last executing test programs: 4.576885504s ago: executing program 1 (id=679): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2008002, &(0x7f0000000400)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1000}}, {@nodiscard}, {@quota}]}, 0x1, 0x56f, &(0x7f00000004c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x142) fsetxattr$system_posix_acl(r0, &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000c40)={{}, {0x1, 0x5}, [], {0x4, 0x3}, [{0x8, 0x7}], {0x10, 0x7}, {0x20, 0x4}}, 0x2c, 0x3) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) 4.281200781s ago: executing program 3 (id=683): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x7c8}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000040)={{&(0x7f0000cdd000/0x4000)=nil, 0x4000}, 0x2}) 4.080781483s ago: executing program 3 (id=684): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) 3.846306847s ago: executing program 1 (id=685): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x972, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bind$unix(0xffffffffffffffff, 0x0, 0x0) 2.857818567s ago: executing program 0 (id=693): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x6c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0x43, 0x33, @mgmt_frame=@beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, {0x8}, @device_a, @device_b, @from_mac, {0x1, 0xb1b}}, 0x5, @random=0x8000, 0x8000, @void, @val, @val={0x3, 0x1, 0xab}, @val={0x4, 0x6, {0x7, 0x9, 0x1, 0x3}}, @val={0x6, 0x2, 0x7}, @val={0x5, 0x3, {0x2, 0x3d, 0xff}}, @val={0x25, 0x3, {0x0, 0x24, 0x7}}, @void, @void, @void, @void, @void, @void}}]}, 0x6c}}, 0x0) 2.774092722s ago: executing program 2 (id=694): r0 = syz_open_procfs(0x0, &(0x7f0000001140)='map_files\x00') r1 = fanotify_init(0x40, 0x40000) fanotify_mark(r1, 0x1, 0x40001039, r0, 0x0) getdents64(r0, 0x0, 0x0) 2.589609293s ago: executing program 3 (id=696): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.sched_load_balance\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x41f) 2.571299404s ago: executing program 0 (id=697): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x40000) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff}, 0x10) sendmsg$kcm(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e00000022008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) 2.440853202s ago: executing program 2 (id=698): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) r1 = fspick(r0, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) 2.355669257s ago: executing program 3 (id=700): write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYRES8, @ANYRES8, @ANYRES64], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000040)={0x3ffffffffffffe96, &(0x7f0000000000)=[{0x2000, 0x5}]}) 2.317421009s ago: executing program 0 (id=701): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r0) close(r0) syz_mount_image$xfs(&(0x7f0000000080), &(0x7f0000000140)='./file0\x00', 0x2, &(0x7f0000000100)={[{@logdev={'logdev', 0x3d, './file0'}}, {@largeio}, {@rtdev={'rtdev', 0x3d, './file0'}}, {@grpquota}]}, 0x41, 0x978a, &(0x7f00000003c0)="$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") 2.267079683s ago: executing program 1 (id=702): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000200)={[{@nouid32}, {@nodioread_nolock}, {@noquota}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x8}}, {@nodioread_nolock}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$eJzs3T1sG3UbAPDnznHTj7xv+krvK72gDhUgFamqk/QDClO7IipV6oDEApHjRlWcuIodaKJIpHuF6IAAdSkbDIwgBgbEwsjKwseMVNEIpKYDGDk+p2nqFCfEMcS/n3TJ/3939vP8fX7OvtOdHEDfOtr4k0Y8EREXk4jhdcsGIlt4tLneyvJi8f7yYjGJev3Sz0kkEXFvebHYWj/J/h+KiKWI+H9EfJWPOJ6uPeW+VqM6vzA1Xi6XZrP+SG366kh1fuHElenxydJkaebU8y+cOXv6zNjJsfXp3q+v7+W3NtYb3998+8Y3L92++fEnR5aK744ncS6GsmXrx7GTmq9JPs5tmH+6G8F6KOl1AmxLLqvzRin9L4Yjl1V9O/X1O4fBXUkP6KL6YER9zbom0AcSRQ99qvU9oHH825p28/vHnfPNA5BG3JXlxeJb0Yo/0Dw3EftXj00O/pI8dGTSON48vJuJsictXY+I0YGBR9//Sfb+277RnUiQrvryfHNDPbr907X9T7TZ/wy1zp3+Ra3930q2/1tpEz+3yf7vYocxfnv1xw82jX99MJ5sGz9Zi5+0iZ9GxOsdxr/1yudnN1tW/zDiWLSP35I8/vzwyOUr5dJo82/bGF8cO/Li5uOPOLhJ/OY52/2riawf/74sp7TD8X/29adPLT0m/rNPP377t3v9D0TEOx3G/8+9j17ebNmd68ndxreArW7/JPJxu8P4z507+l3WdNYQAAAAAAAAAAB2ULp6LVuSFtbaaVooNO/h/W8cTMuVau345crczETzmrfDkU9bV1oNN/tJoz+WXY/b6p/c0D+VywLmDqz2C8VKeaLHYwcAAAAAAAAAAAAAAAAAAIC/i0Mb7v//Nbd6///Gn6sG9qrNf/Ib2OvUP/Svh+s/6VkewO7z+Q99q67+oX+pf+hf6h/6l/qH/tW2/g/sfh7A7vP5D/1L/QMAAAAAAAAAAAAAAAAAAAAAAAAAQFdcvHChMdXvLy8WG/2Jgfm5qcobJyZK1anC9FyxUKzMXi1MViqT5VKhWJn+s+dLKpWrozEzd22kVqrWRqrzC69NV+ZmWr8pWsp3fUQAAAAAAAAAAAAAAAAAAADwzzO0OiVpISLf7KdpoRDxr4g4nERy+Uq5NBoR/46Ib3P5wUZ/rNdJAwAAAAAAAAAAAAAAAAAAwB5TnV+YGi+XS7PdawxkoTp71A+1ruYzsJWVI2JpZ9NoPOOWH5XPXsDubqY+aeQ6fB/2faOHOyUAAAAAAAAAAAAAAAAAAOhTD2767fQRv3c3IQAAAAAAAAAAAAAAAAAAAOhL6U9JRDSmY8PPDG1cui9Zya3+j4g3b11679p4rTY71ph/d21+7f1s/sle5A90qlWnaUQ06hgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4oDq/MDVeLpdmt9kY7GCdXo8RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYDv+CAAA//9bQM66") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42041, 0x0) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) write(r0, &(0x7f0000000880)="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", 0x801) 2.163053379s ago: executing program 2 (id=704): r0 = socket(0x2, 0x3, 0xff) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000001680)=[{{&(0x7f0000001700)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000340)=[{&(0x7f0000004480)="0475076e56a475f6e228c3b9000000007871573a", 0x14}], 0x1, &(0x7f0000000380)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @rand_addr=0x64010100, @remote}}}], 0x20}}, {{&(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000001740)=[@ip_retopts={{0x10}}, @ip_retopts={{0x75}}], 0x20}}], 0x2, 0x48c0) 2.047693476s ago: executing program 3 (id=705): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000680)='./file2\x00', 0x800000, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x1, 0x5504, &(0x7f000000c0c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued\x00', 0x275a, 0x0) setresuid(0x0, 0xee00, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x8004587d, 0x0) 1.999558289s ago: executing program 2 (id=706): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELSET={0x20, 0xb, 0xa, 0x901, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x48}, 0x1, 0x0, 0x0, 0x40800}, 0x48040) 1.869536297s ago: executing program 2 (id=707): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x20108c0, &(0x7f0000000c00)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRESOCT, @ANYRESOCT, @ANYRES64], 0x1, 0x61f5, &(0x7f00000075c0)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000240)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, 0x0) 1.826844269s ago: executing program 4 (id=708): r0 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000240)=0x8000, 0x4) ioctl$int_in(r0, 0x5421, &(0x7f0000000340)=0xfff) connect$unix(r0, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e24}, 0x6e) 1.699447277s ago: executing program 1 (id=709): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x3) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000080)={0x2, &(0x7f0000000100)=[{0x50, 0xff, 0x0, 0xffeffffd}, {0x6, 0x60, 0x0, 0x8}]}) write$ppp(r0, &(0x7f0000001200)="5af9", 0x2) 1.553092386s ago: executing program 4 (id=710): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4001, @empty, 'ip6gre0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x0, @random="6fec00", 'veth0_virt_wifi\x00'}}, 0x1e) 1.345801008s ago: executing program 4 (id=711): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x12, 0x104, 0x8, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1, 0xffffffffffffffff}, &(0x7f0000001d80), &(0x7f0000001d40)=r0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000002c0)={r2, &(0x7f0000000340), 0x0}, 0x20) 1.106210613s ago: executing program 4 (id=712): syz_mount_image$udf(&(0x7f0000000a40), &(0x7f0000000500)='./file1\x00', 0x4400, &(0x7f0000000480)=ANY=[], 0x1, 0xa23, &(0x7f0000001b00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141242, 0x1) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) 1.045631536s ago: executing program 1 (id=713): r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000140)="5c000000130025cc9e3be35c6e17aa31076b876c1d0000007ea60800160af36514000cc00800274000000000000000000364bc24eab556a70525f60a84c9f4a6d0001000000e4509c5bbcd72c6c95300"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 763.415363ms ago: executing program 0 (id=714): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x48) close(r0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 669.808819ms ago: executing program 1 (id=715): r0 = syz_mount_image$btrfs(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x16, &(0x7f00000002c0)={[{@nobarrier}, {@noflushoncommit}, {@nossd}, {@commit={'commit', 0x3d, 0x3f}}, {@nodatasum}, {@nodiscard}, {@nobarrier}, {@compress_algo={'compress', 0x3d, 'zstd'}}, {@noacl}]}, 0x9, 0x5104, &(0x7f0000005480)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r1, &(0x7f0000000000)='2', 0x1, 0x4fed0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x40305829, &(0x7f0000000100)={0x17c04, r0, 0x2, 0xfffffffe, 0x2177}) 581.652325ms ago: executing program 2 (id=716): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0) pwritev(r1, &(0x7f00000003c0)=[{&(0x7f0000000280)="111ec202", 0x4}], 0x1, 0x4000001, 0x0) sendfile(r0, r1, 0x0, 0x20000) 555.146036ms ago: executing program 4 (id=717): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000000)={0x8, {{0x2, 0x4e21, @empty=0xe0000000}}, {{0x2, 0x4e23, @local}}}, 0x108) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') readv(r1, &(0x7f0000000140)=[{&(0x7f0000000700)=""/211, 0xd3}], 0x1) 372.927487ms ago: executing program 0 (id=718): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) splice(r0, 0x0, r1, 0x0, 0x6, 0x0) 87.075814ms ago: executing program 0 (id=719): bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001000000", @ANYRES32, @ANYBLOB="000000100000000000000000000000000000000012459f8856e606c300caaedf348fffbdcbf877af77f3068380985f9ce907a314e3c02b11"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r1, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000300)="d2ffdd934517f3e145f228e086dd", 0x0, 0xd5b4, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 313.679µs ago: executing program 4 (id=720): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000700), r1) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000740)={0x38, r2, 0x211, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x6}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x8}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x38}}, 0xc040) 0s ago: executing program 3 (id=721): syz_open_dev$evdev(&(0x7f0000000000), 0x80000000200001, 0x2002) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8000) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x100000000400, 0xf7fffffffffffffe}, 0x0, &(0x7f0000000040)={0x1f, 0xfffffffffffffffd, 0x3, 0x0, 0x0, 0x5, 0x0, 0xfffffffffffffffc}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) kernel console output (not intermixed with test programs): adding VLAN 0 to HW filter on device team0 [ 90.561308][ T4277] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.595973][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 90.614243][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 90.628375][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.635784][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.652876][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 90.673774][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 90.692716][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.700880][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.739668][ T4275] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.768359][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 90.783951][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 90.803265][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 90.838833][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 90.857888][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 90.877272][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 90.889593][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 90.902979][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 90.918711][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 90.929903][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 90.948148][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 90.957907][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 90.973677][ T4275] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.991602][ T4277] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.010371][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 91.024560][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 91.049965][ T4273] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 91.064707][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 91.091294][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 91.108001][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 91.119251][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.126783][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.142731][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 91.152972][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 91.162948][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 91.174420][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 91.184546][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.192496][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.203438][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 91.214196][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 91.224418][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.232262][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.242265][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 91.255815][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 91.267013][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.277239][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.287381][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 91.298857][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 91.328322][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 91.348139][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 91.395650][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 91.410503][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 91.427649][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 91.441563][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 91.451588][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 91.467654][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 91.488797][ T4277] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 91.520289][ T4277] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 91.552888][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 91.564500][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 91.577101][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 91.593816][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 91.608160][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 91.617391][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 91.643952][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 91.657767][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 91.676943][ T4268] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.694774][ T4279] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.704534][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 91.732984][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 91.747329][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 91.790897][ T48] Bluetooth: hci0: command 0x040f tx timeout [ 91.823464][ T4279] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.833710][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 91.854031][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 91.872469][ T48] Bluetooth: hci1: command 0x040f tx timeout [ 91.879915][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 91.903174][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 91.935992][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 91.951176][ T48] Bluetooth: hci2: command 0x040f tx timeout [ 91.966180][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 91.996552][ T4275] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 92.026633][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 92.075890][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 92.094421][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 92.109178][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 92.122015][ T48] Bluetooth: hci3: command 0x040f tx timeout [ 92.138454][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 92.149482][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 92.167945][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 92.180544][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.188398][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.198237][ T48] Bluetooth: hci4: command 0x040f tx timeout [ 92.211540][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 92.224219][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 92.235468][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.244124][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.253728][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 92.289141][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 92.303271][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 92.317468][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 92.356686][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 92.384565][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 92.413291][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 92.478854][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 92.497990][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 92.518655][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 92.532819][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 92.543561][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 92.556809][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 92.587465][ T4268] device veth0_vlan entered promiscuous mode [ 92.617764][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 92.626553][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 92.637198][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 92.656883][ T4279] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 92.677876][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 92.692854][ T4273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.712797][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 92.724294][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 92.764505][ T4268] device veth1_vlan entered promiscuous mode [ 92.850904][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 92.892093][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 92.903094][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 92.917356][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 92.956177][ T4277] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.005945][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 93.026407][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 93.052350][ T4273] device veth0_vlan entered promiscuous mode [ 93.080874][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 93.090204][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 93.103737][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 93.115210][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 93.151692][ T4268] device veth0_macvtap entered promiscuous mode [ 93.167394][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 93.179862][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 93.189931][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 93.248788][ T4268] device veth1_macvtap entered promiscuous mode [ 93.276798][ T4273] device veth1_vlan entered promiscuous mode [ 93.285839][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 93.300004][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 93.315120][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 93.324230][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 93.350000][ T4275] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.371707][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 93.387566][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 93.398445][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 93.414315][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 93.432170][ T4268] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.445372][ T4277] device veth0_vlan entered promiscuous mode [ 93.479252][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 93.497364][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 93.521661][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 93.545636][ T4268] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.579783][ T4277] device veth1_vlan entered promiscuous mode [ 93.596994][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 93.610056][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 93.629765][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 93.654252][ T4268] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.673459][ T4268] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.684050][ T4268] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.693478][ T4268] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.722461][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 93.735860][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 93.749747][ T4273] device veth0_macvtap entered promiscuous mode [ 93.809707][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 93.829578][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 93.840070][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 93.854218][ T4273] device veth1_macvtap entered promiscuous mode [ 93.869700][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 93.880490][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 93.888772][ T4271] Bluetooth: hci0: command 0x0419 tx timeout [ 93.922991][ T4279] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.937305][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 93.960819][ T48] Bluetooth: hci1: command 0x0419 tx timeout [ 93.967686][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 93.983249][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 93.997514][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 94.009806][ T4275] device veth0_vlan entered promiscuous mode [ 94.031267][ T48] Bluetooth: hci2: command 0x0419 tx timeout [ 94.075890][ T4277] device veth0_macvtap entered promiscuous mode [ 94.097499][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.117004][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.140004][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.158853][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 94.184196][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 94.196389][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 94.206318][ T48] Bluetooth: hci3: command 0x0419 tx timeout [ 94.230937][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 94.252036][ T4277] device veth1_macvtap entered promiscuous mode [ 94.272494][ T4271] Bluetooth: hci4: command 0x0419 tx timeout [ 94.291206][ T4275] device veth1_vlan entered promiscuous mode [ 94.311179][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 94.327461][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 94.339276][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 94.353911][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.378515][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.402600][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.440750][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 94.450534][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 94.481804][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 94.519850][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.542893][ T4273] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.558316][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.571906][ T4273] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.592232][ T4273] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.610740][ T4273] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.647033][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.660251][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.674877][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.686517][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.701973][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.715853][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.726883][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.737879][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.749368][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.762538][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.782431][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 94.791770][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 94.801414][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 94.811029][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 94.820125][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 94.859446][ T4277] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.878105][ T4277] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.887491][ T4277] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.900998][ T4277] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.931833][ T4275] device veth0_macvtap entered promiscuous mode [ 94.954492][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.969481][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 94.980172][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.989669][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 95.007885][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 95.019468][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 95.085508][ T4275] device veth1_macvtap entered promiscuous mode [ 95.167702][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.189709][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.200480][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.216978][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.227279][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.238968][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.253053][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.271778][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 95.280202][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 95.289801][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 95.308814][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.324670][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.336212][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.348527][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.363022][ T4275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.379639][ T4275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.397331][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.425506][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 95.447053][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 95.459274][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.465881][ T4275] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.484509][ T4275] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.491366][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.505410][ T4275] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.522898][ T4275] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.561698][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 95.578768][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 95.594616][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 95.667575][ T4381] loop0: detected capacity change from 0 to 1024 [ 95.700319][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.745627][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.791612][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 95.823846][ T4381] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 95.828206][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 95.847470][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 95.857670][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 95.868504][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 95.907969][ T4279] device veth0_vlan entered promiscuous mode [ 95.930012][ T4351] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.982235][ T4351] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.993348][ T4338] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.012718][ T4338] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.030137][ T4279] device veth1_vlan entered promiscuous mode [ 96.052832][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 96.065322][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 96.107500][ T4338] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.167365][ T4338] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.184920][ T4268] EXT4-fs (loop0): unmounting filesystem. [ 96.195674][ T4279] device veth0_macvtap entered promiscuous mode [ 96.213371][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 96.225244][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 96.236287][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 96.312785][ T4279] device veth1_macvtap entered promiscuous mode [ 96.329165][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 96.358963][ T4357] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 96.434767][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.464553][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.522988][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.530996][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.576242][ T4392] tmpfs: Bad value for 'gid' [ 96.594162][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.614274][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.628546][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.664196][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.706552][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.729901][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.756779][ T4279] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.799766][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 96.842399][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 96.881221][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 96.960051][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.003635][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.044828][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.069817][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.102191][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.120843][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.133536][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.173976][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.240455][ T4279] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.295210][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 97.341527][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 97.364740][ T4402] loop3: detected capacity change from 0 to 8192 [ 97.378309][ T4279] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.401242][ T4404] loop0: detected capacity change from 0 to 512 [ 97.417303][ T4279] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.443202][ T4279] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.461546][ T4279] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.558436][ T4404] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 97.648436][ T4404] fs-verity: sha256 using implementation "sha256-avx2" [ 97.693736][ T4404] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.12: bg 0: block 306: padding at end of block bitmap is not set [ 97.947947][ T4338] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.999037][ T4338] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.051438][ T4268] EXT4-fs (loop0): unmounting filesystem. [ 98.115346][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 98.161811][ T4338] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.192138][ T4338] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.211291][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 98.897049][ T4435] o2cb: This node has not been configured. [ 98.908651][ T4435] o2cb: Cluster check failed. Fix errors before retrying. [ 98.920443][ T4435] (syz.4.20,4435,0):user_dlm_register:674 ERROR: status = -22 [ 98.987863][ T4435] (syz.4.20,4435,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file1" [ 99.338224][ T4447] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 99.381954][ T4447] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 100.056182][ T4406] loop2: detected capacity change from 0 to 65536 [ 100.194618][ T4406] XFS (loop2): Mounting V5 Filesystem [ 100.234374][ T4461] loop1: detected capacity change from 0 to 4096 [ 100.251521][ T4461] ======================================================= [ 100.251521][ T4461] WARNING: The mand mount option has been deprecated and [ 100.251521][ T4461] and is ignored by this kernel. Remove the mand [ 100.251521][ T4461] option from the mount to silence this warning. [ 100.251521][ T4461] ======================================================= [ 100.336234][ T4444] loop0: detected capacity change from 0 to 32768 [ 100.446970][ T4477] netlink: 20 bytes leftover after parsing attributes in process `syz.3.36'. [ 100.448185][ T4406] XFS (loop2): Ending clean mount [ 100.499489][ T4482] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 100.588605][ T4485] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 100.607407][ T4444] XFS (loop0): Mounting V5 Filesystem [ 100.620082][ T4477] nbd: socks must be embedded in a SOCK_ITEM attr [ 100.694930][ T27] audit: type=1800 audit(1768867549.593:2): pid=4461 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.32" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 100.725756][ T4492] loop3: detected capacity change from 0 to 128 [ 100.794977][ T4273] XFS (loop2): Unmounting Filesystem [ 100.939602][ T4370] udevd[4370]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 100.952346][ T4444] XFS (loop0): Ending clean mount [ 101.022826][ T4370] udevd[4370]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 101.079753][ T4444] XFS (loop0): Quotacheck needed: Please wait. [ 101.284178][ T4444] XFS (loop0): Quotacheck: Done. [ 101.530042][ T4268] XFS (loop0): Unmounting Filesystem [ 102.283474][ T4496] loop3: detected capacity change from 0 to 32768 [ 102.347762][ T4513] Bluetooth: MGMT ver 1.22 [ 102.555426][ T4496] JBD2: Ignoring recovery information on journal [ 102.652804][ T4522] netlink: 8 bytes leftover after parsing attributes in process `syz.4.49'. [ 102.714263][ T4518] loop0: detected capacity change from 0 to 2048 [ 102.747221][ T4496] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 102.814175][ T4518] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 102.889936][ T4530] Driver unsupported XDP return value 0 on prog (id 4) dev N/A, expect packet loss! [ 103.347509][ T4277] ocfs2: Unmounting device (7,3) on (node local) [ 103.435142][ T4268] EXT4-fs (loop0): unmounting filesystem. [ 104.220875][ T125] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 104.436504][ T125] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.500930][ T125] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.534798][ T125] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 104.556311][ T125] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.602583][ T125] usb 3-1: config 0 descriptor?? [ 105.020933][ T4359] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 105.044688][ T125] pyra 0003:1E7D:2CF6.0001: item fetching failed at offset 5/7 [ 105.061904][ T125] pyra 0003:1E7D:2CF6.0001: parse failed [ 105.079455][ T125] pyra: probe of 0003:1E7D:2CF6.0001 failed with error -22 [ 105.230738][ T4359] usb 1-1: Using ep0 maxpacket: 8 [ 105.292516][ T4359] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 105.305709][ T4372] usb 3-1: USB disconnect, device number 2 [ 105.322379][ T4359] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 105.356373][ T4359] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 105.381797][ T4359] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 105.425143][ T4568] loop3: detected capacity change from 0 to 32768 [ 105.434866][ T4359] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 105.471516][ T4359] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 105.480904][ T4359] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.539284][ T4568] XFS (loop3): Mounting V5 Filesystem [ 105.662011][ T4568] XFS (loop3): Ending clean mount [ 105.703284][ T4359] usb 1-1: GET_CAPABILITIES returned 0 [ 105.715208][ T4568] XFS (loop3): Quotacheck needed: Please wait. [ 105.730692][ T4359] usbtmc 1-1:16.0: can't read capabilities [ 105.739719][ T4562] loop4: detected capacity change from 0 to 65536 [ 105.842058][ T4568] XFS (loop3): Quotacheck: Done. [ 105.852832][ T4561] loop1: detected capacity change from 0 to 65536 [ 105.865491][ T4562] XFS (loop4): DAX unsupported by block device. Turning off DAX. [ 105.904309][ T4562] XFS (loop4): Mounting V5 Filesystem [ 105.928835][ T4372] usb 1-1: USB disconnect, device number 2 [ 106.060302][ T4561] XFS (loop1): Mounting V5 Filesystem [ 106.117497][ T4562] XFS (loop4): Ending clean mount [ 106.206397][ T4561] XFS (loop1): Ending clean mount [ 106.233660][ T4595] loop2: detected capacity change from 0 to 47 [ 106.312176][ T4277] XFS (loop3): Unmounting Filesystem [ 106.490392][ T4275] XFS (loop1): Unmounting Filesystem [ 106.768789][ T4601] loop2: detected capacity change from 0 to 256 [ 106.777903][ T4279] XFS (loop4): Unmounting Filesystem [ 107.000422][ T4601] FAT-fs (loop2): Directory bread(block 64) failed [ 107.026526][ T4601] FAT-fs (loop2): Directory bread(block 65) failed [ 107.057299][ T4601] FAT-fs (loop2): Directory bread(block 66) failed [ 107.131148][ T4601] FAT-fs (loop2): Directory bread(block 67) failed [ 107.179610][ T4601] FAT-fs (loop2): Directory bread(block 68) failed [ 107.237829][ T4601] FAT-fs (loop2): Directory bread(block 69) failed [ 107.277714][ T4601] FAT-fs (loop2): Directory bread(block 70) failed [ 107.330860][ T4601] FAT-fs (loop2): Directory bread(block 71) failed [ 107.338890][ T4601] FAT-fs (loop2): Directory bread(block 72) failed [ 107.382709][ T4601] FAT-fs (loop2): Directory bread(block 73) failed [ 108.093697][ T27] audit: type=1326 audit(1768867556.993:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4618 comm="syz.3.80" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8efa59acb9 code=0x0 [ 108.218292][ T4626] loop0: detected capacity change from 0 to 512 [ 108.329275][ T4626] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 108.391345][ T4626] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.767468][ T4642] loop2: detected capacity change from 0 to 512 [ 108.785319][ T4268] EXT4-fs (loop0): unmounting filesystem. [ 108.816854][ T4642] EXT4-fs: Ignoring removed oldalloc option [ 108.843393][ T4642] EXT4-fs: Ignoring removed mblk_io_submit option [ 108.953331][ T4642] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 109.038559][ T4649] loop0: detected capacity change from 0 to 512 [ 109.048835][ T4642] EXT4-fs (loop2): orphan cleanup on readonly fs [ 109.071669][ T4642] Quota error (device loop2): do_check_range: Getting block 196613 out of range 1-5 [ 109.145829][ T4642] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 109.170015][ T4649] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 109.241587][ T4642] EXT4-fs error (device loop2): ext4_acquire_dquot:6835: comm syz.2.88: Failed to acquire dquot type 1 [ 109.299544][ T4642] EXT4-fs (loop2): 1 truncate cleaned up [ 109.376993][ T4642] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 109.532265][ T4642] EXT4-fs: Ignoring removed orlov option [ 109.580531][ T4642] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 109.618020][ T4642] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 109.647474][ T4642] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 109.699819][ T4642] EXT4-fs error (device loop2): __ext4_remount:6644: comm syz.2.88: Abort forced by user [ 109.736478][ T4642] EXT4-fs (loop2): Remounting filesystem read-only [ 109.760782][ T4642] EXT4-fs (loop2): re-mounted. Quota mode: writeback. [ 109.789169][ T4642] ext4 filesystem being remounted at /10/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 109.887778][ T4667] loop1: detected capacity change from 0 to 1024 [ 109.927651][ T4667] EXT4-fs: Ignoring removed mblk_io_submit option [ 109.957039][ T4667] EXT4-fs: Ignoring removed oldalloc option [ 109.977492][ T4667] EXT4-fs: Ignoring removed nomblk_io_submit option [ 109.992631][ T4273] EXT4-fs (loop2): unmounting filesystem. [ 110.144562][ T4667] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 110.144575][ T27] audit: type=1800 audit(1768867559.043:4): pid=4649 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.90" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 110.327791][ T4268] EXT4-fs (loop0): unmounting filesystem. [ 110.609135][ T4275] EXT4-fs (loop1): unmounting filesystem. [ 111.704400][ T4678] loop3: detected capacity change from 0 to 40427 [ 111.821351][ T4678] F2FS-fs (loop3): invalid crc value [ 111.884863][ T4678] F2FS-fs (loop3): Found nat_bits in checkpoint [ 112.066776][ T4678] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 112.555449][ T4277] syz-executor: attempt to access beyond end of device [ 112.555449][ T4277] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 113.089115][ T4712] loop4: detected capacity change from 0 to 40427 [ 113.139371][ T4712] F2FS-fs (loop4): invalid crc value [ 113.174391][ T4730] loop0: detected capacity change from 0 to 736 [ 113.219252][ T4712] F2FS-fs (loop4): Found nat_bits in checkpoint [ 113.485137][ T4712] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 113.639227][ T27] audit: type=1800 audit(1768867562.533:5): pid=4712 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.119" name="bus" dev="loop4" ino=10 res=0 errno=0 [ 113.796098][ T4279] syz-executor: attempt to access beyond end of device [ 113.796098][ T4279] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 113.978435][ T4724] loop2: detected capacity change from 0 to 40427 [ 114.100197][ T4724] F2FS-fs (loop2): Found nat_bits in checkpoint [ 114.204761][ T4755] loop0: detected capacity change from 0 to 256 [ 114.347273][ T4724] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 114.371166][ T4755] FAT-fs (loop0): Directory bread(block 64) failed [ 114.407714][ T4755] FAT-fs (loop0): Directory bread(block 65) failed [ 114.434736][ T4755] FAT-fs (loop0): Directory bread(block 66) failed [ 114.474040][ T4755] FAT-fs (loop0): Directory bread(block 67) failed [ 114.524154][ T4755] FAT-fs (loop0): Directory bread(block 68) failed [ 114.566519][ T4755] FAT-fs (loop0): Directory bread(block 69) failed [ 114.612355][ T4755] FAT-fs (loop0): Directory bread(block 70) failed [ 114.641571][ T4273] syz-executor: attempt to access beyond end of device [ 114.641571][ T4273] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 114.670726][ T4755] FAT-fs (loop0): Directory bread(block 71) failed [ 114.677799][ T4755] FAT-fs (loop0): Directory bread(block 72) failed [ 114.740734][ T4755] FAT-fs (loop0): Directory bread(block 73) failed [ 115.023956][ T4764] netlink: 'syz.3.137': attribute type 5 has an invalid length. [ 115.425678][ T4768] loop3: detected capacity change from 0 to 128 [ 115.462428][ T4768] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 115.514323][ T4768] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 115.542256][ T4753] loop1: detected capacity change from 0 to 40427 [ 115.568138][ T4753] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 115.609214][ T4753] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 115.694568][ T4753] F2FS-fs (loop1): Found nat_bits in checkpoint [ 115.797783][ T41] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 115.947462][ T4753] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 115.970690][ T4753] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 116.139511][ T4762] loop4: detected capacity change from 0 to 32768 [ 116.165889][ T4781] loop3: detected capacity change from 0 to 4096 [ 116.264182][ T4762] XFS (loop4): Mounting V5 Filesystem [ 116.288163][ T4781] ntfs: (device loop3): parse_options(): NLS character set =sh not found. Using previous one cp869. [ 116.345351][ T4781] ntfs: (device loop3): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 116.393450][ T4783] loop0: detected capacity change from 0 to 4096 [ 116.480017][ T4781] ntfs: (device loop3): ntfs_read_locked_inode(): $DATA attribute is missing. [ 116.531653][ T4781] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 116.573305][ T4762] XFS (loop4): Ending clean mount [ 116.586665][ T4762] XFS (loop4): Quotacheck needed: Please wait. [ 116.621804][ T4781] ntfs: (device loop3): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 116.689718][ T4783] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 116.752986][ T4781] ntfs: volume version 3.1. [ 116.757788][ T4762] XFS (loop4): Quotacheck: Done. [ 116.993330][ T4783] ntfs3: loop0: ino=1b, "file0" directory corrupted [ 117.172824][ T4279] XFS (loop4): Unmounting Filesystem [ 117.254053][ T4268] ntfs3: loop0: ntfs_sync_fs r=9 failed, -22. [ 117.303079][ T4268] ntfs3: loop0: ntfs_evict_inode r=9 failed, -22. [ 117.357865][ T4801] netlink: 32 bytes leftover after parsing attributes in process `syz.3.146'. [ 117.696803][ T4812] loop2: detected capacity change from 0 to 256 [ 117.863468][ T4814] loop1: detected capacity change from 0 to 1024 [ 118.147772][ T4814] hfsplus: found bad thread record in catalog [ 118.209025][ T4814] hfsplus: found bad thread record in catalog [ 118.419649][ T46] hfsplus: found bad thread record in catalog [ 118.428514][ T46] hfsplus: found bad thread record in catalog [ 118.650729][ T125] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 118.850776][ T125] usb 3-1: Using ep0 maxpacket: 8 [ 118.866239][ T125] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 118.895949][ T125] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.927091][ T4838] loop1: detected capacity change from 0 to 2048 [ 118.960300][ T125] pvrusb2: Hardware description: Terratec Grabster AV400 [ 118.993275][ T125] pvrusb2: ********** [ 118.997360][ T125] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 119.029317][ T125] pvrusb2: Important functionality might not be entirely working. [ 119.042977][ T4838] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 119.070964][ T4838] NILFS (loop1): mounting unchecked fs [ 119.077342][ T125] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 119.131491][ T125] pvrusb2: ********** [ 119.166170][ T2309] pvrusb2: Invalid write control endpoint [ 119.173111][ T4838] NILFS (loop1): recovery complete [ 119.201820][ T4841] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 119.327355][ T4844] netlink: 8 bytes leftover after parsing attributes in process `syz.4.162'. [ 119.416659][ T4827] pvrusb2: Invalid write control endpoint [ 119.485508][ T125] usb 3-1: USB disconnect, device number 3 [ 119.547872][ T2309] pvrusb2: Invalid write control endpoint [ 119.566600][ T2309] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 119.578177][ T2309] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 119.593089][ T2309] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 119.620332][ T2309] pvrusb2: Device being rendered inoperable [ 119.648828][ T2309] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 119.669031][ T2309] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 119.715002][ T2309] pvrusb2: Attached sub-driver cx25840 [ 119.757411][ T2309] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 119.803231][ T2309] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 119.911397][ T4835] loop0: detected capacity change from 0 to 32768 [ 119.960005][ T4853] loop1: detected capacity change from 0 to 64 [ 120.060556][ T4835] XFS (loop0): Mounting V5 Filesystem [ 120.109752][ T4860] loop2: detected capacity change from 0 to 512 [ 120.121198][ T4860] EXT4-fs: Ignoring removed i_version option [ 120.130247][ T4860] EXT4-fs: Ignoring removed oldalloc option [ 120.146040][ T4860] EXT4-fs (loop2): 1 truncate cleaned up [ 120.153158][ T4860] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 120.160173][ T4853] BFS-fs: bfs_fill_super(): loop1 is unclean, continuing [ 120.187893][ T4860] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.166: invalid indirect mapped block 234881024 (level 0) [ 120.368037][ T4835] XFS (loop0): Ending clean mount [ 120.385425][ T4835] XFS (loop0): Quotacheck needed: Please wait. [ 120.444211][ T4273] EXT4-fs (loop2): unmounting filesystem. [ 120.496742][ T4835] XFS (loop0): Quotacheck: Done. [ 120.597503][ T27] audit: type=1804 audit(1768867569.493:6): pid=4835 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.160" name="/newroot/34/file0/file1" dev="loop0" ino=9286 res=1 errno=0 [ 120.809243][ T4268] XFS (loop0): Unmounting Filesystem [ 120.904869][ T4871] loop2: detected capacity change from 0 to 2048 [ 121.036482][ T4871] loop2: p1 p3 p4 [ 121.097571][ T4871] loop2: p4 size 589824 extends beyond EOD, truncated [ 121.159576][ T3637] loop2: p1 p3 p4 [ 121.186048][ T3637] loop2: p4 size 589824 extends beyond EOD, truncated [ 121.706703][ T4370] udevd[4370]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 121.724585][ T4412] udevd[4412]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 121.754560][ T4411] udevd[4411]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 121.868068][ T4412] udevd[4412]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 121.885408][ T4370] udevd[4370]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 121.902567][ T4411] udevd[4411]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 122.237761][ T4846] loop3: detected capacity change from 0 to 32768 [ 122.478014][ T4846] [ 122.478014][ T4846] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 122.478014][ T4846] [ 122.585358][ T4846] read_mapping_page failed! [ 122.680349][ T4846] diRead: diIAGRead returned -5 [ 123.250937][ T4329] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 123.268293][ T4884] loop0: detected capacity change from 0 to 32768 [ 123.460937][ T4329] usb 3-1: Using ep0 maxpacket: 16 [ 123.473143][ T4329] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.552195][ T4329] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.630817][ T4329] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 123.708367][ T4329] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 123.758271][ T4329] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.804675][ T4329] usb 3-1: config 0 descriptor?? [ 123.869666][ T4906] vivid-004: disconnect [ 123.893343][ T4902] vivid-004: reconnect [ 124.251998][ T4329] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 124.259334][ T4329] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 124.286570][ T4329] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 124.300673][ T4329] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 124.318501][ T4329] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 124.372944][ T4329] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0002/input/input5 [ 124.507087][ T4329] microsoft 0003:045E:07DA.0002: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 124.541163][ T4329] usb 3-1: USB disconnect, device number 4 [ 124.720863][ T4372] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 124.851585][ T4917] fido_id[4917]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 124.920812][ T4372] usb 2-1: Using ep0 maxpacket: 8 [ 124.931197][ T4372] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 124.954826][ T4372] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 124.965829][ T4372] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 124.976852][ T4372] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 124.993000][ T4372] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 125.003245][ T4372] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.012002][ T4329] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 125.220769][ T125] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 125.240838][ T4329] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 125.256798][ T4372] usb 2-1: GET_CAPABILITIES returned 0 [ 125.270743][ T4372] usbtmc 2-1:16.0: can't read capabilities [ 125.284610][ T4329] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 125.304414][ T4329] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 125.356314][ T4329] usb 4-1: config 0 interface 0 has no altsetting 0 [ 125.376957][ T4329] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 125.401840][ T4329] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 125.433274][ T4329] usb 4-1: config 0 interface 0 has no altsetting 0 [ 125.442563][ T125] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 125.455445][ T4329] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 125.469064][ T125] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.490027][ C0] usbtmc 2-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 125.502476][ T4329] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 125.511982][ T125] usb 1-1: config 0 descriptor?? [ 125.515020][ T4329] usb 4-1: config 0 interface 0 has no altsetting 0 [ 125.547482][ T125] cp210x 1-1:0.0: cp210x converter detected [ 125.549124][ T4914] usbtmc 2-1:16.0: Unable to send data, error -71 [ 125.562738][ T4329] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 125.584114][ T4329] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 125.600715][ T4340] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 125.620819][ T4329] usb 4-1: config 0 interface 0 has no altsetting 0 [ 125.660373][ T4329] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 125.690744][ T4329] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 125.720724][ T4329] usb 4-1: config 0 interface 0 has no altsetting 0 [ 125.736367][ T1179] usb 2-1: USB disconnect, device number 2 [ 125.774695][ T4329] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 125.800828][ T4329] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 125.815665][ T4340] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.845499][ T4329] usb 4-1: config 0 interface 0 has no altsetting 0 [ 125.855027][ T4340] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 125.882018][ T4329] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 125.897419][ T4340] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.919859][ T4329] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 125.944011][ T4340] usb 3-1: config 0 descriptor?? [ 125.948979][ T125] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 125.970760][ T4329] usb 4-1: config 0 interface 0 has no altsetting 0 [ 126.007461][ T125] usb 1-1: cp210x converter now attached to ttyUSB0 [ 126.010381][ T4329] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 126.044809][ T4329] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 126.091454][ T4329] usb 4-1: config 0 interface 0 has no altsetting 0 [ 126.124031][ T4329] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 126.174322][ T4329] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 126.206374][ T125] usb 1-1: USB disconnect, device number 3 [ 126.216388][ T4329] usb 4-1: Product: syz [ 126.226615][ T4329] usb 4-1: Manufacturer: syz [ 126.252996][ T4329] usb 4-1: SerialNumber: syz [ 126.255180][ T125] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 126.293099][ T4329] usb 4-1: config 0 descriptor?? [ 126.327455][ T125] cp210x 1-1:0.0: device disconnected [ 126.355268][ T4329] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 126.385672][ T4340] keytouch 0003:0926:3333.0003: fixing up Keytouch IEC report descriptor [ 126.429791][ T4340] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0003/input/input6 [ 126.570071][ T4340] keytouch 0003:0926:3333.0003: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 126.763032][ C0] usb 4-1: yurex_control_callback - control failed: -71 [ 126.765693][ T4359] usb 4-1: USB disconnect, device number 2 [ 126.832200][ T4359] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 126.891197][ T125] usb 3-1: USB disconnect, device number 5 [ 127.034840][ T4932] fido_id[4932]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 127.155347][ T4929] loop4: detected capacity change from 0 to 32768 [ 127.208227][ T4929] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.195 (4929) [ 127.408150][ T4929] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 127.447210][ T4929] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 127.548848][ T4929] BTRFS info (device loop4): using free space tree [ 127.855991][ T4960] loop3: detected capacity change from 0 to 256 [ 127.879242][ T4960] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 127.938040][ T4929] BTRFS info (device loop4): enabling ssd optimizations [ 128.320361][ T4970] Zero length message leads to an empty skb [ 128.380766][ T4279] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 128.421992][ T4972] loop3: detected capacity change from 0 to 128 [ 128.500951][ T125] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 128.720401][ T125] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 128.744280][ T125] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 128.793244][ T125] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 128.871170][ T125] usb 3-1: config 0 interface 0 has no altsetting 0 [ 128.930694][ T125] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 128.981007][ T125] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 128.996753][ T4990] loop4: detected capacity change from 0 to 256 [ 129.031443][ T125] usb 3-1: config 0 interface 0 has no altsetting 0 [ 129.065498][ T125] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 129.110957][ T125] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 129.153043][ T125] usb 3-1: config 0 interface 0 has no altsetting 0 [ 129.187472][ T125] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 129.227351][ T4992] loop1: detected capacity change from 0 to 512 [ 129.236527][ T125] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 129.279809][ T4992] EXT4-fs: Ignoring removed nobh option [ 129.286366][ T125] usb 3-1: config 0 interface 0 has no altsetting 0 [ 129.312651][ T4992] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 129.324429][ T125] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 129.350952][ T125] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 129.362491][ T4992] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 129.399971][ T125] usb 3-1: config 0 interface 0 has no altsetting 0 [ 129.435112][ T4992] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2799: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 129.461365][ T125] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 129.470412][ T125] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 129.511238][ T4992] EXT4-fs (loop1): 1 truncate cleaned up [ 129.517170][ T4992] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 129.529710][ T125] usb 3-1: config 0 interface 0 has no altsetting 0 [ 129.542155][ T125] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 129.554744][ T4996] loop4: detected capacity change from 0 to 128 [ 129.584279][ T125] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 129.616527][ T27] audit: type=1800 audit(1768867579.517:7): pid=4992 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.209" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 129.660475][ T4996] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 129.690193][ T125] usb 3-1: config 0 interface 0 has no altsetting 0 [ 129.731109][ T4996] ext4 filesystem being mounted at /41/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 129.775557][ T125] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 129.831038][ T125] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 129.875187][ T125] usb 3-1: config 0 interface 0 has no altsetting 0 [ 129.897025][ T125] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 129.919368][ T125] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 129.945425][ T125] usb 3-1: Product: syz [ 129.959130][ T125] usb 3-1: Manufacturer: syz [ 129.975201][ T125] usb 3-1: SerialNumber: syz [ 130.008226][ T125] usb 3-1: config 0 descriptor?? [ 130.051159][ T125] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 130.065140][ T4275] EXT4-fs (loop1): unmounting filesystem. [ 130.289525][ T4996] fscrypt: Error allocating hmac(sha512): -2 [ 130.411064][ C1] usb 3-1: yurex_control_callback - control failed: -71 [ 130.418804][ T26] usb 3-1: USB disconnect, device number 6 [ 130.439573][ T26] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 130.511906][ T4279] EXT4-fs (loop4): unmounting filesystem. [ 130.699191][ T5018] loop1: detected capacity change from 0 to 256 [ 130.769947][ T5018] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 130.802582][ T5021] loop3: detected capacity change from 0 to 8 [ 130.822434][ T5018] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 130.919927][ T5018] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d) [ 131.543907][ T125] kernel write not supported for file /95/clear_refs (pid: 125 comm: kworker/1:2) [ 132.913588][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.920511][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.054054][ T5066] loop0: detected capacity change from 0 to 8192 [ 133.280685][ T4359] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 133.330193][ T5074] program syz.4.243 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 133.482511][ T4359] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x4 has invalid maxpacket 151, setting to 64 [ 133.514028][ T4359] usb 4-1: config 0 interface 0 has no altsetting 0 [ 133.547249][ T4359] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 133.577588][ T4359] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 133.603668][ T4359] usb 4-1: Product: syz [ 133.608048][ T4359] usb 4-1: Manufacturer: syz [ 133.628142][ T4359] usb 4-1: SerialNumber: syz [ 133.655706][ T4359] usb 4-1: config 0 descriptor?? [ 133.709654][ T4359] usb 4-1: selecting invalid altsetting 0 [ 133.939287][ T5086] device erspan0 entered promiscuous mode [ 133.984925][ T5069] usb 4-1: cannot submit urb 0, error -8: unknown error [ 134.654875][ T5110] netlink: 52 bytes leftover after parsing attributes in process `syz.4.259'. [ 134.674270][ T5110] netlink: 32 bytes leftover after parsing attributes in process `syz.4.259'. [ 134.691135][ T26] kernel read not supported for file /input/event1 (pid: 26 comm: kworker/1:1) [ 134.871771][ T5115] loop2: detected capacity change from 0 to 1024 [ 135.027470][ T5122] netlink: 24 bytes leftover after parsing attributes in process `syz.0.264'. [ 135.182726][ T4351] hfsplus: b-tree write err: -5, ino 8 [ 135.602127][ T5141] capability: warning: `syz.1.273' uses 32-bit capabilities (legacy support in use) [ 135.621556][ T5139] netlink: 16 bytes leftover after parsing attributes in process `syz.4.272'. [ 135.647904][ T5141] program syz.1.273 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 135.662670][ T5139] device bond0 entered promiscuous mode [ 135.668668][ T5139] device bond_slave_0 entered promiscuous mode [ 135.689800][ T5139] device bond_slave_1 entered promiscuous mode [ 135.716990][ T5139] device ipvlan0 entered promiscuous mode [ 135.764214][ T5139] device ipvlan0 left promiscuous mode [ 135.786840][ T5139] device bond0 left promiscuous mode [ 135.800760][ T5139] device bond_slave_0 left promiscuous mode [ 135.817932][ T5139] device bond_slave_1 left promiscuous mode [ 135.952852][ T26] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 135.997150][ T7] usb 4-1: USB disconnect, device number 3 [ 136.143741][ T5150] vivid-004: disconnect [ 136.160231][ T26] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 136.191501][ T5149] vivid-004: reconnect [ 136.217959][ T26] usb 3-1: config 0 interface 0 has no altsetting 0 [ 136.249161][ T26] usb 3-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=b1.f9 [ 136.270808][ T26] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.283770][ T26] usb 3-1: Product: syz [ 136.291505][ T26] usb 3-1: Manufacturer: syz [ 136.302298][ T26] usb 3-1: SerialNumber: syz [ 136.322998][ T26] usb 3-1: config 0 descriptor?? [ 136.359691][ T26] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 136.425181][ T26] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 136.485732][ T26] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 136.504704][ T26] usb 3-1: media controller created [ 136.558271][ T26] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 136.757999][ T5160] loop0: detected capacity change from 0 to 128 [ 136.795468][ T5160] ufs: Unable to do repair on error, will lock lock instead [ 136.854670][ T5160] ufs: ufs_fill_super(): fragment size 3263967611 is not a power of 2 [ 136.875010][ T26] DVB: Unable to find symbol tda10046_attach() [ 136.895238][ T26] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 136.923463][ T26] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 136.999823][ T4324] Process accounting resumed [ 137.361363][ T26] dvb_usb_m920x: probe of 3-1:0.0 failed with error -71 [ 137.386721][ T26] usb 3-1: USB disconnect, device number 7 [ 137.939521][ T5187] loop0: detected capacity change from 0 to 128 [ 137.987454][ T5187] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 138.025094][ T5187] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 138.565629][ T5198] loop1: detected capacity change from 0 to 1024 [ 138.622349][ T5198] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 138.664152][ T5198] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 138.743976][ T5198] EXT4-fs (loop1): invalid journal inode [ 138.770201][ T5198] EXT4-fs (loop1): can't get journal size [ 138.826903][ T5198] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 139.005177][ T5198] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 37: comm syz.1.296: path /71/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 139.065798][ T5198] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 3: comm syz.1.296: path /71/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=511, rec_len=65535, size=1024 fake=0 [ 139.142325][ T5197] loop0: detected capacity change from 0 to 32768 [ 139.188731][ T5208] process 'syz.3.300' launched './file0' with NULL argv: empty string added [ 139.255805][ T5197] XFS (loop0): Mounting V5 Filesystem [ 139.272420][ T4275] EXT4-fs (loop1): unmounting filesystem. [ 139.419975][ T5197] XFS (loop0): Ending clean mount [ 139.453011][ T5197] XFS (loop0): Quotacheck needed: Please wait. [ 139.561046][ T5197] XFS (loop0): Quotacheck: Done. [ 139.758679][ T4268] XFS (loop0): Unmounting Filesystem [ 139.770777][ T7] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 139.938138][ T5215] loop2: detected capacity change from 0 to 32768 [ 139.977755][ T7] usb 4-1: config 2 has an invalid interface number: 50 but max is 0 [ 139.995901][ T5215] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.301 (5215) [ 139.997766][ T7] usb 4-1: config 2 has no interface number 0 [ 140.028463][ T5230] netlink: 16 bytes leftover after parsing attributes in process `syz.1.308'. [ 140.056421][ T7] usb 4-1: config 2 interface 50 altsetting 2 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 140.078780][ T7] usb 4-1: config 2 interface 50 altsetting 2 endpoint 0x82 has invalid maxpacket 1967, setting to 64 [ 140.090379][ T5215] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 140.100630][ T7] usb 4-1: config 2 interface 50 has no altsetting 0 [ 140.110918][ T26] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 140.112936][ T7] usb 4-1: New USB device found, idVendor=041e, idProduct=4051, bcdDevice=ac.66 [ 140.135995][ T5215] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 140.145308][ T5215] BTRFS info (device loop2): setting nodatacow, compression disabled [ 140.158223][ T5215] BTRFS info (device loop2): enabling auto defrag [ 140.170839][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.179170][ T7] usb 4-1: Product: syz [ 140.211522][ T5215] BTRFS info (device loop2): max_inline at 0 [ 140.235441][ T7] usb 4-1: Manufacturer: syz [ 140.240126][ T7] usb 4-1: SerialNumber: syz [ 140.241269][ T5215] BTRFS info (device loop2): using free space tree [ 140.278173][ T5224] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 140.286573][ T5224] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 140.300781][ T26] usb 5-1: Using ep0 maxpacket: 8 [ 140.308246][ T26] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 140.321813][ T7] gspca_main: gspca_zc3xx-2.14.0 probing 041e:4051 [ 140.350998][ T26] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 140.396597][ T26] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 140.432773][ T26] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 140.470278][ T26] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 140.495920][ T26] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.736130][ T26] usb 5-1: GET_CAPABILITIES returned 0 [ 140.742164][ T26] usbtmc 5-1:16.0: can't read capabilities [ 140.954038][ T7] input: gspca_zc3xx as /devices/platform/dummy_hcd.3/usb4/4-1/input/input7 [ 140.994958][ T4979] usb 5-1: USB disconnect, device number 2 [ 141.018734][ T4273] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 141.270724][ T4980] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 141.458410][ T5269] usb 4-1: USB disconnect, device number 4 [ 141.483140][ T4980] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 141.523207][ T4980] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.594363][ T4980] usb 2-1: config 0 descriptor?? [ 141.612483][ T4980] cp210x 2-1:0.0: cp210x converter detected [ 141.702850][ T5275] netlink: 64 bytes leftover after parsing attributes in process `syz.4.314'. [ 142.028577][ T5281] loop6: detected capacity change from 0 to 524287999 [ 142.037277][ T4980] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 142.065839][ T4980] usb 2-1: cp210x converter now attached to ttyUSB0 [ 142.270889][ T4980] usb 2-1: USB disconnect, device number 3 [ 142.302871][ T4980] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 142.367292][ T4980] cp210x 2-1:0.0: device disconnected [ 142.577453][ T5273] loop2: detected capacity change from 0 to 32768 [ 142.695456][ T5273] find_entry called with index >= next_index [ 142.721850][ T5273] find_entry called with index >= next_index [ 142.739525][ T5273] find_entry called with index >= next_index [ 142.766840][ T5273] find_entry called with index >= next_index [ 142.779465][ T5273] find_entry called with index >= next_index [ 142.874565][ T5273] ERROR: (device loop2): jfs_readdir: JFS:Dtree error: ino = 2, bn=48, index = 1 [ 142.874565][ T5273] [ 142.940710][ T5273] ERROR: (device loop2): remounting filesystem as read-only [ 142.969056][ T5273] ERROR: (device loop2): jfs_readdir: JFS:Dtree error: ino = 2, bn=48, index = 4 [ 142.969056][ T5273] [ 143.020099][ T5273] ERROR: (device loop2): jfs_readdir: JFS:Dtree error: ino = 2, bn=48, index = 5 [ 143.020099][ T5273] [ 143.064511][ T5294] netlink: 12 bytes leftover after parsing attributes in process `syz.1.323'. [ 143.239661][ T5283] loop0: detected capacity change from 0 to 40427 [ 143.340841][ T5283] F2FS-fs (loop0): Found nat_bits in checkpoint [ 143.537447][ T5283] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 143.694668][ T5316] netlink: 'syz.4.330': attribute type 2 has an invalid length. [ 143.835145][ T4268] syz-executor: attempt to access beyond end of device [ 143.835145][ T4268] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 144.393011][ T5313] loop1: detected capacity change from 0 to 32768 [ 144.418357][ T5313] XFS: ikeep mount option is deprecated. [ 144.495139][ T5314] loop2: detected capacity change from 0 to 40427 [ 144.569763][ T5313] XFS (loop1): Mounting V5 Filesystem [ 144.577698][ T5314] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x3ffff [ 144.592755][ T5327] loop0: detected capacity change from 0 to 64 [ 144.620740][ T5314] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x2 [ 144.643014][ T5314] F2FS-fs (loop2): invalid crc value [ 144.717139][ T5314] F2FS-fs (loop2): Found nat_bits in checkpoint [ 144.810916][ T5313] XFS (loop1): Ending clean mount [ 144.880226][ T5313] XFS (loop1): Quotacheck needed: Please wait. [ 144.931620][ T5314] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 144.986377][ T5313] XFS (loop1): Quotacheck: Done. [ 145.053150][ T5339] loop3: detected capacity change from 0 to 64 [ 145.235227][ T4275] XFS (loop1): Unmounting Filesystem [ 145.909357][ T5332] loop4: detected capacity change from 0 to 32768 [ 145.964703][ T5332] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 scanned by syz.4.334 (5332) [ 146.034554][ T5332] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 146.062634][ T5332] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 146.120708][ T5332] BTRFS info (device loop4): setting nodatasum [ 146.161733][ T5332] BTRFS info (device loop4): use zlib compression, level 3 [ 146.169114][ T5332] BTRFS info (device loop4): using free space tree [ 146.450907][ T5332] BTRFS info (device loop4): enabling ssd optimizations [ 146.504167][ T27] audit: type=1800 audit(1768867596.407:8): pid=5332 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.334" name="file1" dev="loop4" ino=260 res=0 errno=0 [ 146.875211][ T5351] loop0: detected capacity change from 0 to 32768 [ 146.892778][ T4279] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 146.915579][ T5387] loop2: detected capacity change from 0 to 2048 [ 146.979997][ T5387] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 147.315017][ T5351] XFS (loop0): DAX unsupported by block device. Turning off DAX. [ 147.333629][ T5351] XFS (loop0): Mounting V5 Filesystem [ 147.435254][ T5405] loop2: detected capacity change from 0 to 512 [ 147.458509][ T5351] XFS (loop0): Ending clean mount [ 147.471646][ T5405] EXT4-fs: Ignoring removed orlov option [ 147.490742][ T5405] EXT4-fs: Ignoring removed i_version option [ 147.496817][ T5405] EXT4-fs: Ignoring removed nomblk_io_submit option [ 147.506122][ T5351] XFS (loop0): Quotacheck needed: Please wait. [ 147.552993][ T5405] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 147.584183][ T5405] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c040e118, mo2=0002] [ 147.619159][ T5351] XFS (loop0): Quotacheck: Done. [ 147.663012][ T5405] EXT4-fs (loop2): orphan cleanup on readonly fs [ 147.669535][ T5405] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0 [ 147.767260][ T5398] loop3: detected capacity change from 0 to 8192 [ 147.801127][ T5405] EXT4-fs warning (device loop2): ext4_enable_quotas:7087: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 147.840872][ T4268] XFS (loop0): Unmounting Filesystem [ 147.866775][ T5405] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 147.913573][ T5405] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.356: bg 0: block 40: padding at end of block bitmap is not set [ 148.025008][ T5405] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6181: Corrupt filesystem [ 148.086430][ T5405] EXT4-fs (loop2): 1 truncate cleaned up [ 148.103836][ T5405] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 148.219115][ T5414] loop1: detected capacity change from 0 to 1024 [ 148.230745][ T5405] EXT4-fs (loop2): shut down requested (1) [ 148.309290][ T5414] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 148.522022][ T5414] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 148.939875][ T5425] loop0: detected capacity change from 0 to 256 [ 149.008203][ T5425] FAT-fs (loop0): Directory bread(block 64) failed [ 149.029565][ T5425] FAT-fs (loop0): Directory bread(block 65) failed [ 149.047866][ T5425] FAT-fs (loop0): Directory bread(block 66) failed [ 149.067587][ T5425] FAT-fs (loop0): Directory bread(block 67) failed [ 149.093117][ T5425] FAT-fs (loop0): Directory bread(block 68) failed [ 149.109023][ T5425] FAT-fs (loop0): Directory bread(block 69) failed [ 149.123202][ T5425] FAT-fs (loop0): Directory bread(block 70) failed [ 149.129966][ T5425] FAT-fs (loop0): Directory bread(block 71) failed [ 149.139575][ T5425] FAT-fs (loop0): Directory bread(block 72) failed [ 149.150123][ T5425] FAT-fs (loop0): Directory bread(block 73) failed [ 149.400619][ C1] sched: RT throttling activated [ 149.403115][ T4273] EXT4-fs (loop2): unmounting filesystem. [ 149.438127][ T4275] EXT4-fs (loop1): unmounting filesystem. [ 149.736637][ T5429] loop3: detected capacity change from 0 to 16 [ 149.785055][ T5429] erofs: (device loop3): mounted with root inode @ nid 36. [ 149.950398][ T5429] erofs: (device loop3): z_erofs_read_folio: failed to read, err [-117] [ 150.459897][ T5420] loop4: detected capacity change from 0 to 262144 [ 150.483962][ T5420] F2FS-fs (loop4): invalid crc value [ 150.497085][ T5431] loop0: detected capacity change from 0 to 32768 [ 150.555030][ T5431] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.368 (5431) [ 150.569487][ T5420] F2FS-fs (loop4): Found nat_bits in checkpoint [ 150.630792][ T5420] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 150.701122][ T5431] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 150.756438][ T5431] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 150.783842][ T5440] loop3: detected capacity change from 0 to 256 [ 150.828338][ T5431] BTRFS info (device loop0): turning off barriers [ 150.864864][ T5440] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 150.899761][ T5431] BTRFS info (device loop0): use no compression [ 150.933317][ T5431] BTRFS info (device loop0): setting nodatasum [ 150.978745][ T5431] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 151.036240][ T5431] BTRFS info (device loop0): use zstd compression, level 3 [ 151.073774][ T5438] loop2: detected capacity change from 0 to 8192 [ 151.084367][ T5431] BTRFS info (device loop0): using free space tree [ 151.117400][ T5438] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 151.400785][ T5438] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 151.553207][ T5438] REISERFS (device loop2): using ordered data mode [ 151.559892][ T5438] reiserfs: using flush barriers [ 151.656538][ T5438] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 151.751425][ T5438] REISERFS (device loop2): checking transaction log (loop2) [ 151.806063][ T5438] REISERFS (device loop2): Using r5 hash to sort names [ 151.831158][ T5438] REISERFS (device loop2): using 3.5.x disk format [ 151.891244][ T5438] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 152.113852][ T4268] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 152.183371][ T5446] loop1: detected capacity change from 0 to 32768 [ 152.250931][ T5446] XFS: attr2 mount option is deprecated. [ 152.459064][ T5446] XFS (loop1): DAX unsupported by block device. Turning off DAX. [ 152.511480][ T5446] XFS (loop1): Mounting V5 Filesystem [ 152.545523][ T4411] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop0 scanned by udevd (4411) [ 152.698501][ T5446] XFS (loop1): Ending clean mount [ 152.759257][ T5446] XFS (loop1): Quotacheck needed: Please wait. [ 152.909099][ T5446] XFS (loop1): Quotacheck: Done. [ 153.182646][ T4275] XFS (loop1): Unmounting Filesystem [ 153.230801][ T7] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 153.425964][ T5496] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 153.456916][ T5496] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 153.481053][ T7] usb 1-1: Using ep0 maxpacket: 32 [ 153.500936][ T7] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 153.532631][ T7] usb 1-1: config 0 has no interface number 0 [ 153.552010][ T7] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 153.572364][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.580506][ T7] usb 1-1: Product: syz [ 153.625558][ T7] usb 1-1: Manufacturer: syz [ 153.630248][ T7] usb 1-1: SerialNumber: syz [ 153.691657][ T7] usb 1-1: config 0 descriptor?? [ 153.711410][ T7] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 153.906272][ T7] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 153.967336][ T7] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 154.341373][ C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 154.348983][ T5264] usb 1-1: USB disconnect, device number 4 [ 154.390899][ T5264] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 154.455753][ T5264] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 154.491693][ T5264] quatech2 1-1:0.51: device disconnected [ 154.693689][ T5521] loop4: detected capacity change from 0 to 1024 [ 154.738023][ T5521] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 154.768758][ T5521] ext4 filesystem being mounted at /71/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 154.798632][ T5521] EXT4-fs error (device loop4): ext4_map_blocks:745: inode #15: comm syz.4.370: lblock 0 mapped to illegal pblock 0 (length 6) [ 154.922470][ T5518] loop1: detected capacity change from 0 to 8192 [ 154.936237][ T5526] loop2: detected capacity change from 0 to 256 [ 154.944294][ T4338] EXT4-fs error (device loop4): ext4_map_blocks:745: inode #15: comm kworker/u4:5: lblock 0 mapped to illegal pblock 0 (length 1) [ 155.006675][ T4338] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 155.034095][ T27] audit: type=1804 audit(1768867604.937:9): pid=5518 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.400" name="/newroot/93/file2/bus" dev="loop1" ino=1048613 res=1 errno=0 [ 155.062602][ T5526] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 155.085596][ T4338] EXT4-fs (loop4): This should not happen!! Data will be lost [ 155.085596][ T4338] [ 155.106657][ T27] audit: type=1800 audit(1768867604.937:10): pid=5518 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.400" name="bus" dev="loop1" ino=1048613 res=0 errno=0 [ 155.148932][ T4279] EXT4-fs (loop4): unmounting filesystem. [ 155.487553][ T5535] netlink: 12 bytes leftover after parsing attributes in process `syz.1.394'. [ 155.504393][ T5532] loop2: detected capacity change from 0 to 1024 [ 155.590869][ T5532] hfsplus: invalid length 32517 has been corrected to 255 [ 155.682399][ T5532] hfsplus: invalid length 32517 has been corrected to 255 [ 155.704455][ T5539] netlink: 12 bytes leftover after parsing attributes in process `syz.3.398'. [ 155.734168][ T5541] hfsplus: invalid length 32517 has been corrected to 255 [ 156.008650][ T46] hfsplus: b-tree write err: -5, ino 4 [ 156.333885][ T5559] loop4: detected capacity change from 0 to 128 [ 156.396293][ T5559] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 156.401242][ T4339] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 156.462966][ T5559] ext4 filesystem being mounted at /76/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 156.530797][ T5563] loop1: detected capacity change from 0 to 1024 [ 156.539279][ T5563] EXT4-fs: Ignoring removed oldalloc option [ 156.546322][ T5563] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 156.582743][ T5563] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 156.610902][ T4339] usb 4-1: Using ep0 maxpacket: 16 [ 156.619104][ T4339] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 156.680747][ T4339] usb 4-1: config 0 interface 0 has no altsetting 0 [ 156.687513][ T4339] usb 4-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 156.750746][ T4339] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.774561][ T4339] usb 4-1: config 0 descriptor?? [ 156.786254][ T4279] EXT4-fs (loop4): unmounting filesystem. [ 156.966268][ T4275] EXT4-fs (loop1): unmounting filesystem. [ 157.184068][ T5552] loop2: detected capacity change from 0 to 32768 [ 157.205454][ T5573] netlink: 48 bytes leftover after parsing attributes in process `syz.4.413'. [ 157.248692][ T4339] cougar 0003:060B:500A.0004: usage count exceeds max: fixing up report descriptor [ 157.272971][ T4339] cougar 0003:060B:500A.0004: unexpected long global item [ 157.282130][ T4339] cougar 0003:060B:500A.0004: parse failed [ 157.289153][ T4339] cougar: probe of 0003:060B:500A.0004 failed with error -22 [ 157.313389][ T5552] XFS (loop2): Mounting V5 Filesystem [ 157.470111][ T7] usb 4-1: USB disconnect, device number 5 [ 157.515039][ T5552] XFS (loop2): Ending clean mount [ 157.640322][ T5552] XFS (loop2): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair. [ 157.846117][ T4273] XFS (loop2): Unmounting Filesystem [ 157.920298][ T5566] loop0: detected capacity change from 0 to 65536 [ 158.109745][ T5566] XFS (loop0): Mounting V5 Filesystem [ 158.242180][ T5566] XFS (loop0): Ending clean mount [ 158.421332][ T4268] XFS (loop0): Unmounting Filesystem [ 158.428556][ T5605] tipc: Started in network mode [ 158.449506][ T5605] tipc: Node identity ac141441, cluster identity 4711 [ 158.502200][ T5605] tipc: Enabled bearer , priority 10 [ 158.687037][ T5611] netlink: 16 bytes leftover after parsing attributes in process `syz.1.425'. [ 158.691127][ T7] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 158.881622][ T5613] device macvlan0 entered promiscuous mode [ 158.930806][ T5613] netlink: 'syz.3.426': attribute type 1 has an invalid length. [ 158.942214][ T7] usb 3-1: Using ep0 maxpacket: 32 [ 158.961695][ T5613] netlink: 'syz.3.426': attribute type 2 has an invalid length. [ 158.965400][ T7] usb 3-1: config 0 has an invalid interface number: 35 but max is 0 [ 158.998620][ T7] usb 3-1: config 0 has no interface number 0 [ 159.010817][ T7] usb 3-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 159.040720][ T7] usb 3-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 159.077541][ T7] usb 3-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 159.113108][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.131461][ T7] usb 3-1: Product: syz [ 159.140933][ T7] usb 3-1: Manufacturer: syz [ 159.145669][ T7] usb 3-1: SerialNumber: syz [ 159.200066][ T7] usb 3-1: config 0 descriptor?? [ 159.200263][ T5617] loop3: detected capacity change from 0 to 512 [ 159.219237][ T5598] loop4: detected capacity change from 0 to 32768 [ 159.241564][ T5598] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 10 [ 159.283429][ T5617] EXT4-fs: Ignoring removed i_version option [ 159.306454][ T5617] EXT4-fs: Ignoring removed bh option [ 159.420358][ T7] radio-si470x 3-1:0.35: this is not a si470x device. [ 159.436462][ T5617] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 159.481389][ T7] radio-raremono 3-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 159.500118][ T5617] ext4 filesystem being mounted at /81/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 159.628138][ T5264] tipc: Node number set to 2886997057 [ 159.683326][ T7] radio-raremono 3-1:0.35: V4L2 device registered as radio48 [ 159.748461][ T4411] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 10 [ 159.806646][ T4277] EXT4-fs (loop3): unmounting filesystem. [ 159.905714][ T4979] usb 3-1: USB disconnect, device number 8 [ 159.927931][ T4979] radio-raremono 3-1:0.35: Thanko's Raremono disconnected [ 160.088542][ T27] audit: type=1326 audit(1768867609.987:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5634 comm="syz.0.434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f8639acb9 code=0x7ffc0000 [ 160.171183][ T27] audit: type=1326 audit(1768867610.037:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5634 comm="syz.0.434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f6f8639acb9 code=0x7ffc0000 [ 160.277632][ T27] audit: type=1326 audit(1768867610.037:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5634 comm="syz.0.434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f8639acb9 code=0x7ffc0000 [ 160.350428][ T27] audit: type=1326 audit(1768867610.037:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5634 comm="syz.0.434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f8639acb9 code=0x7ffc0000 [ 160.411305][ T27] audit: type=1326 audit(1768867610.037:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5634 comm="syz.0.434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6f8635b58e code=0x7ffc0000 [ 160.515995][ T27] audit: type=1326 audit(1768867610.037:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5634 comm="syz.0.434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f8639acb9 code=0x7ffc0000 [ 160.613283][ T27] audit: type=1326 audit(1768867610.037:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5634 comm="syz.0.434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f8639acb9 code=0x7ffc0000 [ 160.670699][ T27] audit: type=1326 audit(1768867610.047:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5634 comm="syz.0.434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7f6f8639acb9 code=0x7ffc0000 [ 160.758814][ T27] audit: type=1326 audit(1768867610.047:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5634 comm="syz.0.434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f8639acb9 code=0x7ffc0000 [ 160.808054][ T5622] loop1: detected capacity change from 0 to 32768 [ 160.849559][ T27] audit: type=1326 audit(1768867610.047:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5634 comm="syz.0.434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f8639acb9 code=0x7ffc0000 [ 160.896346][ T5655] loop4: detected capacity change from 0 to 256 [ 160.949174][ T5622] XFS (loop1): Mounting V5 Filesystem [ 161.194919][ T5622] XFS (loop1): Ending clean mount [ 161.399698][ T4275] XFS (loop1): Unmounting Filesystem [ 161.477148][ T5670] loop0: detected capacity change from 0 to 64 [ 161.846545][ T5647] loop2: detected capacity change from 0 to 32768 [ 161.986510][ T5647] XFS (loop2): Mounting V5 Filesystem [ 162.170039][ T5692] netlink: 8 bytes leftover after parsing attributes in process `syz.4.453'. [ 162.219879][ T5647] XFS (loop2): Ending clean mount [ 162.271913][ T5647] XFS (loop2): Quotacheck needed: Please wait. [ 162.357032][ T5697] loop3: detected capacity change from 0 to 4096 [ 162.456028][ T5647] XFS (loop2): Quotacheck: Done. [ 162.478247][ T5700] loop1: detected capacity change from 0 to 128 [ 162.487624][ T5697] ntfs: volume version 3.1. [ 162.537866][ T5700] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 162.744632][ T5702] UDF-fs: error (device loop1): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 162.821136][ T4273] XFS (loop2): Unmounting Filesystem [ 163.173742][ T5704] loop4: detected capacity change from 0 to 4096 [ 163.226660][ T5704] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 163.374733][ T5704] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 163.754567][ T5717] loop2: detected capacity change from 0 to 512 [ 163.767643][ T5686] loop0: detected capacity change from 0 to 40427 [ 163.822294][ T5686] F2FS-fs (loop0): invalid crc value [ 163.886296][ T5686] F2FS-fs (loop0): Found nat_bits in checkpoint [ 163.937542][ T5717] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 164.019187][ T5717] ext4 filesystem being mounted at /76/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 164.154423][ T5686] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 164.424711][ T4268] syz-executor: attempt to access beyond end of device [ 164.424711][ T4268] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 164.427649][ T4273] EXT4-fs (loop2): unmounting filesystem. [ 164.487743][ T5736] loop3: detected capacity change from 0 to 736 [ 164.982691][ T5713] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.473 (5713) [ 165.034535][ T5713] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 165.065075][ T5713] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 165.118218][ T5713] BTRFS info (device loop1): using free space tree [ 165.558782][ T5770] FAT-fs (loop4): Directory bread(block 64) failed [ 165.566296][ T5770] FAT-fs (loop4): Directory bread(block 65) failed [ 165.573088][ T5770] FAT-fs (loop4): Directory bread(block 66) failed [ 165.579802][ T5770] FAT-fs (loop4): Directory bread(block 67) failed [ 165.586578][ T5770] FAT-fs (loop4): Directory bread(block 68) failed [ 165.593390][ T5770] FAT-fs (loop4): Directory bread(block 69) failed [ 165.596126][ T5713] BTRFS info (device loop1): enabling ssd optimizations [ 165.600259][ T5770] FAT-fs (loop4): Directory bread(block 70) failed [ 165.614357][ T5770] FAT-fs (loop4): Directory bread(block 71) failed [ 165.621113][ T5770] FAT-fs (loop4): Directory bread(block 72) failed [ 165.633299][ T5770] FAT-fs (loop4): Directory bread(block 73) failed [ 165.943543][ T5745] set_capacity_and_notify: 2 callbacks suppressed [ 165.943559][ T5745] loop2: detected capacity change from 0 to 32768 [ 165.986714][ T5778] loop0: detected capacity change from 0 to 256 [ 166.008112][ T5745] [ 166.008112][ T5745] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 166.008112][ T5745] [ 166.091640][ T5778] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 166.116524][ T27] kauditd_printk_skb: 27 callbacks suppressed [ 166.116539][ T27] audit: type=1800 audit(1768867616.017:28): pid=5745 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.475" name="file1" dev="loop2" ino=4 res=0 errno=0 [ 166.226928][ T5781] ERROR: (device loop2): diWrite: ixpxd invalid [ 166.226928][ T5781] [ 166.256738][ T4275] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 166.509274][ T5781] ERROR: (device loop2): txCommit: [ 166.509274][ T5781] [ 166.577820][ T5746] loop3: detected capacity change from 0 to 32768 [ 166.601161][ T5781] ERROR: (device loop2): diFree: invalid inoext [ 166.601161][ T5781] [ 166.716189][ T5746] XFS (loop3): Mounting V5 Filesystem [ 166.744377][ T5790] loop4: detected capacity change from 0 to 1764 [ 166.784964][ T5745] JFS: metapage_get_blocks failed [ 166.824396][ T5745] [ 166.824396][ T5745] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 166.824396][ T5745] [ 166.881136][ T5745] [ 166.881136][ T5745] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 166.881136][ T5745] [ 166.951340][ T5746] XFS (loop3): Ending clean mount [ 166.970696][ T5745] [ 166.970696][ T5745] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 166.970696][ T5745] [ 166.998533][ T5745] [ 166.998533][ T5745] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 166.998533][ T5745] [ 167.014875][ T5746] XFS (loop3): Quotacheck needed: Please wait. [ 167.087160][ T5745] [ 167.087160][ T5745] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 167.087160][ T5745] [ 167.158597][ T4338] ERROR: (device loop2): diWrite: ixpxd invalid [ 167.158597][ T4338] [ 167.172638][ T5746] XFS (loop3): Quotacheck: Done. [ 167.182345][ T4338] ERROR: (device loop2): txCommit: [ 167.182345][ T4338] [ 167.189896][ T4338] jfs_write_inode: jfs_commit_inode failed! [ 167.221319][ T4273] [ 167.221319][ T4273] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 167.221319][ T4273] [ 167.264572][ T4273] [ 167.264572][ T4273] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 167.264572][ T4273] [ 167.320752][ T26] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 167.424439][ T4277] XFS (loop3): Unmounting Filesystem [ 167.520904][ T26] usb 2-1: Using ep0 maxpacket: 8 [ 167.528713][ T26] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 167.559972][ T26] usb 2-1: config 179 has no interface number 0 [ 167.579346][ T26] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 167.616395][ T26] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 167.638112][ T26] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 167.669877][ T26] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 167.690002][ T26] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 167.717414][ T26] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 167.732210][ T26] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.748781][ T5796] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 167.986405][ T4981] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 168.057644][ T4339] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input8 [ 168.183620][ T4981] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 168.209621][ T4981] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 168.290362][ T4981] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 168.326518][ T4981] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.385682][ T1179] usb 2-1: USB disconnect, device number 4 [ 168.385723][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 168.400060][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 168.415851][ T1179] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 168.444316][ T5814] loop3: detected capacity change from 0 to 2048 [ 168.479883][ T5814] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 168.572748][ T4981] usb 3-1: GET_CAPABILITIES returned 0 [ 168.579181][ T4981] usbtmc 3-1:16.0: can't read capabilities [ 168.805484][ T4339] usb 3-1: USB disconnect, device number 9 [ 169.170518][ T5832] netlink: 56 bytes leftover after parsing attributes in process `syz.0.502'. [ 169.513065][ T5841] device veth0 entered promiscuous mode [ 169.529766][ T5840] I/O error, dev loop5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 169.537352][ T5839] device veth0 left promiscuous mode [ 169.578573][ T5840] MINIX-fs: unable to read superblock [ 169.828649][ T5849] netlink: 4 bytes leftover after parsing attributes in process `syz.0.510'. [ 169.853536][ T26] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 170.052624][ T26] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 170.065709][ T5857] netlink: 44 bytes leftover after parsing attributes in process `syz.1.514'. [ 170.072049][ T26] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 170.120646][ T26] usb 4-1: config 220 has an invalid descriptor of length 13, skipping remainder of the config [ 170.147643][ T26] usb 4-1: config 220 has no interface number 2 [ 170.164394][ T26] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 170.188170][ T26] usb 4-1: config 220 interface 0 has no altsetting 0 [ 170.198305][ T26] usb 4-1: config 220 interface 76 has no altsetting 0 [ 170.227315][ T26] usb 4-1: config 220 interface 1 has no altsetting 0 [ 170.245890][ T5862] loop4: detected capacity change from 0 to 8 [ 170.258788][ T26] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 170.318971][ T26] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.338307][ T5862] SQUASHFS error: Failed to read block 0x738: -5 [ 170.358702][ T26] usb 4-1: Product: syz [ 170.363164][ T26] usb 4-1: Manufacturer: syz [ 170.367816][ T26] usb 4-1: SerialNumber: syz [ 170.394316][ T5862] SQUASHFS error: Unable to read metadata cache entry [736] [ 170.462181][ T5863] SQUASHFS error: Unable to read metadata cache entry [736] [ 170.619572][ T26] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 170.633695][ T26] usb 4-1: No valid video chain found. [ 170.640366][ T26] usb 4-1: selecting invalid altsetting 0 [ 170.701780][ T26] usb 4-1: selecting invalid altsetting 0 [ 170.707603][ T26] usbtest: probe of 4-1:220.1 failed with error -22 [ 170.768920][ T26] usb 4-1: USB disconnect, device number 6 [ 171.568001][ T5891] netlink: 4 bytes leftover after parsing attributes in process `syz.0.528'. [ 171.779281][ T5893] loop4: detected capacity change from 0 to 4096 [ 172.235442][ T4279] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22. [ 172.265854][ T4279] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 172.285105][ T5907] loop0: detected capacity change from 0 to 2048 [ 172.308257][ T5907] UDF-fs: bad mount option "vLolume=000000000063" or missing value [ 173.095173][ T5930] loop2: detected capacity change from 0 to 512 [ 173.132719][ T5930] EXT4-fs: Ignoring removed nobh option [ 173.197453][ T5930] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -117 [ 173.246886][ T5930] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.545: invalid indirect mapped block 256 (level 1) [ 173.285863][ T5930] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.545: invalid indirect mapped block 2683928664 (level 1) [ 173.364182][ T5930] EXT4-fs (loop2): 1 truncate cleaned up [ 173.381111][ T5930] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 173.476453][ T5930] EXT4-fs (loop2): shut down requested (2) [ 173.626262][ T4273] EXT4-fs (loop2): unmounting filesystem. [ 173.828764][ T5948] loop7: detected capacity change from 0 to 7 [ 173.846449][ T4411] Dev loop7: unable to read RDB block 7 [ 173.854378][ T4411] loop7: unable to read partition table [ 173.874249][ T4411] loop7: partition table beyond EOD, truncated [ 173.903411][ T5948] Dev loop7: unable to read RDB block 7 [ 173.967267][ T5948] loop7: unable to read partition table [ 174.017132][ T5948] loop7: partition table beyond EOD, truncated [ 174.052162][ T5948] loop_reread_partitions: partition scan of loop7 (j̖P=!MX %`搘ȵ4FLQk݊5) failed (rc=-5) [ 174.135232][ T5950] Dev loop7: unable to read RDB block 7 [ 174.170800][ T5950] loop7: unable to read partition table [ 174.176754][ T5950] loop7: partition table beyond EOD, truncated [ 174.239174][ T5938] loop3: detected capacity change from 0 to 32768 [ 174.277994][ T5938] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 scanned by syz.3.548 (5938) [ 174.330171][ T5938] BTRFS info (device loop3): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 174.370856][ T5938] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 174.400012][ T5938] BTRFS info (device loop3): metadata ratio 2 [ 174.413827][ T5938] BTRFS info (device loop3): enabling auto defrag [ 174.445280][ T5938] BTRFS info (device loop3): force clearing of disk cache [ 174.479557][ T5938] BTRFS info (device loop3): trying to use backup root at mount time [ 174.497257][ T5962] loop1: detected capacity change from 0 to 16 [ 174.527705][ T5938] BTRFS info (device loop3): turning on async discard [ 174.534713][ T5962] erofs: (device loop1): mounted with root inode @ nid 36. [ 174.595376][ T5938] BTRFS info (device loop3): setting nodatacow, compression disabled [ 174.614807][ T5962] erofs: (device loop1): erofs_find_target_block: corrupted dir block 0 @ nid 46 [ 174.671593][ T5938] BTRFS info (device loop3): using free space tree [ 175.101408][ T5980] netlink: 28 bytes leftover after parsing attributes in process `syz.1.560'. [ 175.128144][ T5955] loop0: detected capacity change from 0 to 32768 [ 175.315573][ T5989] loop1: detected capacity change from 0 to 128 [ 175.382014][ T5989] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 175.395714][ T4277] BTRFS info (device loop3): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 175.474510][ T5989] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 176.400961][ T5265] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 176.509951][ T5993] loop0: detected capacity change from 0 to 32768 [ 176.590715][ T5265] usb 2-1: Using ep0 maxpacket: 32 [ 176.599069][ T5265] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 176.638301][ T5265] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.666764][ T5993] XFS (loop0): Mounting V5 Filesystem [ 176.684224][ T5265] usb 2-1: config 0 descriptor?? [ 176.690832][ T125] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 176.797301][ T5993] XFS (loop0): Ending clean mount [ 176.882611][ T125] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 176.901320][ T125] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 176.928967][ T5265] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 176.936291][ T125] usb 4-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 176.953880][ T5265] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 176.967298][ T125] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.979885][ T5265] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 176.997047][ T125] usb 4-1: config 0 descriptor?? [ 177.004972][ T5265] usb 2-1: media controller created [ 177.048094][ T5265] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 177.107118][ T6009] loop2: detected capacity change from 0 to 32768 [ 177.142905][ T5265] az6027: usb out operation failed. (-71) [ 177.161016][ T5265] az6027: usb out operation failed. (-71) [ 177.185795][ T5265] stb0899_attach: Driver disabled by Kconfig [ 177.214140][ T6009] XFS (loop2): Mounting V5 Filesystem [ 177.215646][ T5265] az6027: no front-end attached [ 177.215646][ T5265] [ 177.269539][ T5265] az6027: usb out operation failed. (-71) [ 177.287643][ T4268] XFS (loop0): Unmounting Filesystem [ 177.306579][ T5265] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 177.321280][ T5265] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input9 [ 177.339616][ T5265] dvb-usb: schedule remote query interval to 400 msecs. [ 177.362563][ T5265] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 177.394531][ T6009] XFS (loop2): Ending clean mount [ 177.416081][ T5265] usb 2-1: USB disconnect, device number 5 [ 177.445936][ T6009] XFS (loop2): Quotacheck needed: Please wait. [ 177.454538][ T125] isku 0003:1E7D:319C.0005: unknown main item tag 0x0 [ 177.467022][ T125] isku 0003:1E7D:319C.0005: unknown main item tag 0x0 [ 177.490682][ T125] isku 0003:1E7D:319C.0005: unknown main item tag 0x0 [ 177.501962][ T125] isku 0003:1E7D:319C.0005: unknown main item tag 0x0 [ 177.539623][ T125] isku 0003:1E7D:319C.0005: unknown main item tag 0x0 [ 177.562746][ T125] isku 0003:1E7D:319C.0005: unknown main item tag 0x0 [ 177.578752][ T125] isku 0003:1E7D:319C.0005: unknown main item tag 0x0 [ 177.602042][ T125] isku 0003:1E7D:319C.0005: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.3-1/input0 [ 177.693585][ T6009] XFS (loop2): Quotacheck: Done. [ 177.695577][ T5265] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 177.788065][ T27] audit: type=1800 audit(1768867627.697:29): pid=6009 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.570" name="file1" dev="loop2" ino=9286 res=0 errno=0 [ 177.931167][ T7] usb 4-1: USB disconnect, device number 7 [ 177.986073][ T4273] XFS (loop2): Unmounting Filesystem [ 178.097904][ T6032] fido_id[6032]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 179.097755][ T6058] loop3: detected capacity change from 0 to 128 [ 179.454245][ T6038] loop1: detected capacity change from 0 to 40427 [ 179.506270][ T6038] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 179.525438][ T6038] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 179.540372][ T6038] F2FS-fs (loop1): invalid crc value [ 179.586322][ T6038] F2FS-fs (loop1): Found nat_bits in checkpoint [ 179.785272][ T6073] loop0: detected capacity change from 0 to 64 [ 179.794894][ T6038] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 179.807091][ T6038] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 180.121188][ T6059] loop2: detected capacity change from 0 to 32768 [ 180.139150][ T6059] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.584 (6059) [ 180.228315][ T6059] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 180.318784][ T6059] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 180.366739][ T6059] BTRFS info (device loop2): using free space tree [ 180.487048][ T6063] loop4: detected capacity change from 0 to 32768 [ 180.607940][ T6103] netlink: 'syz.0.595': attribute type 10 has an invalid length. [ 180.680722][ T6059] BTRFS info (device loop2): enabling ssd optimizations [ 180.798926][ T6059] BTRFS error (device loop2): target device is invalid! [ 180.821110][ T6103] team0: Port device dummy0 added [ 180.851347][ T6107] netlink: 'syz.0.595': attribute type 10 has an invalid length. [ 181.034113][ T4273] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 181.047060][ T6107] team0: Port device dummy0 removed [ 181.108662][ T6107] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 181.730527][ T6134] loop2: detected capacity change from 0 to 256 [ 181.875744][ T4987] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 181.970645][ T6128] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 182.071914][ T4987] usb 4-1: Using ep0 maxpacket: 32 [ 182.093940][ T4987] usb 4-1: config 0 has no interfaces? [ 182.117342][ T4987] usb 4-1: New USB device found, idVendor=18d1, idProduct=9400, bcdDevice= 0.00 [ 182.137240][ T4987] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.165085][ T6128] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 182.186515][ T6128] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.197819][ T4987] usb 4-1: config 0 descriptor?? [ 182.205563][ T6128] usb 2-1: Product: syz [ 182.232160][ T6128] usb 2-1: Manufacturer: syz [ 182.244366][ T6128] usb 2-1: SerialNumber: syz [ 182.284113][ T6128] usb 2-1: config 0 descriptor?? [ 182.515597][ T4987] usb 4-1: USB disconnect, device number 8 [ 182.717651][ T6128] usb 2-1: Firmware: major: 130, minor: 102, hardware type: HULUSB (4) [ 182.780642][ T6127] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 182.931909][ T6128] usb 2-1: failed to fetch extended address, random address set [ 182.973491][ T6127] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 183.027919][ T6127] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 183.055949][ T6127] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.068862][ T6128] usb 2-1: USB disconnect, device number 6 [ 183.115221][ T6127] usb 1-1: Product: syz [ 183.119443][ T6127] usb 1-1: Manufacturer: syz [ 183.136103][ T6127] usb 1-1: SerialNumber: syz [ 183.165708][ T6154] loop4: detected capacity change from 0 to 256 [ 183.190811][ T6127] usb 1-1: config 0 descriptor?? [ 183.701883][ T6128] usb 1-1: USB disconnect, device number 5 [ 183.744839][ T6165] netlink: 16 bytes leftover after parsing attributes in process `syz.4.613'. [ 183.816153][ T6168] netlink: 'syz.1.614': attribute type 12 has an invalid length. [ 184.308379][ T6189] loop3: detected capacity change from 0 to 16 [ 184.359116][ T6190] dvmrp1: tun_chr_ioctl cmd 1074025681 [ 184.386251][ T6192] capability: warning: `syz.2.626' uses deprecated v2 capabilities in a way that may be insecure [ 184.391611][ T6189] erofs: (device loop3): mounted with root inode @ nid 36. [ 184.445063][ T6189] overlayfs: failed to get redirect (-117) [ 184.738446][ T6202] loop2: detected capacity change from 0 to 256 [ 184.788309][ T6202] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 184.832683][ T6202] exFAT-fs (loop2): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 184.906759][ T6197] loop4: detected capacity change from 0 to 4096 [ 185.008087][ T6197] ntfs: volume version 3.1. [ 185.426759][ T6194] loop0: detected capacity change from 0 to 32768 [ 185.450995][ T6194] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz.0.627 (6194) [ 185.501135][ T6194] BTRFS info (device loop0): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 185.519031][ T6194] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 185.530031][ T6194] BTRFS info (device loop0): force zlib compression, level 3 [ 185.550326][ T6194] BTRFS info (device loop0): turning on flush-on-commit [ 185.578012][ T6194] BTRFS warning (device loop0): the 'inode_cache' option is deprecated and has no effect since 5.11 [ 185.600837][ T6194] BTRFS info (device loop0): max_inline at 4096 [ 185.607312][ T6194] BTRFS info (device loop0): using free space tree [ 185.733972][ T6222] netlink: 48 bytes leftover after parsing attributes in process `syz.2.638'. [ 185.745382][ T6222] netlink: 48 bytes leftover after parsing attributes in process `syz.2.638'. [ 185.822418][ T6221] loop1: detected capacity change from 0 to 764 [ 185.835536][ T6232] mmap: syz.2.639 (6232) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 186.000806][ T6194] BTRFS info (device loop0): enabling ssd optimizations [ 186.179303][ T6245] loop4: detected capacity change from 0 to 64 [ 186.201972][ T6245] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing [ 186.263428][ T6194] BTRFS info (device loop0): balance: start -d -m [ 186.368383][ T6194] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata [ 186.435064][ T6249] loop2: detected capacity change from 0 to 136 [ 186.588366][ T6252] loop1: detected capacity change from 0 to 256 [ 186.631475][ T6253] program syz.3.644 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 186.656878][ T6249] iso9660: Corrupted directory entry in block 2 of inode 1472 [ 186.706150][ T6252] FAT-fs (loop1): Directory bread(block 64) failed [ 186.788687][ T6252] FAT-fs (loop1): Directory bread(block 65) failed [ 186.813248][ T6255] loop4: detected capacity change from 0 to 8 [ 186.820263][ T6255] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 186.840829][ T6252] FAT-fs (loop1): Directory bread(block 66) failed [ 186.847440][ T6252] FAT-fs (loop1): Directory bread(block 67) failed [ 186.865855][ T6194] BTRFS info (device loop0): relocating block group 5242880 flags data|metadata [ 186.895514][ T4586] udevd[4586]: incorrect cramfs checksum on /dev/loop4 [ 186.929719][ T6252] FAT-fs (loop1): Directory bread(block 68) failed [ 186.944557][ T6252] FAT-fs (loop1): Directory bread(block 69) failed [ 186.951588][ T6252] FAT-fs (loop1): Directory bread(block 70) failed [ 186.967236][ T6252] FAT-fs (loop1): Directory bread(block 71) failed [ 187.014981][ T4412] udevd[4412]: incorrect cramfs checksum on /dev/loop4 [ 187.045877][ T6252] FAT-fs (loop1): Directory bread(block 72) failed [ 187.076781][ T6252] FAT-fs (loop1): Directory bread(block 73) failed [ 187.117164][ T6194] BTRFS info (device loop0): balance: canceled [ 187.356869][ T4268] BTRFS info (device loop0): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 187.808763][ T6271] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 188.158718][ T6271] NILFS (loop4): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 188.211282][ T6271] NILFS error (device loop4): nilfs_bmap_propagate: broken bmap (inode number=4) [ 188.233196][ T6277] set_capacity_and_notify: 1 callbacks suppressed [ 188.233213][ T6277] loop2: detected capacity change from 0 to 4096 [ 188.276034][ T6271] Remounting filesystem read-only [ 188.296737][ T4279] NILFS (loop4): disposed unprocessed dirty file(s) when stopping log writer [ 188.552145][ T6279] loop7: detected capacity change from 0 to 7 [ 188.572571][ T6263] loop3: detected capacity change from 0 to 32768 [ 188.603286][ T6279] Dev loop7: unable to read RDB block 7 [ 188.608945][ T6279] loop7: unable to read partition table [ 188.631024][ T6263] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.648 (6263) [ 188.714409][ T6279] loop7: partition table beyond EOD, truncated [ 188.731009][ T6263] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 188.762964][ T6263] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 188.769064][ T6279] loop_reread_partitions: partition scan of loop7 (j̖P=!MX %`搘ȵ4FLQk݊5) failed (rc=-5) [ 188.795320][ T6263] BTRFS info (device loop3): turning off barriers [ 188.817753][ T6263] BTRFS info (device loop3): setting nodatasum [ 188.847922][ T6263] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 188.866637][ T4273] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22. [ 188.886670][ T4273] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 188.891541][ T6281] Dev loop7: unable to read RDB block 7 [ 188.904645][ T6263] BTRFS info (device loop3): use zstd compression, level 3 [ 188.946504][ T6263] BTRFS info (device loop3): using free space tree [ 188.986289][ T6281] loop7: unable to read partition table [ 189.031390][ T6281] loop7: partition table beyond EOD, truncated [ 189.428299][ T6308] netlink: 'syz.4.660': attribute type 1 has an invalid length. [ 189.460709][ T6308] netlink: 'syz.4.660': attribute type 2 has an invalid length. [ 189.510309][ T6309] netlink: 'syz.4.660': attribute type 1 has an invalid length. [ 189.530056][ T6309] netlink: 'syz.4.660': attribute type 2 has an invalid length. [ 189.606871][ T4277] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 189.645388][ T6289] loop2: detected capacity change from 0 to 32768 [ 189.675530][ T6289] XFS: attr2 mount option is deprecated. [ 189.916191][ T6289] XFS (loop2): Mounting V5 Filesystem [ 190.157006][ T6289] XFS (loop2): Ending clean mount [ 190.227010][ T6289] XFS (loop2): Quotacheck needed: Please wait. [ 190.347859][ T6289] XFS (loop2): Quotacheck: Done. [ 190.589054][ T4273] XFS (loop2): Unmounting Filesystem [ 190.778065][ T6304] loop0: detected capacity change from 0 to 40427 [ 190.814249][ T6304] F2FS-fs (loop0): invalid crc value [ 190.956234][ T6304] F2FS-fs (loop0): Found nat_bits in checkpoint [ 191.151077][ T6304] F2FS-fs (loop0): Start checkpoint disabled! [ 191.256559][ T6304] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 191.318049][ T27] audit: type=1800 audit(1768867641.217:30): pid=6304 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.659" name="file2" dev="loop0" ino=10 res=0 errno=0 [ 191.349725][ T6348] netlink: 16 bytes leftover after parsing attributes in process `syz.1.672'. [ 191.510862][ T6354] comedi comedi3: comedi_test: 38 microvolt, 2047 microsecond waveform attached [ 191.669229][ T41] kworker/u4:2: attempt to access beyond end of device [ 191.669229][ T41] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 191.851524][ T6363] loop1: detected capacity change from 0 to 512 [ 191.955246][ T6363] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 192.020831][ T6363] ext4 filesystem being mounted at /153/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 192.114730][ T6363] EXT4-fs error (device loop1): ext4_do_update_inode:5272: inode #2: comm syz.1.679: corrupted inode contents [ 192.149472][ T6363] EXT4-fs error (device loop1): ext4_dirty_inode:6137: inode #2: comm syz.1.679: mark_inode_dirty error [ 192.165427][ T6363] EXT4-fs error (device loop1): ext4_do_update_inode:5272: inode #2: comm syz.1.679: corrupted inode contents [ 192.207457][ T6374] EXT4-fs error (device loop1): ext4_do_update_inode:5272: inode #2: comm syz.1.679: corrupted inode contents [ 192.324536][ T6374] EXT4-fs error (device loop1): ext4_dirty_inode:6137: inode #2: comm syz.1.679: mark_inode_dirty error [ 192.338174][ T6374] EXT4-fs error (device loop1): ext4_do_update_inode:5272: inode #2: comm syz.1.679: corrupted inode contents [ 192.358846][ T6374] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #2: comm syz.1.679: mark_inode_dirty error [ 192.377152][ T6374] EXT4-fs error (device loop1): ext4_do_update_inode:5272: inode #2: comm syz.1.679: corrupted inode contents [ 192.390507][ T6374] EXT4-fs error (device loop1): ext4_dirty_inode:6137: inode #2: comm syz.1.679: mark_inode_dirty error [ 192.496034][ T4275] EXT4-fs (loop1): unmounting filesystem. [ 193.368991][ T6399] loop2: detected capacity change from 0 to 1024 [ 194.223211][ T6420] loop1: detected capacity change from 0 to 1024 [ 194.352925][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.359419][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.369934][ T6420] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 194.421506][ T6420] ext4 filesystem being mounted at /155/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 194.637439][ T46] EXT4-fs error (device loop1): ext4_map_blocks:745: inode #15: comm kworker/u4:3: lblock 0 mapped to illegal pblock 0 (length 6) [ 194.677320][ T46] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 194.719703][ T46] EXT4-fs (loop1): This should not happen!! Data will be lost [ 194.719703][ T46] [ 194.771393][ T46] EXT4-fs error (device loop1): ext4_map_blocks:745: inode #15: block 8: comm kworker/u4:3: lblock 8 mapped to illegal pblock 8 (length 8) [ 194.811055][ T46] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 194.853739][ T46] EXT4-fs (loop1): This should not happen!! Data will be lost [ 194.853739][ T46] [ 194.889902][ T4275] EXT4-fs (loop1): unmounting filesystem. [ 195.331297][ T6418] loop0: detected capacity change from 0 to 32768 [ 195.359922][ T6446] loop4: detected capacity change from 0 to 1024 [ 195.371458][ T6418] XFS (loop0): Invalid device [./file0], error=-15 [ 195.377139][ T6445] netlink: 'syz.1.713': attribute type 39 has an invalid length. [ 195.430307][ T6433] loop2: detected capacity change from 0 to 32768 [ 195.443887][ T6445] netlink: 8 bytes leftover after parsing attributes in process `syz.1.713'. [ 195.456184][ T6446] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 195.555447][ T6431] loop3: detected capacity change from 0 to 40427 [ 195.657107][ T6431] F2FS-fs (loop3): Small segment_count (9 < 1 * 24) [ 195.698289][ T6431] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 195.813743][ T6431] F2FS-fs (loop3): Found nat_bits in checkpoint [ 196.061752][ T6431] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 196.079082][ T6431] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 196.336734][ T4277] syz-executor: attempt to access beyond end of device [ 196.336734][ T4277] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 196.511771][ T107] ------------[ cut here ]------------ [ 196.517658][ T107] WARNING: CPU: 0 PID: 107 at fs/jfs/jfs_dmap.c:2875 dbAdjTree+0x448/0x4d0 [ 196.526405][ T107] Modules linked in: [ 196.531120][ T107] CPU: 0 PID: 107 Comm: jfsCommit Not tainted syzkaller #0 [ 196.538830][ T107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 196.549002][ T107] RIP: 0010:dbAdjTree+0x448/0x4d0 [ 196.554118][ T107] Code: e8 1d 19 e3 fe e9 5a ff ff ff e8 53 2e 92 fe eb 05 e8 4c 2e 92 fe 48 83 c4 28 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 38 2e 92 fe <0f> 0b eb e8 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c ee fb ff ff 4c [ 196.573833][ T107] RSP: 0018:ffffc90002d07668 EFLAGS: 00010293 [ 196.579962][ T107] RAX: ffffffff82f02438 RBX: ffff8880762ee010 RCX: ffff88801a331dc0 [ 196.588053][ T107] RDX: 0000000000000000 RSI: 0000000000000155 RDI: 0000000000020056 [ 196.596224][ T107] RBP: 0000000000020056 R08: ffffea0001d8bb87 R09: 1ffffd40003b1770 [ 196.604295][ T107] R10: dffffc0000000000 R11: fffff940003b1771 R12: ffff8880762ee018 [ 196.612462][ T107] R13: dffffc0000000000 R14: 0000000000000004 R15: 0000000000000155 [ 196.620488][ T107] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 196.629521][ T107] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 196.636209][ T107] CR2: 0000200000001000 CR3: 00000000795ed000 CR4: 00000000003506f0 [ 196.644397][ T107] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 196.652452][ T107] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 196.660607][ T107] Call Trace: [ 196.663940][ T107] [ 196.666918][ T107] ? lock_page+0x2b0/0x2b0 [ 196.671421][ T107] dbJoin+0x238/0x300 [ 196.675462][ T107] ? PageHeadHuge+0x8f/0x1c0 [ 196.680105][ T107] dbFreeBits+0x4e1/0xda0 [ 196.684541][ T107] dbFree+0x32e/0x640 [ 196.688603][ T107] txFreeMap+0x9e2/0xde0 [ 196.693119][ T107] ? do_raw_spin_unlock+0x11d/0x230 [ 196.698392][ T107] xtTruncate+0xcc0/0x2d10 [ 196.702921][ T107] ? xtInitRoot+0x160/0x160 [ 196.707499][ T107] ? mapping_evict_folio+0x520/0x520 [ 196.712894][ T107] ? __lock_acquire+0x7d10/0x7d10 [ 196.717980][ T107] ? do_raw_spin_lock+0x128/0x2f0 [ 196.723111][ T107] ? memset+0x1e/0x40 [ 196.727140][ T107] ? __dquot_initialize+0x213/0xcd0 [ 196.732519][ T107] jfs_free_zero_link+0x358/0x4b0 [ 196.737618][ T107] ? inode_wait_for_writeback+0x1df/0x220 [ 196.743464][ T107] ? jfs_write_failed+0x190/0x190 [ 196.748570][ T107] ? sb_clear_inode_writeback+0x3c0/0x3c0 [ 196.754378][ T107] ? do_raw_spin_lock+0x128/0x2f0 [ 196.759477][ T107] ? bit_waitqueue+0x30/0x30 [ 196.764179][ T107] jfs_evict_inode+0x359/0x430 [ 196.768995][ T107] ? evict+0x4c3/0x8d0 [ 196.773168][ T107] ? jfs_write_inode+0x220/0x220 [ 196.778170][ T107] evict+0x4c9/0x8d0 [ 196.782199][ T107] ? proc_nr_inodes+0x2f0/0x2f0 [ 196.787108][ T107] ? do_raw_spin_unlock+0x11d/0x230 [ 196.792412][ T107] ? _raw_spin_unlock+0x24/0x40 [ 196.797318][ T107] ? iput+0x768/0x980 [ 196.801395][ T107] jfs_lazycommit+0x425/0xa70 [ 196.806130][ T107] ? txFreelock+0x5a0/0x5a0 [ 196.810720][ T107] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 196.816669][ T107] ? do_task_dead+0xd0/0xd0 [ 196.821264][ T107] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 196.827242][ T107] ? __kthread_parkme+0x162/0x1c0 [ 196.832360][ T107] kthread+0x29d/0x330 [ 196.836489][ T107] ? txFreelock+0x5a0/0x5a0 [ 196.841075][ T107] ? kthread_blkcg+0xd0/0xd0 [ 196.845732][ T107] ret_from_fork+0x1f/0x30 [ 196.850221][ T107] [ 196.853332][ T107] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 196.860655][ T107] CPU: 0 PID: 107 Comm: jfsCommit Not tainted syzkaller #0 [ 196.867887][ T107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 196.878072][ T107] Call Trace: [ 196.881388][ T107] [ 196.884360][ T107] dump_stack_lvl+0x188/0x24e [ 196.889091][ T107] ? memcpy+0x3c/0x60 [ 196.893114][ T107] ? show_regs_print_info+0x12/0x12 [ 196.898374][ T107] ? load_image+0x400/0x400 [ 196.902942][ T107] panic+0x2e5/0x730 [ 196.906907][ T107] ? bpf_jit_dump+0xd0/0xd0 [ 196.911470][ T107] ? ret_from_fork+0x1f/0x30 [ 196.916125][ T107] __warn+0x2f8/0x4f0 [ 196.920169][ T107] ? dbAdjTree+0x448/0x4d0 [ 196.924643][ T107] ? dbAdjTree+0x448/0x4d0 [ 196.929174][ T107] report_bug+0x2ba/0x4f0 [ 196.933531][ T107] ? dbAdjTree+0x448/0x4d0 [ 196.937977][ T107] handle_bug+0x3a/0x70 [ 196.942164][ T107] exc_invalid_op+0x16/0x40 [ 196.946869][ T107] asm_exc_invalid_op+0x16/0x20 [ 196.951804][ T107] RIP: 0010:dbAdjTree+0x448/0x4d0 [ 196.956939][ T107] Code: e8 1d 19 e3 fe e9 5a ff ff ff e8 53 2e 92 fe eb 05 e8 4c 2e 92 fe 48 83 c4 28 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 38 2e 92 fe <0f> 0b eb e8 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c ee fb ff ff 4c [ 196.976586][ T107] RSP: 0018:ffffc90002d07668 EFLAGS: 00010293 [ 196.982679][ T107] RAX: ffffffff82f02438 RBX: ffff8880762ee010 RCX: ffff88801a331dc0 [ 196.990683][ T107] RDX: 0000000000000000 RSI: 0000000000000155 RDI: 0000000000020056 [ 196.998668][ T107] RBP: 0000000000020056 R08: ffffea0001d8bb87 R09: 1ffffd40003b1770 [ 197.006828][ T107] R10: dffffc0000000000 R11: fffff940003b1771 R12: ffff8880762ee018 [ 197.014836][ T107] R13: dffffc0000000000 R14: 0000000000000004 R15: 0000000000000155 [ 197.022930][ T107] ? dbAdjTree+0x448/0x4d0 [ 197.027378][ T107] ? dbAdjTree+0x448/0x4d0 [ 197.031817][ T107] ? lock_page+0x2b0/0x2b0 [ 197.036437][ T107] dbJoin+0x238/0x300 [ 197.040444][ T107] ? PageHeadHuge+0x8f/0x1c0 [ 197.045066][ T107] dbFreeBits+0x4e1/0xda0 [ 197.049426][ T107] dbFree+0x32e/0x640 [ 197.053460][ T107] txFreeMap+0x9e2/0xde0 [ 197.057777][ T107] ? do_raw_spin_unlock+0x11d/0x230 [ 197.063017][ T107] xtTruncate+0xcc0/0x2d10 [ 197.067568][ T107] ? xtInitRoot+0x160/0x160 [ 197.072112][ T107] ? mapping_evict_folio+0x520/0x520 [ 197.077448][ T107] ? __lock_acquire+0x7d10/0x7d10 [ 197.082531][ T107] ? do_raw_spin_lock+0x128/0x2f0 [ 197.087634][ T107] ? memset+0x1e/0x40 [ 197.091680][ T107] ? __dquot_initialize+0x213/0xcd0 [ 197.096929][ T107] jfs_free_zero_link+0x358/0x4b0 [ 197.102264][ T107] ? inode_wait_for_writeback+0x1df/0x220 [ 197.108032][ T107] ? jfs_write_failed+0x190/0x190 [ 197.113094][ T107] ? sb_clear_inode_writeback+0x3c0/0x3c0 [ 197.118860][ T107] ? do_raw_spin_lock+0x128/0x2f0 [ 197.123921][ T107] ? bit_waitqueue+0x30/0x30 [ 197.128557][ T107] jfs_evict_inode+0x359/0x430 [ 197.133363][ T107] ? evict+0x4c3/0x8d0 [ 197.137555][ T107] ? jfs_write_inode+0x220/0x220 [ 197.142609][ T107] evict+0x4c9/0x8d0 [ 197.146546][ T107] ? proc_nr_inodes+0x2f0/0x2f0 [ 197.151536][ T107] ? do_raw_spin_unlock+0x11d/0x230 [ 197.156772][ T107] ? _raw_spin_unlock+0x24/0x40 [ 197.161656][ T107] ? iput+0x768/0x980 [ 197.165669][ T107] jfs_lazycommit+0x425/0xa70 [ 197.170377][ T107] ? txFreelock+0x5a0/0x5a0 [ 197.174907][ T107] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 197.180831][ T107] ? do_task_dead+0xd0/0xd0 [ 197.185365][ T107] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 197.191297][ T107] ? __kthread_parkme+0x162/0x1c0 [ 197.196372][ T107] kthread+0x29d/0x330 [ 197.200476][ T107] ? txFreelock+0x5a0/0x5a0 [ 197.205011][ T107] ? kthread_blkcg+0xd0/0xd0 [ 197.209651][ T107] ret_from_fork+0x1f/0x30 [ 197.214114][ T107] [ 197.217733][ T107] Kernel Offset: disabled [ 197.222133][ T107] Rebooting in 86400 seconds..