread(block 67) failed [ 1221.827415][T14660] FAT-fs (loop2): Directory bread(block 68) failed [ 1221.834537][T14660] FAT-fs (loop2): Directory bread(block 69) failed [ 1221.841944][T14660] FAT-fs (loop2): Directory bread(block 70) failed [ 1221.848771][T14660] FAT-fs (loop2): Directory bread(block 71) failed [ 1221.856036][T14660] FAT-fs (loop2): Directory bread(block 72) failed [ 1221.863054][T14660] FAT-fs (loop2): Directory bread(block 73) failed [ 1221.869745][T14654] NILFS error (device loop8): nilfs_dotdot: directory #12 missing '.' [ 1221.878791][T14669] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1221.994060][T14654] Remounting filesystem read-only [ 1223.486105][T14682] loop8: detected capacity change from 0 to 256 [ 1223.588947][T14682] exfat: Deprecated parameter 'namecase' [ 1224.082332][T14682] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 1224.576505][T14683] loop0: detected capacity change from 0 to 40427 [ 1224.614884][T14683] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x1fffff [ 1224.639055][T14683] F2FS-fs (loop0): invalid crc value [ 1224.658525][T14683] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1224.849861][T14690] loop6: detected capacity change from 0 to 256 [ 1224.920116][T14690] exfat: Deprecated parameter 'utf8' [ 1224.926286][T14690] exfat: Deprecated parameter 'utf8' [ 1225.045722][T14683] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1225.356079][T14690] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 1226.853901][T14706] loop2: detected capacity change from 0 to 2048 [ 1226.917067][T14706] hpfs: filesystem error: invalid number of hotfixes: 266, used: 2; already mounted read-only [ 1226.932495][T14706] hpfs: filesystem error: improperly stopped [ 1226.938835][T14706] hpfs: filesystem error: sector(s) 'dir_band' badly placed at 7b318cc2 [ 1227.924360][T14720] tipc: Enabling of bearer rejected, failed to enable media [ 1231.389788][T14755] netlink: 'syz.2.3101': attribute type 10 has an invalid length. [ 1232.443590][T14768] netem: change failed [ 1233.355231][T14783] loop7: detected capacity change from 0 to 16 [ 1233.433011][T14781] usb usb8: usbfs: process 14781 (syz.0.3112) did not claim interface 0 before use [ 1233.554888][T14783] erofs (device loop7): mounted with root inode @ nid 36. [ 1234.295203][T14784] loop8: detected capacity change from 0 to 32768 [ 1234.383947][T14784] bcachefs (/dev/loop8): error validating superblock: Invalid superblock section quota: wrong size (got 24 should be 80) [ 1234.383947][T14784] quota (size 24): [ 1234.383947][T14784] user: flags 104000102000103 space timelimit 0 warnlimit 0 inodes timelimit 364 warnlimit 6 [ 1234.383947][T14784] group: flags 0 space timelimit 10 warnlimit 0 inodes timelimit 65537 warnlimit 5 [ 1234.383947][T14784] project: flags 8 space timelimit 131073 warnlimit 5 inodes timelimit 0 warnlimit 0 [ 1234.383947][T14784] [ 1234.435427][T14784] bcachefs: bch2_fs_get_tree() error: invalid_sb_quota [ 1236.882796][ T8771] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 1237.100812][ T8771] usb 9-1: Using ep0 maxpacket: 16 [ 1237.170532][ T8771] usb 9-1: config 0 interface 0 altsetting 48 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1237.184496][ T8771] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1237.192411][ T8771] usb 9-1: New USB device found, idVendor=046d, idProduct=c219, bcdDevice= 0.00 [ 1237.201936][ T8771] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1237.341069][ T8771] usb 9-1: config 0 descriptor?? [ 1237.909722][ T8771] logitech 0003:046D:C219.0020: unknown main item tag 0x2 [ 1238.017094][ T8771] logitech 0003:046D:C219.0020: hidraw0: USB HID v0.01 Device [HID 046d:c219] on usb-dummy_hcd.8-1/input0 [ 1238.029141][ T8771] logitech 0003:046D:C219.0020: no inputs found [ 1238.261884][ T8771] usb 9-1: USB disconnect, device number 11 [ 1238.813581][T14819] loop7: detected capacity change from 0 to 4096 [ 1238.888336][T14819] ntfs3(loop7): Different NTFS sector size (2048) and media sector size (512). [ 1239.443215][T14819] ntfs3(loop7): ino=b, mi_enum_attr [ 1239.448796][T14819] ntfs3(loop7): Mark volume as dirty due to NTFS errors [ 1239.542200][T14819] ntfs3(loop7): Failed to load $Extend (-22). [ 1239.548785][T14819] ntfs3(loop7): Failed to initialize $Extend. [ 1239.779835][T14819] ntfs3(loop7): ino=1e, "file1" fallocate(0x11) is not supported [ 1240.502944][ T5837] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 1240.777196][ T5837] usb 9-1: Using ep0 maxpacket: 16 [ 1240.843118][ T5837] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1240.857773][ T5837] usb 9-1: New USB device found, idVendor=046d, idProduct=c513, bcdDevice= 0.00 [ 1240.868214][ T5837] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1241.065063][ T5837] usb 9-1: config 0 descriptor?? [ 1241.209206][T14851] loop7: detected capacity change from 0 to 256 [ 1241.582240][ T5837] logitech-djreceiver 0003:046D:C513.0021: unknown main item tag 0x0 [ 1241.590863][ T5837] logitech-djreceiver 0003:046D:C513.0021: unknown main item tag 0x0 [ 1241.599635][ T5837] logitech-djreceiver 0003:046D:C513.0021: unknown main item tag 0x0 [ 1241.610018][ T5837] logitech-djreceiver 0003:046D:C513.0021: unknown main item tag 0x0 [ 1241.618944][ T5837] logitech-djreceiver 0003:046D:C513.0021: unknown main item tag 0x0 [ 1241.893594][ T5837] usb 9-1: USB disconnect, device number 12 [ 1241.962848][ T6184] udevd[6184]: setting owner of /dev/bus/usb/009/012 to uid=0, gid=0 failed: No such file or directory [ 1242.556819][ T8771] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 1242.777270][ T8771] usb 7-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1242.787846][ T8771] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1242.795167][ T8771] usb 7-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 1242.807537][ T8771] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1243.016104][ T8771] usb 7-1: config 0 descriptor?? [ 1243.664428][ T8771] dragonrise 0003:0079:0011.0022: hidraw0: USB HID v10.00 Device [HID 0079:0011] on usb-dummy_hcd.6-1/input0 [ 1243.852172][ T8771] usb 7-1: USB disconnect, device number 10 [ 1244.741803][ T5837] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 1245.027590][ T5837] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1245.039215][ T5837] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1c03, bcdDevice= 0.00 [ 1245.048841][ T5837] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1245.150871][ T5837] usb 3-1: config 0 descriptor?? [ 1245.704182][ T5837] corsair-psu 0003:1B1C:1C03.0023: item fetching failed at offset 5/7 [ 1245.802897][ T5837] corsair-psu 0003:1B1C:1C03.0023: probe with driver corsair-psu failed with error -22 [ 1246.004740][ T5837] usb 3-1: USB disconnect, device number 7 [ 1247.147515][T14910] loop2: detected capacity change from 0 to 64 [ 1247.585836][T14907] loop0: detected capacity change from 0 to 4096 [ 1247.653287][T14907] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 1247.990347][ T8771] usb 7-1: new full-speed USB device number 11 using dummy_hcd [ 1248.167676][T14915] loop8: detected capacity change from 0 to 4096 [ 1248.188578][ T8771] usb 7-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1248.202256][ T8771] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1248.209233][ T8771] usb 7-1: New USB device found, idVendor=056a, idProduct=00b8, bcdDevice= 0.00 [ 1248.218994][ T8771] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1248.366198][ T8771] usb 7-1: config 0 descriptor?? [ 1248.506029][T14925] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1248.956784][ T8771] wacom 0003:056A:00B8.0024: unknown main item tag 0x0 [ 1248.966227][ T8771] wacom 0003:056A:00B8.0024: unknown main item tag 0x0 [ 1248.973882][ T8771] wacom 0003:056A:00B8.0024: unknown main item tag 0x0 [ 1249.038337][ T8771] wacom 0003:056A:00B8.0024: Unknown device_type for 'HID 056a:00b8'. Assuming pen. [ 1249.151222][ T8771] wacom 0003:056A:00B8.0024: hidraw0: USB HID v7f.ff Device [HID 056a:00b8] on usb-dummy_hcd.6-1/input0 [ 1249.169614][ T8771] input: Wacom Intuos4 4x6 Pen as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:056A:00B8.0024/input/input26 [ 1249.300115][ T8771] usb 7-1: USB disconnect, device number 11 [ 1250.428558][T14941] loop8: detected capacity change from 0 to 64 [ 1250.975454][T14947] loop6: detected capacity change from 0 to 1024 [ 1251.103894][ T5837] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 1251.392317][ T5837] usb 3-1: Using ep0 maxpacket: 32 [ 1251.483533][ T5837] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1251.494252][ T5837] usb 3-1: config 0 has no interfaces? [ 1251.619683][ T5837] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 1251.629618][ T5837] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1251.638251][ T5837] usb 3-1: Product: syz [ 1251.642824][ T5837] usb 3-1: Manufacturer: syz [ 1251.647698][ T5837] usb 3-1: SerialNumber: syz [ 1251.896403][ T5837] usb 3-1: config 0 descriptor?? [ 1252.136458][ T5837] usb 3-1: USB disconnect, device number 8 [ 1252.490761][T14956] xt_CT: No such helper "snmp" [ 1253.633949][T14970] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3184'. [ 1253.934018][ T5837] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 1254.123179][ T5837] usb 3-1: Using ep0 maxpacket: 32 [ 1254.224876][ T5837] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1254.237542][ T5837] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1254.248370][ T5837] usb 3-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 1254.257927][ T5837] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1254.477721][ T5837] usb 3-1: config 0 descriptor?? [ 1254.990474][ T5837] aquacomputer_d5next 0003:0C70:F0B6.0025: hidraw0: USB HID vff.fc Device [HID 0c70:f0b6] on usb-dummy_hcd.2-1/input0 [ 1255.218964][T14988] loop8: detected capacity change from 0 to 1024 [ 1255.238787][ T5837] usb 3-1: USB disconnect, device number 9 [ 1255.350465][T14991] loop6: detected capacity change from 0 to 256 [ 1255.416002][T14988] hfsplus: bad catalog entry type [ 1255.535658][ T8771] IPVS: starting estimator thread 0... [ 1255.642192][T14996] IPVS: using max 192 ests per chain, 9600 per kthread [ 1255.838938][ T60] hfsplus: b-tree write err: -5, ino 4 [ 1256.618758][T15005] loop6: detected capacity change from 0 to 64 [ 1257.447486][T15014] loop7: detected capacity change from 0 to 256 [ 1257.956900][T15014] FAT-fs (loop7): Directory bread(block 64) failed [ 1257.964120][T15014] FAT-fs (loop7): Directory bread(block 65) failed [ 1257.971110][T15014] FAT-fs (loop7): Directory bread(block 66) failed [ 1257.978562][T15014] FAT-fs (loop7): Directory bread(block 67) failed [ 1257.985898][T15014] FAT-fs (loop7): Directory bread(block 68) failed [ 1257.993011][T15014] FAT-fs (loop7): Directory bread(block 69) failed [ 1258.000044][T15014] FAT-fs (loop7): Directory bread(block 70) failed [ 1258.007073][T15014] FAT-fs (loop7): Directory bread(block 71) failed [ 1258.018276][T15014] FAT-fs (loop7): Directory bread(block 72) failed [ 1258.025599][T15014] FAT-fs (loop7): Directory bread(block 73) failed [ 1259.501840][T15036] loop7: detected capacity change from 0 to 1024 [ 1259.583914][T15040] loop2: detected capacity change from 0 to 1024 [ 1259.619940][T15040] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 1259.632259][T15040] EXT4-fs (loop2): group descriptors corrupted! [ 1260.438981][T15050] loop8: detected capacity change from 0 to 64 [ 1260.483804][ T3599] hfsplus: bad catalog file entry [ 1260.707233][T15055] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3216'. [ 1260.717028][T15055] netlink: 'syz.0.3216': attribute type 1 has an invalid length. [ 1260.729729][T15055] netlink: 13 bytes leftover after parsing attributes in process `syz.0.3216'. [ 1260.757600][T15055] vlan2: entered allmulticast mode [ 1260.832185][T15057] loop6: detected capacity change from 0 to 512 [ 1260.872396][T15057] EXT4-fs: Ignoring removed orlov option [ 1260.935349][T15057] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1261.056880][T15057] EXT4-fs (loop6): orphan cleanup on readonly fs [ 1261.207457][T15057] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.3215: bg 0: block 248: padding at end of block bitmap is not set [ 1261.262549][T15057] Quota error (device loop6): write_blk: dquota write failed [ 1261.270612][T15057] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 1261.281350][T15057] EXT4-fs error (device loop6): ext4_acquire_dquot:6927: comm syz.6.3215: Failed to acquire dquot type 1 [ 1261.417471][T15057] EXT4-fs (loop6): 1 truncate cleaned up [ 1261.500847][T15057] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1261.695242][T15057] EXT4-fs: Ignoring removed orlov option [ 1261.702897][T15057] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1261.837127][T15057] EXT4-fs (loop6): warning: mounting fs with errors, running e2fsck is recommended [ 1261.922321][T15071] program syz.0.3220 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1261.988911][T15057] EXT4-fs error (device loop6): __ext4_remount:6738: comm syz.6.3215: Abort forced by user [ 1262.001155][ T5837] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 1262.072472][T15057] EXT4-fs (loop6): Remounting filesystem read-only [ 1262.079407][T15057] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 1262.091013][T15057] ext4 filesystem being remounted at /465/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1262.171367][T15057] EXT4-fs: Ignoring removed orlov option [ 1262.178232][T15057] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1262.211831][ T5837] usb 9-1: Using ep0 maxpacket: 8 [ 1262.263682][ T5837] usb 9-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1262.275096][ T5837] usb 9-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1262.288491][ T5837] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1262.295866][ T5837] usb 9-1: New USB device found, idVendor=04f2, idProduct=1421, bcdDevice= 0.00 [ 1262.305436][ T5837] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1262.374371][T15057] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 1262.515192][ T5837] usb 9-1: config 0 descriptor?? [ 1263.126225][ T8554] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1263.234760][T15082] loop0: detected capacity change from 0 to 256 [ 1263.739635][T15080] loop2: detected capacity change from 0 to 32768 [ 1263.760370][ T5837] chicony 0003:04F2:1421.0026: unbalanced delimiter at end of report description [ 1263.803469][T15080] (syz.2.3223,15080,0):ocfs2_verify_volume:2287 ERROR: found superblock with incorrect block size bits: found 249, should be 9, 10, 11, or 12 [ 1263.818510][T15080] (syz.2.3223,15080,0):ocfs2_verify_volume:2328 ERROR: status = -22 [ 1263.827069][T15080] (syz.2.3223,15080,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 1263.836331][T15080] (syz.2.3223,15080,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 1264.310201][ T5837] chicony 0003:04F2:1421.0026: Chicony hid parse failed: -22 [ 1264.318515][ T5837] chicony 0003:04F2:1421.0026: probe with driver chicony failed with error -22 [ 1264.335848][ T5837] usb 9-1: USB disconnect, device number 13 [ 1264.441794][T15082] FAT-fs (loop0): codepage cp86 not found [ 1265.087171][T15095] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3228'. [ 1266.426652][T15111] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3236'. [ 1266.465908][T15113] loop0: detected capacity change from 0 to 128 [ 1266.764772][T15113] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1266.904878][T15113] ext4 filesystem being mounted at /62/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1267.644817][T15126] geneve1: entered promiscuous mode [ 1267.864675][T13936] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1268.619235][T15133] loop0: detected capacity change from 0 to 16 [ 1268.712865][T15133] erofs (device loop0): mounted with root inode @ nid 36. [ 1268.884017][T15133] erofs (device loop0): inconsistent algorithmtype 0 for nid 36 [ 1268.892350][T15133] erofs (device loop0): invalid tail-packing pclustersize 0 [ 1268.899973][T15133] erofs (device loop0): inconsistent algorithmtype 0 for nid 36 [ 1268.908156][T15133] erofs (device loop0): invalid tail-packing pclustersize 0 [ 1268.919125][T15133] erofs (device loop0): read error -117 @ 0 of nid 36 [ 1268.927247][T15133] erofs (device loop0): fail to readdir of logical block 0 of nid 36 [ 1269.203625][T15130] loop8: detected capacity change from 0 to 32768 [ 1269.287438][T15130] bcachefs (/dev/loop8): error validating superblock: Invalid superblock section journal_v2: journal bucket 4294967303 past end of device (nbuckets 128) [ 1269.287438][T15130] journal_v2 (size 32): [ 1269.287438][T15130] Buckets: 9-4294967304 [ 1269.287438][T15130] [ 1269.316231][T15130] bcachefs: bch2_fs_get_tree() error: invalid_sb_journal [ 1270.624806][T15148] loop0: detected capacity change from 0 to 512 [ 1270.723754][T15148] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1270.731208][T15148] EXT4-fs: Ignoring removed mblk_io_submit option [ 1270.863568][T15150] netlink: 'syz.7.3250': attribute type 1 has an invalid length. [ 1270.873207][T15150] netlink: 'syz.7.3250': attribute type 3 has an invalid length. [ 1270.881226][T15150] netlink: 224 bytes leftover after parsing attributes in process `syz.7.3250'. [ 1270.952437][T15148] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 1270.964060][T15148] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 1271.152716][T15148] EXT4-fs (loop0): 1 truncate cleaned up [ 1271.160597][T15148] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1272.587960][T15159] loop2: detected capacity change from 0 to 32768 [ 1272.753446][T13936] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1272.918625][T15159] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,journal_flush_disabled,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc,no_data_io [ 1272.942889][T15159] bcachefs (loop2): recovering from clean shutdown, journal seq 10 [ 1272.952765][T15159] bcachefs (loop2): Version upgrade required: [ 1272.952765][T15159] Version upgrade from 0.10: bkey_renumber to 1.7: mi_btree_bitmap incomplete [ 1272.952765][T15159] Doing incompatible version upgrade from 0.10: bkey_renumber to 1.20: directory_size [ 1272.952765][T15159] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 1273.033551][T15159] bcachefs (loop2): dropping and reconstructing all alloc info [ 1273.131786][T15159] invalid bkey in btree_node btree=inodes level=0: u64s 18 type inode_v3 0:536870914:U32_MAX len 0 ver 0: [ 1273.131905][T15159] mode=100740 [ 1273.131972][T15159] flags=(5300000) [ 1273.132035][T15159] journal_seq=4 [ 1273.132099][T15159] hash_seed=d483206f1ed95abf [ 1273.132170][T15159] hash_type=siphash [ 1273.132234][T15159] bi_size=100 [ 1273.132311][T15159] bi_sectors=8 [ 1273.132376][T15159] bi_version=1126999418470400 [ 1273.132443][T15159] bi_atime=0 [ 1273.132507][T15159] bi_ctime=0 [ 1273.132567][T15159] bi_mtime=0 [ 1273.132630][T15159] bi_otime=2780562352 [ 1273.132698][T15159] bi_uid=2780562352 [ 1273.132763][T15159] bi_gid=0 [ 1273.132826][T15159] bi_nlink=0 [ 1273.132888][T15159] bi_generation=0 [ 1273.132952][T15159] bi_dev=0 [ 1273.133016][T15159] bi_data_checksum=0 [ 1273.133084][T15159] bi_compression=0 [ 1273.133152][T15159] bi_project=0 [ 1273.133216][T15159] bi_background_compression=0 [ 1273.133285][T15159] bi_data_replicas=0 [ 1273.133357][T15159] bi_promote_target=0 [ 1273.133425][T15159] bi_foreground_target=0 [ 1273.133493][T15159] bi_background_target=0 [ 1273.133564][T15159] bi_erasure_code=0 [ 1273.133632][T15159] bi_fields_set=0 [ 1273.133695][T15159] bi_dir=0 [ 1273.133756][T15159] bi_dir_offset=0 [ 1273.133822][T15159] bi_subvol=0 [ 1273.133888][T15159] bi_parent_subvol=0 [ 1273.133953][T15159] bi_nocow=0 [ 1273.134020][T15159] bi_depth=0 [ 1273.134082][T15159] bi_inodes_32bit=0 [ 1273.134154][T15159] invalid fields_start (got 0, min 6 max 13): deleting [ 1273.422908][T15159] bcachefs (loop2): error validating btree node on loop2 at btree deleted_inodes level 0/0 [ 1273.423033][T15159] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 1db8f60c84bb244c written 65535 min_key R POS_MIN durability: 1 ptr: 0:42:0 gen 0 [ 1273.423153][T15159] node offset 8/65535: btree node data missing: expected 65535 sectors, found 8, exiting [ 1273.458762][T15159] bcachefs (loop2): Unable to continue, halting [ 1273.465766][T15159] bcachefs (loop2): flagging btree deleted_inodes lost data [ 1273.473635][T15159] bcachefs (loop2): running explicit recovery pass check_topology (2), currently at recovery_pass_empty (0) [ 1273.489586][T15159] bcachefs (loop2): running explicit recovery pass scan_for_btree_nodes (1), currently at recovery_pass_empty (0) [ 1273.504521][T15159] error reading btree root btree=deleted_inodes level=0: btree_node_read_error, fixing [ 1273.521839][T15159] bcachefs (loop2): scan_for_btree_nodes... [ 1274.203334][T15159] bcachefs (loop2): btree node scan found 7 nodes after overwrites [ 1274.219753][T15159] done [ 1274.223762][T15159] bcachefs (loop2): check_topology... [ 1274.226658][T15159] bcachefs (loop2): btree root deleted_inodes unreadable, must recover from scan [ 1274.246470][T15159] bcachefs (loop2): bch2_get_scanned_nodes(): recovery btree=deleted_inodes level=0 POS_MIN - SPOS_MAX [ 1274.259010][T15159] bcachefs (loop2): bch2_get_scanned_nodes(): recovering u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 1db8f60c84bb244c written 8 min_key POS_MIN durability: 1 ptr: 0:42:0 gen 0 [ 1274.287192][T15159] done [ 1274.290227][T15159] bcachefs (loop2): accounting_read... done [ 1274.302127][T15159] bcachefs (loop2): alloc_read... done [ 1274.308128][T15159] bcachefs (loop2): stripes_read... done [ 1274.315654][T15159] bcachefs (loop2): snapshots_read... done [ 1274.329306][T15159] bcachefs (loop2): done starting filesystem [ 1274.387583][T15185] netlink: 'syz.7.3259': attribute type 4 has an invalid length. [ 1274.656935][T13054] bcachefs (loop2): shutting down [ 1274.812155][T13054] bcachefs (loop2): shutdown complete [ 1277.952173][T15211] Bluetooth: MGMT ver 1.23 [ 1278.232806][T15202] loop6: detected capacity change from 0 to 8192 [ 1279.095847][T15219] tmpfs: Bad value for 'mpol' [ 1279.129984][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 1279.137141][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 1281.205682][T15240] loop6: detected capacity change from 0 to 1024 [ 1281.261294][T15240] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1281.487748][T15240] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1281.975635][T15238] loop2: detected capacity change from 0 to 4096 [ 1282.091058][T15238] ntfs3(loop2): Different NTFS sector size (2048) and media sector size (512). [ 1282.167349][ T8554] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1282.827217][T15238] ntfs3(loop2): Failed to initialize $Extend/$ObjId. [ 1283.582349][T15258] loop6: detected capacity change from 0 to 32768 [ 1283.591963][T15258] BTRFS error: invalid value 0 for thread_pool [ 1284.982292][T15274] loop6: detected capacity change from 0 to 256 [ 1285.418298][T15279] netlink: 'syz.8.3294': attribute type 10 has an invalid length. [ 1285.562991][T15274] FAT-fs (loop6): Directory bread(block 64) failed [ 1285.570168][T15274] FAT-fs (loop6): Directory bread(block 65) failed [ 1285.577406][T15274] FAT-fs (loop6): Directory bread(block 66) failed [ 1285.584785][T15274] FAT-fs (loop6): Directory bread(block 67) failed [ 1285.591950][T15274] FAT-fs (loop6): Directory bread(block 68) failed [ 1285.598800][T15274] FAT-fs (loop6): Directory bread(block 69) failed [ 1285.609171][T15274] FAT-fs (loop6): Directory bread(block 70) failed [ 1285.617237][T15274] FAT-fs (loop6): Directory bread(block 71) failed [ 1285.624353][T15274] FAT-fs (loop6): Directory bread(block 72) failed [ 1285.631178][T15274] FAT-fs (loop6): Directory bread(block 73) failed [ 1286.054266][T15284] syz.6.3292: attempt to access beyond end of device [ 1286.054266][T15284] loop6: rw=524288, sector=1736, nr_sectors = 32 limit=256 [ 1286.068869][T15284] syz.6.3292: attempt to access beyond end of device [ 1286.068869][T15284] loop6: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 1286.094923][ T30] audit: type=1800 audit(2000000398.140:103): pid=15284 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.3292" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop6" ino=332 res=0 errno=0 [ 1288.226063][T15308] netlink: 108 bytes leftover after parsing attributes in process `syz.0.3304'. [ 1288.656661][T15304] loop6: detected capacity change from 0 to 32768 [ 1288.723186][T15304] bcachefs (/dev/loop6): error validating superblock: Invalid superblock section members_v1: device 0: bucket size 16 smaller than btree node size 256 [ 1288.723186][T15304] members_v1 (size 64): [ 1288.723186][T15304] Device: 0 [ 1288.723186][T15304] Label: (none) [ 1288.723186][T15304] UUID: 87bd6f1c-e82e-46d8-bfd9-42f53008fa72 [ 1288.723186][T15304] Size: 1048576 [ 1288.723186][T15304] read errors: 0 [ 1288.723186][T15304] write errors: 0 [ 1288.723186][T15304] checksum errors: 0 [ 1288.723186][T15304] seqread iops: 0 [ 1288.723186][T15304] seqwrite iops: 0 [ 1288.723186][T15304] randread iops: 0 [ 1288.723186][T15304] randwrite iops: 0 [ 1288.723186][T15304] Bucket size: 8192 [ 1288.723186][T15304] First bucket: 0 [ 1288.723186][T15304] Buckets: 128 [ 1288.723186][T15304] Last mount: 1714681267 [ 1288.723186][T15304] Last superblock write: 0 [ 1288.723186][T15304] State: rw [ 1288.723186][T15304] Data allowed: journal,btree,user [ 1288.723186][T15304] Has data: (none) [ 1288.723186][T15304] Btree allocated bitmap blocksize:256 [ 1288.723186][T15304] Btree allocated bitmap: 0000000000000000000000000000000000000000000000000000000000000000 [ 1288.723186][T15304] Dur [ 1288.724230][T15304] bcachefs: bch2_fs_get_tree() error: invalid_sb_members [ 1290.523206][T15320] loop0: detected capacity change from 0 to 4096 [ 1291.547424][T15334] loop7: detected capacity change from 0 to 512 [ 1291.619712][T15334] EXT4-fs: Ignoring removed mblk_io_submit option [ 1291.655627][T15338] ntfs3(loop0): ino=22, The size of extended attributes must not exceed 64KiB [ 1291.787812][T15334] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -13 [ 1291.884068][T15334] EXT4-fs error (device loop7): ext4_clear_blocks:876: inode #13: comm syz.7.3315: attempt to clear invalid blocks 2 len 1 [ 1291.915135][T15334] EXT4-fs (loop7): Remounting filesystem read-only [ 1292.026454][T15334] EXT4-fs (loop7): 1 truncate cleaned up [ 1292.034522][T15334] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1292.675024][T15345] loop2: detected capacity change from 0 to 512 [ 1292.753983][T15345] EXT4-fs: Ignoring removed bh option [ 1292.760210][T15345] ext3: Unknown parameter 'subj_role' [ 1292.783773][ T8702] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1294.022329][ T5837] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1294.265383][ T5837] usb 3-1: Using ep0 maxpacket: 16 [ 1294.338937][ T5837] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1294.350649][ T5837] usb 3-1: New USB device found, idVendor=046d, idProduct=c531, bcdDevice= 0.00 [ 1294.360356][ T5837] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1294.564653][ T5837] usb 3-1: config 0 descriptor?? [ 1295.004320][T15370] loop6: detected capacity change from 0 to 1024 [ 1295.116640][ T5837] logitech-djreceiver 0003:046D:C531.0027: unknown main item tag 0x0 [ 1295.130405][ T5837] logitech-djreceiver 0003:046D:C531.0027: unknown main item tag 0x0 [ 1295.140390][ T5837] logitech-djreceiver 0003:046D:C531.0027: unknown main item tag 0x0 [ 1295.148956][ T5837] logitech-djreceiver 0003:046D:C531.0027: unknown main item tag 0x0 [ 1295.157591][ T5837] logitech-djreceiver 0003:046D:C531.0027: unknown main item tag 0x0 [ 1295.276008][T15373] loop8: detected capacity change from 0 to 1024 [ 1295.298478][ T5837] usb 3-1: USB disconnect, device number 10 [ 1295.416150][T15370] hfsplus: small file entry [ 1296.759531][T15388] loop2: detected capacity change from 0 to 47 [ 1298.648646][T15395] loop8: detected capacity change from 0 to 4096 [ 1299.660003][T15412] loop0: detected capacity change from 0 to 256 [ 1299.676032][T15395] ntfs3(loop8): failed to convert "0080" to macroman [ 1299.682071][T15412] exfat: Deprecated parameter 'namecase' [ 1299.812038][T15412] exFAT-fs (loop0): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 1301.003624][T15426] netlink: 'syz.0.3348': attribute type 30 has an invalid length. [ 1301.236102][T15425] loop8: detected capacity change from 0 to 1024 [ 1301.659595][T15425] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1301.977102][T15434] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1301.998941][T15425] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 1302.776345][ T9492] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1302.943097][T15438] loop0: detected capacity change from 0 to 32768 [ 1303.225139][T15438] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,journal_flush_disabled,journal_reclaim_delay=1000,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc,no_data_io [ 1303.250777][T15438] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 1303.260728][T15438] bcachefs (loop0): Version upgrade required: [ 1303.260728][T15438] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 1303.260728][T15438] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.20: directory_size [ 1303.260728][T15438] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 1303.346324][T15438] bcachefs (loop0): dropping and reconstructing all alloc info [ 1303.396090][T15438] invalid bkey in btree_node btree=inodes level=0: u64s 18 type inode_v3 0:536870914:U32_MAX len 0 ver 0: [ 1303.396208][T15438] mode=100740 [ 1303.396272][T15438] flags=(5300000) [ 1303.396335][T15438] journal_seq=4 [ 1303.396399][T15438] hash_seed=d483206f1ed95abf [ 1303.396476][T15438] hash_type=siphash [ 1303.396544][T15438] bi_size=100 [ 1303.396605][T15438] bi_sectors=8 [ 1303.396672][T15438] bi_version=1126999418470400 [ 1303.396740][T15438] bi_atime=0 [ 1303.396805][T15438] bi_ctime=0 [ 1303.396865][T15438] bi_mtime=0 [ 1303.396926][T15438] bi_otime=2780562352 [ 1303.396993][T15438] bi_uid=2780562352 [ 1303.397056][T15438] bi_gid=0 [ 1303.397116][T15438] bi_nlink=0 [ 1303.397173][T15438] bi_generation=0 [ 1303.397232][T15438] bi_dev=0 [ 1303.397289][T15438] bi_data_checksum=0 [ 1303.397349][T15438] bi_compression=0 [ 1303.397411][T15438] bi_project=0 [ 1303.397482][T15438] bi_background_compression=0 [ 1303.397554][T15438] bi_data_replicas=0 [ 1303.397614][T15438] bi_promote_target=0 [ 1303.397679][T15438] bi_foreground_target=0 [ 1303.397747][T15438] bi_background_target=0 [ 1303.397814][T15438] bi_erasure_code=0 [ 1303.397876][T15438] bi_fields_set=0 [ 1303.397939][T15438] bi_dir=0 [ 1303.398002][T15438] bi_dir_offset=0 [ 1303.398067][T15438] bi_subvol=0 [ 1303.398131][T15438] bi_parent_subvol=0 [ 1303.398196][T15438] bi_nocow=0 [ 1303.398258][T15438] bi_depth=0 [ 1303.398320][T15438] bi_inodes_32bit=0 [ 1303.398415][T15438] invalid fields_start (got 0, min 6 max 13): deleting [ 1303.622154][T15438] bcachefs (loop0): accounting_read... done [ 1303.639158][T15438] bcachefs (loop0): alloc_read... done [ 1303.646051][T15438] bcachefs (loop0): stripes_read... done [ 1303.652345][T15438] bcachefs (loop0): snapshots_read... done [ 1303.659043][T15438] bcachefs (loop0): Fixed errors, running fsck a second time to verify fs is clean [ 1303.689999][T15438] bcachefs (loop0): done starting filesystem [ 1303.921866][T13936] bcachefs (loop0): shutting down [ 1304.119318][T13936] bcachefs (loop0): shutdown complete [ 1305.199095][T15465] loop8: detected capacity change from 0 to 1024 [ 1306.790514][T15479] loop2: detected capacity change from 0 to 512 [ 1307.801703][T15484] loop6: detected capacity change from 0 to 32768 [ 1307.871846][T15484] (syz.6.3368,15484,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1307.915356][T15484] (syz.6.3368,15484,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1307.957560][T15484] (syz.6.3368,15484,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x656d756e, computed 0xd3364237. Applying ECC. [ 1307.963585][T15479] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.3367: corrupted in-inode xattr: e_value size too large [ 1307.971855][T15484] (syz.6.3368,15484,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x656d756e, computed 0x6fbf1a73 [ 1308.001034][T15484] (syz.6.3368,15484,0):ocfs2_validate_dir_block:452 ERROR: Checksum failed for dinode 288 [ 1308.011513][T15484] (syz.6.3368,15484,0):ocfs2_read_virt_blocks:1029 ERROR: status = -5 [ 1308.020041][T15484] (syz.6.3368,15484,0):ocfs2_read_dir_block:511 ERROR: status = -5 [ 1308.031841][T15484] (syz.6.3368,15484,0):ocfs2_find_entry_el:728 ERROR: reading directory 18, offset 0 [ 1308.043451][T15484] (syz.6.3368,15484,0):ocfs2_init_global_system_inodes:465 ERROR: status = -22 [ 1308.052846][T15484] (syz.6.3368,15484,0):ocfs2_init_global_system_inodes:467 ERROR: Unable to load system inode 1, possibly corrupt fs? [ 1308.053047][T15484] (syz.6.3368,15484,0):ocfs2_init_global_system_inodes:476 ERROR: status = -22 [ 1308.069751][T15479] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.3367: couldn't read orphan inode 15 (err -117) [ 1308.077455][T15484] (syz.6.3368,15484,0):ocfs2_initialize_super:2195 ERROR: status = -22 [ 1308.078102][T15484] (syz.6.3368,15484,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 1308.320180][T15479] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1309.313476][T13054] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1310.213374][T15505] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3374'. [ 1310.223331][T15505] netlink: 'syz.2.3374': attribute type 9 has an invalid length. [ 1310.422152][ T30] audit: type=1326 audit(2000000422.450:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15507 comm="syz.8.3376" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f80c038d169 code=0x0 [ 1312.235913][T15528] loop8: detected capacity change from 0 to 1024 [ 1312.511853][T15528] hfsplus: bad catalog entry type [ 1313.064860][ T1307] hfsplus: b-tree write err: -5, ino 4 [ 1313.442145][T15540] loop0: detected capacity change from 0 to 1764 [ 1315.306012][T15562] loop6: detected capacity change from 0 to 1024 [ 1315.957860][ T12] hfsplus: b-tree write err: -5, ino 4 [ 1316.841711][T15583] loop0: detected capacity change from 0 to 512 [ 1316.929023][T15580] loop2: detected capacity change from 0 to 2048 [ 1317.007561][T15583] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1317.021089][T15583] ext4 filesystem being mounted at /87/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1317.213118][T15580] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1317.252419][T15592] loop8: detected capacity change from 0 to 64 [ 1317.781204][T13936] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1318.000725][T13054] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1319.350995][T15613] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3411'. [ 1319.364028][T15613] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3411'. [ 1319.708582][T15618] Driver unsupported XDP return value 0 on prog (id 107) dev N/A, expect packet loss! [ 1319.984692][T15620] netlink: 256 bytes leftover after parsing attributes in process `syz.7.3414'. [ 1319.994569][T15620] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3414'. [ 1320.912039][ T8771] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 1321.123917][ T8771] usb 9-1: Using ep0 maxpacket: 8 [ 1321.185860][ T8771] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1321.198460][T15632] loop7: detected capacity change from 0 to 1764 [ 1321.207276][ T8771] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 1321.219827][ T8771] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 1321.231258][ T8771] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024 [ 1321.245914][ T8771] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1321.258189][ T8771] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1321.486727][ T8771] usb 9-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 1321.497225][ T8771] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1321.508535][ T8771] usb 9-1: Product: syz [ 1321.514378][ T8771] usb 9-1: Manufacturer: syz [ 1321.519266][ T8771] usb 9-1: SerialNumber: syz [ 1321.653212][ T8771] usb 9-1: config 0 descriptor?? [ 1321.662119][T15627] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1323.772025][ T8771] rc_core: IR keymap rc-snapstream-firefly not found [ 1323.779037][ T8771] Registered IR keymap rc-empty [ 1323.787210][ T8771] rc rc0: syz syz as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0 [ 1323.805704][ T8771] input: syz syz as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input29 [ 1324.026492][ T8771] input: syz syz mouse as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input30 [ 1324.344379][ C1] ati_remote 9-1:0.0: ati_remote_irq_in: usb_submit_urb()=-19 [ 1324.352595][ T8771] usb 9-1: USB disconnect, device number 14 [ 1324.484700][ T6184] udevd[6184]: setting owner of /dev/bus/usb/009/014 to uid=0, gid=0 failed: No such file or directory [ 1324.555950][T15666] loop6: detected capacity change from 0 to 1024 [ 1327.937973][T15706] loop6: detected capacity change from 0 to 64 [ 1328.024829][T15706] BFS-fs: bfs_fill_super(): loop6 is unclean, continuing [ 1328.306103][T15709] loop7: detected capacity change from 0 to 256 [ 1328.374574][T15709] exfat: Deprecated parameter 'namecase' [ 1328.380766][T15709] exfat: Deprecated parameter 'utf8' [ 1328.539493][T15709] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 1329.229361][T15718] loop6: detected capacity change from 0 to 256 [ 1329.303392][T15718] exfat: Deprecated parameter 'utf8' [ 1329.481251][T15718] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e00961, utbl_chksum : 0xe619d30d) [ 1329.662934][ T30] audit: type=1804 audit(2000000441.700:105): pid=15718 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.3453" name="/newroot/513/file0/bus" dev="loop6" ino=333 res=1 errno=0 [ 1329.688872][T15727] loop0: detected capacity change from 0 to 512 [ 1329.943981][T15727] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #13: comm syz.0.3457: attempt to clear invalid blocks 1 len 1 [ 1329.987309][T15727] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.3457: bg 0: block 343: padding at end of block bitmap is not set [ 1330.112306][T15727] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 1330.238574][T15727] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.3457: invalid indirect mapped block 1819239214 (level 0) [ 1330.367972][T15727] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.3457: invalid indirect mapped block 1819239214 (level 1) [ 1330.445336][T15727] EXT4-fs (loop0): 1 truncate cleaned up [ 1330.453848][T15727] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1330.655394][T15740] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3459'. [ 1330.690130][ T8771] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 1330.931913][ T8771] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1330.943843][ T8771] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1330.954592][ T8771] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1330.967024][ T8771] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1331.085122][T15736] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1331.124220][T15744] usb usb8: usbfs: process 15744 (syz.8.3461) did not claim interface 0 before use [ 1331.197732][ T8771] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1331.314910][T13936] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1331.832811][ T5837] usb 3-1: USB disconnect, device number 11 [ 1333.778775][T15767] loop8: detected capacity change from 0 to 2048 [ 1333.884327][T15767] GPT:first_usable_lbas don't match. [ 1333.889903][T15767] GPT:34 != 290 [ 1333.897577][T15767] GPT: Use GNU Parted to correct GPT errors. [ 1333.905569][T15767] loop8: p1 p2 p3 [ 1335.290366][T15785] loop2: detected capacity change from 0 to 256 [ 1336.219861][T15789] loop6: detected capacity change from 0 to 4096 [ 1336.487240][T15789] NILFS (loop6): invalid segment: Checksum error in segment payload [ 1336.499140][T15789] NILFS (loop6): trying rollback from an earlier position [ 1336.513397][ T30] audit: type=1326 audit(2000000448.510:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15797 comm="syz.8.3482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80c038d169 code=0x7ffc0000 [ 1336.537288][ T30] audit: type=1326 audit(2000000448.510:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15797 comm="syz.8.3482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80c038d169 code=0x7ffc0000 [ 1336.682055][ T30] audit: type=1326 audit(2000000448.660:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15797 comm="syz.8.3482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f80c038d169 code=0x7ffc0000 [ 1336.709291][ T30] audit: type=1326 audit(2000000448.660:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15797 comm="syz.8.3482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80c038d169 code=0x7ffc0000 [ 1336.733221][ T30] audit: type=1326 audit(2000000448.680:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15797 comm="syz.8.3482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7f80c038d169 code=0x7ffc0000 [ 1336.756795][ T30] audit: type=1326 audit(2000000448.680:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15797 comm="syz.8.3482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80c038d169 code=0x7ffc0000 [ 1336.783483][T15789] NILFS (loop6): recovery complete [ 1336.963942][T15803] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1337.423179][ T7960] udevd[7960]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1339.766027][T15834] loop0: detected capacity change from 0 to 256 [ 1339.930042][T15837] loop7: detected capacity change from 0 to 512 [ 1340.032171][ T8771] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 1340.048512][T15837] EXT4-fs: Ignoring removed bh option [ 1340.067208][T15837] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 1340.115037][T15837] EXT4-fs (loop7): 1 truncate cleaned up [ 1340.123463][T15837] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1340.213034][ T8771] usb 9-1: Using ep0 maxpacket: 16 [ 1340.267165][ T8771] usb 9-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=ff.76 [ 1340.277344][ T8771] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1340.288576][ T8771] usb 9-1: Product: syz [ 1340.294245][ T8771] usb 9-1: Manufacturer: syz [ 1340.299138][ T8771] usb 9-1: SerialNumber: syz [ 1340.308447][T15834] FAT-fs (loop0): Directory bread(block 64) failed [ 1340.315549][T15834] FAT-fs (loop0): Directory bread(block 65) failed [ 1340.323004][T15834] FAT-fs (loop0): Directory bread(block 66) failed [ 1340.329851][T15834] FAT-fs (loop0): Directory bread(block 67) failed [ 1340.337193][T15834] FAT-fs (loop0): Directory bread(block 68) failed [ 1340.347684][T15834] FAT-fs (loop0): Directory bread(block 69) failed [ 1340.355970][T15834] FAT-fs (loop0): Directory bread(block 70) failed [ 1340.363190][T15834] FAT-fs (loop0): Directory bread(block 71) failed [ 1340.370192][T15834] FAT-fs (loop0): Directory bread(block 72) failed [ 1340.377338][T15834] FAT-fs (loop0): Directory bread(block 73) failed [ 1340.478509][ T8771] usb 9-1: config 0 descriptor?? [ 1340.556219][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 1340.563160][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 1340.780183][ T8771] usb 9-1: ignoring: not an USB2CAN converter [ 1341.047818][ T8771] usb 9-1: USB disconnect, device number 15 [ 1341.078700][ T8702] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1341.126540][T15847] loop2: detected capacity change from 0 to 1024 [ 1341.137814][T15847] EXT4-fs (loop2): Can't support bigalloc feature without extents feature [ 1341.137814][T15847] [ 1341.149292][T15847] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 1342.671674][ T5837] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 1342.872120][ T5837] usb 9-1: Using ep0 maxpacket: 16 [ 1342.923722][ T5837] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1342.935704][ T5837] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1342.948674][ T5837] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1342.963022][ T5837] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1342.972620][ T5837] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1343.164745][ T5837] usb 9-1: config 0 descriptor?? [ 1343.609619][ T5837] microsoft 0003:045E:07DA.0028: ignoring exceeding usage max [ 1343.629463][ T5837] microsoft 0003:045E:07DA.0028: item 0 4 0 11 parsing failed [ 1343.763095][ T5837] microsoft 0003:045E:07DA.0028: parse failed [ 1343.774648][ T5837] microsoft 0003:045E:07DA.0028: probe with driver microsoft failed with error -22 [ 1343.912362][ T5837] usb 9-1: USB disconnect, device number 16 [ 1344.703479][ T7960] udevd[7960]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 1344.799872][ T6183] udevd[6183]: inotify_add_watch(7, /dev/loop8p2, 10) failed: No such file or directory [ 1345.441522][T15883] loop7: detected capacity change from 0 to 32768 [ 1345.509322][ T6186] udevd[6186]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory [ 1345.807338][T15883] bcachefs (loop7): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=xxhash,compression=lz4,str_hash=crc64,norecovery,nojournal_transaction_names,reconstruct_alloc [ 1345.832805][T15883] bcachefs (loop7): recovering from clean shutdown, journal seq 10 [ 1345.842631][T15883] bcachefs (loop7): Version upgrade required: [ 1345.842631][T15883] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 1345.842631][T15883] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.20: directory_size [ 1345.842631][T15883] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 1345.923887][T15883] bcachefs (loop7): dropping and reconstructing all alloc info [ 1345.953427][T15885] loop2: detected capacity change from 0 to 1024 [ 1346.054185][T15883] bcachefs (loop7): error validating btree node at btree inodes level 0/0 [ 1346.054303][T15883] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0 [ 1346.054552][T15883] node offset 8/24 bset u64s 29 bset byte offset 152: keys out of order: u64s 16 type inode_v3 83886080:4096:U32_MAX len 0 ver 0 > u64s 17 type inode_v3 0:4097:U32_MAX len 0 ver 0, fixing [ 1346.106479][T15883] invalid bkey in btree_node btree=inodes level=0: u64s 16 type inode_v3 83886080:4096:U32_MAX len 0 ver 0: [ 1346.106604][T15883] mode=40755 [ 1346.106671][T15883] flags=(16300000) [ 1346.106744][T15883] journal_seq=1 [ 1346.106813][T15883] hash_seed=28e4f092a4fc58ee [ 1346.106890][T15883] hash_type=siphash [ 1346.106961][T15883] bi_size=11529215046068469760 [ 1346.107038][T15883] bi_sectors=0 [ 1346.107112][T15883] bi_version=0 [ 1346.107198][T15883] bi_atime=200535484 [ 1346.107272][T15883] bi_ctime=200535484 [ 1346.107347][T15883] bi_mtime=200535484 [ 1346.107421][T15883] bi_otime=200535484 [ 1346.107492][T15883] bi_uid=0 [ 1346.107563][T15883] bi_gid=0 [ 1346.107631][T15883] bi_nlink=1 [ 1346.107703][T15883] bi_generation=0 [ 1346.107773][T15883] bi_dev=0 [ 1346.107846][T15883] bi_data_checksum=0 [ 1346.107918][T15883] bi_compression=0 [ 1346.107993][T15883] bi_project=0 [ 1346.108071][T15883] bi_background_compression=0 [ 1346.108147][T15883] bi_data_replicas=0 [ 1346.108220][T15883] bi_promote_target=0 [ 1346.108302][T15883] bi_foreground_target=0 [ 1346.108376][T15883] bi_background_target=0 [ 1346.108454][T15883] bi_erasure_code=0 [ 1346.108526][T15883] bi_fields_set=0 [ 1346.108596][T15883] bi_dir=0 [ 1346.108668][T15883] bi_dir_offset=0 [ 1346.108737][T15883] bi_subvol=1 [ 1346.108811][T15883] bi_parent_subvol=0 [ 1346.108882][T15883] bi_nocow=0 [ 1346.108951][T15883] bi_depth=0 [ 1346.109019][T15883] bi_inodes_32bit=0 [ 1346.109126][T15883] nonzero k.p.inode: delete?, fixing [ 1346.281591][T15883] bcachefs (loop7): btree_node_read_work: rewriting btree node at due to error [ 1346.281591][T15883] btree=inodes level=0 u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0 [ 1346.520521][T15892] loop6: detected capacity change from 0 to 32768 [ 1346.623098][T15883] bcachefs (loop7): accounting_read... done [ 1346.624582][T15892] ocfs2: Slot 0 on device (7,6) was already allocated to this node! [ 1346.630187][T15883] bcachefs (loop7): alloc_read... done [ 1346.647797][T15883] bcachefs (loop7): stripes_read... done [ 1346.655313][T15883] bcachefs (loop7): snapshots_read... done [ 1346.662051][T15883] bcachefs (loop7): Fixed errors, running fsck a second time to verify fs is clean [ 1346.674902][T15883] bcachefs (loop7): done starting filesystem [ 1346.701781][T15892] (syz.6.3516,15892,0):ocfs2_load_local_alloc:339 ERROR: inconsistent detected, clean journal with unrecovered local alloc, please run fsck.ocfs2! [ 1346.701781][T15892] found = 2, set = 0, taken = 0, off = 0 [ 1346.722852][T15892] (syz.6.3516,15892,0):ocfs2_load_local_alloc:356 ERROR: status = -22 [ 1346.731347][T15892] (syz.6.3516,15892,0):ocfs2_check_volume:2401 ERROR: status = -22 [ 1346.742996][T15892] (syz.6.3516,15892,0):ocfs2_check_volume:2429 ERROR: status = -22 [ 1346.751258][T15892] (syz.6.3516,15892,0):ocfs2_mount_volume:1764 ERROR: status = -22 [ 1346.781716][T15892] (syz.6.3516,15892,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 1346.876208][ T8343] hfsplus: b-tree write err: -5, ino 4 [ 1346.963903][T15904] hfsplus: filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. leaving read-only. [ 1346.990287][ T8702] bcachefs (loop7): shutting down [ 1347.354893][ T8702] bcachefs (loop7): shutdown complete [ 1347.826234][T15899] loop8: detected capacity change from 0 to 4096 [ 1347.902301][T15899] ntfs3(loop8): Different NTFS sector size (1024) and media sector size (512). [ 1348.604645][T15899] ntfs3(loop8): Mark volume as dirty due to NTFS errors [ 1348.687262][T15899] ntfs3(loop8): ino=1f, "file2" failed to open parent directory r=5 to update [ 1349.199256][T15916] loop0: detected capacity change from 0 to 512 [ 1349.622901][ T1307] ntfs3(loop8): ino=1f, failed to open parent directory r=5 to update [ 1349.758143][T15916] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1349.772676][T15916] ext4 filesystem being mounted at /112/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1350.022532][ T5837] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1350.298245][ T5837] usb 3-1: config 0 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1350.309369][ T5837] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1350.316759][ T5837] usb 3-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 1350.328835][ T5837] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1350.495500][ T5837] usb 3-1: config 0 descriptor?? [ 1350.640022][T13936] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1351.044504][ T8709] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 1351.077366][ T5837] kye 0003:0458:5013.0029: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 1351.347677][ T8709] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1351.359494][ T8709] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1351.369961][ T8709] usb 7-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 1351.379719][ T8709] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1351.394589][ T5837] kye 0003:0458:5013.0029: hidraw0: USB HID v8.00 Device [HID 0458:5013] on usb-dummy_hcd.2-1/input0 [ 1351.407823][ T5837] kye 0003:0458:5013.0029: tablet-enabling feature report not found [ 1351.416730][ T5837] kye 0003:0458:5013.0029: tablet enabling failed [ 1351.634841][ T8709] usb 7-1: config 0 descriptor?? [ 1351.688012][ T5837] usb 3-1: USB disconnect, device number 12 [ 1352.296032][ T8709] hid (null): report_id 36617 is invalid [ 1352.432357][ T8709] razer 0003:1532:010E.002A: report_id 36617 is invalid [ 1352.439794][ T8709] razer 0003:1532:010E.002A: item 0 2 1 8 parsing failed [ 1352.591326][ T8709] razer 0003:1532:010E.002A: probe with driver razer failed with error -22 [ 1352.833125][ T8709] usb 7-1: USB disconnect, device number 12 [ 1352.852426][T15930] Bluetooth: hci0: command 0x0406 tx timeout [ 1353.323280][T15941] loop2: detected capacity change from 0 to 256 [ 1356.578913][T15972] loop2: detected capacity change from 0 to 2048 [ 1357.052837][T15980] mkiss: ax0: crc mode is auto. [ 1357.162295][T15982] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3543'. [ 1358.084650][T15987] loop2: detected capacity change from 0 to 256 [ 1358.234634][T15987] exfat: Deprecated parameter 'namecase' [ 1358.240947][T15987] exfat: Deprecated parameter 'utf8' [ 1358.293720][T15988] loop8: detected capacity change from 0 to 1024 [ 1358.597887][T15987] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001ff53, chksum : 0xd72bb7d8, utbl_chksum : 0xe619d30d) [ 1359.106860][T11952] hfsplus: b-tree write err: -5, ino 4 [ 1360.140334][T16005] loop8: detected capacity change from 0 to 1764 [ 1361.494904][T16016] loop2: detected capacity change from 0 to 32768 [ 1361.511970][T16016] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.3557 (16016) [ 1361.549992][T16016] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1361.560769][T16016] BTRFS info (device loop2): using crc32c (crc32c-x86_64) checksum algorithm [ 1361.570275][T16016] BTRFS info (device loop2): disk space caching is enabled [ 1361.578203][T16016] BTRFS warning (device loop2): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 1361.958996][T16016] BTRFS info (device loop2): rebuilding free space tree [ 1362.008808][T16016] BTRFS info (device loop2): disabling free space tree [ 1362.016432][T16016] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1362.029212][T16016] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1362.127750][T16016] BTRFS info (device loop2): checking UUID tree [ 1362.397054][T13054] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1364.369494][T16055] loop7: detected capacity change from 0 to 32768 [ 1367.476074][T16090] loop2: detected capacity change from 0 to 16 [ 1368.640507][ T7960] udevd[7960]: failed to send result of seq 20774 to main daemon: Connection refused [ 1370.107557][T16126] loop8: detected capacity change from 0 to 1024 [ 1370.114147][T16127] loop2: detected capacity change from 0 to 512 [ 1370.133852][T16127] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1370.258338][T16127] EXT4-fs (loop2): 1 orphan inode deleted [ 1370.265768][T16127] EXT4-fs (loop2): 1 truncate cleaned up [ 1370.274105][T16127] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1370.309282][T16126] hfsplus: xattr searching failed [ 1370.412035][T16127] EXT4-fs error (device loop2): ext4_inlinedir_to_tree:1404: inode #12: block 7: comm syz.2.3593: path (unknown): bad entry in directory: directory entry overrun - offset=788, inode=13, rec_len=784, size=60 fake=0 [ 1370.995824][T13054] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1372.965282][T16160] loop7: detected capacity change from 0 to 1024 [ 1373.187258][T16160] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1373.347825][T16169] loop6: detected capacity change from 0 to 1024 [ 1373.470840][T16169] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only. [ 1373.791260][ T8702] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1373.946218][T16176] loop8: detected capacity change from 0 to 2048 [ 1374.155057][T16176] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1375.148066][T16196] loop0: detected capacity change from 0 to 16 [ 1375.234522][T16196] erofs (device loop0): mounted with root inode @ nid 36. [ 1375.809855][T16205] loop7: detected capacity change from 0 to 512 [ 1375.935426][T16205] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1376.113888][T16205] EXT4-fs error (device loop7): ext4_xattr_ibody_find:2240: inode #15: comm syz.7.3621: corrupted in-inode xattr: e_name out of bounds [ 1376.254024][T16205] EXT4-fs (loop7): Remounting filesystem read-only [ 1376.262800][T16205] EXT4-fs (loop7): 1 truncate cleaned up [ 1376.272891][T16205] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1376.954540][ T8702] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1377.946037][T16237] loop0: detected capacity change from 0 to 1024 [ 1378.241337][T16237] hfsplus: xattr searching failed [ 1378.755539][T16248] netlink: 'syz.2.3637': attribute type 11 has an invalid length. [ 1379.103110][T16255] loop8: detected capacity change from 0 to 1024 [ 1379.132123][T16255] EXT4-fs: Ignoring removed bh option [ 1379.192605][T16255] EXT4-fs (loop8): stripe (116) is not aligned with cluster size (16), stripe is disabled [ 1379.338399][T16255] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1379.487894][T16261] loop2: detected capacity change from 0 to 512 [ 1379.532673][T16261] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1379.624515][T16261] EXT4-fs error (device loop2): ext4_orphan_get:1415: comm syz.2.3641: bad orphan inode 131083 [ 1379.655674][T16261] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1379.764746][ T5837] kernel write not supported for file /snd/seq (pid: 5837 comm: kworker/0:3) [ 1380.046254][ T9492] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1380.420164][T13054] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1380.749157][T16278] loop0: detected capacity change from 0 to 64 [ 1381.017284][T16283] loop2: detected capacity change from 0 to 22 [ 1381.146736][T16283] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 1382.938801][T16310] loop2: detected capacity change from 0 to 128 [ 1383.143314][T16315] ===================================================== [ 1383.153776][T16315] BUG: KMSAN: uninit-value in ieee802154_hdr_push+0xd66/0xe80 [ 1383.163069][T16315] ieee802154_hdr_push+0xd66/0xe80 [ 1383.168954][T16315] ieee802154_header_create+0x9bc/0xc70 [ 1383.175365][T16315] dgram_sendmsg+0xd91/0x15e0 [ 1383.180493][T16315] ieee802154_sock_sendmsg+0x96/0xd0 [ 1383.186539][T16315] __sock_sendmsg+0x30f/0x380 [ 1383.194606][T16315] __sys_sendto+0x594/0x750 [ 1383.199356][T16315] __x64_sys_sendto+0x125/0x1d0 [ 1383.205635][T16315] x64_sys_call+0x346a/0x3c30 [ 1383.210555][T16315] do_syscall_64+0xcd/0x1e0 [ 1383.215623][T16315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1383.222042][T16315] [ 1383.224498][T16315] Local variable hdr created at: [ 1383.229578][T16315] ieee802154_header_create+0x4e/0xc70 [ 1383.235619][T16315] dgram_sendmsg+0xd91/0x15e0 [ 1383.240568][T16315] [ 1383.243383][T16315] CPU: 1 UID: 0 PID: 16315 Comm: syz.0.3661 Not tainted 6.14.0-rc7-syzkaller-00205-g586de92313fc #0 [ 1383.257627][T16315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1383.269169][T16315] ===================================================== [ 1383.276610][T16315] Disabling lock debugging due to kernel taint [ 1383.283251][T16315] Kernel panic - not syncing: kmsan.panic set ... [ 1383.289871][T16315] CPU: 1 UID: 0 PID: 16315 Comm: syz.0.3661 Tainted: G B 6.14.0-rc7-syzkaller-00205-g586de92313fc #0 [ 1383.302408][T16315] Tainted: [B]=BAD_PAGE [ 1383.306780][T16315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1383.317044][T16315] Call Trace: [ 1383.320494][T16315] [ 1383.323585][T16315] dump_stack_lvl+0x216/0x2d0 [ 1383.328498][T16315] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1383.334614][T16315] dump_stack+0x1e/0x24 [ 1383.339001][T16315] panic+0x4e2/0xcf0 [ 1383.343185][T16315] ? kmsan_get_metadata+0xf1/0x1c0 [ 1383.348603][T16315] kmsan_report+0x2c7/0x2d0 [ 1383.353384][T16315] ? __msan_memcpy+0x108/0x1c0 [ 1383.358420][T16315] ? __x64_sys_sendto+0x125/0x1d0 [ 1383.363704][T16315] ? __msan_warning+0x95/0x120 [ 1383.368785][T16315] ? ieee802154_hdr_push+0xd66/0xe80 [ 1383.374390][T16315] ? ieee802154_header_create+0x9bc/0xc70 [ 1383.380408][T16315] ? dgram_sendmsg+0xd91/0x15e0 [ 1383.385539][T16315] ? ieee802154_sock_sendmsg+0x96/0xd0 [ 1383.391386][T16315] ? __sock_sendmsg+0x30f/0x380 [ 1383.396526][T16315] ? __sys_sendto+0x594/0x750 [ 1383.401437][T16315] ? __x64_sys_sendto+0x125/0x1d0 [ 1383.406714][T16315] ? x64_sys_call+0x346a/0x3c30 [ 1383.411814][T16315] ? do_syscall_64+0xcd/0x1e0 [ 1383.416745][T16315] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1383.423071][T16315] ? ieee802154_header_create+0x99f/0xc70 [ 1383.429028][T16315] ? dgram_sendmsg+0xd91/0x15e0 [ 1383.434115][T16315] ? ieee802154_sock_sendmsg+0x96/0xd0 [ 1383.439826][T16315] ? __sock_sendmsg+0x30f/0x380 [ 1383.444907][T16315] ? __sys_sendto+0x594/0x750 [ 1383.449775][T16315] ? __x64_sys_sendto+0x125/0x1d0 [ 1383.454998][T16315] ? x64_sys_call+0x346a/0x3c30 [ 1383.460080][T16315] ? kmsan_get_metadata+0x13e/0x1c0 [ 1383.465528][T16315] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1383.471771][T16315] ? ieee802154_hdr_push+0x49/0xe80 [ 1383.477236][T16315] ? filter_irq_stacks+0x60/0x1a0 [ 1383.482489][T16315] ? kmsan_get_metadata+0x13e/0x1c0 [ 1383.488450][T16315] ? kmsan_internal_memmove_metadata+0x91/0x230 [ 1383.494938][T16315] ? kmsan_get_metadata+0x13e/0x1c0 [ 1383.500401][T16315] ? kmsan_internal_memmove_metadata+0x17b/0x230 [ 1383.506971][T16315] ? kmsan_get_metadata+0x13e/0x1c0 [ 1383.512407][T16315] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1383.518465][T16315] __msan_warning+0x95/0x120 [ 1383.523301][T16315] ieee802154_hdr_push+0xd66/0xe80 [ 1383.528696][T16315] ? __msan_memcpy+0x108/0x1c0 [ 1383.533710][T16315] ieee802154_header_create+0x9bc/0xc70 [ 1383.539541][T16315] ? __pfx_ieee802154_header_create+0x10/0x10 [ 1383.545872][T16315] dgram_sendmsg+0xd91/0x15e0 [ 1383.550855][T16315] ? __pfx_dgram_sendmsg+0x10/0x10 [ 1383.556242][T16315] ieee802154_sock_sendmsg+0x96/0xd0 [ 1383.561812][T16315] ? __pfx_ieee802154_sock_sendmsg+0x10/0x10 [ 1383.568065][T16315] ? __pfx_ieee802154_sock_sendmsg+0x10/0x10 [ 1383.574309][T16315] __sock_sendmsg+0x30f/0x380 [ 1383.579234][T16315] __sys_sendto+0x594/0x750 [ 1383.583950][T16315] ? kmsan_get_metadata+0x13e/0x1c0 [ 1383.589430][T16315] __x64_sys_sendto+0x125/0x1d0 [ 1383.594501][T16315] x64_sys_call+0x346a/0x3c30 [ 1383.599408][T16315] do_syscall_64+0xcd/0x1e0 [ 1383.604171][T16315] ? clear_bhb_loop+0x25/0x80 [ 1383.609088][T16315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1383.615226][T16315] RIP: 0033:0x7f783a58effc [ 1383.619817][T16315] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 1383.639743][T16315] RSP: 002b:00007f783b4a4ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1383.648379][T16315] RAX: ffffffffffffffda RBX: 00007f783b4a4fc0 RCX: 00007f783a58effc [ 1383.656537][T16315] RDX: 0000000000000020 RSI: 00007f783b4a5010 RDI: 0000000000000004 [ 1383.664691][T16315] RBP: 0000000000000000 R08: 00007f783b4a4f14 R09: 000000000000000c [ 1383.672833][T16315] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004 [ 1383.680970][T16315] R13: 00007f783b4a4f68 R14: 00007f783b4a5010 R15: 0000000000000000 [ 1383.689168][T16315] [ 1383.692628][T16315] Kernel Offset: disabled [ 1383.697057][T16315] Rebooting in 86400 seconds..