last executing test programs: 3.778583209s ago: executing program 3 (id=1254): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r1, 0xc0045009, &(0x7f0000000100)) 3.466555311s ago: executing program 3 (id=1259): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x74) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0900000004000000080000000a"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c250000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.410209471s ago: executing program 0 (id=1260): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000003c0)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f00000014c0)=[{{0x0, 0x4d, &(0x7f0000000180)=[{&(0x7f00000000c0)="8252", 0x2}], 0x1}}], 0x1, 0x40) 3.222867332s ago: executing program 3 (id=1262): r0 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x41}) io_uring_enter(r0, 0x2, 0x0, 0x0, 0x0, 0x0) 3.102874822s ago: executing program 0 (id=1265): r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000000480), 0x21, 0x0) recvmmsg(r0, &(0x7f0000002180)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0xfffff000}], 0x2, 0x40010002, 0x0) 3.021451073s ago: executing program 3 (id=1267): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYBLOB='b 75:*\tmmw'], 0xa) 2.862916454s ago: executing program 0 (id=1270): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000200)={'ip6gre0\x00', &(0x7f0000000340)={'syztnl2\x00', r2, 0x0, 0xff, 0x0, 0x1, 0x28, @mcast2, @loopback={0xfec0ffff00000000, 0xffff8881114a4aa8}, 0x0, 0x20, 0x401}}) 2.779264774s ago: executing program 3 (id=1272): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="06002a000000000008009e00087f"], 0x2c}}, 0x0) 2.686868005s ago: executing program 1 (id=1273): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x40, 0x3}, &(0x7f0000000380), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000010300)=[{0x0}, {&(0x7f0000010380)=""/47, 0x2f}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) 2.681218095s ago: executing program 0 (id=1274): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@bridge_dellink={0x3c, 0x13, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET={0x18, 0x5, 0x0, 0x1, {0x14, 0x6, 0x0, 0x1, [{0x8, 0x1}, {0x8, 0x2}]}}]}]}, 0x3c}}, 0x0) 2.510879926s ago: executing program 3 (id=1276): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[], 0x0) 2.510620746s ago: executing program 0 (id=1278): socket$nl_route(0x10, 0x3, 0x0) socket(0x200000000000011, 0x2, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000000c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r1, @ANYRES16=r0, @ANYRESHEX], 0x0) 2.415704766s ago: executing program 1 (id=1279): r0 = syz_open_dev$vim2m(&(0x7f00000003c0), 0x7, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0xfffffffe, 0x1, 0x1}) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x101ff, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000140)={0x0, 0x40, 0x4, {0x1, @raw_data="3d924b8271394fa4ec01eb92492ff84715d1a004d08b012a7cafe27a5f313d31bbdae5b411ca5be6bfe92437ed0d21b5180e375be56b3b9306d7dbb26bf9f22de7ac7681cca450055250217bdf1113b4258293ba4efed32147bda8454dd115bd5ba066ba06f2854cc96db9a98055cbde9fd084a1223ada91ed2e832907a01ab5ee65f997b617f73d1aa5a6dfc47acdc5eb834f8e448469d235e4380cbcc3314c94970349a3c1374ffec96177b67caa0656f9664277cadb8597e7d911ad1da457ef9744b0993c57a7"}, 0x1}) 2.253538607s ago: executing program 1 (id=1282): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000000)='./file1\x00', 0x810, &(0x7f00000001c0)={[{@treelog}, {@nodatacow}, {@max_inline={'max_inline', 0x3d, [0x6d, 0x33, 0x78, 0x39, 0x65, 0x36]}}, {@space_cache}, {@nodatasum}, {@nobarrier}, {@flushoncommit}, {@user_subvol_rm}, {@ref_verify}, {@noenospc_debug}, {@clear_cache}, {@commit={'commit', 0x3d, 0x3}}, {@ssd}, {@nobarrier}, {@max_inline={'max_inline', 0x3d, [0x32, 0x36, 0x38, 0x35, 0x36, 0x25]}}]}, 0x1, 0x50f3, &(0x7f000000a2c0)="$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") truncate(&(0x7f0000000900)='./file1\x00', 0xb73d) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(r0, 0x3, 0x0, 0x404042bbe) 2.062881148s ago: executing program 4 (id=1284): sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x1c}}, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x6}) r0 = socket$isdn_base(0x22, 0x3, 0x0) ioctl(r0, 0x8b32, &(0x7f0000000040)) 2.000047379s ago: executing program 4 (id=1285): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x7d, &(0x7f0000000140)=ANY=[], 0x8) 1.401223932s ago: executing program 2 (id=1288): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)={0x44, r1, 0x1, 0x0, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x28, 0x33, @probe_response={{{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @initial, {0xb}}, 0x0, @random=0x3d, 0x0, @void, @void, @void, @void, @void, @void, @void, @void}}]}, 0x44}}, 0x0) 1.378439222s ago: executing program 1 (id=1289): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000080)='./bus\x00', 0x20000601) 1.262693723s ago: executing program 1 (id=1290): syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f0000000040)='./bus\x00', 0x2008410, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x553b, &(0x7f000000ac00)="$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") r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) 1.262235983s ago: executing program 2 (id=1291): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000049c0)=@delchain={0x1144, 0x65, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xffe0}}, [@TCA_RATE={0x6, 0x5, {0xa8, 0x7b}}, @filter_kind_options=@f_bpf={{0x8}, {0x4}}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_route={{0xa}, {0x10f8, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_ACT={0x10e4, 0x6, [@m_ife={0xfc, 0x3, 0x0, 0x0, {{0x8}, {0x88, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @broadcast}, @TCA_IFE_METALST={0x20, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @val=0x864a}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x2f}, @IFE_META_SKBMARK={0x4, 0x1, @void}]}, @TCA_IFE_SMAC={0xa, 0x4, @random="03413659759d"}, @TCA_IFE_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @TCA_IFE_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}}, @TCA_IFE_DMAC={0xa, 0x3, @remote}, @TCA_IFE_SMAC={0xa, 0x4, @local}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x3e02, 0xee3b, 0x0, 0x7, 0x6}, 0x1}}]}, {0x4d, 0x6, "3892c4d2eb75728faed731b8708e6a332c67f787554cd94e623e16d97c61b46e68bb870c2d118091088f054adac17d7c528bd9fdc78737e563da64ae9f9ae4b20319575d2587f7b415"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_vlan={0xfe4, 0xe, 0x0, 0x0, {{0x9}, {0x4}, {0xfb7, 0x6, "cd1c0707de29ff9b506c7e4b1034443888d9a5e9dab275afb0e60f81b09895de053f9356e8e560cb3d179a6c9d5492c985db8001459e4fcbcb844d83f24b29faf3eb6b5e485d21e4fd45b7e2185a054c8c5e584002d001b7ec1d8b2ab188bd0fffde3c9aef735cfde0aae7be1c21f55e0b3a54f277390a58d9088cd944645f1100cbe8df1d22512f32af6c94838bbbafc25da06712ce65d337d865f98e3fdd44bf3bf3a22f69cac9ef049373aa1ff7f7c6788969e0d780a966c0cf42b687a3119bdc0408b28becc4b5b6210b571378b61322a5d5b51b5f990b1fc83eefdf5984822aa76dd7f9c42aaf6c521ff363b5c619f20118b0c792c4cdc99f6e220652c21044363214061325e8e7d49af7814ca8b919500e98214219f5e274da90adadc001272869f8984051229f3aeeb68287a1c04981d851013a11b7bf671c66aabd56d3c6f3d1fca5bab707d98a15c4741e8c7a15c698f8c6257a8a1457fd905e284a87218590ced7c0787ced773d93272bc0a3e43a40343d9a2e7ffd977c68d87589acd4b4b0a4061877d2b43235fd674877943584073095b279bda377f2084aabd24d3503009bd3ac9fd74787cba463b41f1e96b7036ac90f7984b5ffa4cea3e09f128e268b000c54802d4bee88ac1623c8ba08eb1c6f38910d6eb4909caa6e432b458c6f060ff9733035ab0105db481a56afda3253d2873d58249983ccc9551e2847e44882f24ec82cce6b137b161423dd968241f0f2753c9ab1b825204d8e6561c6d5934226cdd85266f0da5e4a200e9a4d23d26def27431f56fdd0a69e70d6921e4a7cfac642e0e2807aba952ca54355eca1a057ab7885ec921d90230ac40ceba9811ca4c2f76276e7085f6731d497b1242c0b5f424487715f8b6e28d528063000373a22269408d745196a34d0faa1fa642cd5fa4ff4d1e4fc2038258026623c630093cc65517aafbe74868f4d0e973831a57505d09c8b99bd637139536272b4fd5a30a677c6c6ef246c731bc5c302ebd966819dc40a652d88ba2533ed0c272394a2e8083fc068c3bdda481328661e0589e5f482d575cdaa099ba58f45b98dda91a27c62bc9d502c5cb70d2eecc04ce4a1d14d295973f72eed9eaec902b926beba9b8af37bdf39f251d3c47c34c54479846cab485d8667e4722f2fca3da3a590c5f590aa66b451f28ba91cc3095336ef8420632cc15906adab20e9dc9c7e68539923d4b55dbe9d6dd466b888a4576cc505fa90b4c6051057585be3ef15df9598d94c9604f88396aa11997a24ab5dcac77a82108c2460a5c096ad35d0de8e5175c057fed29f09abd8be8635fc9a9eb3dc5129988b938bcc05c4157216ed76581e5ab63644dd9115088634a005617f231599379b64e411f545edbbe8dcf43a4daec08e1725a3dd8237e2bbef229a3683bc5819aa189df139256734cd515ed3396b3a8ce590568215a4f2906649f3fad8ab7049a6e72bcc17d4e25c5bdbd2cc605f72c75c4d35aef3247adb275ae02582e0c6a5b7f92c0deda8a7e16f6eea77f18906f473bb41d0b69c9073340b1357fa546bf7486331a40c758c0f76e519287b7ed3cda2557b8985d519bf9bfff1bf5cfed6db14c72a9a594f25f98606160ab9339b983db7829e58774833b92e10237ae2bbacba862b3ba3eca7e140189581efe811f67cd7ce0442263b5142617522e43e1660afa94a24f53df64faa40c1a68a5c5e6dce5b83f501b30e237da3eb85287d4b6615798865027593f45d752e67af234dd35ac1f9ece93b5f57f0b9d79635b1db9688661974c27e571ae07049fc72e7bcece60f6a18a1f89aedc31a5ff50c6a11b092b62de11bd20764cabaac65aed606a0f01eaef2bb3b415578219fd4b839c6f46420589adc7cdf9f0e146607491683afadf6b994d0aa82eff597d5087d7a6ffb7648310e7bbf3835037ac5a0328cf7e759050082d0692c993d62a6660c1c4f21f6fbc972b87274c7899eb9177d169960cf90a6648daa22ea75bbcc5a833d9f47e19b3ee983caa678fef7d2b5b43fd84c56213a7d2e2e96c3a5496bcc71740875233d30d5b2ee46242edfe0de757e61ea150d68e792caa4afd84f972e6b9057ef229461934d590ff1139283801d01c9e26a0dfc1e0f130e0d1908d3f82e2aa55d607f229ead7fe89528ce48290bf509d968286fc54d80058d177a0ffcd9c3115578799b371d650e0c04b191b814662047f46f4742e9a107a7692c39cf7b470ea105d52fa338a9f729326c5cec8279c8dd1908fedad2be38cfc2a94aeac4a1302ec84be7f3ba37de5041536b0e73b806558bcccb46b36e509e7ff6749d4ba2d69dcf85d11757b3c58875102f06c57fe4ac6e2caabc97334e9b2169c43bf844bb5159fb9d930c348c91586033bde48a321202236cf486133ddb84114fcc091f3720af88c546f2ba3e0ca9be71e74a4442aacb9ec7b6abcbaee2231f9f3cdc4b5976b140a7c236b8c42bb5ee5a5061062994a6a533b90b968dc92023b6fe63d9ad84689549a00bb7f44f26ae89c2e1402122352e8365c5e8d12bf79df02c672156b983b24d650344d0b0cdd8209a593730dfb1fb6f9ceb2b888bb0ef36b9355fcc35c07dd449b77d96641d9793e9f3c91b6863fec118de9700e7e30a02919e5e0f5044337dc0592ad9183f0ba6bdd1808e163e326388eb5524a26ba14977788568990bb8aee618bad21b592b5c22745143c6bc7d788d5398083ea914e4e8408b7349cdc7c7873977d35db087710d527bf3684813906d3d8f2381292e69b0385385a85b3332e7b4be48405549b1815801079126b00a96af1f547c6f50247e049a6539a6941180291f923781dc371c5276ac290658a4346c58a23ae68248de8e014d0a2fe48eb684b10e8bc1f2d96b3d3b2504a5a21278cea17b9a99927afa37e9b6445f650435540b0cff0ad77b66abc90c6bc6ec99df30a7f3a8ff64078c2ab1265374128fbcf6fa1d9c1d347054baff423743bd9ce45cc68baf6cf090c21398267be7859d6e98c72c28b62b330d86a8377878b4f8ca415eb7f0934e087f80e2d50690d96a80eefa622853fc595dde98cc5d0853fb98881f623b4792fad76a82f3489ceb20b0364ac13baa0501676108698c51cba1994571469506fb7235af82a9bbb330064ba51ce064d5953cdd683fa91075267ae555045dc837cae6fd232e9ed616f8c8614975a8ca8c9e57eafde846d4655151a9b377bab3a045182f610dc80524a3ebb168f9eafb9a193f2d68c014502d9bd915cac18d929c10bee38a755cd48c6be905330dad24590a79c53f799481e3271caf0102ee301fa91358b2053fbdac6daed098f4d3a9975ab468935445cdf8a7cc9a5283c43dc0d432d42d6883abcc8d5da79b5115b15df6b3710334ba5baa6beb62576af224c6a6589a2fdc61bb2ac519fc0e110e84c9b4e862b7b1c28602ff7555ac768513188ab58fbdabce8cdbdd9cb2161e847fd3db7ceda185ea56475d04ff473732a445ad96a0c57158adc0ce8cfac31f8a85a1adb843b53d98e7ee16b8f2a0cabe4b051e0cb562d1d8b5c9240d929f281fb7f393ed5a4f67f55a548f851bfa52b351df708797757031139b2cd88b2186d56a3b11526aaa55761019b51129408c7b142903c97780ed696f845f838dd41302e3db4e9217e4920682849701992588891d757e897e5fa5b23b16f5a745ce933a6f0d56c666cf5e2e451550a21b293b2eb92bdf38426ae15e75b2875e504c610f852f993f700f526c294edf052c4916ecae43d8f0ea5bb9791ac1aea13f6e6469fdfb420d03643b4827a7c4a549a301ba0ee9d0411313de04369891bc6c50c913a34789de708fffe2124a77c2f979a1cdf070639d8f86c701d2dce4cc9dc7745fe8d078ba1d48fde9d161b899cd597a101ed4aa2d38268a4429c15897a7ed02f312485f7beb4d2e2ee108c4bd95b202646649ee6b57dd42af9146743fbc66bb8d5e57e1d7e8a0dffd83df3dc51efd671bdb65ae4602ec541029402000b64520f150a966e032b62afedf96fe44d99132db3aadc24bb64583691d7a4cf94b0fcd5215bccc688667a579188d679f5bbd8947dab425852874976453e901020b141336c8d36a0da1037e318c118b9d2812daf3ac95ed7cc9e66b26f99437e53839f73b45b9bd9d3063f03b5d42dd5ea3425c9488a70f9abf08a3f8f59555953e3e76ab51689e39d46759abfddd652c0fef1406d3777a5d0bd813aaaf9fa71f5e4b8f532be623d4a1c44123ac3ec7462407b998268f2813e9faa9b814977bb4a7df67ffd9d2bd0de4e9e811462836ae441e72160b9cfdef38971cbb09bfa577d3b337813741c5dc0cddc899f7ef4b7487f39860d30bee819d59f98cbd516b38893d87edbd891df1fc40853cff40f912a180046cf76fb61b43038edfc703a491e401b1e9cecd9b1d9b1d3bdebdac0068f39dc31f32854363def799b9154466f3c0e192f383ec0790307deaa87d08fa2a43988f2860cc9de28e8f6ceeb6ec9419713b15bdcffa2805615cedeeab9096d10ac0c214b0c3433cfcd5162b5152ea232c367ccca2df6e756a1e37e90e453871be796c30d631a0e1a3b5c6ce5e843cb57870ff99366db6ea6d5d443cf88ea4d46974373e9603d70e2f5a3d5ce55be007b58870b794689c2b772543d160d83cc558a99a76e8aa13d120c2ee1eaad8e5a2fe0d31165d957b6e7f38792e0581819ff0748127f29adf5563d4df9b75dbbce83bfb5381304cc60bc99a43caee76ea3892034ea6c167b656188684aefd58d8a000a47416b457eba169713170e78bc13943e6661733bd39f2faddcdcd2432ecbdcfaf2b2176135d2c04bdf51c98530a84f027fd6e5931330a7c848e13e89d09b170638adfd1c7adcf99b88d4b84b4306eaaa4174f6b9246de4ae4c60a69f88ae1e0d812d7d07c2ccaa3a24f2eb9b9f245e1b67e5780c86496ea02828ad20f484385d1b03503413e42e422e753dfe92264c75364ab2f23ea80d0d9843ed13074dc0d60af7df854a008721f959b9fc3b98349111cf95ea3035c341b1e3866b66e7a03cf54ebde87e4e8397a6eebfc0f04f4921214058ed7f2874692e328cdada1dfea80c7ac0e166f8019a5f88bd93d22e0eff5947a105860b00673525761692b9218fa0327787f749b400198cbd733061cbe73ba80b3b2462338852d3b2f8d0294ec7a689d59f99945d0c277c4bc6fa673b16810ff2d6494fa85fd4ab26e048c93c27815baf877232f4a02c08d54e2b0aa3274d0814f87e2f0d22897554f294515705c8de51d06afe1fb86c284b76a617e7ea3f7445d14e00ac13d5b65721facb22673a9014388589414d4aaff93cd3a8bdc14fa1002a023ccd150109d3f740393a0dd1033a657284bddbdc730ce67017f9ccf7560403b909cdd884be7ee89e7e6bac5ddbfd9cd196e7a6b042c7e9f272cf46f002b1d7f68889eff49cc7038c47d6492ac4a7245c25fe48bcfdcb772810a5422be5eb0e6249fdb5701dde6ba44d76860ac28e3ad84d8d54944b3309e2e833cb270ecd28c50955e2e2042a3bcd6042aef8917152e20c55cb2b433bcb02cf3096ea25b38394efd19af5deda07958e26f04e9404bf3705e94c9c83828583d1f97101ed622aece3bb6cfb0bde62c82b04ea68a84d83a294c6203987fe1106289fcd674c1a356f9aabfc853e6b6a4"}, {0xc, 0x7, {0x0, 0xc47eb51d366c1be8}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}]}, 0x1144}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 1.187157364s ago: executing program 2 (id=1292): prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffc000/0x4000)=nil) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffe000/0x2000)=nil) munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000) brk(0x20ffc004) 1.111008614s ago: executing program 2 (id=1293): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000dc0)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x60, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4, 0xc}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [], 0x0, [0x8]}}]}}]}, 0x90}}, 0x0) 974.848245ms ago: executing program 4 (id=1294): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000000000000000000000000000085000000070000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000028008000b703000000009c8c850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x80102, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272}) 974.645895ms ago: executing program 2 (id=1295): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={r1, 0x3}, &(0x7f00000001c0)=0x8) 915.347455ms ago: executing program 0 (id=1296): syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f00000015c0)='./file0\x00', 0x40, &(0x7f0000000180), 0x0, 0x559e, &(0x7f0000005680)="$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") chdir(&(0x7f0000000240)='./file0\x00') fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='.\x00', 0x30468b4acfd3dabe, 0x0) 799.703476ms ago: executing program 2 (id=1297): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) 666.747996ms ago: executing program 4 (id=1298): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x3c, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_SYNPROXY={0x4}]}, 0x3c}}, 0x0) 153.677009ms ago: executing program 1 (id=1299): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000038c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001440)={'\x00', 0x2}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0x9) ioctl$TUNSETLINK(r0, 0x401054d6, 0x0) 153.411849ms ago: executing program 4 (id=1300): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x32, &(0x7f00000002c0)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) syz_emit_ethernet(0x32, &(0x7f00000001c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@ra={0x94, 0x4, 0x1}]}}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) 0s ago: executing program 4 (id=1301): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000032c0)={0x30, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x4}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}]}, 0x30}}, 0x0) kernel console output (not intermixed with test programs): 2/clear_refs (pid: 5053 comm: syz.1.247) [ 110.581540][ T5062] loop1: detected capacity change from 0 to 1024 [ 110.642964][ T7] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 110.717070][ T5066] loop2: detected capacity change from 0 to 256 [ 110.855555][ T7] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 110.878550][ T7] usb 4-1: config 0 has no interface number 0 [ 110.895322][ T7] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.925901][ T7] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.949451][ T7] usb 4-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 111.007608][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.043677][ T7] usb 4-1: config 0 descriptor?? [ 111.055259][ T11] hfsplus: b-tree write err: -5, ino 3 [ 111.306129][ T5057] loop0: detected capacity change from 0 to 40427 [ 111.336458][ T5057] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 111.376782][ T5057] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 111.381623][ T5079] loop4: detected capacity change from 0 to 512 [ 111.404373][ T5057] F2FS-fs (loop0): invalid crc value [ 111.463193][ T5057] F2FS-fs (loop0): Found nat_bits in checkpoint [ 111.476355][ T7] prodikeys 0003:041E:2801.0002: unknown main item tag 0x0 [ 111.496272][ T5079] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 111.513877][ T7] prodikeys 0003:041E:2801.0002: unknown main item tag 0x0 [ 111.533615][ T5079] ext4 filesystem being mounted at /50/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 111.587059][ T5057] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 111.587779][ T7] prodikeys 0003:041E:2801.0002: unknown main item tag 0x0 [ 111.604986][ T5057] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 111.655073][ T7] prodikeys 0003:041E:2801.0002: unknown main item tag 0x0 [ 111.693733][ T7] prodikeys 0003:041E:2801.0002: unknown main item tag 0x0 [ 111.701008][ T7] prodikeys 0003:041E:2801.0002: unknown main item tag 0x0 [ 111.755471][ T7] prodikeys 0003:041E:2801.0002: unknown main item tag 0x0 [ 111.818451][ T7] prodikeys 0003:041E:2801.0002: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.3-1/input1 [ 111.863593][ T7] hid_prodikeys: hid-prodikeys: failed to find output report [ 111.863593][ T7] [ 111.920366][ T7] usb 4-1: USB disconnect, device number 5 [ 111.929063][ T4250] EXT4-fs (loop4): unmounting filesystem. [ 112.111857][ T5074] loop1: detected capacity change from 0 to 32768 [ 112.152484][ T5074] [ 112.152484][ T5074] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 112.152484][ T5074] [ 112.198629][ T5074] find_entry called with index = 0 [ 112.223876][ T5074] read_mapping_page failed! [ 112.228476][ T5074] ERROR: (device loop1): txCommit: [ 112.228476][ T5074] [ 112.313644][ T5097] jfs_unlink: dtDelete returned -116 [ 112.319717][ T5097] jfs_unlink: dtDelete returned -116 [ 112.515628][ T5104] netlink: 32 bytes leftover after parsing attributes in process `syz.2.266'. [ 112.539646][ T4251] [ 112.539646][ T4251] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 112.539646][ T4251] [ 112.563502][ T4251] [ 112.563502][ T4251] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 112.563502][ T4251] [ 112.659432][ T5108] loop0: detected capacity change from 0 to 256 [ 112.721999][ T5108] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 112.763746][ T5110] netlink: 16 bytes leftover after parsing attributes in process `syz.4.269'. [ 113.061614][ T5115] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 113.310278][ T5123] loop0: detected capacity change from 0 to 256 [ 113.406666][ T5123] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 113.562886][ T4558] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 113.576567][ T5106] loop3: detected capacity change from 0 to 40427 [ 113.607421][ T5106] F2FS-fs (loop3): Small segment_count (9 < 1 * 24) [ 113.624885][ T5106] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 113.671748][ T5106] F2FS-fs (loop3): Found nat_bits in checkpoint [ 113.778545][ T4558] usb 2-1: Using ep0 maxpacket: 8 [ 113.788326][ T4558] usb 2-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=3a.11 [ 113.796876][ T5129] loop0: detected capacity change from 0 to 128 [ 113.822772][ T4558] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.834561][ T5129] VFS: Found a Xenix FS (block size = 512) on device loop0 [ 113.851522][ T4558] usb 2-1: Product: syz [ 113.872735][ T4558] usb 2-1: Manufacturer: syz [ 113.890006][ T4558] usb 2-1: SerialNumber: syz [ 113.910012][ T5106] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 113.918716][ T4558] usb 2-1: config 0 descriptor?? [ 113.948500][ T5106] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 113.958243][ T4260] sysv_free_block: trying to free block not in datazone [ 113.961349][ T4558] gspca_main: vc032x-2.14.0 probing 046d:0896 [ 113.979193][ T4260] sysv_free_block: trying to free block not in datazone [ 114.033184][ T4260] sysv_free_block: trying to free block not in datazone [ 114.045922][ T4260] sysv_free_block: trying to free block not in datazone [ 114.062799][ T4260] sysv_free_block: trying to free block not in datazone [ 114.069969][ T4260] sysv_free_block: trying to free block not in datazone [ 114.082854][ T4260] sysv_free_block: trying to free block not in datazone [ 114.101611][ T4260] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 114.165534][ T5120] loop2: detected capacity change from 0 to 40427 [ 114.187506][ T4252] syz-executor: attempt to access beyond end of device [ 114.187506][ T4252] loop3: rw=2049, sector=40960, nr_sectors = 32 limit=40427 [ 114.219501][ T5120] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 114.242896][ T5120] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 114.255606][ T5120] F2FS-fs (loop2): invalid crc value [ 114.308744][ T5133] netlink: 'syz.0.277': attribute type 1 has an invalid length. [ 114.309731][ T5120] F2FS-fs (loop2): Found nat_bits in checkpoint [ 114.356154][ T5136] netlink: 8 bytes leftover after parsing attributes in process `syz.4.279'. [ 114.510251][ T5120] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 114.523131][ T5120] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 114.724729][ T5143] loop0: detected capacity change from 0 to 256 [ 114.791487][ T4558] gspca_vc032x: reg_w err -71 [ 114.800584][ T4558] vc032x: probe of 2-1:0.0 failed with error -71 [ 114.819379][ T4558] usb 2-1: USB disconnect, device number 5 [ 114.889862][ T5143] syz.0.282: attempt to access beyond end of device [ 114.889862][ T5143] loop0: rw=2049, sector=256, nr_sectors = 8 limit=256 [ 114.952101][ T5143] syz.0.282: attempt to access beyond end of device [ 114.952101][ T5143] loop0: rw=2049, sector=260, nr_sectors = 4 limit=256 [ 114.986877][ T5143] Buffer I/O error on dev loop0, logical block 65, lost async page write [ 115.217302][ T5149] loop0: detected capacity change from 0 to 1024 [ 115.463131][ T7] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 115.519908][ T5141] loop4: detected capacity change from 0 to 32768 [ 115.526257][ T5155] loop2: detected capacity change from 0 to 512 [ 115.566429][ T5141] (syz.4.281,5141,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 115.624131][ T5141] (syz.4.281,5141,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 115.639474][ T5155] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 115.673105][ T5155] ext4 filesystem being mounted at /67/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.694862][ T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.724172][ T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.741172][ T5155] EXT4-fs error (device loop2): ext4_map_blocks:634: inode #2: block 18: comm syz.2.283: lblock 23 mapped to illegal pblock 18 (length 1) [ 115.766635][ T5141] JBD2: Ignoring recovery information on journal [ 115.775576][ T7] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 115.800322][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.830511][ T7] usb 4-1: config 0 descriptor?? [ 115.860330][ T5141] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 115.900408][ T4257] EXT4-fs (loop2): unmounting filesystem. [ 115.997335][ T27] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 116.116679][ T4250] ocfs2: Unmounting device (7,4) on (node local) [ 116.196641][ T27] usb 1-1: Using ep0 maxpacket: 16 [ 116.208241][ T27] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 116.242925][ T27] usb 1-1: config 0 has no interface number 0 [ 116.257048][ T7] hid (null): bogus close delimiter [ 116.263664][ T27] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 116.298561][ T27] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 116.328028][ T27] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 116.358292][ T27] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 116.385013][ T27] usb 1-1: Product: syz [ 116.399856][ T27] usb 1-1: SerialNumber: syz [ 116.421113][ T27] usb 1-1: config 0 descriptor?? [ 116.446542][ T27] cm109 1-1:0.8: invalid payload size 0, expected 4 [ 116.496861][ T27] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input6 [ 116.661845][ T7] uclogic 0003:256C:006D.0003: failed retrieving Huion firmware version: -71 [ 116.691950][ T7] uclogic 0003:256C:006D.0003: failed probing parameters: -71 [ 116.691994][ T7] uclogic: probe of 0003:256C:006D.0003 failed with error -71 [ 116.706057][ T7] usb 4-1: USB disconnect, device number 6 [ 116.974323][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 116.977020][ T4566] usb 1-1: USB disconnect, device number 3 [ 116.981380][ C1] cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 117.045090][ T4566] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 118.140890][ T26] audit: type=1326 audit(1733395244.295:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5204 comm="syz.1.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75c0f7ff19 code=0x7ffc0000 [ 118.201928][ T26] audit: type=1326 audit(1733395244.335:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5204 comm="syz.1.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f75c0f7ff19 code=0x7ffc0000 [ 118.266855][ T26] audit: type=1326 audit(1733395244.335:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5204 comm="syz.1.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75c0f7ff19 code=0x7ffc0000 [ 118.362840][ T26] audit: type=1326 audit(1733395244.335:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5204 comm="syz.1.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75c0f7ff19 code=0x7ffc0000 [ 118.451381][ T26] audit: type=1326 audit(1733395244.335:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5204 comm="syz.1.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f75c0f7ff19 code=0x7ffc0000 [ 118.528318][ T26] audit: type=1326 audit(1733395244.335:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5204 comm="syz.1.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75c0f7ff19 code=0x7ffc0000 [ 118.612031][ T26] audit: type=1326 audit(1733395244.335:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5204 comm="syz.1.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75c0f7ff19 code=0x7ffc0000 [ 118.693667][ T26] audit: type=1326 audit(1733395244.335:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5204 comm="syz.1.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7f75c0f7ff19 code=0x7ffc0000 [ 118.706541][ T5198] loop0: detected capacity change from 0 to 32768 [ 118.781721][ T26] audit: type=1326 audit(1733395244.485:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5204 comm="syz.1.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75c0f7ff19 code=0x7ffc0000 [ 118.848849][ T26] audit: type=1326 audit(1733395244.495:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5204 comm="syz.1.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75c0f7ff19 code=0x7ffc0000 [ 118.906513][ T5193] loop2: detected capacity change from 0 to 32768 [ 118.924932][ T5193] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 118.961726][ T5193] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 119.032655][ T5193] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 119.074191][ T22] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 119.081017][ T22] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 119.202619][ T22] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 121ms [ 119.221804][ T5203] loop3: detected capacity change from 0 to 32768 [ 119.247720][ T22] gfs2: fsid=syz:syz.0: jid=0: Done [ 119.264862][ T5193] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 119.320981][ T5203] XFS (loop3): Mounting V5 Filesystem [ 119.494262][ T5203] XFS (loop3): Ending clean mount [ 119.546391][ T5203] XFS (loop3): Quotacheck needed: Please wait. [ 119.634448][ T5203] XFS (loop3): Quotacheck: Done. [ 119.850411][ T4252] XFS (loop3): Unmounting Filesystem [ 119.918492][ T5240] loop2: detected capacity change from 0 to 1024 [ 119.987561][ T5240] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 121.443676][ T5254] loop2: detected capacity change from 0 to 40427 [ 121.478132][ T5254] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x3ffff [ 121.533163][ T5254] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x4 [ 121.574256][ T5254] F2FS-fs (loop2): invalid crc value [ 121.619242][ T5254] F2FS-fs (loop2): Found nat_bits in checkpoint [ 121.719306][ T5266] loop3: detected capacity change from 0 to 32768 [ 121.819523][ T5254] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 121.853000][ T5266] XFS (loop3): Mounting V5 Filesystem [ 121.942444][ T5299] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.013219][ T5299] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.050695][ T5266] XFS (loop3): Ending clean mount [ 122.068513][ T5266] XFS (loop3): Quotacheck needed: Please wait. [ 122.145478][ T5266] XFS (loop3): Quotacheck: Done. [ 122.153695][ T4257] syz-executor: attempt to access beyond end of device [ 122.153695][ T4257] loop2: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 122.216757][ T5266] XFS (loop3): User initiated shutdown received. [ 122.255020][ T5266] XFS (loop3): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0xde/0x150 (fs/xfs/xfs_fsops.c:492). Shutting down filesystem. [ 122.300229][ T5266] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [ 122.329977][ T5306] loop4: detected capacity change from 0 to 512 [ 122.395300][ T5306] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 122.454356][ T5306] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.344: invalid indirect mapped block 4294967295 (level 1) [ 122.460236][ T4252] XFS (loop3): Unmounting Filesystem [ 122.502768][ T5306] EXT4-fs (loop4): Remounting filesystem read-only [ 122.512047][ T5306] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.344: invalid indirect mapped block 4294967295 (level 1) [ 122.537660][ T5306] EXT4-fs (loop4): Remounting filesystem read-only [ 122.573124][ T5306] EXT4-fs (loop4): 2 truncates cleaned up [ 122.607239][ T5306] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 122.727431][ T5306] EXT4-fs (loop4): shut down requested (2) [ 122.874872][ T4250] EXT4-fs (loop4): unmounting filesystem. [ 123.759580][ T5338] loop0: detected capacity change from 0 to 512 [ 123.823134][ T5338] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 123.880831][ T5338] EXT4-fs error (device loop0): ext4_orphan_get:1426: comm syz.0.358: bad orphan inode 16 [ 123.919729][ T5338] EXT4-fs (loop0): Remounting filesystem read-only [ 123.926368][ T5338] ext4_test_bit(bit=15, block=4) = 0 [ 123.941983][ T5338] EXT4-fs (loop0): 1 orphan inode deleted [ 123.947848][ T5338] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 124.035545][ T5338] EXT4-fs error (device loop0): __ext4_new_inode:1075: comm syz.0.358: reserved inode found cleared - inode=9 [ 124.090128][ T5343] loop3: detected capacity change from 0 to 2048 [ 124.129113][ T5338] EXT4-fs (loop0): Remounting filesystem read-only [ 124.221494][ T5350] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 124.304201][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 124.304216][ T26] audit: type=1800 audit(1733395250.465:16): pid=5343 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.359" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 124.309048][ T4260] EXT4-fs (loop0): unmounting filesystem. [ 124.441271][ T5350] NILFS (loop3): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 124.490216][ T5350] NILFS error (device loop3): nilfs_bmap_propagate: broken bmap (inode number=4) [ 124.517370][ T5356] netlink: 28 bytes leftover after parsing attributes in process `syz.0.364'. [ 124.533004][ T5350] Remounting filesystem read-only [ 124.715568][ T4252] NILFS (loop3): disposed unprocessed dirty file(s) when stopping log writer [ 124.750414][ T4252] NILFS (loop3): discard dirty page: offset=0, ino=15 [ 124.778452][ T4252] NILFS (loop3): discard dirty block: blocknr=22, size=1024 [ 124.789149][ T4252] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 124.820753][ T5342] loop2: detected capacity change from 0 to 32768 [ 124.827685][ T4252] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 124.846091][ T5342] (syz.2.360,5342,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 124.872975][ T4252] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 124.899991][ T4252] NILFS (loop3): discard dirty page: offset=0, ino=6 [ 124.907280][ T5342] (syz.2.360,5342,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 124.907322][ T4252] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 124.932055][ T4252] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 124.942637][ T4252] NILFS (loop3): discard dirty block: blocknr=37, size=1024 [ 124.951184][ T4252] NILFS (loop3): discard dirty block: blocknr=38, size=1024 [ 124.967819][ T4252] NILFS (loop3): discard dirty page: offset=0, ino=5 [ 124.975120][ T4252] NILFS (loop3): discard dirty block: blocknr=41, size=1024 [ 124.982444][ T4252] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 124.992180][ T4252] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 125.001474][ T4252] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 125.012323][ T4252] NILFS (loop3): discard dirty page: offset=0, ino=4 [ 125.025829][ T4252] NILFS (loop3): discard dirty block: blocknr=40, size=1024 [ 125.034451][ T4252] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 125.040133][ T5342] JBD2: Ignoring recovery information on journal [ 125.045092][ T4252] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 125.059187][ T4252] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 125.068472][ T4252] NILFS (loop3): discard dirty page: offset=0, ino=3 [ 125.075783][ T4252] NILFS (loop3): discard dirty block: blocknr=42, size=1024 [ 125.083190][ T4252] NILFS (loop3): discard dirty block: blocknr=43, size=1024 [ 125.090664][ T4252] NILFS (loop3): discard dirty block: blocknr=44, size=1024 [ 125.098068][ T4252] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 125.107498][ T4252] NILFS (loop3): discard dirty page: offset=229376, ino=3 [ 125.114761][ T4252] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 125.124054][ T4252] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 125.133354][ T4252] NILFS (loop3): discard dirty block: blocknr=50, size=1024 [ 125.141311][ T4252] NILFS (loop3): discard dirty block: blocknr=0, size=1024 [ 125.148819][ T4252] NILFS (loop3): discard dirty page: offset=233472, ino=3 [ 125.156252][ T4252] NILFS (loop3): discard dirty block: blocknr=0, size=1024 [ 125.163794][ T4252] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 125.172925][ T4252] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 125.182005][ T4252] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 125.211052][ T5342] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 125.426653][ T5357] loop4: detected capacity change from 0 to 32768 [ 125.460382][ T5357] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.366 (5357) [ 125.514243][ T4257] ocfs2: Unmounting device (7,2) on (node local) [ 125.524421][ T5357] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 125.542941][ T5357] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 125.592490][ T5357] BTRFS info (device loop4): setting nodatacow, compression disabled [ 125.626154][ T5357] BTRFS info (device loop4): enabling auto defrag [ 125.652863][ T5357] BTRFS info (device loop4): doing ref verification [ 125.679839][ T5357] BTRFS info (device loop4): using free space tree [ 126.158921][ T4250] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 126.198855][ T5403] netlink: 8 bytes leftover after parsing attributes in process `syz.2.378'. [ 126.774117][ T5407] loop2: detected capacity change from 0 to 8192 [ 126.851206][ T5407] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 126.926752][ T5407] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 126.972999][ T5407] REISERFS (device loop2): using ordered data mode [ 127.032766][ T5407] reiserfs: using flush barriers [ 127.053104][ T5407] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 127.143233][ T5407] REISERFS (device loop2): checking transaction log (loop2) [ 127.188779][ T5407] REISERFS (device loop2): Using r5 hash to sort names [ 127.214566][ T5407] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 127.361253][ T5425] loop4: detected capacity change from 0 to 128 [ 127.484738][ T5425] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 127.497715][ T5429] 9pnet_fd: Insufficient options for proto=fd [ 127.523310][ T5425] ext4 filesystem being mounted at /80/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 127.754324][ T4250] EXT4-fs (loop4): unmounting filesystem. [ 128.042762][ T4767] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 128.234720][ T4767] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 128.262903][ T4767] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.293771][ T4767] usb 1-1: config 0 descriptor?? [ 128.304346][ T4767] cp210x 1-1:0.0: cp210x converter detected [ 128.438148][ T5448] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 128.700303][ T5456] loop2: detected capacity change from 0 to 64 [ 128.705988][ T4767] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -71 [ 128.737612][ T4767] cp210x 1-1:0.0: failed to get vendor val 0x3711 size 2: -71 [ 128.745110][ T5440] loop4: detected capacity change from 0 to 40427 [ 128.759362][ T5440] F2FS-fs (loop4): Small segment_count (9 < 1 * 24) [ 128.763192][ T4767] cp210x 1-1:0.0: GPIO initialisation failed: -71 [ 128.781218][ T5440] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 128.826565][ T4767] usb 1-1: cp210x converter now attached to ttyUSB0 [ 128.854408][ T5440] F2FS-fs (loop4): Found nat_bits in checkpoint [ 128.875476][ T4767] usb 1-1: USB disconnect, device number 4 [ 128.943926][ T4767] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 128.964994][ T4767] cp210x 1-1:0.0: device disconnected [ 129.031985][ T5440] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 129.049762][ T5440] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 129.107910][ T5465] netlink: 4 bytes leftover after parsing attributes in process `syz.1.404'. [ 129.118286][ T5465] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 129.180046][ T4250] syz-executor: attempt to access beyond end of device [ 129.180046][ T4250] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 129.397447][ T5465] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 129.976571][ T5475] netlink: 4 bytes leftover after parsing attributes in process `syz.2.409'. [ 130.098847][ T5478] loop4: detected capacity change from 0 to 2048 [ 130.170343][ T5481] loop3: detected capacity change from 0 to 512 [ 130.203931][ T5484] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 130.228375][ T5481] EXT4-fs: Ignoring removed oldalloc option [ 130.241666][ T26] audit: type=1800 audit(1733395256.395:17): pid=5478 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.405" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 130.298661][ T5484] NILFS (loop4): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 130.318199][ T5484] NILFS error (device loop4): nilfs_bmap_propagate: broken bmap (inode number=4) [ 130.338519][ T5484] Remounting filesystem read-only [ 130.390050][ T5481] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 130.403036][ T5481] ext4 filesystem being mounted at /76/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.594848][ T5481] EXT4-fs error (device loop3): ext4_do_update_inode:5224: inode #2: comm syz.3.410: corrupted inode contents [ 130.609467][ T4250] NILFS (loop4): disposed unprocessed dirty file(s) when stopping log writer [ 130.618728][ T5481] EXT4-fs error (device loop3): ext4_dirty_inode:6089: inode #2: comm syz.3.410: mark_inode_dirty error [ 130.643322][ T4250] NILFS (loop4): discard dirty page: offset=0, ino=15 [ 130.650255][ T4250] NILFS (loop4): discard dirty block: blocknr=22, size=1024 [ 130.658278][ T5481] EXT4-fs error (device loop3): ext4_do_update_inode:5224: inode #2: comm syz.3.410: corrupted inode contents [ 130.680254][ T4250] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 130.690697][ T5497] EXT4-fs error (device loop3): ext4_do_update_inode:5224: inode #2: comm syz.3.410: corrupted inode contents [ 130.703032][ T4250] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 130.722167][ T4250] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 130.781669][ T4250] NILFS (loop4): discard dirty page: offset=0, ino=6 [ 130.808306][ T4250] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 130.849710][ T4250] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 130.873340][ T4250] NILFS (loop4): discard dirty block: blocknr=37, size=1024 [ 130.888835][ T4252] EXT4-fs (loop3): unmounting filesystem. [ 130.898498][ T4250] NILFS (loop4): discard dirty block: blocknr=38, size=1024 [ 130.920901][ T4250] NILFS (loop4): discard dirty page: offset=0, ino=5 [ 130.946215][ T4250] NILFS (loop4): discard dirty block: blocknr=41, size=1024 [ 130.953638][ T4250] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 130.990113][ T4250] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 131.025639][ T4250] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 131.056287][ T4250] NILFS (loop4): discard dirty page: offset=0, ino=4 [ 131.076477][ T4250] NILFS (loop4): discard dirty block: blocknr=40, size=1024 [ 131.113487][ T4250] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 131.128322][ T4250] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 131.162765][ T4250] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 131.171952][ T4250] NILFS (loop4): discard dirty page: offset=0, ino=3 [ 131.193637][ T4250] NILFS (loop4): discard dirty block: blocknr=42, size=1024 [ 131.200979][ T4250] NILFS (loop4): discard dirty block: blocknr=43, size=1024 [ 131.222765][ T4250] NILFS (loop4): discard dirty block: blocknr=44, size=1024 [ 131.252912][ T4250] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 131.261940][ T4250] NILFS (loop4): discard dirty page: offset=229376, ino=3 [ 131.289105][ T4250] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 131.323065][ T4250] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 131.342711][ T4250] NILFS (loop4): discard dirty block: blocknr=50, size=1024 [ 131.358980][ T4250] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 131.372734][ T4250] NILFS (loop4): discard dirty page: offset=233472, ino=3 [ 131.388778][ T4250] NILFS (loop4): discard dirty block: blocknr=0, size=1024 [ 131.413039][ T4250] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 131.422036][ T4250] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 131.442725][ T4566] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 131.472736][ T4250] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 131.612823][ T5522] netlink: 'syz.4.416': attribute type 3 has an invalid length. [ 131.628091][ T5522] netlink: 44 bytes leftover after parsing attributes in process `syz.4.416'. [ 131.659194][ T4566] usb 1-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 131.683582][ T4566] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.714503][ T4566] usb 1-1: config 0 descriptor?? [ 131.744521][ T4566] gspca_main: spca508-2.14.0 probing 8086:0110 [ 131.892109][ T5526] loop3: detected capacity change from 0 to 8192 [ 131.929739][ T4566] gspca_spca508: reg_read err -32 [ 131.930244][ T5526] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 131.935983][ T4566] gspca_spca508: reg_read err -32 [ 131.976479][ T5526] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 131.996473][ T5526] REISERFS (device loop3): using ordered data mode [ 132.028283][ T5526] reiserfs: using flush barriers [ 132.039239][ T5526] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 132.084975][ T5526] REISERFS (device loop3): checking transaction log (loop3) [ 132.099396][ T5526] REISERFS (device loop3): Using r5 hash to sort names [ 132.108032][ T5526] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 132.273530][ T4566] gspca_spca508: reg_read err -71 [ 132.293095][ T4566] gspca_spca508: reg_read err -71 [ 132.317971][ T4566] gspca_spca508: reg write: error -71 [ 132.323755][ T4566] spca508: probe of 1-1:0.0 failed with error -71 [ 132.368163][ T4566] usb 1-1: USB disconnect, device number 5 [ 132.571473][ T5533] loop2: detected capacity change from 0 to 4096 [ 132.726463][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.733374][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.753666][ T5544] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 132.943869][ T5546] loop0: detected capacity change from 0 to 64 [ 133.253588][ T5536] loop4: detected capacity change from 0 to 32768 [ 133.377004][ T5560] loop3: detected capacity change from 0 to 512 [ 133.399034][ T5560] EXT4-fs: Ignoring removed mblk_io_submit option [ 133.422025][ T5560] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 133.488405][ T5560] EXT4-fs (loop3): 1 truncate cleaned up [ 133.509762][ T5560] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 133.804254][ T4252] EXT4-fs (loop3): unmounting filesystem. [ 134.112636][ T5575] loop3: detected capacity change from 0 to 8 [ 134.135373][ T5575] squashfs: Unknown parameter '' [ 134.160383][ T5565] loop0: detected capacity change from 0 to 32768 [ 134.200017][ T5565] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.456 (5565) [ 134.207724][ T4333] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 134.249237][ T5565] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 134.301231][ T5565] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 134.342918][ T5565] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 134.382769][ T5565] BTRFS info (device loop0): use zstd compression, level 3 [ 134.412808][ T5565] BTRFS info (device loop0): using free space tree [ 134.439038][ T5580] netlink: 4 bytes leftover after parsing attributes in process `syz.3.451'. [ 134.468844][ T5580] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 134.669509][ T5580] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 134.685238][ T5565] BTRFS info (device loop0): enabling ssd optimizations [ 134.835534][ T5569] loop4: detected capacity change from 0 to 40427 [ 134.859184][ T5569] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 134.872003][ T5569] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 134.874906][ T5573] loop2: detected capacity change from 0 to 32768 [ 134.891184][ T4260] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 134.908167][ T5573] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.449 (5573) [ 134.931038][ T5569] F2FS-fs (loop4): invalid crc value [ 134.971476][ T5573] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 135.000245][ T5573] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 135.010551][ T5569] F2FS-fs (loop4): Found nat_bits in checkpoint [ 135.093196][ T5573] BTRFS info (device loop2): using free space tree [ 135.263895][ T5569] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 135.273418][ T5569] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 135.567420][ T5573] BTRFS info (device loop2): enabling ssd optimizations [ 135.712754][ T4558] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 135.886848][ T4257] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 135.927073][ T4558] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 135.961766][ T4558] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 135.978617][ T4558] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 136.002924][ T4558] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.041600][ T5623] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 136.065220][ T5636] netlink: 12 bytes leftover after parsing attributes in process `syz.4.460'. [ 136.329153][ T5639] usb 1-1: USB disconnect, device number 6 [ 136.630686][ T5644] loop4: detected capacity change from 0 to 8192 [ 136.685528][ T5644] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 136.705262][ T5644] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 136.747154][ T5644] REISERFS (device loop4): using ordered data mode [ 136.767328][ T5644] reiserfs: using flush barriers [ 136.800110][ T5644] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 136.832054][ T5641] loop3: detected capacity change from 0 to 32768 [ 136.839611][ T5641] XFS: ikeep mount option is deprecated. [ 136.846337][ T5644] REISERFS (device loop4): checking transaction log (loop4) [ 136.864778][ T5644] REISERFS (device loop4): Using r5 hash to sort names [ 136.879977][ T5644] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 136.981615][ T5641] XFS (loop3): Mounting V5 Filesystem [ 137.084221][ T5641] XFS (loop3): Ending clean mount [ 137.128861][ T5641] XFS (loop3): Quotacheck needed: Please wait. [ 137.192974][ T5641] XFS (loop3): Quotacheck: Done. [ 137.249109][ T26] audit: type=1800 audit(1733395263.405:18): pid=5641 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.464" name="bus" dev="loop3" ino=6154 res=0 errno=0 [ 137.281967][ T5641] XFS (loop3): User initiated shutdown received. [ 137.304517][ T5641] XFS (loop3): Log I/O Error (0x6) detected at xfs_fs_goingdown+0xde/0x150 (fs/xfs/xfs_fsops.c:496). Shutting down filesystem. [ 137.363067][ T5641] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [ 137.481795][ T4252] XFS (loop3): Unmounting Filesystem [ 138.621614][ T5673] loop2: detected capacity change from 0 to 40427 [ 138.657310][ T5671] loop0: detected capacity change from 0 to 40427 [ 138.665568][ T5671] F2FS-fs (loop0): build fault injection attr: rate: 771, type: 0x3ffff [ 138.684368][ T5673] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 138.692170][ T5673] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 138.703325][ T5671] F2FS-fs (loop0): invalid crc value [ 138.755997][ T5673] F2FS-fs (loop2): invalid crc value [ 138.769652][ T5671] F2FS-fs (loop0): Found nat_bits in checkpoint [ 138.881416][ T5673] F2FS-fs (loop2): Found nat_bits in checkpoint [ 138.989617][ T5671] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 139.032093][ T5673] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 139.049390][ T5673] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 139.169583][ T5700] loop3: detected capacity change from 0 to 512 [ 139.212451][ T5700] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 139.233576][ T4260] syz-executor: attempt to access beyond end of device [ 139.233576][ T4260] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 139.239472][ T5700] EXT4-fs (loop3): invalid journal inode [ 139.261936][ T5700] EXT4-fs (loop3): can't get journal size [ 139.319172][ T5700] EXT4-fs (loop3): 1 truncate cleaned up [ 139.369637][ T5700] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 139.606073][ T4252] EXT4-fs (loop3): unmounting filesystem. [ 139.825227][ T5708] netlink: 4156 bytes leftover after parsing attributes in process `syz.1.486'. [ 140.144479][ T5704] loop4: detected capacity change from 0 to 32768 [ 140.223988][ T5704] XFS: ikeep mount option is deprecated. [ 140.296048][ T5720] Driver unsupported XDP return value 0 on prog (id 53) dev N/A, expect packet loss! [ 140.354416][ T5704] XFS (loop4): Mounting V5 Filesystem [ 140.467565][ T5704] XFS (loop4): Ending clean mount [ 140.485222][ T5704] XFS (loop4): Quotacheck needed: Please wait. [ 140.543051][ T5639] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 140.597672][ T5704] XFS (loop4): Quotacheck: Done. [ 140.677258][ T26] audit: type=1800 audit(1733395266.835:19): pid=5704 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.481" name="bus" dev="loop4" ino=6154 res=0 errno=0 [ 140.702261][ T5704] XFS (loop4): User initiated shutdown received. [ 140.710952][ T5704] XFS (loop4): Log I/O Error (0x6) detected at xfs_fs_goingdown+0xde/0x150 (fs/xfs/xfs_fsops.c:496). Shutting down filesystem. [ 140.733206][ T5704] XFS (loop4): Please unmount the filesystem and rectify the problem(s) [ 140.765447][ T5639] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.792530][ T5639] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.818755][ T4250] XFS (loop4): Unmounting Filesystem [ 140.824230][ T5639] usb 3-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 140.840960][ T5639] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.864007][ T5639] usb 3-1: config 0 descriptor?? [ 141.248570][ T5745] netlink: 4 bytes leftover after parsing attributes in process `syz.3.499'. [ 141.284315][ T5639] isku 0003:1E7D:319C.0004: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.2-1/input0 [ 141.558293][ T5749] device hsr0 entered promiscuous mode [ 141.594931][ T5748] device hsr0 left promiscuous mode [ 141.728801][ T4566] usb 3-1: USB disconnect, device number 5 [ 141.884474][ T5757] usb usb4: usbfs: process 5757 (syz.4.503) did not claim interface 0 before use [ 142.210115][ T5760] netlink: 4 bytes leftover after parsing attributes in process `syz.0.504'. [ 142.227087][ T5760] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 142.398074][ T5760] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 143.421511][ T5769] loop3: detected capacity change from 0 to 32768 [ 143.460321][ T5769] XFS: attr2 mount option is deprecated. [ 143.503097][ T4566] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 143.589396][ T5769] XFS (loop3): Mounting V5 Filesystem [ 143.704663][ T4566] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.723890][ T4566] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.733875][ T4566] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 143.742980][ T4566] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.762066][ T4566] usb 1-1: config 0 descriptor?? [ 143.829063][ T5769] XFS (loop3): Ending clean mount [ 144.044459][ T4252] XFS (loop3): Unmounting Filesystem [ 144.181566][ T4566] cm6533_jd 0003:0D8C:0022.0005: unknown main item tag 0x0 [ 144.212933][ T4566] cm6533_jd 0003:0D8C:0022.0005: unknown main item tag 0x0 [ 144.284598][ T4566] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0D8C:0022.0005/input/input7 [ 144.427384][ T4566] cm6533_jd 0003:0D8C:0022.0005: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.0-1/input0 [ 144.506335][ T4566] usb 1-1: USB disconnect, device number 7 [ 145.481196][ T5841] netlink: 'syz.4.529': attribute type 2 has an invalid length. [ 145.531241][ T5841] netlink: 244 bytes leftover after parsing attributes in process `syz.4.529'. [ 145.815223][ T5850] loop2: detected capacity change from 0 to 256 [ 145.863389][ T5850] exfat: Unknown parameter '18446744073709551615' [ 145.905465][ T5642] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 146.147051][ T5855] netlink: 32 bytes leftover after parsing attributes in process `syz.4.533'. [ 146.211205][ T5859] netlink: 4 bytes leftover after parsing attributes in process `syz.2.534'. [ 146.344128][ T5833] loop0: detected capacity change from 0 to 32768 [ 146.426460][ T5838] loop3: detected capacity change from 0 to 32768 [ 146.484374][ T5838] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop3 scanned by syz.3.527 (5838) [ 146.591542][ T5838] BTRFS info (device loop3): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 146.643202][ T5838] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 146.663284][ T5838] BTRFS info (device loop3): using free space tree [ 146.885840][ T1043] block nbd4: Attempted send on invalid socket [ 146.892413][ T1043] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 146.913509][ T5878] SQUASHFS error: Failed to read block 0x0: -5 [ 146.919754][ T5878] unable to read squashfs_super_block [ 147.133106][ T5838] BTRFS info (device loop3): enabling ssd optimizations [ 147.236607][ T26] audit: type=1800 audit(1733395273.395:20): pid=5838 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.527" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 147.313937][ T26] audit: type=1800 audit(1733395273.425:21): pid=5838 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.527" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 147.486717][ T5901] loop4: detected capacity change from 0 to 8 [ 147.524570][ T4252] BTRFS info (device loop3): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 147.664955][ T5901] SQUASHFS error: lzo decompression failed, data probably corrupt [ 147.720336][ T5901] SQUASHFS error: Failed to read block 0x4ec: -5 [ 147.780092][ T5901] SQUASHFS error: Unable to read metadata cache entry [4ea] [ 147.843458][ T5901] SQUASHFS error: Unable to read inode 0x20087 [ 148.204773][ T5915] netlink: 16 bytes leftover after parsing attributes in process `syz.2.551'. [ 148.302281][ T26] audit: type=1326 audit(1733395274.455:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5902 comm="syz.0.544" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f904e97ff19 code=0x0 [ 148.646577][ T5930] loop2: detected capacity change from 0 to 64 [ 149.172604][ T5946] netlink: 20 bytes leftover after parsing attributes in process `syz.0.565'. [ 149.192341][ T5946] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.518069][ T5957] loop4: detected capacity change from 0 to 2048 [ 149.550585][ T5957] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 149.619686][ T5957] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 149.842240][ T5968] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 149.842240][ T5968] The task syz.2.574 (5968) triggered the difference, watch for misbehavior. [ 149.921112][ T5970] loop4: detected capacity change from 0 to 512 [ 149.975986][ T5970] EXT4-fs (loop4): orphan cleanup on readonly fs [ 150.052882][ T5970] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.576: bg 0: block 248: padding at end of block bitmap is not set [ 150.120497][ T5970] Quota error (device loop4): write_blk: dquota write failed [ 150.146201][ T5970] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 150.174252][ T5970] EXT4-fs error (device loop4): ext4_acquire_dquot:6801: comm syz.4.576: Failed to acquire dquot type 1 [ 150.221098][ T5970] EXT4-fs (loop4): 1 truncate cleaned up [ 150.245538][ T5970] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 150.346873][ T5970] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 150.387137][ T5958] loop0: detected capacity change from 0 to 32768 [ 150.453015][ T5970] EXT4-fs (loop4): re-mounted. Quota mode: writeback. [ 150.464408][ T5982] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 2 index 2 [ 150.476743][ T5982] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 131074 [ 150.503693][ T5982] EXT4-fs error (device loop4): ext4_acquire_dquot:6801: comm syz.4.576: Failed to acquire dquot type 1 [ 150.525284][ T5962] loop3: detected capacity change from 0 to 32768 [ 150.531424][ T5970] syz.4.576 (5970) used greatest stack depth: 19808 bytes left [ 150.693399][ T4250] EXT4-fs (loop4): unmounting filesystem. [ 151.647400][ T5987] loop2: detected capacity change from 0 to 32768 [ 151.687190][ T5987] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop2 scanned by syz.2.583 (5987) [ 151.753147][ T5987] BTRFS info (device loop2): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 151.802942][ T5987] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 151.822822][ T5987] BTRFS info (device loop2): using free space tree [ 151.909372][ T6017] Zero length message leads to an empty skb [ 152.093524][ T6029] loop3: detected capacity change from 0 to 512 [ 152.139313][ T6029] EXT4-fs (loop3): orphan cleanup on readonly fs [ 152.192838][ T5987] BTRFS info (device loop2): enabling ssd optimizations [ 152.241339][ T6029] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.596: bg 0: block 248: padding at end of block bitmap is not set [ 152.304895][ T26] audit: type=1800 audit(1733395278.465:23): pid=5987 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.583" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 152.324375][ T6029] Quota error (device loop3): write_blk: dquota write failed [ 152.346443][ T26] audit: type=1800 audit(1733395278.495:24): pid=5987 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.583" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 152.384831][ T6029] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 152.445087][ T6029] EXT4-fs error (device loop3): ext4_acquire_dquot:6801: comm syz.3.596: Failed to acquire dquot type 1 [ 152.485330][ T6029] EXT4-fs (loop3): 1 truncate cleaned up [ 152.529626][ T4257] BTRFS info (device loop2): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 152.553964][ T6029] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 152.635463][ T6029] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 152.759138][ T6029] EXT4-fs (loop3): re-mounted. Quota mode: writeback. [ 152.779291][ T6045] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 2 index 2 [ 152.839639][ T6045] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 131074 [ 152.882774][ T6045] EXT4-fs error (device loop3): ext4_acquire_dquot:6801: comm syz.3.596: Failed to acquire dquot type 1 [ 153.023945][ T26] audit: type=1326 audit(1733395279.185:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6041 comm="syz.1.608" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f75c0f7ff19 code=0x0 [ 153.135424][ T4252] EXT4-fs (loop3): unmounting filesystem. [ 153.171873][ T6039] loop4: detected capacity change from 0 to 32768 [ 153.282602][ T6039] JBD2: Ignoring recovery information on journal [ 153.446003][ T6039] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 153.589628][ T6040] loop0: detected capacity change from 0 to 40427 [ 153.608322][ T6040] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 153.630460][ T6040] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 153.725207][ T6040] F2FS-fs (loop0): Found nat_bits in checkpoint [ 153.794652][ T4250] ocfs2: Unmounting device (7,4) on (node local) [ 153.951120][ T6040] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 153.969778][ T6040] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 153.990772][ T6048] loop2: detected capacity change from 0 to 32768 [ 154.036330][ T6048] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 scanned by syz.2.599 (6048) [ 154.086071][ T6048] BTRFS info (device loop2): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 154.111257][ T6048] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 154.143044][ T6048] BTRFS info (device loop2): turning off barriers [ 154.157626][ T26] audit: type=1800 audit(1733395280.315:26): pid=6040 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.597" name="bus" dev="loop0" ino=10 res=0 errno=0 [ 154.190854][ T6048] BTRFS info (device loop2): enabling auto defrag [ 154.232851][ T6048] BTRFS info (device loop2): ignoring data csums [ 154.247640][ T6048] BTRFS info (device loop2): enabling ssd optimizations [ 154.265406][ T6063] syz.0.597: attempt to access beyond end of device [ 154.265406][ T6063] loop0: rw=2049, sector=77824, nr_sectors = 376 limit=40427 [ 154.275982][ T6048] BTRFS info (device loop2): using spread ssd allocation scheme [ 154.321393][ T6048] BTRFS info (device loop2): using free space tree [ 154.342527][ T6040] syz.0.597: attempt to access beyond end of device [ 154.342527][ T6040] loop0: rw=2049, sector=78200, nr_sectors = 592 limit=40427 [ 154.344790][ T6048] workqueue: max_active 32767 requested for btrfs-worker is out of range, clamping between 1 and 512 [ 154.451861][ T6048] workqueue: max_active 32767 requested for btrfs-worker-high is out of range, clamping between 1 and 512 [ 154.511414][ T6048] workqueue: max_active 32767 requested for btrfs-delalloc is out of range, clamping between 1 and 512 [ 154.653965][ T6076] device lo entered promiscuous mode [ 154.706953][ T6048] workqueue: max_active 32767 requested for btrfs-endio is out of range, clamping between 1 and 512 [ 154.723225][ T6048] workqueue: max_active 32767 requested for btrfs-endio-meta is out of range, clamping between 1 and 512 [ 154.743144][ T6048] workqueue: max_active 32767 requested for btrfs-endio-raid56 is out of range, clamping between 1 and 512 [ 154.765991][ T6048] workqueue: max_active 32767 requested for btrfs-rmw is out of range, clamping between 1 and 512 [ 154.787122][ T6048] workqueue: max_active 32767 requested for btrfs-endio-write is out of range, clamping between 1 and 512 [ 154.809056][ T6048] workqueue: max_active 32767 requested for btrfs-compressed-write is out of range, clamping between 1 and 512 [ 155.015934][ T6088] tap0: tun_chr_ioctl cmd 1074812118 [ 155.106293][ T6048] BTRFS error (device loop2: state MC): ignoredatacsums must be used with ro mount option [ 155.290671][ T4257] BTRFS info (device loop2: state C): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 156.176875][ T6114] netlink: 36 bytes leftover after parsing attributes in process `syz.1.618'. [ 156.584683][ T26] audit: type=1326 audit(1733395282.745:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6108 comm="syz.2.615" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f12a617ff19 code=0x0 [ 156.682494][ T6106] loop3: detected capacity change from 0 to 32768 [ 156.817249][ T6106] JBD2: Ignoring recovery information on journal [ 156.971121][ T6106] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 157.180393][ T6125] loop4: detected capacity change from 0 to 32768 [ 157.284218][ T4558] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 157.293996][ T4252] ocfs2: Unmounting device (7,3) on (node local) [ 157.324581][ T6125] XFS (loop4): Mounting V5 Filesystem [ 157.510314][ T6125] XFS (loop4): Ending clean mount [ 157.515719][ T4558] usb 1-1: Using ep0 maxpacket: 8 [ 157.523743][ T4558] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 157.564451][ T4558] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 157.628369][ T4558] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 157.649088][ T4558] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 157.674247][ T4558] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 157.693322][ T4558] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.738270][ T4250] XFS (loop4): Unmounting Filesystem [ 157.913643][ T6154] netlink: 'syz.2.632': attribute type 2 has an invalid length. [ 157.939650][ T4558] usb 1-1: GET_CAPABILITIES returned 0 [ 157.962215][ T4558] usbtmc 1-1:16.0: can't read capabilities [ 158.169596][ T4558] usb 1-1: USB disconnect, device number 8 [ 158.484789][ T6167] netlink: 'syz.4.631': attribute type 1 has an invalid length. [ 158.515185][ T6169] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 158.560694][ T6169] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 158.579432][ T6169] bridge_slave_0: default FDB implementation only supports local addresses [ 158.962547][ T6178] loop3: detected capacity change from 0 to 4096 [ 159.116754][ T6178] ntfs3: loop3: ino=5, "/" attr_set_size [ 159.138115][ T6178] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 159.265902][ T6193] raw_sendmsg: syz.4.646 forgot to set AF_INET. Fix it! [ 159.691798][ T6203] netem: incorrect gi model size [ 159.709933][ T6203] netem: change failed [ 159.928593][ T6209] loop3: detected capacity change from 0 to 256 [ 159.964242][ T6209] exfat: Deprecated parameter 'utf8' [ 159.998120][ T6209] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe3865569, utbl_chksum : 0xe619d30d) [ 160.203622][ T6219] loop0: detected capacity change from 0 to 8 [ 160.292283][ T6219] SQUASHFS error: Failed to read block 0x8f: -5 [ 160.345233][ T6219] SQUASHFS error: Failed to read block 0xc00090: -5 [ 160.354879][ T6221] loop2: detected capacity change from 0 to 1024 [ 160.372880][ T6219] SQUASHFS error: Failed to read block 0x8f: -5 [ 160.389700][ T6219] SQUASHFS error: Failed to read block 0x8f: -5 [ 160.409660][ T6219] SQUASHFS error: Failed to read block 0x8f: -5 [ 160.432865][ T6228] ALSA: mixer_oss: invalid OSS volume '' [ 160.463376][ T6221] hfsplus: bad catalog entry type [ 160.470872][ T6219] SQUASHFS error: Failed to read block 0x8f: -5 [ 160.503133][ T6219] SQUASHFS error: Failed to read block 0x8f: -5 [ 160.509642][ T26] audit: type=1800 audit(1733395286.665:28): pid=6219 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.659" name="file3" dev="loop0" ino=6 res=0 errno=0 [ 160.587365][ T4301] hfsplus: b-tree write err: -5, ino 4 [ 160.744856][ T6235] netlink: 4 bytes leftover after parsing attributes in process `syz.2.666'. [ 161.176917][ T6251] loop3: detected capacity change from 0 to 8 [ 161.299957][ T6251] SQUASHFS error: lzo decompression failed, data probably corrupt [ 161.330421][ T6251] SQUASHFS error: Failed to read block 0x4ec: -5 [ 161.352375][ T6251] SQUASHFS error: Unable to read metadata cache entry [4ea] [ 161.401632][ T6251] SQUASHFS error: Unable to read inode 0x20087 [ 161.528966][ T6263] loop0: detected capacity change from 0 to 256 [ 161.586860][ T6263] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3962bc8b, utbl_chksum : 0xe619d30d) [ 161.638043][ T26] audit: type=1800 audit(1733395287.795:29): pid=6263 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.678" name="file2" dev="loop0" ino=1048609 res=0 errno=0 [ 161.661438][ T6263] exFAT-fs (loop0): hint_cluster is invalid (17) [ 161.697978][ T6263] exFAT-fs (loop0): error, invalid access to FAT (entry 0xffffffff) [ 161.721484][ T6263] exFAT-fs (loop0): Filesystem has been set read-only [ 161.750992][ T6266] exFAT-fs (loop0): error, broken FAT chain. [ 161.767131][ T6266] exFAT-fs (loop0): error, failed to bmap (inode : ffff888072f10e60 iblock : 24, err : -5) [ 162.208441][ T6256] loop2: detected capacity change from 0 to 32768 [ 162.335286][ T6256] XFS (loop2): Mounting V5 Filesystem [ 162.416457][ T6265] loop3: detected capacity change from 0 to 32768 [ 162.433283][ T6256] XFS (loop2): Ending clean mount [ 162.563364][ T6265] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 162.602276][ T26] audit: type=1800 audit(1733395288.755:30): pid=6265 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.679" name="file1" dev="loop3" ino=17058 res=0 errno=0 [ 162.664185][ T4257] XFS (loop2): Unmounting Filesystem [ 162.785509][ T4252] ocfs2: Unmounting device (7,3) on (node local) [ 163.272379][ T6291] loop0: detected capacity change from 0 to 2048 [ 163.345479][ T6291] NILFS (loop0): invalid segment: Magic number mismatch [ 163.381010][ T6291] NILFS (loop0): trying rollback from an earlier position [ 163.429276][ T6291] NILFS (loop0): recovery complete [ 163.463416][ T6294] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 163.530278][ T26] audit: type=1800 audit(1733395289.685:31): pid=6291 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.686" name="file1" dev="loop0" ino=12 res=0 errno=0 [ 164.043140][ T6289] loop3: detected capacity change from 0 to 32768 [ 164.134512][ T4260] NILFS (loop0): disposed unprocessed dirty file(s) when stopping log writer [ 164.148275][ T6289] XFS (loop3): Mounting V5 Filesystem [ 164.223746][ T26] audit: type=1326 audit(1733395290.385:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6306 comm="syz.1.689" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f75c0f7ff19 code=0x0 [ 164.315878][ T6289] XFS (loop3): Ending clean mount [ 164.349377][ T6289] XFS (loop3): Quotacheck needed: Please wait. [ 164.431204][ T6289] XFS (loop3): Quotacheck: Done. [ 164.570327][ T6293] loop4: detected capacity change from 0 to 40427 [ 164.682591][ T6293] F2FS-fs (loop4): Found nat_bits in checkpoint [ 164.688688][ T4252] XFS (loop3): Unmounting Filesystem [ 164.852763][ T6293] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 165.211674][ T4301] kworker/u4:5: attempt to access beyond end of device [ 165.211674][ T4301] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 165.413436][ T6312] loop0: detected capacity change from 0 to 40427 [ 165.443058][ T6312] F2FS-fs (loop0): Small segment_count (9 < 1 * 24) [ 165.458950][ T6312] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 165.549305][ T6312] F2FS-fs (loop0): Found nat_bits in checkpoint [ 165.738908][ T6312] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 165.766902][ T6312] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 166.241571][ T6340] loop3: detected capacity change from 0 to 256 [ 166.281632][ T6340] exfat: Deprecated parameter 'utf8' [ 166.306912][ T6340] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 166.461010][ T6328] loop2: detected capacity change from 0 to 32768 [ 166.530775][ T6347] loop4: detected capacity change from 0 to 64 [ 166.658660][ T6328] XFS (loop2): Mounting V5 Filesystem [ 166.841727][ T6328] XFS (loop2): Ending clean mount [ 166.921463][ T6363] netlink: 16 bytes leftover after parsing attributes in process `syz.1.706'. [ 167.042448][ T4257] XFS (loop2): Unmounting Filesystem [ 167.702386][ T6384] loop0: detected capacity change from 0 to 512 [ 167.792767][ T6388] loop3: detected capacity change from 0 to 512 [ 167.804070][ T6388] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 167.841225][ T6384] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 167.891732][ T6384] EXT4-fs (loop0): shut down requested (2) [ 167.893079][ T6388] EXT4-fs (loop3): orphan cleanup on readonly fs [ 167.918962][ T6388] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.718: bg 0: block 248: padding at end of block bitmap is not set [ 167.964047][ T6388] Quota error (device loop3): write_blk: dquota write failed [ 167.974099][ T6388] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 168.007928][ T6388] EXT4-fs error (device loop3): ext4_acquire_dquot:6801: comm syz.3.718: Failed to acquire dquot type 1 [ 168.057036][ T6388] EXT4-fs (loop3): 1 truncate cleaned up [ 168.073565][ T4260] EXT4-fs (loop0): unmounting filesystem. [ 168.092572][ T6388] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 168.118760][ T6388] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 168.178179][ T6388] EXT4-fs error (device loop3): __ext4_remount:6449: comm syz.3.718: Abort forced by user [ 168.326578][ T4252] EXT4-fs (loop3): unmounting filesystem. [ 168.601030][ T26] audit: type=1326 audit(1733395294.755:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6404 comm="syz.2.724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12a617ff19 code=0x7ffc0000 [ 168.676966][ T26] audit: type=1326 audit(1733395294.755:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6404 comm="syz.2.724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12a617ff19 code=0x7ffc0000 [ 168.739488][ T6408] netlink: 16 bytes leftover after parsing attributes in process `syz.0.725'. [ 168.761799][ T26] audit: type=1326 audit(1733395294.785:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6404 comm="syz.2.724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f12a617ff19 code=0x7ffc0000 [ 168.828625][ T26] audit: type=1326 audit(1733395294.895:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6404 comm="syz.2.724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12a617ff19 code=0x7ffc0000 [ 168.965526][ T26] audit: type=1326 audit(1733395294.895:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6404 comm="syz.2.724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12a617ff19 code=0x7ffc0000 [ 169.055394][ T26] audit: type=1326 audit(1733395294.935:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6404 comm="syz.2.724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f12a617ff19 code=0x7ffc0000 [ 169.098401][ T6417] loop4: detected capacity change from 0 to 256 [ 169.098536][ T26] audit: type=1326 audit(1733395294.935:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6404 comm="syz.2.724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12a617ff19 code=0x7ffc0000 [ 169.139362][ T26] audit: type=1326 audit(1733395294.935:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6404 comm="syz.2.724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12a617ff19 code=0x7ffc0000 [ 169.181980][ T6417] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x009ea0b8, utbl_chksum : 0x7319d30d) [ 169.549036][ T6399] loop3: detected capacity change from 0 to 32768 [ 169.733144][ T6399] XFS (loop3): Mounting V5 Filesystem [ 170.015709][ T6399] XFS (loop3): Ending clean mount [ 170.122823][ T4295] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 170.169576][ T4252] XFS (loop3): Unmounting Filesystem [ 170.323361][ T4559] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 170.341762][ T4295] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 170.362919][ T4295] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 170.389300][ T4295] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 170.411194][ T4295] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 170.432862][ T4295] usb 5-1: SerialNumber: syz [ 170.530805][ T4559] usb 1-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 170.550305][ T4559] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.582426][ T4559] usb 1-1: config 0 descriptor?? [ 170.649510][ T4295] usb 5-1: 0:2 : does not exist [ 170.687969][ T4295] usb 5-1: USB disconnect, device number 3 [ 170.857085][ T6461] loop3: detected capacity change from 0 to 512 [ 170.920668][ T6461] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 170.948922][ T6461] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 not in group (block 3)! [ 170.970399][ T6461] EXT4-fs (loop3): group descriptors corrupted! [ 170.993850][ T5642] udevd[5642]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 171.026700][ T4559] gs_usb 1-1:0.0: Configuring for 1 interfaces [ 171.373083][ T6471] netlink: 'syz.3.750': attribute type 7 has an invalid length. [ 171.438826][ T4294] usb 1-1: USB disconnect, device number 9 [ 171.807654][ T6488] IPVS: ovf: UDP 127.0.0.1:19999 - no destination available [ 172.020646][ T6495] loop4: detected capacity change from 0 to 2048 [ 172.221640][ T6499] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 172.487846][ T6507] loop4: detected capacity change from 0 to 1024 [ 172.838166][ T75] hfsplus: b-tree write err: -5, ino 4 [ 174.346532][ T6566] netlink: 72 bytes leftover after parsing attributes in process `syz.1.781'. [ 175.171748][ T6556] loop0: detected capacity change from 0 to 32768 [ 175.250721][ T6563] loop4: detected capacity change from 0 to 32768 [ 175.273673][ T6563] XFS: noikeep mount option is deprecated. [ 175.285842][ T6556] XFS (loop0): Mounting V5 Filesystem [ 175.368921][ T6563] XFS (loop4): Mounting V5 Filesystem [ 175.384610][ T6556] XFS (loop0): Ending clean mount [ 175.463235][ T6563] XFS (loop4): Ending clean mount [ 175.535321][ T6563] XFS (loop4): Quotacheck needed: Please wait. [ 175.615058][ T6563] XFS (loop4): Quotacheck: Done. [ 175.647064][ T4260] XFS (loop0): Unmounting Filesystem [ 175.770815][ T6598] loop2: detected capacity change from 0 to 1024 [ 175.807322][ T4250] XFS (loop4): Unmounting Filesystem [ 176.108047][ T6598] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 176.287703][ T6598] EXT4-fs error (device loop2): ext4_expand_extra_isize_ea:2739: inode #14: comm syz.2.788: corrupted in-inode xattr [ 176.358892][ T6598] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #14: comm syz.2.788: attempt to clear invalid blocks 1634560256 len 1 [ 176.401684][ T6578] loop3: detected capacity change from 0 to 40427 [ 176.463582][ T6578] F2FS-fs (loop3): invalid crc value [ 176.490588][ T6578] F2FS-fs (loop3): Found nat_bits in checkpoint [ 176.626492][ T6615] loop4: detected capacity change from 0 to 1024 [ 176.640798][ T4257] EXT4-fs (loop2): unmounting filesystem. [ 176.686116][ T6615] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 176.704985][ T6578] F2FS-fs (loop3): Cannot turn on quotas: -2 on 1 [ 176.727291][ T6578] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 176.759465][ T6615] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 176.901865][ T26] kauditd_printk_skb: 5 callbacks suppressed [ 176.901883][ T26] audit: type=1800 audit(1733395303.055:46): pid=6578 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.786" name="bus" dev="loop3" ino=16 res=0 errno=0 [ 177.028208][ T4250] EXT4-fs (loop4): unmounting filesystem. [ 177.090953][ T4252] syz-executor: attempt to access beyond end of device [ 177.090953][ T4252] loop3: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 177.434550][ T6616] loop0: detected capacity change from 0 to 40427 [ 177.482107][ T6616] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x3ffff [ 177.521372][ T6616] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x3 [ 177.540896][ T6616] F2FS-fs (loop0): invalid crc value [ 177.548545][ T6631] loop2: detected capacity change from 0 to 8 [ 177.576572][ T6616] F2FS-fs (loop0): Found nat_bits in checkpoint [ 177.607864][ T6631] SQUASHFS error: Failed to read block 0x260685: -5 [ 177.642854][ T6631] SQUASHFS error: Unable to read metadata cache entry [260685] [ 177.679590][ T6631] SQUASHFS error: Unable to read directory block [260685:0] [ 177.718181][ T6616] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 177.822234][ T4260] syz-executor: attempt to access beyond end of device [ 177.822234][ T4260] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 178.037533][ T6645] loop2: detected capacity change from 0 to 1024 [ 178.117009][ T6645] hfsplus: request for non-existent node 3 in B*Tree [ 178.146559][ T6645] hfsplus: request for non-existent node 3 in B*Tree [ 178.205268][ T6649] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.328468][ T26] audit: type=1804 audit(1733395304.485:47): pid=6645 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.803" name="/newroot/175/bus/file0" dev="loop2" ino=2 res=1 errno=0 [ 178.708535][ T6658] team0: No ports can be present during mode change [ 178.841655][ T26] audit: type=1326 audit(1733395304.995:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6659 comm="syz.3.811" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f51ea57ff19 code=0x0 [ 178.952184][ T6667] netlink: 20 bytes leftover after parsing attributes in process `syz.2.813'. [ 179.148764][ T6675] loop4: detected capacity change from 0 to 64 [ 179.209205][ T6675] hfs: keylen 94 too large [ 179.403495][ T6681] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 179.944281][ T6699] loop0: detected capacity change from 0 to 512 [ 179.984183][ T6699] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e01c, mo2=0002] [ 180.002919][ T6699] System zones: 1-12 [ 180.024333][ T6699] EXT4-fs error (device loop0): dx_probe:823: inode #2: comm syz.0.826: Directory hole found for htree index block 0 [ 180.049397][ T6699] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -117 [ 180.063528][ T6699] EXT4-fs error (device loop0): dx_probe:823: inode #2: comm syz.0.826: Directory hole found for htree index block 0 [ 180.084812][ T6699] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 180.093118][ T6699] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 180.108706][ T6699] EXT4-fs (loop0): shut down requested (1) [ 180.144606][ T4260] EXT4-fs (loop0): unmounting filesystem. [ 180.405751][ T6684] loop4: detected capacity change from 0 to 40427 [ 180.579065][ T6684] F2FS-fs (loop4): Found nat_bits in checkpoint [ 180.839639][ T6684] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 181.191107][ T26] audit: type=1326 audit(1733395307.345:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6722 comm="syz.3.834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51ea57ff19 code=0x7ffc0000 [ 181.279337][ T4250] syz-executor: attempt to access beyond end of device [ 181.279337][ T4250] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 181.318104][ T26] audit: type=1326 audit(1733395307.385:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6722 comm="syz.3.834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7f51ea57ff19 code=0x7ffc0000 [ 181.506300][ T26] audit: type=1326 audit(1733395307.385:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6722 comm="syz.3.834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51ea57ff19 code=0x7ffc0000 [ 181.607491][ T26] audit: type=1326 audit(1733395307.385:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6722 comm="syz.3.834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51ea57ff19 code=0x7ffc0000 [ 181.795643][ T26] audit: type=1326 audit(1733395307.385:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6722 comm="syz.3.834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f51ea57ff19 code=0x7ffc0000 [ 181.934525][ T26] audit: type=1326 audit(1733395307.385:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6722 comm="syz.3.834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51ea57ff19 code=0x7ffc0000 [ 181.960515][ T26] audit: type=1326 audit(1733395307.385:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6722 comm="syz.3.834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51ea57ff19 code=0x7ffc0000 [ 182.008255][ T26] audit: type=1326 audit(1733395307.405:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6722 comm="syz.3.834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=297 compat=0 ip=0x7f51ea57ff19 code=0x7ffc0000 [ 182.030803][ T26] audit: type=1326 audit(1733395307.405:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6722 comm="syz.3.834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51ea57ff19 code=0x7ffc0000 [ 182.053464][ T26] audit: type=1326 audit(1733395307.405:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6722 comm="syz.3.834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51ea57ff19 code=0x7ffc0000 [ 183.368428][ T6766] netlink: 'syz.3.853': attribute type 5 has an invalid length. [ 183.479010][ T6769] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 183.539216][ T6773] loop0: detected capacity change from 0 to 256 [ 183.695672][ T6773] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 183.752847][ T6773] FAT-fs (loop0): Filesystem has been set read-only [ 184.081744][ T6786] loop3: detected capacity change from 0 to 256 [ 184.157349][ T6786] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 184.473257][ T6798] netlink: 19 bytes leftover after parsing attributes in process `syz.4.868'. [ 184.713252][ T6808] program syz.4.873 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 185.057809][ T6824] loop3: detected capacity change from 0 to 64 [ 185.360308][ T6834] loop2: detected capacity change from 0 to 1024 [ 186.060869][ T6861] netlink: 'syz.0.898': attribute type 1 has an invalid length. [ 186.800008][ T6888] netlink: 'syz.0.910': attribute type 25 has an invalid length. [ 187.042196][ T6900] loop3: detected capacity change from 0 to 256 [ 187.071539][ T6900] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 187.381502][ T6905] netlink: 204 bytes leftover after parsing attributes in process `syz.3.916'. [ 188.242874][ T4295] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 188.460827][ T4295] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 188.483611][ T4295] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 188.505082][ T4295] usb 5-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 188.529599][ T4295] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.583249][ T4295] usb 5-1: config 0 descriptor?? [ 188.662312][ T6930] loop0: detected capacity change from 0 to 4096 [ 188.879585][ T6940] netlink: 12 bytes leftover after parsing attributes in process `syz.2.933'. [ 188.937913][ T4260] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22. [ 188.959106][ T4260] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 189.003035][ T4295] hid (null): global environment stack underflow [ 189.012338][ T4295] uclogic 0003:5543:0522.0006: global environment stack underflow [ 189.030233][ T4295] uclogic 0003:5543:0522.0006: item 0 1 1 11 parsing failed [ 189.041847][ T4295] uclogic 0003:5543:0522.0006: parse failed [ 189.051733][ T4295] uclogic: probe of 0003:5543:0522.0006 failed with error -22 [ 189.195506][ T6944] loop2: detected capacity change from 0 to 512 [ 189.220771][ T4295] usb 5-1: USB disconnect, device number 4 [ 189.313553][ T6944] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 189.322551][ T6944] ext4 filesystem being mounted at /201/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 189.431820][ T6944] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #2: comm syz.2.935: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 189.577334][ T6957] loop3: detected capacity change from 0 to 128 [ 189.599492][ T4257] EXT4-fs (loop2): unmounting filesystem. [ 189.623853][ T6957] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 189.687356][ T6957] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 190.250154][ T6978] fuse: Invalid group_id [ 190.270459][ T6981] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 190.291530][ T6981] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 190.319607][ T6981] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 190.334296][ T6982] loop2: detected capacity change from 0 to 1024 [ 190.397045][ T6982] EXT4-fs: Ignoring removed nomblk_io_submit option [ 190.409965][ T6982] EXT4-fs: Ignoring removed mblk_io_submit option [ 190.461722][ T6982] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 190.640353][ T6993] loop0: detected capacity change from 0 to 8 [ 190.685767][ T4257] EXT4-fs (loop2): unmounting filesystem. [ 190.786006][ T6993] SQUASHFS error: Failed to read block 0x2fc: -5 [ 190.792412][ T6993] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 190.812852][ T6993] SQUASHFS error: Unable to read directory block [2fa:0] [ 191.050267][ T6995] loop2: detected capacity change from 0 to 8192 [ 191.119781][ T6995] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 191.236136][ T6995] FAT-fs (loop2): error, clusters badly computed (1 != 30720) [ 191.259087][ T6995] FAT-fs (loop2): Filesystem has been set read-only [ 191.283065][ T6995] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 1042) [ 191.340274][ T6992] loop4: detected capacity change from 0 to 32768 [ 191.544504][ T6992] XFS (loop4): Mounting V5 Filesystem [ 191.560990][ T7003] loop3: detected capacity change from 0 to 2048 [ 191.661465][ T7003] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 191.668418][ T6997] loop0: detected capacity change from 0 to 32768 [ 191.692311][ T6992] XFS (loop4): Ending clean mount [ 191.768646][ T6997] XFS (loop0): Mounting V5 Filesystem [ 191.781150][ T26] audit: type=1800 audit(1733395573.935:59): pid=6992 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.954" name="bus" dev="loop4" ino=4425 res=0 errno=0 [ 191.853529][ T4252] EXT4-fs (loop3): unmounting filesystem. [ 191.887698][ T4250] XFS (loop4): Unmounting Filesystem [ 191.916914][ T6997] XFS (loop0): Ending clean mount [ 192.172004][ T4260] XFS (loop0): Unmounting Filesystem [ 192.500015][ T7046] tap0: tun_chr_ioctl cmd 1074025677 [ 192.516330][ T7046] tap0: linktype set to 804 [ 193.222435][ T5612] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 193.429574][ T5612] usb 1-1: Using ep0 maxpacket: 16 [ 193.441159][ T5612] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 193.465672][ T7056] netlink: 4 bytes leftover after parsing attributes in process `syz.1.975'. [ 193.472026][ T5612] usb 1-1: config 0 has no interfaces? [ 193.482172][ T5612] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 193.507100][ T5612] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.508341][ T7054] loop2: detected capacity change from 0 to 32768 [ 193.532315][ T5612] usb 1-1: config 0 descriptor?? [ 193.549129][ T7052] loop3: detected capacity change from 0 to 32768 [ 193.554348][ T7054] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.974 (7054) [ 193.569429][ T7056] netlink: 20 bytes leftover after parsing attributes in process `syz.1.975'. [ 193.601256][ T7058] netlink: 60 bytes leftover after parsing attributes in process `syz.4.965'. [ 193.616696][ T7054] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 193.632168][ T7056] netlink: 4 bytes leftover after parsing attributes in process `syz.1.975'. [ 193.653155][ T26] audit: type=1800 audit(1733395575.815:60): pid=7052 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.973" name="file1" dev="loop3" ino=4 res=0 errno=0 [ 193.660812][ T7054] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 193.685803][ T7054] BTRFS info (device loop2): using free space tree [ 193.771705][ T5612] usb 1-1: USB disconnect, device number 10 [ 194.102308][ T7054] BTRFS info (device loop2): enabling ssd optimizations [ 194.169514][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.180819][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.414468][ T4257] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 195.054979][ T7079] loop4: detected capacity change from 0 to 32768 [ 195.115410][ T7079] XFS (loop4): Mounting V5 Filesystem [ 195.291580][ T7079] XFS (loop4): Ending clean mount [ 195.312379][ T7079] XFS (loop4): Quotacheck needed: Please wait. [ 195.344870][ T7090] loop3: detected capacity change from 0 to 40427 [ 195.405578][ T7079] XFS (loop4): Quotacheck: Done. [ 195.500199][ T7090] F2FS-fs (loop3): Found nat_bits in checkpoint [ 195.539027][ T4250] XFS (loop4): Unmounting Filesystem [ 195.680745][ T7093] loop0: detected capacity change from 0 to 32768 [ 195.733358][ T7093] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.984 (7093) [ 195.746371][ T7090] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 195.829511][ T7090] syz.3.980: attempt to access beyond end of device [ 195.829511][ T7090] loop3: rw=2049, sector=53248, nr_sectors = 120 limit=40427 [ 195.846497][ T7093] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 195.882345][ T7093] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 195.913125][ T7093] BTRFS info (device loop0): setting nodatacow, compression disabled [ 195.921335][ T7093] BTRFS info (device loop0): max_inline at 0 [ 195.959828][ T7093] BTRFS info (device loop0): enabling disk space caching [ 195.983081][ T7093] BTRFS info (device loop0): setting datasum, datacow enabled [ 195.990798][ T7093] BTRFS info (device loop0): turning on flush-on-commit [ 196.032885][ T7093] BTRFS info (device loop0): doing ref verification [ 196.052194][ T7093] BTRFS info (device loop0): force clearing of disk cache [ 196.083232][ T4252] syz-executor: attempt to access beyond end of device [ 196.083232][ T4252] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 196.092885][ T7093] BTRFS info (device loop0): enabling ssd optimizations [ 196.131117][ T7093] BTRFS info (device loop0): turning off barriers [ 196.162913][ T7093] BTRFS info (device loop0): max_inline at 4096 [ 196.189624][ T7093] BTRFS info (device loop0): disk space caching is enabled [ 196.253783][ T4259] Bluetooth: hci1: command 0x0406 tx timeout [ 196.259856][ T4259] Bluetooth: hci2: command 0x0406 tx timeout [ 196.266001][ T4267] Bluetooth: hci3: command 0x0406 tx timeout [ 196.272049][ T4267] Bluetooth: hci0: command 0x0406 tx timeout [ 196.272843][ T4264] Bluetooth: hci4: command 0x0406 tx timeout [ 196.544225][ T7093] BTRFS info (device loop0): rebuilding free space tree [ 196.654121][ T7093] BTRFS info (device loop0): disabling free space tree [ 196.661088][ T7093] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 196.682482][ T7142] netlink: 8 bytes leftover after parsing attributes in process `syz.3.989'. [ 196.697726][ T7093] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 196.857137][ T7146] loop4: detected capacity change from 0 to 512 [ 196.958652][ T7146] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:477: comm syz.4.994: Invalid block bitmap block 0 in block_group 0 [ 197.064748][ T7153] netlink: 268 bytes leftover after parsing attributes in process `syz.2.995'. [ 197.087178][ T7146] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 197.114602][ T7146] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #13: comm syz.4.994: attempt to clear invalid blocks 983261 len 1 [ 197.173581][ T4260] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 197.197420][ T7146] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.994: invalid indirect mapped block 2683928664 (level 0) [ 197.320645][ T7146] EXT4-fs error (device loop4): __ext4_get_inode_loc:4506: comm syz.4.994: Invalid inode table block 0 in block_group 0 [ 197.347499][ T7162] loop2: detected capacity change from 0 to 256 [ 197.443240][ T7146] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5885: Corrupt filesystem [ 197.503394][ T7146] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 197.525652][ T7146] EXT4-fs error (device loop4): __ext4_get_inode_loc:4506: comm syz.4.994: Invalid inode table block 0 in block_group 0 [ 197.572843][ T7146] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5885: Corrupt filesystem [ 197.625535][ T7146] EXT4-fs error (device loop4): ext4_truncate:4311: inode #13: comm syz.4.994: mark_inode_dirty error [ 197.667932][ T7146] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 197.687826][ T7146] EXT4-fs error (device loop4): __ext4_get_inode_loc:4506: comm syz.4.994: Invalid inode table block 0 in block_group 0 [ 197.756435][ T7146] EXT4-fs (loop4): 1 truncate cleaned up [ 197.762221][ T7146] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 197.833626][ T7146] EXT4-fs error (device loop4): __ext4_get_inode_loc:4506: comm syz.4.994: Invalid inode table block 0 in block_group 0 [ 197.876080][ T7146] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5885: Corrupt filesystem [ 198.025799][ T4250] EXT4-fs (loop4): unmounting filesystem. [ 198.199715][ T7178] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1008'. [ 198.277480][ T7182] loop0: detected capacity change from 0 to 128 [ 198.939127][ T7204] netlink: 'syz.4.1020': attribute type 1 has an invalid length. [ 198.963113][ T7204] netlink: 'syz.4.1020': attribute type 2 has an invalid length. [ 198.982049][ T7204] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 199.034103][ T7206] loop0: detected capacity change from 0 to 512 [ 199.089800][ T7206] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 199.115676][ T7206] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #16: comm syz.0.1022: invalid indirect mapped block 4294967295 (level 0) [ 199.150219][ T7206] EXT4-fs (loop0): Remounting filesystem read-only [ 199.160340][ T7206] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #16: comm syz.0.1022: invalid indirect mapped block 4294967295 (level 1) [ 199.182501][ T7180] loop3: detected capacity change from 0 to 32768 [ 199.184217][ T7206] EXT4-fs (loop0): Remounting filesystem read-only [ 199.222431][ T7206] EXT4-fs (loop0): 1 orphan inode deleted [ 199.228572][ T7206] EXT4-fs (loop0): 1 truncate cleaned up [ 199.234916][ T7206] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 199.244807][ T7180] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 199.270511][ T7180] JBD2: Ignoring recovery information on journal [ 199.340009][ T7180] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 199.349501][ T4260] EXT4-fs (loop0): unmounting filesystem. [ 199.462128][ T7218] (syz.3.1009,7218,0):ocfs2_parse_options:1446 ERROR: Unrecognized mount option " Z* m.Dc8'@C9G9?9S{1Jլ5 æԌqqY糔" or missing value [ 199.575250][ T7222] loop2: detected capacity change from 0 to 128 [ 199.663012][ T7222] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 199.723964][ T7222] ext4 filesystem being mounted at /219/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 199.741478][ T4252] ocfs2: Unmounting device (7,3) on (node local) [ 199.853694][ T7231] loop4: detected capacity change from 0 to 128 [ 199.928030][ T7231] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 199.953166][ T7231] ext4 filesystem being mounted at /197/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 199.961108][ T4257] EXT4-fs (loop2): unmounting filesystem. [ 199.985125][ C0] vkms_vblank_simulate: vblank timer overrun [ 200.266775][ T7236] loop3: detected capacity change from 0 to 128 [ 200.343249][ T26] audit: type=1800 audit(1733395582.505:61): pid=7236 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1032" name="bus" dev="loop3" ino=1048621 res=0 errno=0 [ 200.378893][ T4250] EXT4-fs (loop4): unmounting filesystem. [ 201.383323][ T7240] loop4: detected capacity change from 0 to 32768 [ 201.430335][ T26] audit: type=1800 audit(1733395583.585:62): pid=7240 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1036" name="file2" dev="loop4" ino=7 res=0 errno=0 [ 201.493554][ T7259] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 201.546280][ T7259] syz.1.1042 (7259) used greatest stack depth: 19672 bytes left [ 201.821776][ T7268] usb usb3: usbfs: process 7268 (syz.0.1047) did not claim interface 0 before use [ 201.901165][ T7270] loop4: detected capacity change from 0 to 512 [ 201.951785][ T7270] EXT4-fs (loop4): orphan cleanup on readonly fs [ 201.962618][ T7270] Quota error (device loop4): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 202.008703][ T7270] EXT4-fs warning (device loop4): ext4_enable_quotas:7036: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 202.048506][ T7270] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 202.073524][ T7270] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.1044: bg 0: block 97: padding at end of block bitmap is not set [ 202.109108][ T7270] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 202.162737][ T7270] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2925: inode #15: comm syz.4.1044: corrupted xattr block 19 [ 202.199217][ T7270] EXT4-fs warning (device loop4): ext4_evict_inode:299: xattr delete (err -117) [ 202.209377][ T7270] EXT4-fs (loop4): 1 orphan inode deleted [ 202.221870][ T7270] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 202.291609][ T4250] EXT4-fs (loop4): unmounting filesystem. [ 202.400867][ T26] audit: type=1326 audit(1733395584.555:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7279 comm="syz.4.1051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0b157ff19 code=0x7ffc0000 [ 202.423066][ C0] vkms_vblank_simulate: vblank timer overrun [ 202.438287][ T26] audit: type=1326 audit(1733395584.555:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7279 comm="syz.4.1051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0b157ff19 code=0x7ffc0000 [ 202.492072][ T26] audit: type=1326 audit(1733395584.595:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7279 comm="syz.4.1051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe0b157ff19 code=0x7ffc0000 [ 202.614314][ T26] audit: type=1326 audit(1733395584.595:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7279 comm="syz.4.1051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0b157ff19 code=0x7ffc0000 [ 202.636535][ C0] vkms_vblank_simulate: vblank timer overrun [ 202.657531][ T26] audit: type=1326 audit(1733395584.595:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7279 comm="syz.4.1051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0b157ff19 code=0x7ffc0000 [ 202.686952][ T26] audit: type=1326 audit(1733395584.615:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7279 comm="syz.4.1051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fe0b157ff19 code=0x7ffc0000 [ 202.725070][ T26] audit: type=1326 audit(1733395584.615:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7279 comm="syz.4.1051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0b157ff19 code=0x7ffc0000 [ 202.946446][ T7294] relay: one or more items not logged [item size (56) > sub-buffer size (1)] [ 203.001229][ T7298] loop4: detected capacity change from 0 to 2048 [ 203.072048][ T7299] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 203.118199][ T7298] NILFS error (device loop4): nilfs_dotdot: directory #12 missing '..' [ 203.152481][ T7298] Remounting filesystem read-only [ 203.508778][ T7284] loop2: detected capacity change from 0 to 32768 [ 203.545574][ T7284] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.1053 (7284) [ 203.589111][ T7284] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 203.620982][ T7284] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 203.650439][ T7284] BTRFS info (device loop2): using free space tree [ 203.812808][ T4331] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 203.839424][ T7284] BTRFS info (device loop2): enabling ssd optimizations [ 204.061592][ T4331] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 204.081928][ T4331] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 204.099675][ T4331] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 204.117180][ T4331] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 204.160753][ T4331] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 204.171050][ T4257] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 204.182823][ T4331] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 204.182855][ T4331] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 204.224653][ T4331] usb 1-1: Product: syz [ 204.245760][ T4331] usb 1-1: Manufacturer: syz [ 204.259530][ T4331] cdc_wdm 1-1:1.0: skipping garbage [ 204.278386][ T4331] cdc_wdm 1-1:1.0: skipping garbage [ 204.297211][ T4331] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 204.307757][ T4331] cdc_wdm 1-1:1.0: Unknown control protocol [ 204.774784][ T7339] loop3: detected capacity change from 0 to 128 [ 204.897206][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -EPIPE [ 205.076078][ T7345] netlink: 'syz.1.1073': attribute type 5 has an invalid length. [ 205.104533][ T4773] usb 1-1: USB disconnect, device number 11 [ 205.227596][ T7349] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1074'. [ 205.485760][ T7358] Bluetooth: MGMT ver 1.22 [ 205.490275][ T7360] loop4: detected capacity change from 0 to 256 [ 205.602586][ T7360] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104b5, chksum : 0x72e3a6c8, utbl_chksum : 0xe619d30d) [ 205.848928][ T7364] loop3: detected capacity change from 0 to 2048 [ 205.932729][ T7364] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 206.102741][ T7370] bridge0: port 3(vlan2) entered blocking state [ 206.132996][ T7370] bridge0: port 3(vlan2) entered disabled state [ 206.175835][ T7373] program syz.0.1085 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 206.424891][ T7378] loop3: detected capacity change from 0 to 164 [ 206.478544][ T7381] loop4: detected capacity change from 0 to 164 [ 206.537078][ T7385] loop2: detected capacity change from 0 to 256 [ 206.625141][ T7385] FAT-fs (loop2): Directory bread(block 1285) failed [ 206.683581][ T7385] FAT-fs (loop2): FAT read failed (blocknr 1281) [ 207.101129][ T7396] loop3: detected capacity change from 0 to 4096 [ 207.139225][ T7396] ntfs3: Unknown parameter '0xffffffffffffffff' [ 207.656401][ T7410] loop3: detected capacity change from 0 to 4096 [ 207.662156][ T7390] loop0: detected capacity change from 0 to 32768 [ 207.683642][ T7390] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.1093 (7390) [ 207.788360][ T7390] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 207.826572][ T7410] ntfs3: loop3: failed to convert "0080" to macroman [ 207.844914][ T7390] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 207.860833][ T7391] loop4: detected capacity change from 0 to 32768 [ 207.880957][ T7390] BTRFS info (device loop0): using free space tree [ 207.898850][ T7410] ntfs3: loop3: failed to convert name for inode 1e. [ 208.024373][ T7391] XFS (loop4): Mounting V5 Filesystem [ 208.235186][ T7391] XFS (loop4): Ending clean mount [ 208.372789][ T7390] BTRFS info (device loop0): enabling ssd optimizations [ 208.475541][ T4250] XFS (loop4): Unmounting Filesystem [ 208.853049][ T4260] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 208.865734][ T7460] loop3: detected capacity change from 0 to 2048 [ 208.958218][ T7460] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 208.980341][ T7460] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 209.554856][ T4561] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 209.597183][ T7475] loop0: detected capacity change from 0 to 64 [ 209.752995][ T4561] usb 3-1: Using ep0 maxpacket: 16 [ 209.772516][ T4561] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 209.829704][ T4561] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 209.849880][ T4561] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 209.891898][ T4561] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 209.910536][ T4561] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 209.959281][ T4561] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 209.989028][ T4561] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 209.994189][ T7482] loop3: detected capacity change from 0 to 8 [ 210.004483][ T4561] usb 3-1: Manufacturer: syz [ 210.025957][ T4561] usb 3-1: config 0 descriptor?? [ 210.048569][ T7482] SQUASHFS error: zlib decompression failed, data probably corrupt [ 210.069139][ T7482] SQUASHFS error: Failed to read block 0x9b: -5 [ 210.097856][ T7482] SQUASHFS error: Unable to read metadata cache entry [99] [ 210.122933][ T7482] SQUASHFS error: Unable to read inode 0x127 [ 210.193054][ T7467] loop4: detected capacity change from 0 to 32768 [ 210.207720][ T7467] XFS: ikeep mount option is deprecated. [ 210.302349][ T7467] XFS (loop4): Mounting V5 Filesystem [ 210.422812][ T4561] rc_core: IR keymap rc-hauppauge not found [ 210.428767][ T4561] Registered IR keymap rc-empty [ 210.442876][ T4561] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 210.473211][ T4561] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 210.503344][ T4561] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 210.516868][ T7467] XFS (loop4): Ending clean mount [ 210.528602][ T4561] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input8 [ 210.546106][ T7467] XFS (loop4): Quotacheck needed: Please wait. [ 210.560118][ T4561] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 210.613224][ T4561] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 210.629569][ T7467] XFS (loop4): Quotacheck: Done. [ 210.653585][ T4561] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 210.712173][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 210.712189][ T26] audit: type=1804 audit(1733395592.865:74): pid=7467 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1112" name="/newroot/214/file0/bus" dev="loop4" ino=9290 res=1 errno=0 [ 210.742065][ T4561] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 210.783183][ T4561] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 210.812797][ T4561] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 210.858099][ T4561] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 210.915076][ T4561] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 210.929856][ T4250] XFS (loop4): Unmounting Filesystem [ 210.954484][ T4561] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 210.987167][ T7514] Context (ID=0x0) not attached to queue pair (handle=0x2:0x0) [ 211.003108][ T4561] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 211.055061][ T4561] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 211.082318][ T4561] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 211.111280][ T4561] usb 3-1: USB disconnect, device number 6 [ 211.219378][ T7520] loop3: detected capacity change from 0 to 256 [ 211.292191][ T7520] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 211.333692][ T7520] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 211.384524][ T7520] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 211.424157][ T7520] UDF-fs: Scanning with blocksize 512 failed [ 211.483881][ T7520] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 211.498260][ T7524] loop0: detected capacity change from 0 to 128 [ 211.516205][ T7520] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 212.248185][ T7548] loop4: detected capacity change from 0 to 128 [ 212.601871][ T7558] device team0 entered promiscuous mode [ 212.617741][ T7560] loop3: detected capacity change from 0 to 256 [ 212.618872][ T7558] device team_slave_0 entered promiscuous mode [ 212.681007][ T7558] device team_slave_1 entered promiscuous mode [ 212.699425][ T7560] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 196) [ 212.709160][ T7558] device team0 left promiscuous mode [ 212.742775][ T7558] device team_slave_0 left promiscuous mode [ 212.751543][ T7560] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 212.762320][ T7558] device team_slave_1 left promiscuous mode [ 212.789289][ T7560] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 196) [ 212.825117][ T7560] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 196) [ 212.952621][ T4252] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 196) [ 213.132141][ T26] audit: type=1326 audit(1733395595.285:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7569 comm="syz.0.1159" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f904e97ff19 code=0x0 [ 213.476212][ T7566] loop4: detected capacity change from 0 to 32768 [ 213.842370][ T7572] loop2: detected capacity change from 0 to 32768 [ 213.900484][ T7572] XFS (loop2): Mounting V5 Filesystem [ 214.061659][ T7572] XFS (loop2): Ending clean mount [ 214.234004][ T4257] XFS (loop2): Unmounting Filesystem [ 214.634105][ T7612] loop4: detected capacity change from 0 to 1024 [ 214.705865][ T7612] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 215.189479][ T7624] loop0: detected capacity change from 0 to 2048 [ 215.289978][ T7624] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 215.364243][ T7624] EXT4-fs (loop0): shut down requested (0) [ 215.553860][ T4260] EXT4-fs (loop0): unmounting filesystem. [ 215.826392][ T7637] loop2: detected capacity change from 0 to 32768 [ 215.858883][ T7637] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 scanned by syz.2.1185 (7637) [ 215.911856][ T7637] BTRFS info (device loop2): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 215.940279][ T7637] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 216.006174][ T7637] BTRFS info (device loop2): using free space tree [ 216.244317][ T7637] BTRFS info (device loop2): enabling ssd optimizations [ 216.419201][ T26] audit: type=1800 audit(1733395598.575:76): pid=7637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1185" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 216.557155][ T7641] loop4: detected capacity change from 0 to 40427 [ 216.643390][ T7641] F2FS-fs (loop4): build fault injection attr: rate: 771, type: 0x3ffff [ 216.726294][ T7641] F2FS-fs (loop4): invalid crc value [ 216.823472][ T7641] F2FS-fs (loop4): Found nat_bits in checkpoint [ 217.060648][ T4257] BTRFS info (device loop2): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 217.122278][ T7641] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 217.279480][ T7641] F2FS-fs (loop4): access invalid blkaddr:2816 [ 217.293426][ T7663] loop3: detected capacity change from 0 to 131072 [ 217.332469][ T7645] loop0: detected capacity change from 0 to 32768 [ 217.349522][ T7641] CPU: 1 PID: 7641 Comm: syz.4.1186 Not tainted 6.1.119-syzkaller #0 [ 217.357643][ T7641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 217.367740][ T7641] Call Trace: [ 217.371050][ T7641] [ 217.374010][ T7641] dump_stack_lvl+0x1e3/0x2cb [ 217.378748][ T7641] ? nf_tcp_handle_invalid+0x642/0x642 [ 217.384252][ T7641] ? f2fs_get_next_page_offset+0x6c0/0x6c0 [ 217.390109][ T7641] f2fs_is_valid_blkaddr+0xca6/0x1270 [ 217.395535][ T7641] f2fs_map_blocks+0x15fd/0x3ab0 [ 217.400552][ T7641] ? f2fs_do_map_lock+0x70/0x70 [ 217.405454][ T7641] ? page_index+0xff/0x4b0 [ 217.409910][ T7641] f2fs_mpage_readpages+0xbd5/0x2b90 [ 217.415243][ T7641] ? mark_lock+0x9a/0x340 [ 217.420098][ T7641] ? dquot_release_reservation_block+0x90/0x90 [ 217.426298][ T7641] ? folio_add_lru+0x34d/0xd70 [ 217.431130][ T7641] ? f2fs_is_compress_backend_ready+0x9d/0x130 [ 217.437325][ T7641] ? f2fs_readahead+0x18a/0x3a0 [ 217.442199][ T7641] ? blk_start_plug+0x95/0x110 [ 217.447006][ T7641] read_pages+0x17f/0x830 [ 217.451394][ T7641] ? folio_add_lru+0x34d/0xd70 [ 217.456192][ T7641] ? folio_add_lru+0x34d/0xd70 [ 217.461001][ T7641] ? page_cache_ra_unbounded+0x7b0/0x7b0 [ 217.466695][ T7641] ? __filemap_add_folio+0x1b00/0x1b00 [ 217.472178][ T7641] ? page_cache_ra_order+0xb2a/0xd80 [ 217.477479][ T7641] page_cache_ra_unbounded+0x68b/0x7b0 [ 217.482959][ T7641] f2fs_readdir+0x5ae/0xc30 [ 217.487482][ T7641] ? __might_sleep+0xb0/0xb0 [ 217.492093][ T7641] ? f2fs_fill_dentries+0xd60/0xd60 [ 217.497322][ T7641] ? iterate_dir+0x10a/0x560 [ 217.501920][ T7641] ? __fdget_pos+0x2ba/0x360 [ 217.506529][ T7641] ? common_file_perm+0x17d/0x1d0 [ 217.511584][ T7641] ? fsnotify_perm+0x439/0x590 [ 217.516357][ T7641] iterate_dir+0x224/0x560 [ 217.520779][ T7641] ? f2fs_fill_dentries+0xd60/0xd60 [ 217.525991][ T7641] __se_sys_getdents64+0x209/0x4f0 [ 217.531107][ T7641] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 217.537104][ T7641] ? __x64_sys_getdents64+0x80/0x80 [ 217.542303][ T7641] ? filldir+0x6f0/0x6f0 [ 217.546548][ T7641] ? syscall_enter_from_user_mode+0x2e/0x230 [ 217.552534][ T7641] ? lockdep_hardirqs_on+0x94/0x130 [ 217.557829][ T7641] ? syscall_enter_from_user_mode+0x2e/0x230 [ 217.563819][ T7641] do_syscall_64+0x3b/0xb0 [ 217.568255][ T7641] ? clear_bhb_loop+0x45/0xa0 [ 217.572959][ T7641] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 217.578873][ T7641] RIP: 0033:0x7fe0b157ff19 [ 217.583304][ T7641] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 217.602921][ T7641] RSP: 002b:00007fe0b2438058 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 217.611352][ T7641] RAX: ffffffffffffffda RBX: 00007fe0b1745fa0 RCX: 00007fe0b157ff19 [ 217.619369][ T7641] RDX: 0000000000000022 RSI: 0000000000000000 RDI: 0000000000000004 [ 217.627366][ T7641] RBP: 00007fe0b15f3986 R08: 0000000000000000 R09: 0000000000000000 [ 217.635345][ T7641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 217.643341][ T7641] R13: 0000000000000000 R14: 00007fe0b1745fa0 R15: 00007ffde6a050d8 [ 217.651333][ T7641] [ 217.678405][ T7663] F2FS-fs (loop3): Found nat_bits in checkpoint [ 217.731229][ T7641] F2FS-fs (loop4): access invalid blkaddr:2816 [ 217.738136][ T7641] CPU: 0 PID: 7641 Comm: syz.4.1186 Not tainted 6.1.119-syzkaller #0 [ 217.746251][ T7641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 217.756356][ T7641] Call Trace: [ 217.759666][ T7641] [ 217.762630][ T7641] dump_stack_lvl+0x1e3/0x2cb [ 217.767361][ T7641] ? nf_tcp_handle_invalid+0x642/0x642 [ 217.772875][ T7641] ? f2fs_get_next_page_offset+0x6c0/0x6c0 [ 217.777533][ T7663] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 217.778720][ T7641] f2fs_is_valid_blkaddr+0xca6/0x1270 [ 217.791566][ T7641] f2fs_map_blocks+0x15fd/0x3ab0 [ 217.796599][ T7641] ? f2fs_do_map_lock+0x70/0x70 [ 217.801502][ T7641] ? page_index+0xff/0x4b0 [ 217.805982][ T7641] f2fs_mpage_readpages+0xbd5/0x2b90 [ 217.811326][ T7641] ? mark_lock+0x9a/0x340 [ 217.815722][ T7641] ? dquot_release_reservation_block+0x90/0x90 [ 217.821938][ T7641] ? folio_add_lru+0x34d/0xd70 [ 217.826755][ T7641] ? f2fs_is_compress_backend_ready+0x9d/0x130 [ 217.832965][ T7641] ? f2fs_readahead+0x18a/0x3a0 [ 217.837847][ T7641] ? blk_start_plug+0x95/0x110 [ 217.842652][ T7641] read_pages+0x17f/0x830 [ 217.847041][ T7641] ? folio_add_lru+0x34d/0xd70 [ 217.851838][ T7641] ? folio_add_lru+0x34d/0xd70 [ 217.856645][ T7641] ? page_cache_ra_unbounded+0x7b0/0x7b0 [ 217.862336][ T7641] ? __filemap_add_folio+0x1b00/0x1b00 [ 217.867852][ T7641] ? page_cache_ra_order+0xb2a/0xd80 [ 217.873192][ T7641] page_cache_ra_unbounded+0x68b/0x7b0 [ 217.878713][ T7641] f2fs_readdir+0x5ae/0xc30 [ 217.883258][ T7641] ? __might_sleep+0xb0/0xb0 [ 217.887909][ T7641] ? f2fs_fill_dentries+0xd60/0xd60 [ 217.893174][ T7641] ? iterate_dir+0x10a/0x560 [ 217.897791][ T7641] ? __fdget_pos+0x2ba/0x360 [ 217.902412][ T7641] ? common_file_perm+0x17d/0x1d0 [ 217.907480][ T7641] ? fsnotify_perm+0x439/0x590 [ 217.912273][ T7641] iterate_dir+0x224/0x560 [ 217.916714][ T7641] ? f2fs_fill_dentries+0xd60/0xd60 [ 217.921973][ T7641] __se_sys_getdents64+0x209/0x4f0 [ 217.927115][ T7641] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 217.933140][ T7641] ? __x64_sys_getdents64+0x80/0x80 [ 217.938362][ T7641] ? filldir+0x6f0/0x6f0 [ 217.942642][ T7641] ? syscall_enter_from_user_mode+0x2e/0x230 [ 217.948654][ T7641] ? lockdep_hardirqs_on+0x94/0x130 [ 217.953882][ T7641] ? syscall_enter_from_user_mode+0x2e/0x230 [ 217.959895][ T7641] do_syscall_64+0x3b/0xb0 [ 217.964347][ T7641] ? clear_bhb_loop+0x45/0xa0 [ 217.969060][ T7641] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 217.974983][ T7641] RIP: 0033:0x7fe0b157ff19 [ 217.979439][ T7641] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 217.999084][ T7641] RSP: 002b:00007fe0b2438058 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 218.007547][ T7641] RAX: ffffffffffffffda RBX: 00007fe0b1745fa0 RCX: 00007fe0b157ff19 [ 218.015573][ T7641] RDX: 0000000000000022 RSI: 0000000000000000 RDI: 0000000000000004 [ 218.023577][ T7641] RBP: 00007fe0b15f3986 R08: 0000000000000000 R09: 0000000000000000 [ 218.031576][ T7641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 218.039594][ T7641] R13: 0000000000000000 R14: 00007fe0b1745fa0 R15: 00007ffde6a050d8 [ 218.047632][ T7641] [ 218.142268][ T7645] XFS (loop0): Mounting V5 Filesystem [ 218.165216][ T7641] syz.4.1186: attempt to access beyond end of device [ 218.165216][ T7641] loop4: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 218.415175][ T4250] syz-executor: attempt to access beyond end of device [ 218.415175][ T4250] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 218.430346][ T7645] XFS (loop0): Ending clean mount [ 218.436723][ T7645] XFS (loop0): Quotacheck needed: Please wait. [ 218.565273][ T7645] XFS (loop0): Quotacheck: Done. [ 218.833268][ T4260] XFS (loop0): Unmounting Filesystem [ 219.121823][ T7698] loop4: detected capacity change from 0 to 128 [ 219.155462][ T7698] VFS: Found a Xenix FS (block size = 512) on device loop4 [ 219.220274][ T7698] sysv_free_block: trying to free block not in datazone [ 219.296694][ T7698] sysv_free_block: getblk() failed [ 219.312087][ T7698] sysv_free_block: getblk() failed [ 219.328202][ T7698] sysv_free_block: getblk() failed [ 219.348508][ T7698] sysv_free_block: getblk() failed [ 219.374652][ T7698] sysv_free_block: getblk() failed [ 219.403022][ T7698] sysv_free_block: getblk() failed [ 219.408220][ T7698] sysv_free_block: getblk() failed [ 219.438894][ T7698] sysv_free_block: getblk() failed [ 219.458771][ T7698] sysv_free_block: getblk() failed [ 219.500833][ T7698] sysv_free_block: getblk() failed [ 219.510476][ T7698] sysv_free_block: getblk() failed [ 219.523039][ T7698] sysv_free_block: getblk() failed [ 219.528359][ T7698] sysv_free_block: getblk() failed [ 219.551882][ T7698] sysv_free_block: getblk() failed [ 219.564017][ T7708] loop0: detected capacity change from 0 to 256 [ 219.576687][ T7698] sysv_free_block: getblk() failed [ 219.581864][ T7698] sysv_free_block: getblk() failed [ 219.607938][ T7708] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 219.620187][ T7698] sysv_free_block: getblk() failed [ 219.630318][ T7698] sysv_free_block: getblk() failed [ 219.636213][ T7698] sysv_free_block: getblk() failed [ 219.661723][ T7698] sysv_free_block: getblk() failed [ 219.676576][ T7698] sysv_free_block: getblk() failed [ 219.681765][ T7698] sysv_free_block: getblk() failed [ 219.722927][ T7698] sysv_free_block: getblk() failed [ 219.773693][ T7698] sysv_free_block: getblk() failed [ 219.803403][ T7698] sysv_free_block: getblk() failed [ 219.843665][ T7698] sysv_free_block: getblk() failed [ 219.895589][ T7698] sysv_free_block: getblk() failed [ 219.900800][ T7698] sysv_free_block: getblk() failed [ 219.956996][ T7698] sysv_free_block: getblk() failed [ 219.986734][ T7698] sysv_free_block: getblk() failed [ 220.002877][ T7698] sysv_free_block: getblk() failed [ 220.043035][ T7698] sysv_free_block: getblk() failed [ 220.048201][ T7698] sysv_free_block: trying to free block not in datazone [ 220.112734][ T7698] sysv_free_block: trying to free block not in datazone [ 220.147399][ T7698] sysv_free_block: trying to free block not in datazone [ 220.329109][ T7726] loop0: detected capacity change from 0 to 1024 [ 220.433976][ T7726] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 220.580792][ T7718] loop2: detected capacity change from 0 to 32768 [ 220.651862][ T4260] EXT4-fs (loop0): unmounting filesystem. [ 220.802273][ T4250] sysv_free_block: getblk() failed [ 220.834493][ T4250] sysv_free_block: getblk() failed [ 220.839658][ T4250] sysv_free_block: trying to free block not in datazone [ 220.840955][ T7735] sch_fq: defrate 0 ignored. [ 220.889005][ T4250] sysv_free_block: getblk() failed [ 220.911105][ T4250] sysv_free_block: getblk() failed [ 220.923145][ T4250] sysv_free_block: getblk() failed [ 220.928546][ T4250] sysv_free_block: getblk() failed [ 220.962851][ T4250] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 221.186516][ T26] audit: type=1326 audit(1733395603.345:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7742 comm="syz.1.1213" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f75c0f7ff19 code=0x0 [ 221.427003][ T7755] loop4: detected capacity change from 0 to 2048 [ 221.456343][ T7755] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 221.513183][ T7756] loop3: detected capacity change from 0 to 4096 [ 221.568818][ T7756] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 222.071666][ T7766] loop4: detected capacity change from 0 to 128 [ 222.206868][ T7760] loop2: detected capacity change from 0 to 32768 [ 222.250761][ T7760] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 scanned by syz.2.1222 (7760) [ 222.285350][ T7760] BTRFS info (device loop2): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 222.318513][ T7760] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 222.375747][ T7760] BTRFS info (device loop2): turning off barriers [ 222.398700][ T7760] BTRFS info (device loop2): enabling all of the rescue options [ 222.452769][ T7760] BTRFS info (device loop2): ignoring data csums [ 222.476427][ T7760] BTRFS info (device loop2): ignoring bad roots [ 222.518121][ T7760] BTRFS info (device loop2): disabling log replay at mount time [ 222.538810][ T7760] BTRFS info (device loop2): disabling tree log [ 222.557638][ T7760] BTRFS info (device loop2): turning on flush-on-commit [ 222.573487][ T7760] BTRFS info (device loop2): using free space tree [ 222.584462][ T7779] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.591727][ T7779] bridge0: port 1(bridge_slave_0) entered forwarding state [ 222.617653][ T7762] loop0: detected capacity change from 0 to 32768 [ 222.649565][ T7785] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1233'. [ 222.758814][ T7762] XFS (loop0): Mounting V5 Filesystem [ 222.897903][ T7760] BTRFS info (device loop2: state C): enabling ssd optimizations [ 222.909957][ T7762] XFS (loop0): Ending clean mount [ 222.919252][ T7762] XFS (loop0): Quotacheck needed: Please wait. [ 223.028978][ T7760] BTRFS error (device loop2: state MC): unrecognized mount option 'rescue' [ 223.053391][ T7760] BTRFS info (device loop2: state MC): resize thread pool 2097158 -> 3 [ 223.058573][ T7762] XFS (loop0): Quotacheck: Done. [ 223.286846][ T4257] BTRFS info (device loop2: state C): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 223.300778][ T4260] XFS (loop0): Unmounting Filesystem [ 224.178031][ T7785] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.185640][ T7785] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.401819][ T7818] loop4: detected capacity change from 0 to 32768 [ 224.479897][ T7818] jfs_readdir called with invalid offset! [ 224.953651][ T7827] loop4: detected capacity change from 0 to 512 [ 225.020311][ T7827] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 225.029850][ T7827] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 225.044646][ T7827] EXT4-fs (loop4): 1 truncate cleaned up [ 225.050418][ T7827] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 225.117897][ T4250] EXT4-fs (loop4): unmounting filesystem. [ 225.325977][ T7833] ebtables: ebtables: counters copy to user failed while replacing table [ 225.377132][ T7785] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 226.016625][ T7785] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.026847][ T7785] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.035869][ T7785] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.045629][ T7785] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.292805][ T7785] syz.3.1233 (7785) used greatest stack depth: 19608 bytes left [ 226.396578][ T7852] input: syz0 as /devices/virtual/input/input9 [ 226.706943][ T7868] loop0: detected capacity change from 0 to 64 [ 228.169995][ T7926] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1283'. [ 228.260366][ T3994] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 228.480391][ T3994] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 228.511232][ T3994] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 228.534867][ T3994] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 228.570955][ T3994] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 228.591195][ T3994] usb 1-1: SerialNumber: syz [ 228.810369][ T7936] tap0: tun_chr_ioctl cmd 1074812118 [ 228.842600][ T3994] usb 1-1: 0:2 : does not exist [ 228.879432][ T3994] usb 1-1: USB disconnect, device number 12 [ 230.002174][ T7954] loop0: detected capacity change from 0 to 32768 [ 230.016985][ T7954] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.1296 (7954) [ 230.045819][ T7954] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 230.074485][ T7954] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 230.093053][ T7954] BTRFS info (device loop0): using free space tree [ 230.311847][ T7954] BTRFS info (device loop0): enabling ssd optimizations [ 230.425885][ T11] ------------[ cut here ]------------ [ 230.432037][ T11] WARNING: CPU: 0 PID: 11 at net/mac80211/ibss.c:500 ieee80211_ibss_csa_beacon+0x58e/0x640 [ 230.442896][ T11] Modules linked in: [ 230.446853][ T11] CPU: 0 PID: 11 Comm: kworker/u4:1 Not tainted 6.1.119-syzkaller #0 [ 230.454984][ T11] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 230.465111][ T11] Workqueue: phy12 ieee80211_iface_work [ 230.470723][ T11] RIP: 0010:ieee80211_ibss_csa_beacon+0x58e/0x640 [ 230.477215][ T11] Code: f7 c6 05 d2 f9 57 04 01 48 c7 c7 50 c9 22 8c be fd 01 00 00 48 c7 c2 e0 c9 22 8c e8 9c 5b 3c f7 e9 7d fe ff ff e8 b2 f5 5b f7 <0f> 0b b8 ea ff ff ff e9 7a ff ff ff e8 a1 f5 5b f7 0f 0b e9 d9 fa [ 230.496897][ T11] RSP: 0018:ffffc900001073d8 EFLAGS: 00010287 [ 230.503057][ T11] RAX: ffffffff8a2ea63e RBX: ffff8880554a35d8 RCX: 0000000000100000 [ 230.511091][ T11] RDX: ffffc9001a25a000 RSI: 00000000000009d7 RDI: 00000000000009d8 [ 230.519152][ T11] RBP: ffff8880554d9ad2 R08: dffffc0000000000 R09: fffffbfff2249864 [ 230.527194][ T11] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff8880554d9ad8 [ 230.535257][ T11] R13: ffff8880554d8c80 R14: ffff8880554a0760 R15: ffff8880554d9af8 [ 230.543297][ T11] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 230.552265][ T11] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 230.558934][ T11] CR2: 00007fc213c54b58 CR3: 000000000d08e000 CR4: 00000000003506f0 [ 230.566972][ T11] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 230.575039][ T11] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 230.583079][ T11] Call Trace: [ 230.586394][ T11] [ 230.589367][ T11] ? __warn+0x15a/0x520 [ 230.593652][ T11] ? ieee80211_ibss_csa_beacon+0x58e/0x640 [ 230.599529][ T11] ? report_bug+0x2af/0x500 [ 230.604139][ T11] ? ieee80211_ibss_csa_beacon+0x58e/0x640 [ 230.609998][ T11] ? handle_bug+0x3d/0x70 [ 230.614427][ T11] ? exc_invalid_op+0x16/0x40 [ 230.619175][ T11] ? asm_exc_invalid_op+0x16/0x20 [ 230.624300][ T11] ? ieee80211_ibss_csa_beacon+0x58e/0x640 [ 230.630227][ T11] ? ieee80211_ibss_csa_beacon+0x58e/0x640 [ 230.636096][ T11] ? ieee80211_ibss_csa_beacon+0x58e/0x640 [ 230.641937][ T11] ieee80211_channel_switch+0x12f9/0x21c0 [ 230.647720][ T11] ? cfg80211_chandef_create+0x102/0x470 [ 230.653462][ T11] ? ieee80211_get_channel_khz+0x16f/0x910 [ 230.659302][ T11] ? ieee80211_csa_finalize+0xc50/0xc50 [ 230.664934][ T11] ? cfg80211_chandef_usable+0x8f8/0x12c0 [ 230.670691][ T11] ? cfg80211_chandef_valid+0x951/0xc80 [ 230.676315][ T11] ? cfg80211_chandef_dfs_required+0x3a1/0x540 [ 230.682525][ T11] ieee80211_ibss_process_chanswitch+0xba5/0xf80 [ 230.688942][ T11] ? trace_drv_return_int+0x270/0x270 [ 230.694385][ T11] ? cfg80211_find_elem_match+0x170/0x1a0 [ 230.700154][ T11] ? ieee80211_queue_delayed_work+0x160/0x160 [ 230.706307][ T11] ? mutex_lock_nested+0x10/0x10 [ 230.711275][ T11] ? validate_chain+0x112/0x5950 [ 230.716288][ T11] ? mark_lock+0x9a/0x340 [ 230.720697][ T11] ieee80211_ibss_rx_queued_mgmt+0x1321/0x2dd0 [ 230.726945][ T11] ? __lock_acquire+0x125b/0x1f80 [ 230.732026][ T11] ? ieee80211_ibss_rx_no_sta+0x740/0x740 [ 230.737829][ T11] ? mark_lock+0x9a/0x340 [ 230.742214][ T11] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 230.748292][ T11] ? print_irqtrace_events+0x210/0x210 [ 230.753836][ T11] ? do_raw_spin_unlock+0x137/0x8a0 [ 230.759075][ T11] ? kcov_remote_start+0x4ae/0x7c0 [ 230.764275][ T11] ? lockdep_hardirqs_on+0x94/0x130 [ 230.769522][ T11] ? kcov_remote_start+0x8c/0x7c0 [ 230.774657][ T11] ieee80211_iface_work+0x7aa/0xce0 [ 230.779895][ T11] ? process_one_work+0x7a9/0x11d0 [ 230.785168][ T11] process_one_work+0x8a9/0x11d0 [ 230.790178][ T11] ? worker_detach_from_pool+0x260/0x260 [ 230.795904][ T11] ? _raw_spin_lock_irqsave+0x120/0x120 [ 230.801575][ T11] ? kthread_data+0x4e/0xc0 [ 230.806196][ T11] ? wq_worker_running+0x97/0x190 [ 230.811261][ T11] worker_thread+0xa47/0x1200 [ 230.816041][ T11] kthread+0x28d/0x320 [ 230.820159][ T11] ? worker_clr_flags+0x190/0x190 [ 230.825296][ T11] ? kthread_blkcg+0xd0/0xd0 [ 230.829919][ T11] ret_from_fork+0x1f/0x30 [ 230.834456][ T11] [ 230.837499][ T11] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 230.844787][ T11] CPU: 0 PID: 11 Comm: kworker/u4:1 Not tainted 6.1.119-syzkaller #0 [ 230.852882][ T11] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 230.862966][ T11] Workqueue: phy12 ieee80211_iface_work [ 230.868553][ T11] Call Trace: [ 230.871832][ T11] [ 230.874770][ T11] dump_stack_lvl+0x1e3/0x2cb [ 230.879756][ T11] ? nf_tcp_handle_invalid+0x642/0x642 [ 230.885237][ T11] ? panic+0x764/0x764 [ 230.889326][ T11] ? vscnprintf+0x59/0x80 [ 230.893679][ T11] panic+0x318/0x764 [ 230.897587][ T11] ? __warn+0x169/0x520 [ 230.901756][ T11] ? memcpy_page_flushcache+0xfc/0xfc [ 230.907162][ T11] ? ret_from_fork+0x1f/0x30 [ 230.911776][ T11] __warn+0x348/0x520 [ 230.915770][ T11] ? ieee80211_ibss_csa_beacon+0x58e/0x640 [ 230.921588][ T11] report_bug+0x2af/0x500 [ 230.925936][ T11] ? ieee80211_ibss_csa_beacon+0x58e/0x640 [ 230.931764][ T11] handle_bug+0x3d/0x70 [ 230.935938][ T11] exc_invalid_op+0x16/0x40 [ 230.940458][ T11] asm_exc_invalid_op+0x16/0x20 [ 230.945326][ T11] RIP: 0010:ieee80211_ibss_csa_beacon+0x58e/0x640 [ 230.951752][ T11] Code: f7 c6 05 d2 f9 57 04 01 48 c7 c7 50 c9 22 8c be fd 01 00 00 48 c7 c2 e0 c9 22 8c e8 9c 5b 3c f7 e9 7d fe ff ff e8 b2 f5 5b f7 <0f> 0b b8 ea ff ff ff e9 7a ff ff ff e8 a1 f5 5b f7 0f 0b e9 d9 fa [ 230.971368][ T11] RSP: 0018:ffffc900001073d8 EFLAGS: 00010287 [ 230.977444][ T11] RAX: ffffffff8a2ea63e RBX: ffff8880554a35d8 RCX: 0000000000100000 [ 230.985415][ T11] RDX: ffffc9001a25a000 RSI: 00000000000009d7 RDI: 00000000000009d8 [ 230.993383][ T11] RBP: ffff8880554d9ad2 R08: dffffc0000000000 R09: fffffbfff2249864 [ 231.001353][ T11] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff8880554d9ad8 [ 231.009328][ T11] R13: ffff8880554d8c80 R14: ffff8880554a0760 R15: ffff8880554d9af8 [ 231.017306][ T11] ? ieee80211_ibss_csa_beacon+0x58e/0x640 [ 231.023128][ T11] ? ieee80211_ibss_csa_beacon+0x58e/0x640 [ 231.028945][ T11] ieee80211_channel_switch+0x12f9/0x21c0 [ 231.034673][ T11] ? cfg80211_chandef_create+0x102/0x470 [ 231.040323][ T11] ? ieee80211_get_channel_khz+0x16f/0x910 [ 231.046136][ T11] ? ieee80211_csa_finalize+0xc50/0xc50 [ 231.051685][ T11] ? cfg80211_chandef_usable+0x8f8/0x12c0 [ 231.057411][ T11] ? cfg80211_chandef_valid+0x951/0xc80 [ 231.062972][ T11] ? cfg80211_chandef_dfs_required+0x3a1/0x540 [ 231.069135][ T11] ieee80211_ibss_process_chanswitch+0xba5/0xf80 [ 231.075474][ T11] ? trace_drv_return_int+0x270/0x270 [ 231.080844][ T11] ? cfg80211_find_elem_match+0x170/0x1a0 [ 231.086608][ T11] ? ieee80211_queue_delayed_work+0x160/0x160 [ 231.092695][ T11] ? mutex_lock_nested+0x10/0x10 [ 231.097652][ T11] ? validate_chain+0x112/0x5950 [ 231.102594][ T11] ? mark_lock+0x9a/0x340 [ 231.106985][ T11] ieee80211_ibss_rx_queued_mgmt+0x1321/0x2dd0 [ 231.113155][ T11] ? __lock_acquire+0x125b/0x1f80 [ 231.118202][ T11] ? ieee80211_ibss_rx_no_sta+0x740/0x740 [ 231.123949][ T11] ? mark_lock+0x9a/0x340 [ 231.128305][ T11] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 231.134308][ T11] ? print_irqtrace_events+0x210/0x210 [ 231.139782][ T11] ? do_raw_spin_unlock+0x137/0x8a0 [ 231.144983][ T11] ? kcov_remote_start+0x4ae/0x7c0 [ 231.150103][ T11] ? lockdep_hardirqs_on+0x94/0x130 [ 231.155305][ T11] ? kcov_remote_start+0x8c/0x7c0 [ 231.160341][ T11] ieee80211_iface_work+0x7aa/0xce0 [ 231.165674][ T11] ? process_one_work+0x7a9/0x11d0 [ 231.170792][ T11] process_one_work+0x8a9/0x11d0 [ 231.175750][ T11] ? worker_detach_from_pool+0x260/0x260 [ 231.181398][ T11] ? _raw_spin_lock_irqsave+0x120/0x120 [ 231.186971][ T11] ? kthread_data+0x4e/0xc0 [ 231.191489][ T11] ? wq_worker_running+0x97/0x190 [ 231.196514][ T11] worker_thread+0xa47/0x1200 [ 231.201217][ T11] kthread+0x28d/0x320 [ 231.205291][ T11] ? worker_clr_flags+0x190/0x190 [ 231.210322][ T11] ? kthread_blkcg+0xd0/0xd0 [ 231.214916][ T11] ret_from_fork+0x1f/0x30 [ 231.219354][ T11] [ 231.222743][ T11] Kernel Offset: disabled [ 231.227212][ T11] Rebooting in 86400 seconds..