last executing test programs: 3m45.398731315s ago: executing program 0 (id=566): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000500)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000280)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x20000848, &(0x7f00000001c0)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=r2, @ANYBLOB="00646d61c6d62d303030303030303030303030303135322c696f433161720300000069736f380000000000", @ANYRES16=r3, @ANYRESHEX=r0, @ANYRES32=r1, @ANYRESHEX=r1], 0x81, 0x14f5, &(0x7f0000001580)="$eJzs3AlwVUX2MPA+3X0hxIjPiCyBPn0uPDFAExERWURAFhERERER2URAxIiIiIAKAdlEDIgIiCwRkSUgILLEEJF93/fNyCBGREQ2ARHor3D8DzN/5/935pv5Pqom51fVlT6595zXnZPKu/dWvXzffXidZnVrNiEi8S+BP39JEULECCEGCyFuEEIEQogK8RXirxzPpyDlX3sR9u/1aPq1XgG7lrj/uRv3P3fj/udu3P/cjfufu3H/czfuf+7G/WcsN9syo8iNPHLv4Of/uRm///8HySk7/ut1ZW/u8U+kcP9zN+7/f5y8/8zJ3P/cjfufu3H/czfu/3++Gv/LMe5/7sb9Zyw3u9bPn3lc23Gtf/8YY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjOUO5/1VWgjxX/NrvS7GGGOMMcYYY4z9+/i813oFjDHGGGOMMcYY+38PhBRKaBGIPCKviBH5RKy4TsSJ60V+cYOIiBtFvLhJFBA3i4KikCgsiogEUVQUE0agsIJEKIqLEiIqbhElxa0iUZQSpUUZ4URZkSRuE+XE7aK8uENUEHeKiuIuUUlUFlVEVXG3qCbuEdVFDVFT3Ctqidqijqgr7hP1xP2ivnhANBAPiobiIdFIPCwai0dEE/GoaCoeE83E46K5eEK0EC1FK9FatPm/yn9FvCpeE71FH5Ei+op+4nXRXwwQA8UgMVi8IYaIN8VQ8ZZIFcPEcPG2GCHeESPFu2KUGC3GiPfEWPG+GCfGiwliokgTH4hJ4kMxWXwkpoipYpqYLtLFDDFTfCxmidlijvhEzBWfinlivlggFooM8ZnIFItElvhcLBZfiCViqVgmlosVYqVYJVaLNWKtWCfWiw1io9gkNostYqvYJraLHWKn2CV2iz1ir9gn9osD4kuRLb76J/PP/bf8HiBAgAQJGjTkgTwQAzEQC7EQB3GQH/JDBCIQD/FQAApAQSgIhaEwJEACFINigIBAQFAcikMUolASSkIiJEJpKA0OHCRBEpSD26E8lIcKUAEqQkWoBJWhMlSFqlANqkF1qA41oSbUglpQB+rAfXAf3A/1oT40gAbQEBpCI2gEjaExNIEm0BSaQjNoBs2hObSAFtAKWkEbaANtoS20g3bQATpAR+gInaATJEMydIbO0AW6QFfoCt2gG3SH7tADekJPeAVegdfgNegDQvSFftAP+kN/GAiDYBC8AUPgTXgT3oJUGAbD4W14G96BkXAWRsFoGANjoJp8H8bBeCA5EdIgDSbBJJgMk2EKTIWpMB3SYQbMhJkwC2bDbPgE5sKn8CnMh/mwEDIgAzJhEWRBFiyGc7AElsIyWA4rYCWsgNWwBlbDOlgP62AjbITNsBm2wlbYDtthJ+yE3bAb9sJe2A/7IRWyIRsOwkE4BIfgMByGHMiBI3AEjsJROAbH4DgchxNwEk7BSTgDZ+AsnIPzcB4uwAW4CC8lfNt0d6m1qUJeoaWWeWQeGSNjZKyMlXEyTuaX+WVERmS8jJcFZAFZUBaUhWVhmSATZDFZTKJESTKUxWVxGZVRWVKWlIkyUZaWpaWTTibJJFlOlpPlZXlZQd4pK8q7ZCVZWbZ3VWVVWU12cNVlDVlT1pS1ZG1ZR9aVdWU9WU/Wl/VlA9lANpQNZSP5sGws+8JAeFRe6UwzOQyay+HQQraUrWRr+Q48KdvKkdBOtpcd5NNyNIyCTrKtS5bPyc5yHHSRL8jx8KLsJidCd/my7CF7yl7yFfmqbOd6yz5yCvSV/eR06C8HyIFykJwFteWVjtWRb8lUOUwOl2/LhfCOHCnflaPkaDlGvifHyvflODleTpATZZr8QE6SH8rJ8iM5RU6V0+R0mS5nyJnyYzlLzpZz5CdyrvxUzpPz5QK5UGbIz2SmXCSz5OdysfxCLpFL5TK5XK6QK+UquVqukWvlOrlebpAb5Sa5WW6RW+U2uV3ukDvlLrlb7pF75T65Xx6QX8ps+ZU8KP8kD8mv5WH5jcyR38oj8jt5VH4vj8kf5HH5ozwhT8pT8rQ8I3+SZ+U5eV7+LC/IX+RFeUlell4KBUoqpbQKVB6VV8WofCpWXafi1PUqv7pBRdSNKl7dpAqom1VBVUgVVkVUgiqqiimjUFlFKlTFVQkVVbeokupWlahKqdKqjHKqrEpSt6ly6nZVXt2hKqg7VUV1l6qkKqsqqqq6W1VT96jqqoaqqe5VtVRtVUfVVfepeup+VV89oBqoB1VD9ZBqpB5WjdUjqol6VDVVj6lm6nHVXD2hWqiWqpVqrdqoJ1Vb9ZRqp9qrDupp1VE9ozqpZ1Wyek51Vs+rLuoF1VW9qLqpl1R39bLqoXqqXuqSuqy86q36qBTVV/VTr6v+aoAaqAapweoNNUS9qYaqt1SqGqaGq7fVCPWOGqneVaPUaDVGvafGqvfVODVeTVATVZr6QE1SH6rJ6iM1RU1V09R0la5mqIG/VZrzD+R/+Hfyh/766pvVFrVVbVPb1Q61U+1Su9UetUftU/vUAXVAZatsdVAdVIfUIXVYHVY5KkcdUUfUUXVUHVPH1HF1XJ1QJ9XP6rQ6o35SZ9U5dU79rC6oC+ribz8DoUFLrbTWgc6j8+oYnU/H6ut0nL5e59c36Ii+Ucfrm3QBfbMuqAvpwrqITtBFdTFtNGqrSYe6uC6ho/oWXVLfqhN1KV1al9FOl9VJ+rZ/Of+P1tdGt9FtdVvdTrfTHXQH3VF31J10J52sk3Vn3Vl30V10V91Vd9PddHfdXffQPXQv3Uu/ql/VvXVvnaJTdD/9uu6vB+iBepAerN/QQ/QQPVQP1ak6VQ/Xw/UIPUKP1CP1KD1Kj9Fj9Fg9Vo/T4/QEPUGn6TQ9SU/Sk/VkPUVP0dP0NJ2u0/VMPVPP0rP0HD1Hz9Vz9Tw9Ty/QC3SGztCZOlNn6Sy9WC/WS/RSvVQv18v1Sr1Sr9ar9Vq9Vq/X6/VGvVEv0Vv0Fr1Nb9M79A69S+/Se/QevU/v0wf0AZ2ts/VBfVAf0of0YX1Y5+gcfUQf0Uf1UX1MH9PH9XF9Qp/Qp/QpfUaf0Wf1WX1en9cX9AV9UV/Ul/XlK5d9gQxkoAMd5AnyBDFBTBAbxAZxQVyQP8gfRIJIEB/EBwWCm4OCQaGgcFAkSAiKBsUCE2BgAwrCoHhQIogGtwQlg1uDxKBUUDooE7igbJAU3BaUC24Pygd3BBWCO4OKwV1BpaByUCWoGtwdVAvuCaoHNYKawb1BraB2UCeoG9wX1AvuD+oHDwQNggeDhsFDQaPg4aBx8EjQJHg0aBo8FjQLHg+aB08ELYKWQaugddDm31rf+7OFnnK9TR+TYvqafuZ1098MMAPNIDPYvGGGmDfNUPOWSTXDzHDzthlh3jEjzbtmlBltxpj3zNjdMWacGW8mmIkmzXxgJpkPzWTzkZlippppZrpJNzPMTPOxmWVmmznmEzPXfGrmmflmgVloMsxnJtMsMlnmc7PYfGGWmKVmmVluVpiVZpVZbdaYtWadWW82mI1mk9lstpitZpvZbnaYnWaX2W32mL1mn9lvDpgvTbb5yhw0fzKHzNfmsPnG5JhvzRHznTlqvjfHzA/muPnRnDAnzSlz2pwxP5mz5pw5b342F8wv5qK5ZC4bf+Xi/srbO2rUmAfzYAzGYCzGYhzGYX7MjxGMYDzGYwEsgAWxIBbGwpiACVgMi+EVhITFsThGMYolsSQmYiKWxtLo0GESJmE5LIflsTxWwApYEStiJayEVbAK3o134z14D9bAGngv3ou1sTbWxbpYD+thfayPDbABNsSG2AgbYWNsjE2wCTbFptgMm2FzbI4tsAW2wlbYBttgW2yL7bAddsAO2BE7YifshMmYjJ2xM3bBLtgVu2I37IbdsTv2wB7YC3vhq/gq9sbemIIp2A/7YX/sjwNxIA7GwTgEh+BQHIqpmIrDcTiOwBE4EkfiKByNY/A9HIvv4zgcjxNwIqZhGk7CSTgZJ+MUnILTcBqmYzrOxJk4C2fhHJyDc3EuzsN5uAAXYAZmYCZmYhZm4WJcjEuwIy7DZbgCV+AqXIVrcA2uw3W4ATfgJtyEW3ALbsNtuAN34C7chXtwD+7DfXgAD2A2ZuNBPIiH8BAexsOYgzl4BI/gUTyKx/AYHsfjeAJP4Ck8hWfwDJ7Fs3gez+MF/AUv4iW8jB5jrBSx9jobZ6+3+e0NNsbms38dF7ZFbIItaotZYwvaQn8To7U20ZaypW0Z62xZm2Rv+11cyVa2VWxVe7etZu+x1X8X17P32/r2AdvAPmjr2vv+Jm5oH7KN7OO2sX3CNrEtbVPb2jazj9vm9gnbwra0rWxr29E+YzvZZ22yfc52ts//Ls60i+wau9aus+vtPrvfnrc/26P2e3vB/mJ72z52sH3DDrFv2qH2LZtqh/0uHmPfs2Pt+3acHW8n2Im/i6fZ6TbdzrAz7cd2lp39uzjDfmbn2iw7z863C+zCX+Mra8qyn9vF9gu7xC61y+xyu8KutKvs6r+sdbndaDfZzXaP3Wu32e12h91pd9ndv8ZX9nHAfmmz7Vf2iP3OHrJf28P2mM2x3/4aX9nfMfuDPW5/tCfsSXvKnrZn7E/2rD336/6v7P20vWQvW28FAUlSpCmgPJSXYigfxdJ1FEfXU366gSJ0I8XTTVSAbqaCVIgKUxFKoKJUjAwhWSIKqTiVoCjdQiXpVkqkUlSaypCjspREt1E5up3K0x1Uge6kinQXVaLKVIWq0t1Uje6h6lSDatK9VItqUx2qS/dRPbqf6tMD1IAepIb0EDWih6kxPUJN6FFqSo9RM3qcmtMT1IJaUitqTW3oSWpLT1E7ak8d6GnqSM9QJ3qWkuk56kzPUxd6gbrSi9SNXqLu9DL1oJ7UC078+cMP1IdSqC/1o9epPw2ggTSIBtMbNITepKH0FqXSMBpOb9MIeodG0rs0ikbTGHqPxtL7NI7G0wSaSGn0AU2iD2kyfURTaCpNo+mUTjNoJn1Ms2g2zaFPaC59SvNoPi2ghZRBn1EmLaIs+pwW0xe0hJbSMlpOK2glraLVtIbW0jpaTxtoI22izbSFttI22k47aCftot20h/bSPtpPB+hLyqav6CD9iQ7R13SYvqEc+paO0Hd0lL6nY/QDHacf6QSdpFN0ms7QT3SWztF5+pku0C90kS7RZfIkQghlqEIdBmGeMG8YE+YLY8Prwrjw+jB/eEMYCW8M48ObwgLhzWHBsFBYOCwSJoRFw2KhCTG0IYVhWDwsEUbDW8KS4a1hYlgqLB2WCV1YNkwKbwvLhbeH5cM7wgrhnWHF8K6wUlg5fPzBquHdYbXwnrB6WCOsGd4b1gprh3XCuuF9Yb3w/rB++EDYIHwwLB8+FDYKHw4bh4+ETcJHw6bhY2Gz8PGwefhE2CJsGbYKW4dtwifDtuFTYbuwfdghfDrsGD4TdgqfDZPD58LO4fN/eDwl7Bv2C18PXw+9f0AtiC6MZkQ/i2ZGF0Wzop9HF0e/iC6JLo0uiy6ProiujK6Kro6uia6Nrouuj26Iboxuim6Oel83r3DgpFNOu8DlcXldjMvnYt11Ls5d7/K7G1zE3eji3U2ugLvZFXSFXGFXxCW4oq6YMw6ddeRCV9yVcFF3iyvpbnWJrpQr7co458q6JNfatXFtXFv3lGvn2rsO7mn3tHvGPeOedc+651xn97zr4l5wXd2Lrpt7yb3kXnY9XE/Xy73iXnWvud6uj0txKa6f6+f6u/5uoBvoBrvBbogb4oa6oS7Vpbrhbrgb4Ua4kW6kG+VGuTFujBvrxrpxbpyb4Ca4NJfmJrlJbrKb7Ka4KW6am+bSXbqb6Wa6WW6Wm+PmuLmJc908N88tcAtchstwmS7TZbkst9gtdkvcErfMLXMr3Aq3yq1ya9wat86tcxvcBrfJbXJb3Ba3zW1zO9wOt8vtcnvcHrfP7XMH3AGX7bLdQXfQHXKH3GH3jctx37oj7jt31H3vjrkf3HH3ozvhTrpT7rQ7435y6rfnnRfcL+6iu+QuO+/SIh9EJkU+jEyOfBSZEpkamRaZHkmPzIjMjHwcmRWZHZkT+SQyN/JpZF5kfmRBZGEkI/JZJDOyKJIV+TyyOPJFZElkaWRZZHlkRWRlxPui20Jf3JfwUX+LL+lv9Ym+lC/ty3jny/okf5sv52/35f0dvoK/01f0d/lKvrKv4p/wLXxL38q39m38k76tf8q38+19B/+07+if8Z38sz7ZP+c7++d9F/+C7+pf9N38S767f9n38D19L/+Kf9W/5nv7Pj7F9/X9/Ou+vx/gB/pBfrB/ww/xb/qh/i2f6of54f5tP8K/40f6d/0oP9qP8e/5sf59P86P9xP8RJ/mP/CT/Id+sv/IT/FT/TQ/3af7GX6m/9jP8rP9HP+Jn+s/9fP8fL/AL/QZ/jOf6Rf5LP+5X+y/8Ev8Ur/ML/cr/Eq/yq/2a/xav86v9xv8Rr/Jb/Zb/Fa/zW/3O/xOv8vv9nv8Xr/P7/cH/Jc+23/lD/o/+UP+a3/Yf+Nz/Lf+iP/OH/Xf+2P+B3/c/+hP+JP+lD/tz/if/Fl/zp/3P/sL/hd/0V/yl/kza4wxxhhj/xD1B8f7/p3vyd/GFf2EENdvL5Lz32tuKPjn+QCZ0DEihHiuT/dH/2vUqpWSkvLbuUuUCErMF0JErubnEX+J9VLRQTwjkkV7Ue7vrm+A7HmB/qB+9E4hYv8qJ0Zcja/Wv/1/qP/k02MyK4bn4/+X+vOFSCxxNSefuBpfrV/+f6hfqO0frD/f12lCtPurnDhxNb5aP0k8JZ4XyX9zJmOMMcYYY4wx9mcDZJWuf3T/fOX+PEFfzckrrsZ/dH/OGGOMMcYYY4yxa+/Fnr2efTI5uX1XnvCEJzz5y+Ra/2VijDHGGGOM/btdvei/1ithjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcZyr/8f/07sWu+RMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYu9b+TwAAAP//4ok7tg==") mount$fuse(0x0, &(0x7f00000004c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0xbdc6808ff19713c6, 0x0) 3m45.033547793s ago: executing program 0 (id=569): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./sys/file0\x00', 0x0) 3m44.833177812s ago: executing program 0 (id=571): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1c0000000400000008000000000000000100"/48, @ANYRES32=r0, @ANYBLOB="0100000002"], 0x40) unshare(0x28000600) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{r1}, &(0x7f0000000780), &(0x7f00000007c0), 0x20}, 0x20) 3m44.617560083s ago: executing program 0 (id=574): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000080)='./file1\x00', 0x1a04447, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0x8, 0x1e6, &(0x7f0000000400)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0xc090, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x22) 3m44.203118732s ago: executing program 0 (id=577): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000002c0)='pids.max\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000440)=0x100ef51, 0x12) 3m38.821714336s ago: executing program 0 (id=608): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x0, 0x0, 0x1, 0x0, 0x100}, 0x1c) setsockopt$packet_int(r0, 0x107, 0x13, &(0x7f0000000000)=0x7fc, 0x4) 3m38.543636679s ago: executing program 32 (id=608): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x0, 0x0, 0x1, 0x0, 0x100}, 0x1c) setsockopt$packet_int(r0, 0x107, 0x13, &(0x7f0000000000)=0x7fc, 0x4) 3m16.133489426s ago: executing program 4 (id=775): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x30, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x14, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x10, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x2, 0x1}]}]}]}]}, 0x30}}, 0x0) 3m15.968739185s ago: executing program 4 (id=778): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) quotactl$Q_QUOTAOFF(0xffffffff80000301, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0xee00, 0x0) 3m15.778437003s ago: executing program 4 (id=781): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='hugetlb.2MB.failcnt\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x3) 3m15.522779485s ago: executing program 4 (id=785): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x1010051, &(0x7f0000000640)={[{@errors_remount}, {@noload}, {@noblock_validity}, {@dioread_lock}, {@nouid32}, {@nomblk_io_submit}, {@mblk_io_submit}]}, 0x1, 0x558, &(0x7f00000000c0)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r0, &(0x7f0000002600)=""/4113, 0x1011) 3m14.970226621s ago: executing program 4 (id=792): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000054000147880000000000000007", @ANYRES32], 0x38}}, 0x80) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x11000000) 3m13.848414714s ago: executing program 4 (id=799): r0 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) r4 = epoll_create(0x1) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x9, 0x0, r4, r0, &(0x7f0000000040)={0x4000001a}}) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x2000) 3m13.476590752s ago: executing program 33 (id=799): r0 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) r4 = epoll_create(0x1) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x9, 0x0, r4, r0, &(0x7f0000000040)={0x4000001a}}) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x2000) 1m34.973186939s ago: executing program 5 (id=1693): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) 1m34.792453348s ago: executing program 5 (id=1695): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0xcc04, &(0x7f0000002000)=ANY=[@ANYBLOB='dots,gid=', @ANYBLOB="edc7296fca12b24bb80a8a8522697bf3d74480e0124f7684dbb39bb2105bef5e02fe4b762323f66bd140c837", @ANYBLOB="2c6e6f646f74732c646f74732c74696d655f6f66667365743d3078303030303030303030303030303264382c4b6f74732c646f74732c6e6f646f74732c6e6f646f74732c646f74732c646f74732c6e6f646f74732c6e6f646f74732c636865636b3d72656c618065643c666c7573682c64656275672c646f74732c73686f77657865632c6e6f646f74732c6572732c71756965742c003fa5bfd3e968f92d300444698c6f8d94d8b46ce3ce652bc8f600"/192], 0x1, 0x209, &(0x7f0000000200)="$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") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, 0xffffffffffffffff, &(0x7f0000000040)=0x4) 1m34.283639172s ago: executing program 5 (id=1699): r0 = syz_io_uring_setup(0x1060, &(0x7f00000003c0)={0x0, 0x50b6, 0x2, 0x3, 0x167}, &(0x7f0000000500), &(0x7f0000000040), &(0x7f0000000000)) syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_clone3(&(0x7f000000dd80)={0xa04400, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_uring_enter(r0, 0xfffffdff, 0xe875, 0x3, &(0x7f0000000240)={[0xfffffffffffffffc]}, 0x8) 1m33.552933136s ago: executing program 5 (id=1707): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000009c0)='./bus\x00', 0x1081e, &(0x7f0000000140), 0xff, 0x44f, &(0x7f0000000540)="$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") syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f0000000140)) mount$overlay(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)=@known='system.posix_acl_default\x00') 1m33.145675176s ago: executing program 5 (id=1711): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000000)=0x8253, 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f00000001c0)=0x3f0, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, &(0x7f0000000080)) 1m32.554941713s ago: executing program 5 (id=1718): syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) r0 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x800, 0x1, 0x51}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x1, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 1m32.070970267s ago: executing program 34 (id=1718): syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) r0 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x800, 0x1, 0x51}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x1, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 4.452504941s ago: executing program 3 (id=2490): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x402) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@mptcp=@ack={0x1e, 0x4, 0xc2}]}}}}}}}}, 0x0) 4.165047214s ago: executing program 3 (id=2500): r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000840), 0x8000) read(r1, &(0x7f0000000000)=""/219, 0xdb) tkill(r0, 0x7) 3.946788794s ago: executing program 3 (id=2494): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f00000007c0)={0x48, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r0, 0x3ba0, &(0x7f0000000840)={0x48, 0xa, r2, 0x0, r1}) 3.761368933s ago: executing program 3 (id=2498): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x50, &(0x7f00000002c0)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8}}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x1, 0x4ae, &(0x7f0000000f00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x58) truncate(&(0x7f00000001c0)='./file1\x00', 0x42dc) copy_file_range(r0, 0x0, r0, &(0x7f00000000c0)=0xae8, 0x863, 0x0) 3.637469069s ago: executing program 1 (id=2501): mkdir(&(0x7f0000000040)='./my_configfs\x00', 0x176) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_configfs/target/dbroot\x00', 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x13}}, 0x20) 3.337371113s ago: executing program 1 (id=2503): r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000200)={0xa, 0xf3, 0x14, @mcast1, 0x9}, 0x1c) r1 = dup2(r0, r0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xfff1, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) 3.203521849s ago: executing program 1 (id=2504): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1400c, &(0x7f0000000840)={[{@stripe={'stripe', 0x3d, 0x3d}}, {@init_itable}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x457, &(0x7f0000000bc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x13e) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0x1d2f0, 0x402000, 0xf, 0xadea, 0x800000}) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000040)={0x6, 0x6, 0x4, 0x5, 0x1}) 3.138963003s ago: executing program 3 (id=2505): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi1\x00', 0x2, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000440)={'dt2814\x00', [0x300, 0xc0000000, 0x2, 0x400, 0xe, 0x800005, 0x7, 0x6, 0x8, 0x56, 0xffffffff, 0x1, 0x1, 0xfffffffc, 0x10000b, 0x0, 0x5, 0x4007a, 0x3, 0x0, 0x89, 0x12, 0x7f, 0x0, 0x5, 0xe66, 0x1, 0x2000008, 0xa6b3, 0x0, 0x5]}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 2.726844142s ago: executing program 1 (id=2507): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f00000007c0)={0x48, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r0, 0x3ba0, &(0x7f0000000840)={0x48, 0xa, r2, 0x0, r1}) 2.439098805s ago: executing program 1 (id=2508): r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000840), 0x8000) read(r1, &(0x7f0000000000)=""/219, 0xdb) tkill(r0, 0x7) 2.280924963s ago: executing program 6 (id=2510): socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) ioctl$SG_GET_VERSION_NUM(r0, 0x2284, &(0x7f0000000080)) 2.188953697s ago: executing program 1 (id=2512): openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) socket(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x3, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000079db8540da0b77010b7d000000010902120001000000000904", @ANYRES32=r0, @ANYRES8=r0], 0x0) 1.568412687s ago: executing program 6 (id=2515): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x2, 0x0, 0x0, 0x0, 0x0, "f4ffffff"}, 0x20000000, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000280)=0x2) 1.211761083s ago: executing program 6 (id=2517): r0 = semget(0x3, 0x4, 0x69c) semop(r0, &(0x7f0000000080)=[{0x1, 0x8001, 0x1000}, {0x1, 0x5b7a, 0x800}], 0x2) semop(r0, &(0x7f00000010c0)=[{0x1, 0xbbdb, 0x1000}, {0x1, 0x4}], 0x2) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000140)=[0x6, 0x7ffb]) 881.348459ms ago: executing program 2 (id=2519): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @empty}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000140)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x4000891) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, 0x0, 0x0) 723.324726ms ago: executing program 2 (id=2520): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/sda\x00', 0x2, 0x0) fallocate(r0, 0x10, 0x1000000, 0x10000000) 525.574786ms ago: executing program 2 (id=2521): ioperm(0x6, 0xb, 0x149187) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) flock(r0, 0x2) 484.469288ms ago: executing program 3 (id=2522): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000040)=0x2, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x2, @loopback={0xfec0ffffffffffff}, 0x80000000}], 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x3ff, @private2, 0x1ff}]}, &(0x7f0000000b00)=0x10) 406.194901ms ago: executing program 2 (id=2523): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440), 0x121400, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x101c08b, &(0x7f00000001c0)=ANY=[@ANYBLOB="7379735f696d6d757461626c6500757466383d312c696f636861727365743d61736369692c73686f72746e616d653d77696e39352c73686f77657865632c6e66732c636865636b3d7374726963742c756e695f786c6174653d302c757466383d312c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6c6f7765722c726f6469722c726f6469722c64656275672c757466383d302c726f6469722c71756965742c6572726f72733d72656d6f756e742d726f2c009c8a8fc4f74784ad79ec08fb556362ebc972ef94821f3565ef5f75f11e30ef1f72a065c510b17cae352940538b7b2c5d72f4627c25306b2479725add28f511a68f5f6f47f9facdd0cc574286d00ab52d6b9374b6a58eac694336ebe971f41860d01084c1a0fa6b51d80fa9f9d2c5a2e7a5284f93296217ef8f28e0a36e573296a0bfb38b94191f4b82873563f3759b5e193ecfab6ed7892542364757e47d656ad6a0fbb6e8bf138bddae620a3602991821d4844f628e6bdd8b62cca73744332f0185a54b"], 0x6, 0x2c5, &(0x7f0000000480)="$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") splice(r0, 0x0, r1, 0x0, 0x40010803, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1b) 197.642041ms ago: executing program 6 (id=2524): r0 = socket$nl_route(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000000000000000000000001850000002c00000095000000000000004495e980d4ab43a654dbda1289491fde9751ca443daaa97c18e213"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000001000010828bd70000000000000000000", @ANYRES32=r0, @ANYBLOB="00000000042004001c002b8008000800", @ANYRES32=r0, @ANYBLOB="080003001900000008000100", @ANYRES32=r1], 0x44}}, 0x20000000) 161.974033ms ago: executing program 2 (id=2525): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rpc/auth.unix.gid/channel\x00', 0x2, 0x0) write(r0, &(0x7f0000000500)='4294967295 2000000000 \n', 0x18) 110.827206ms ago: executing program 6 (id=2526): capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd, 0x0, 0x0, 0x3}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x44, 0x0, &(0x7f0000000580)="e3ef7f670000ec6783b4241544940000009550f50ac311e0f0542daab0c6b795aa9354e4826b32fa00228f11b0f472aeeb58d909c57270d30b5b85990747c7c07312f7eb", 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0xfffffffe}, 0x50) r0 = syz_open_dev$sg(&(0x7f0000000000), 0xa, 0x400) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85) 13.63164ms ago: executing program 2 (id=2527): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f00000005c0)={0xf, {"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", 0x1010}}, 0x1006) 0s ago: executing program 6 (id=2528): syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x300884c, &(0x7f00000005c0), 0x1, 0x515, &(0x7f0000000b40)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) connect$tipc(0xffffffffffffffff, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000200)={0x3c, 0x6, 0x5, 0xffb, 0x4924924924924cc}) kernel console output (not intermixed with test programs): 00000000. [ 214.306740][ T8996] loop3: detected capacity change from 0 to 128 [ 214.328702][ T8996] EXT4-fs: Ignoring removed orlov option [ 214.390156][ T8996] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 214.432615][ T8996] ext4 filesystem being mounted at /288/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 214.483844][ T8996] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:406: inode #11: comm syz.3.1100: No space for directory leaf checksum. Please run e2fsck -D. [ 214.537714][ T8996] EXT4-fs error (device loop3): __ext4_find_entry:1698: inode #11: comm syz.3.1100: checksumming directory block 0 [ 214.684038][ T5775] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 215.144877][ T9018] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1106'. [ 215.247556][ T9020] loop3: detected capacity change from 0 to 2048 [ 215.301200][ T9020] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 215.601355][ T9030] loop2: detected capacity change from 0 to 512 [ 215.754083][ T9030] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 215.807534][ T9030] ext4 filesystem being mounted at /300/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 216.120333][ T5774] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.609906][ T9057] loop2: detected capacity change from 0 to 16 [ 216.622871][ T9057] erofs: (device loop2): mounted with root inode @ nid 36. [ 216.711520][ T28] audit: type=1800 audit(1789402943.604:100): pid=9057 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1117" name="file1" dev="loop2" ino=86 res=0 errno=0 [ 216.731995][ C1] vkms_vblank_simulate: vblank timer overrun [ 216.791598][ T9059] IPVS: persistence engine module ip_vs_pe_ not found [ 217.712759][ T28] audit: type=1400 audit(1789402944.614:101): apparmor="STATUS" info="failed to unpack profile" error=-71 profile="unconfined" name="unknown" pid=9085 comm="syz.2.1126" name="unknown" offset=28 [ 217.731735][ C1] vkms_vblank_simulate: vblank timer overrun [ 217.904292][ T9091] block2mtd: illegal erase size [ 218.050151][ T9097] jffs2: notice: (9097) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 218.095107][ T9037] loop1: detected capacity change from 0 to 32768 [ 218.157383][ T9105] i2c i2c-0: new_device: Can't parse I2C address [ 218.263308][ T9037] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 218.598387][ T9037] XFS (loop1): Ending clean mount [ 218.984459][ T5777] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 219.188818][ T9114] loop3: detected capacity change from 0 to 32768 [ 219.284082][ T9114] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 219.587592][ T9114] XFS (loop3): Ending clean mount [ 219.643628][ T9114] XFS (loop3): Quotacheck needed: Please wait. [ 219.845846][ T9114] XFS (loop3): Quotacheck: Done. [ 219.886786][ T9160] loop5: detected capacity change from 0 to 4096 [ 219.941134][ T9160] EXT4-fs: inline encryption not supported [ 220.036121][ T9160] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 220.063618][ T9160] EXT4-fs (loop5): Test dummy encryption mode enabled [ 220.132833][ T9160] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0002] [ 220.156562][ T9160] System zones: 0-5 [ 220.195438][ T9160] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 220.248266][ T5775] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 220.547724][ T7982] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.885405][ T9222] mkiss: ax0: crc mode is auto. [ 222.071540][ T9232] loop3: detected capacity change from 0 to 512 [ 222.098573][ T9232] EXT4-fs: Ignoring removed bh option [ 222.111954][ T9232] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 222.183461][ T9232] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 222.240180][ T9232] ext4 filesystem being mounted at /306/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 222.247559][ T9238] loop5: detected capacity change from 0 to 128 [ 222.384413][ T9238] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 222.461809][ T9238] ext4 filesystem being mounted at /60/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 222.518336][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.539912][ T9238] EXT4-fs warning (device loop5): ext4_dirblock_csum_verify:406: inode #2: comm syz.5.1164: No space for directory leaf checksum. Please run e2fsck -D. [ 222.582912][ T9238] EXT4-fs error (device loop5): __ext4_find_entry:1698: inode #2: comm syz.5.1164: checksumming directory block 0 [ 222.728000][ T7982] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 223.365361][ T9274] loop5: detected capacity change from 0 to 8192 [ 223.408654][ T9274] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 223.477974][ T9294] loop3: detected capacity change from 0 to 512 [ 223.494505][ T9294] EXT4-fs: Ignoring removed oldalloc option [ 223.520177][ T9274] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal [ 223.549150][ T9294] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 223.581774][ T9274] REISERFS (device loop5): using ordered data mode [ 223.628290][ T9274] reiserfs: using flush barriers [ 223.676846][ T9274] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 223.704724][ T9294] EXT4-fs (loop3): 1 truncate cleaned up [ 223.742936][ T9294] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 223.749904][ T9274] REISERFS (device loop5): checking transaction log (loop5) [ 223.763930][ T9274] REISERFS (device loop5): Using r5 hash to sort names [ 223.771637][ T9274] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 223.990735][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.486780][ T9322] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 224.797721][ T9333] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 224.812903][ T5816] IPVS: starting estimator thread 0... [ 224.922625][ T9335] IPVS: using max 20 ests per chain, 48000 per kthread [ 225.105286][ T9344] loop3: detected capacity change from 0 to 512 [ 225.172877][ T9344] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 225.237400][ T9344] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #16: comm syz.3.1195: invalid indirect mapped block 32768 (level 2) [ 225.279759][ T9349] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1196'. [ 225.289342][ T9349] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 225.315207][ T9344] EXT4-fs (loop3): Remounting filesystem read-only [ 225.330246][ T9344] EXT4-fs (loop3): 1 orphan inode deleted [ 225.374582][ T9344] EXT4-fs (loop3): 1 truncate cleaned up [ 225.395509][ T9344] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 225.503017][ T9349] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 225.562095][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.579464][ T9352] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1198'. [ 225.774587][ T9359] loop3: detected capacity change from 0 to 128 [ 226.683421][ T8] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 226.725508][ T9402] loop1: detected capacity change from 0 to 128 [ 226.738392][ T9402] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 226.838192][ T28] audit: type=1800 audit(1789402953.724:102): pid=9402 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1221" name="file1" dev="loop1" ino=94 res=0 errno=0 [ 226.896769][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 226.901007][ T9402] UDF-fs: error (device loop1): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 226.927654][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 226.941957][ T8] usb 4-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01 [ 226.963795][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.004889][ T8] usb 4-1: config 0 descriptor?? [ 227.310130][ T9420] loop2: detected capacity change from 0 to 256 [ 227.439214][ T8] arvo 0003:1E7D:30D4.0006: unknown main item tag 0x0 [ 227.462523][ T8] arvo 0003:1E7D:30D4.0006: unknown main item tag 0x0 [ 227.486316][ T8] arvo 0003:1E7D:30D4.0006: unknown main item tag 0x0 [ 227.516201][ T8] arvo 0003:1E7D:30D4.0006: unknown main item tag 0x0 [ 227.546147][ T8] arvo 0003:1E7D:30D4.0006: unknown main item tag 0x0 [ 227.566384][ T8] arvo 0003:1E7D:30D4.0006: unknown main item tag 0x0 [ 227.582554][ T8] arvo 0003:1E7D:30D4.0006: unknown main item tag 0x0 [ 227.602803][ T8] arvo 0003:1E7D:30D4.0006: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.3-1/input0 [ 227.816157][ T9438] netlink: 108 bytes leftover after parsing attributes in process `syz.5.1238'. [ 227.922894][ T9] usb 4-1: USB disconnect, device number 9 [ 227.984743][ T5816] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 228.032160][ T9445] loop5: detected capacity change from 0 to 128 [ 228.050133][ T9445] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 228.080133][ T9445] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 228.166880][ T2916] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 228.182728][ T5816] usb 2-1: Using ep0 maxpacket: 8 [ 228.195672][ T5816] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 228.233810][ T5816] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 228.271810][ T5816] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 228.281980][ T5816] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 228.300733][ T5816] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 228.332180][ T5816] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.587851][ T5816] usb 2-1: GET_CAPABILITIES returned 0 [ 228.598569][ T5816] usbtmc 2-1:16.0: can't read capabilities [ 228.763053][ T9462] netlink: 'syz.3.1248': attribute type 9 has an invalid length. [ 228.799499][ T5818] usb 2-1: USB disconnect, device number 11 [ 229.135849][ T9455] loop2: detected capacity change from 0 to 40427 [ 229.148214][ T9472] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1253'. [ 229.158648][ T9455] F2FS-fs (loop2): Fix alignment : internally, start(4096) end(16896) block(12288) [ 229.194447][ T9455] F2FS-fs (loop2): invalid crc value [ 229.211813][ T9455] F2FS-fs (loop2): Found nat_bits in checkpoint [ 229.324085][ T9455] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 229.389234][ T9476] i2c i2c-0: new_device: Invalid device name [ 229.467184][ T9455] F2FS-fs (loop2): Try to recover all the superblocks, ret: 0 [ 229.732516][ T5816] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 229.978251][ T5816] usb 2-1: Using ep0 maxpacket: 16 [ 230.005624][ T5816] usb 2-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 230.030239][ T5816] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.048533][ T5816] usb 2-1: Product: syz [ 230.053331][ T5816] usb 2-1: Manufacturer: syz [ 230.058178][ T5816] usb 2-1: SerialNumber: syz [ 230.146070][ T9487] loop5: detected capacity change from 0 to 32768 [ 230.172854][ T9487] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.1258 (9487) [ 230.226416][ T9487] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 230.262085][ T9487] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 230.290004][ T5816] usb 2-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 230.301601][ T9487] BTRFS info (device loop5): using free space tree [ 230.326294][ T5816] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 230.352967][ T5816] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 230.372145][ T5816] usb 2-1: media controller created [ 230.445688][ T9515] overlayfs: upper fs does not support tmpfile. [ 230.445801][ T5816] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 230.485852][ T9487] BTRFS info (device loop5): enabling ssd optimizations [ 230.512661][ T9487] BTRFS info (device loop5): auto enabling async discard [ 230.688033][ T5816] zl10353_read_register: readreg error (reg=127, ret==-110) [ 230.737607][ T9520] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1266'. [ 230.785597][ T5816] dvb_usb_gl861: probe of 2-1:157.0 failed with error -5 [ 230.801011][ T9520] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1266'. [ 230.832774][ T5816] usb 2-1: USB disconnect, device number 12 [ 230.931991][ T7982] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 230.954255][ T9498] loop2: detected capacity change from 0 to 32768 [ 231.045405][ T9498] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 231.201658][ T9498] XFS (loop2): Ending clean mount [ 231.410098][ T5774] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 231.543631][ T9538] loop1: detected capacity change from 0 to 512 [ 231.550972][ T9538] EXT4-fs: Ignoring removed nobh option [ 231.584377][ T9538] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 231.638960][ T9538] EXT4-fs (loop1): 1 truncate cleaned up [ 231.649097][ T9538] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 231.881563][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.376757][ T9570] program syz.1.1286 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 232.506479][ T9575] loop1: detected capacity change from 0 to 256 [ 232.791135][ T9582] loop3: detected capacity change from 0 to 1024 [ 232.829446][ T9582] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 233.015054][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.462975][ T5816] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 233.684301][ T5816] usb 3-1: not running at top speed; connect to a high speed hub [ 233.695377][ T9602] loop5: detected capacity change from 0 to 32768 [ 233.725755][ T9602] JBD2: Ignoring recovery information on journal [ 233.737729][ T5816] usb 3-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 233.782979][ T5816] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.792085][ T5816] usb 3-1: Product: syz [ 233.817902][ T5816] usb 3-1: Manufacturer: syz [ 233.841366][ T5816] usb 3-1: SerialNumber: syz [ 233.882276][ T9602] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 233.908937][ T5816] keyspan 3-1:1.0: Keyspan 4 port adapter converter detected [ 233.946928][ T5816] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 234.008340][ T5816] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 234.059490][ T5816] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 234.093254][ T5816] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 234.132302][ C1] usb 3-1: malformed indat packet [ 234.137728][ C1] usb 3-1: malformed indat packet [ 234.143543][ C1] usb 3-1: malformed indat packet [ 234.149297][ C1] usb 3-1: malformed indat packet [ 234.156556][ C1] usb 3-1: malformed indat packet [ 234.162047][ C1] usb 3-1: malformed indat packet [ 234.167546][ C1] usb 3-1: malformed indat packet [ 234.485062][ T7982] ocfs2: Unmounting device (7,5) on (node local) [ 234.511157][ T5816] usb 3-1: USB disconnect, device number 11 [ 234.537649][ T5816] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 234.589066][ T5816] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 234.627695][ T5816] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 234.660408][ T5816] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 234.698223][ T5816] keyspan 3-1:1.0: device disconnected [ 234.908096][ T9627] synth uevent: /devices/platform/pcspkr: unknown uevent action string [ 234.938255][ T9627] platform pcspkr: uevent: failed to send synthetic uevent: -22 [ 235.031351][ T8] kernel write not supported for file net/rpc/auth.unix.gid/channel (pid: 8 comm: kworker/0:0) [ 235.881879][ T9637] loop5: detected capacity change from 0 to 32768 [ 235.940034][ T9637] JBD2: Ignoring recovery information on journal [ 236.122636][ T9637] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 236.125427][ T2916] wlan1: Trigger new scan to find an IBSS to join [ 236.338732][ T9637] (syz.5.1313,9637,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #4097: rec_len % 4 != 0 - offset=0, inode=18446673704965378049, rec_len=255, name_len=1 [ 236.472756][ T9660] loop2: detected capacity change from 0 to 32768 [ 236.547628][ T9660] JBD2: Ignoring recovery information on journal [ 236.557689][ T7982] ocfs2: Unmounting device (7,5) on (node local) [ 236.673978][ T9660] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 236.793751][ T28] audit: type=1800 audit(1789402963.684:103): pid=9660 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1323" name="file1" dev="loop2" ino=17058 res=0 errno=0 [ 237.029263][ T5774] ocfs2: Unmounting device (7,2) on (node local) [ 237.264731][ T9663] loop3: detected capacity change from 0 to 40427 [ 237.298247][ T9663] F2FS-fs (loop3): invalid crc value [ 237.316438][ T9663] F2FS-fs (loop3): Found nat_bits in checkpoint [ 237.529457][ T9663] F2FS-fs (loop3): Start checkpoint disabled! [ 237.587125][ T9663] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 237.825839][ T9687] pci 0000:00:01.0: MSI/MSI-X disallowed for future drivers [ 237.901924][ T59] kworker/u4:4: attempt to access beyond end of device [ 237.901924][ T59] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 237.929749][ T59] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 237.937371][ T59] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 237.946606][ T9689] loop2: detected capacity change from 0 to 256 [ 239.162935][ T2899] wlan1: Trigger new scan to find an IBSS to join [ 239.176456][ T9727] loop5: detected capacity change from 0 to 512 [ 239.229036][ T9724] loop3: detected capacity change from 0 to 256 [ 239.263712][ T9724] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 239.302160][ T9727] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 239.303402][ T9724] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 239.315104][ T9727] ext4 filesystem being mounted at /114/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 239.431524][ T7982] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.497716][ T9724] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 239.542847][ T9724] exFAT-fs (loop3): failed to load alloc-bitmap [ 239.549341][ T9724] exFAT-fs (loop3): failed to recognize exfat type [ 241.972630][ T5818] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 242.132029][ T2881] wlan1: Creating new IBSS network, BSSID f2:f4:8d:82:53:65 [ 242.202737][ T5818] usb 4-1: Using ep0 maxpacket: 8 [ 242.214834][ T5818] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 242.238900][ T5818] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.285014][ T5818] pvrusb2: Hardware description: Terratec Grabster AV400 [ 242.292222][ T5818] pvrusb2: ********** [ 242.327024][ T5818] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 242.339437][ T5818] pvrusb2: Important functionality might not be entirely working. [ 242.368132][ T5818] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 242.400433][ T5818] pvrusb2: ********** [ 242.425170][ T9794] loop1: detected capacity change from 0 to 32768 [ 242.470467][ T9794] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 242.504482][ T2320] pvrusb2: Invalid write control endpoint [ 242.704344][ T8] usb 4-1: USB disconnect, device number 10 [ 242.733965][ T9794] XFS (loop1): Ending clean mount [ 242.746388][ T2320] pvrusb2: Invalid write control endpoint [ 242.770803][ T2320] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 242.802660][ T2320] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 242.810501][ T2320] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 242.831043][ T2320] pvrusb2: Device being rendered inoperable [ 242.862574][ T2320] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 242.885410][ T2320] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 242.947634][ T2320] pvrusb2: Attached sub-driver cx25840 [ 242.960961][ T28] audit: type=1800 audit(1789402969.854:104): pid=9794 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1376" name="file1" dev="loop1" ino=6150 res=0 errno=0 [ 242.972546][ T2320] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 243.053311][ T2320] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 243.134343][ T5777] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 243.290311][ T9812] loop2: detected capacity change from 0 to 32768 [ 243.347774][ T9812] (syz.2.1385,9812,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 243.415069][ T9812] (syz.2.1385,9812,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 243.496762][ T9812] (syz.2.1385,9812,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xcfdff595, computed 0xefed4a20. Applying ECC. [ 243.587953][ T9812] JBD2: Ignoring recovery information on journal [ 243.643881][ T9812] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 243.960675][ T9846] loop5: detected capacity change from 0 to 512 [ 244.062920][ T9846] EXT4-fs error (device loop5): ext4_iget_extra_inode:4752: inode #15: comm syz.5.1395: corrupted in-inode xattr: invalid ea_ino [ 244.096518][ T9846] EXT4-fs error (device loop5): ext4_orphan_get:1413: comm syz.5.1395: couldn't read orphan inode 15 (err -117) [ 244.135770][ T9846] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 244.295909][ T5774] ocfs2: Unmounting device (7,2) on (node local) [ 244.364952][ T7982] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.498665][ T9844] loop3: detected capacity change from 0 to 32768 [ 244.576038][ T9844] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 244.690643][ T9862] base or size exceeds the MTRR width [ 244.767693][ T9844] XFS (loop3): Ending clean mount [ 244.787946][ T9844] XFS (loop3): Quotacheck needed: Please wait. [ 244.898052][ T9866] loop2: detected capacity change from 0 to 64 [ 244.937041][ T9866] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing [ 244.954452][ T9868] bonding: bond0 is being created... [ 244.966891][ T9844] XFS (loop3): Quotacheck: Done. [ 244.989994][ T9868] bonding: bond0 already exists [ 245.094022][ T5775] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 245.271134][ T9871] loop5: detected capacity change from 0 to 2048 [ 245.380155][ T9871] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 245.661977][ T9879] loop3: detected capacity change from 0 to 512 [ 245.718050][ T7982] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.748181][ T9879] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 245.782630][ T9879] ext4 filesystem being mounted at /368/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 245.846171][ T9879] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 246.013738][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.073797][ T9890] jffs2: notice: (9890) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 246.151626][ T28] audit: type=1326 audit(1789402973.044:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9893 comm="syz.3.1411" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ec5f9e159 code=0x7ffc0000 [ 246.200454][ T28] audit: type=1326 audit(1789402973.044:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9893 comm="syz.3.1411" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ec5f9e159 code=0x7ffc0000 [ 246.282473][ T28] audit: type=1326 audit(1789402973.064:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9893 comm="syz.3.1411" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ec5f9e159 code=0x7ffc0000 [ 246.329194][ T28] audit: type=1326 audit(1789402973.064:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9893 comm="syz.3.1411" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f9ec5f9e159 code=0x7ffc0000 [ 246.359171][ T28] audit: type=1326 audit(1789402973.064:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9893 comm="syz.3.1411" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ec5f9e159 code=0x7ffc0000 [ 246.383173][ C1] vkms_vblank_simulate: vblank timer overrun [ 246.461409][ T28] audit: type=1326 audit(1789402973.064:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9893 comm="syz.3.1411" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ec5f9e159 code=0x7ffc0000 [ 246.511410][ T28] audit: type=1326 audit(1789402973.064:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9893 comm="syz.3.1411" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ec5f9e159 code=0x7ffc0000 [ 246.551901][ T28] audit: type=1326 audit(1789402973.064:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9893 comm="syz.3.1411" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ec5f9e159 code=0x7ffc0000 [ 246.591919][ T28] audit: type=1326 audit(1789402973.064:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9893 comm="syz.3.1411" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ec5f9e159 code=0x7ffc0000 [ 246.616148][ C1] vkms_vblank_simulate: vblank timer overrun [ 247.103974][ T9916] tipc: Started in network mode [ 247.113989][ T9916] tipc: Node identity 7f000001, cluster identity 4711 [ 247.121852][ T9916] tipc: New replicast peer: 127.0.0.1 [ 247.144404][ T9922] loop5: detected capacity change from 0 to 256 [ 247.153857][ T9916] tipc: Enabled bearer , priority 10 [ 247.169068][ T9923] tipc: Disabling bearer [ 247.169538][ T9922] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 247.283502][ T9922] Invalid ELF header magic: != ELF [ 247.702151][ T9939] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 247.868844][ T9941] loop1: detected capacity change from 0 to 4096 [ 247.924351][ T9941] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 248.160944][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.456663][ T9958] loop1: detected capacity change from 0 to 512 [ 248.514137][ T9958] EXT4-fs error (device loop1): ext4_iget_extra_inode:4752: inode #15: comm syz.1.1436: corrupted in-inode xattr: invalid ea_ino [ 248.574256][ T9958] EXT4-fs error (device loop1): ext4_orphan_get:1413: comm syz.1.1436: couldn't read orphan inode 15 (err -117) [ 248.605282][ T9958] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 248.828371][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.027144][ T9975] loop3: detected capacity change from 0 to 256 [ 249.136884][ T9975] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d) [ 249.252201][ T9975] exFAT-fs (loop3): error, invalid size(size(4) > aligned(9223372036854777344) [ 249.252201][ T9975] [ 249.269048][ T9975] exFAT-fs (loop3): Filesystem has been set read-only [ 249.587694][ T9996] bonding: bond0 is being created... [ 249.614072][ T9996] bonding: bond0 already exists [ 249.742570][ T5816] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 250.024095][T10009] loop3: detected capacity change from 0 to 256 [ 250.025495][ T5816] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 250.052346][T10009] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 250.067387][ T5816] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.089970][ T5816] usb 2-1: Product: syz [ 250.102440][ T5816] usb 2-1: Manufacturer: syz [ 250.107229][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 250.107243][ T28] audit: type=1800 audit(1789402977.004:124): pid=10009 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1460" name="bus" dev="loop3" ino=1048647 res=0 errno=0 [ 250.149752][ T5816] usb 2-1: SerialNumber: syz [ 250.161961][T10009] Invalid ELF header magic: != ELF [ 250.167698][ T5816] usb 2-1: config 0 descriptor?? [ 250.287514][T10014] autofs4:pid:10014:autofs_fill_super: pipe file descriptor does not contain proper ops [ 250.692759][T10024] tipc: Started in network mode [ 250.697814][T10024] tipc: Node identity 7f000001, cluster identity 4711 [ 250.713077][T10024] tipc: Enabling of bearer rejected, failed to enable media [ 250.754321][T10025] udc dummy_udc.0: soft-connect without a gadget driver [ 250.767623][ T5816] usb 2-1: USB disconnect, device number 13 [ 250.926625][T10032] loop3: detected capacity change from 0 to 1024 [ 251.032852][T10032] hfsplus: xattr searching failed [ 251.046103][T10032] hfsplus: xattr searching failed [ 251.085750][T10032] hfsplus: b-tree write err: -5, ino 3 [ 251.114161][T10034] loop5: detected capacity change from 0 to 1024 [ 251.122106][T10034] hfsplus: unable to parse mount options [ 251.164858][ T59] hfsplus: b-tree write err: -5, ino 3 [ 251.606636][T10043] loop5: detected capacity change from 0 to 4096 [ 251.625685][T10045] loop1: detected capacity change from 0 to 256 [ 251.697777][T10043] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 251.756527][T10045] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 251.938400][ T7982] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.986860][ T28] audit: type=1800 audit(1789402978.874:125): pid=10045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1475" name="bus" dev="loop1" ino=1048648 res=0 errno=0 [ 252.069515][T10045] Invalid ELF header magic: != ELF [ 252.869831][T10065] loop1: detected capacity change from 0 to 1024 [ 252.923691][T10065] hfsplus: unable to parse mount options [ 253.228285][T10069] loop5: detected capacity change from 0 to 2048 [ 253.251677][T10069] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 253.313202][T10073] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1486'. [ 253.348780][T10073] ipvlan2: entered allmulticast mode [ 253.420846][T10073] syz_tun: entered allmulticast mode [ 253.539416][T10080] loop6: detected capacity change from 0 to 7 [ 253.574403][T10080] Dev loop6: unable to read RDB block 7 [ 253.591781][T10080] loop6: unable to read partition table [ 253.598740][T10080] loop6: partition table beyond EOD, truncated [ 253.605578][T10080] loop_reread_partitions: partition scan of loop6 (úùƒå¡™‰ü¾SêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆŠ5) failed (rc=-5) [ 253.796327][T10087] loop2: detected capacity change from 0 to 256 [ 253.864979][T10087] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 253.954445][ T28] audit: type=1800 audit(1789402980.844:126): pid=10087 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1493" name="bus" dev="loop2" ino=1048649 res=0 errno=0 [ 253.999994][T10087] Invalid ELF header magic: != ELF [ 254.009546][T10091] loop5: detected capacity change from 0 to 1024 [ 254.049602][T10090] loop3: detected capacity change from 0 to 4096 [ 254.191562][T10090] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 254.233422][T10091] hfsplus: xattr searching failed [ 254.272023][T10091] hfsplus: xattr searching failed [ 254.293786][T10091] hfsplus: b-tree write err: -5, ino 3 [ 254.424577][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.465301][ T2916] hfsplus: b-tree write err: -5, ino 3 [ 254.692541][T10106] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1498'. [ 254.892954][ T5818] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 254.929326][T10114] loop6: detected capacity change from 0 to 7 [ 254.947354][T10114] Dev loop6: unable to read RDB block 7 [ 254.958753][T10114] loop6: unable to read partition table [ 254.966753][T10114] loop6: partition table beyond EOD, truncated [ 254.979142][T10114] loop_reread_partitions: partition scan of loop6 (úùƒå¡™‰ü¾SêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆŠ5) failed (rc=-5) [ 255.059850][T10116] jffs2: notice: (10116) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 255.112479][ T5818] usb 6-1: Using ep0 maxpacket: 8 [ 255.118685][T10119] loop2: detected capacity change from 0 to 512 [ 255.130753][ T5818] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 255.153256][ T5818] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.205980][ T5818] pvrusb2: Hardware description: Terratec Grabster AV400 [ 255.221076][T10119] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 255.242204][ T5818] pvrusb2: ********** [ 255.254599][ T5818] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 255.271717][T10119] ext4 filesystem being mounted at /404/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 255.282468][ T5818] pvrusb2: Important functionality might not be entirely working. [ 255.282484][ T5818] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 255.282495][ T5818] pvrusb2: ********** [ 255.416034][ T2320] pvrusb2: Invalid write control endpoint [ 255.468245][T10119] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 255.577467][ T5774] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.591479][ T2320] pvrusb2: Invalid write control endpoint [ 255.622483][ T2320] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 255.673432][ T2320] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 255.681117][ T2320] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 255.712443][ T2320] pvrusb2: Device being rendered inoperable [ 255.727850][ T5818] usb 6-1: USB disconnect, device number 4 [ 255.738749][ T2320] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 255.748922][ T2320] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 255.763186][ T2320] pvrusb2: Attached sub-driver cx25840 [ 255.768755][ T2320] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 255.801602][ T2320] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 255.969711][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.976435][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.844671][T10153] jffs2: notice: (10153) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 257.808271][T10176] jffs2: notice: (10176) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 258.276040][T10196] jffs2: notice: (10196) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 258.405051][T10200] loop3: detected capacity change from 0 to 512 [ 258.453624][ T5818] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 258.479918][T10200] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 258.515290][T10200] ext4 filesystem being mounted at /413/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 258.548470][ C1] vkms_vblank_simulate: vblank timer overrun [ 258.676059][ T5818] usb 2-1: Using ep0 maxpacket: 8 [ 258.695273][ T5818] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 258.698771][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.709423][ T5818] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.733677][ T5818] pvrusb2: Hardware description: Terratec Grabster AV400 [ 258.752545][ T5818] pvrusb2: ********** [ 258.756682][ T5818] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 258.792455][ T5818] pvrusb2: Important functionality might not be entirely working. [ 258.800553][ T5818] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 258.801575][T10207] loop5: detected capacity change from 0 to 1024 [ 258.831799][ T5818] pvrusb2: ********** [ 258.834875][T10207] EXT4-fs: Ignoring removed bh option [ 258.917281][T10207] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 258.970604][ T2320] pvrusb2: Invalid write control endpoint [ 258.989017][T10207] EXT4-fs error (device loop5): ext4_check_all_de:666: inode #12: block 7: comm syz.5.1553: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=124 fake=0 [ 259.009787][ C1] vkms_vblank_simulate: vblank timer overrun [ 259.127426][ T2320] pvrusb2: Invalid write control endpoint [ 259.139344][ T7982] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.171683][ T2320] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 259.199487][ T2320] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 259.227584][ T2320] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 259.238531][T10217] loop2: detected capacity change from 0 to 256 [ 259.258535][ T2320] pvrusb2: Device being rendered inoperable [ 259.283182][ T2320] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 259.291813][ T5840] usb 2-1: USB disconnect, device number 14 [ 259.299786][ T2320] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 259.323418][ T2320] pvrusb2: Attached sub-driver cx25840 [ 259.330567][ T2320] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 259.365031][ T2320] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 259.617855][T10223] loop2: detected capacity change from 0 to 4096 [ 259.639735][T10223] EXT4-fs: inline encryption not supported [ 259.657027][T10223] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 259.667578][T10223] EXT4-fs (loop2): Test dummy encryption mode enabled [ 259.683361][T10223] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0002] [ 259.743067][T10223] System zones: 0-5 [ 259.764778][T10223] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 260.055029][ T5774] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.271913][T10244] loop2: detected capacity change from 0 to 128 [ 260.354332][ T28] audit: type=1800 audit(1789402987.244:127): pid=10244 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1560" name="bus" dev="loop2" ino=1048656 res=0 errno=0 [ 260.790460][T10256] jffs2: notice: (10256) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 261.102579][ T7607] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 261.282785][ T7607] usb 3-1: Using ep0 maxpacket: 8 [ 261.295903][ T7607] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 261.314663][ T7607] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.350498][ T7607] pvrusb2: Hardware description: Terratec Grabster AV400 [ 261.366312][ T7607] pvrusb2: ********** [ 261.370445][ T7607] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 261.382221][ T7607] pvrusb2: Important functionality might not be entirely working. [ 261.397212][ T7607] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 261.416072][ T7607] pvrusb2: ********** [ 261.558634][ T2320] pvrusb2: Invalid write control endpoint [ 261.606820][ T2320] pvrusb2: Invalid write control endpoint [ 261.614592][ T2320] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 261.625048][ T2320] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 261.634934][ T2320] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 261.645394][ T2320] pvrusb2: Device being rendered inoperable [ 261.651570][ T2320] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 261.659033][ T2320] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 261.668782][ T2320] pvrusb2: Attached sub-driver cx25840 [ 261.675498][ T2320] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 261.685744][ T2320] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 261.773006][ T5814] usb 3-1: USB disconnect, device number 12 [ 262.003550][T10284] loop1: detected capacity change from 0 to 512 [ 262.027180][T10284] EXT4-fs error (device loop1): ext4_do_update_inode:5268: inode #15: comm syz.1.1578: corrupted inode contents [ 262.052996][T10284] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 262.065481][T10284] EXT4-fs error (device loop1): ext4_do_update_inode:5268: inode #15: comm syz.1.1578: corrupted inode contents [ 262.087954][T10284] EXT4-fs error (device loop1): ext4_evict_inode:302: inode #15: comm syz.1.1578: mark_inode_dirty error [ 262.116534][T10284] EXT4-fs (loop1): 1 orphan inode deleted [ 262.131552][T10284] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 262.219489][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.379742][T10292] loop5: detected capacity change from 0 to 512 [ 262.395204][T10292] EXT4-fs: Ignoring removed oldalloc option [ 262.406276][T10292] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 262.441292][T10292] EXT4-fs (loop5): 1 truncate cleaned up [ 262.459319][T10292] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 262.607237][T10292] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.1581: invalid indirect mapped block 4294901760 (level 0) [ 262.693582][T10292] EXT4-fs (loop5): Remounting filesystem read-only [ 262.759752][ T7982] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.906988][T10290] loop1: detected capacity change from 0 to 32768 [ 262.964024][T10290] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 263.064379][T10308] program syz.5.1588 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 263.181468][T10290] overlayfs: upper fs does not support tmpfile. [ 263.202198][T10290] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 263.237688][T10290] overlayfs: upper fs missing required features. [ 263.356903][ T5777] ocfs2: Unmounting device (7,1) on (node local) [ 263.663483][T10321] loop3: detected capacity change from 0 to 128 [ 263.725770][ T28] audit: type=1800 audit(1789402990.624:128): pid=10321 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1594" name="bus" dev="loop3" ino=1048658 res=0 errno=0 [ 263.746564][ C1] vkms_vblank_simulate: vblank timer overrun [ 264.034824][T10329] rnbd_client L602: Mapping device /dev/ram0 on session s1, (access_mode: rw, nr_poll_queues: 0) [ 264.167503][T10331] loop3: detected capacity change from 0 to 1024 [ 264.178637][T10331] EXT4-fs: Ignoring removed bh option [ 264.203972][T10331] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 264.208730][ T42] rtrs_client L1782: : Resolving route failed, err: -19 [ 264.339066][T10331] EXT4-fs error (device loop3): ext4_check_all_de:666: inode #12: block 7: comm syz.3.1599: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=124 fake=0 [ 264.351120][T10329] rtrs_client L2618: : init_conns() failed: err=-19 path=@ip:127.0.0.1 [:0] [ 264.440910][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.708307][T10345] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 264.897728][T10353] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 265.230129][ T5814] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 265.412523][ T5814] usb 4-1: Using ep0 maxpacket: 32 [ 265.419497][ T5814] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 265.428258][ T5814] usb 4-1: config 0 has no interface number 0 [ 265.436519][ T5814] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 265.445835][ T5814] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.454051][ T5814] usb 4-1: Product: syz [ 265.458287][ T5814] usb 4-1: Manufacturer: syz [ 265.463016][ T5814] usb 4-1: SerialNumber: syz [ 265.469542][ T5814] usb 4-1: config 0 descriptor?? [ 265.478870][ T5814] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 265.642953][ T5784] Bluetooth: hci2: command tx timeout [ 265.689609][ T5814] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 265.708801][ T5814] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 265.913659][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 101 [ 266.125062][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 266.133894][ T5818] usb 4-1: USB disconnect, device number 11 [ 266.142345][ T5818] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 266.173826][ T5818] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 266.187909][ T5818] quatech2 4-1:0.51: device disconnected [ 266.974685][T10384] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 267.211549][T10393] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1626'. [ 267.789866][T10413] loop1: detected capacity change from 0 to 512 [ 267.812594][T10413] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 267.859826][T10413] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #16: comm syz.1.1636: invalid indirect mapped block 32768 (level 2) [ 267.884307][T10413] EXT4-fs (loop1): Remounting filesystem read-only [ 267.891217][T10413] EXT4-fs (loop1): 1 orphan inode deleted [ 267.902483][T10413] EXT4-fs (loop1): 1 truncate cleaned up [ 267.909982][T10413] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 267.988846][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.110556][T10420] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 268.195890][T10422] loop1: detected capacity change from 0 to 128 [ 268.400786][T10428] netlink: 'syz.1.1642': attribute type 9 has an invalid length. [ 268.633464][T10437] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1646'. [ 268.654060][T10412] loop5: detected capacity change from 0 to 32768 [ 268.742515][ T28] audit: type=1800 audit(1789402995.634:129): pid=10412 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1635" name="file1" dev="loop5" ino=4 res=0 errno=0 [ 269.047155][T10442] overlayfs: upper fs does not support tmpfile. [ 269.745832][T10460] loop5: detected capacity change from 0 to 512 [ 269.778515][T10463] rnbd_client L602: Mapping device /dev/ram0 on session s1, (access_mode: rw, nr_poll_queues: 0) [ 269.843364][T10460] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 269.884959][ T2947] rtrs_client L1782: : Resolving route failed, err: -19 [ 269.914384][T10460] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #16: comm syz.5.1647: invalid indirect mapped block 32768 (level 2) [ 269.945869][T10463] rtrs_client L2618: : init_conns() failed: err=-19 path=@ip:127.0.0.1 [:0] [ 269.956465][T10460] EXT4-fs (loop5): Remounting filesystem read-only [ 269.972012][T10460] EXT4-fs (loop5): 1 orphan inode deleted [ 269.995967][T10460] EXT4-fs (loop5): 1 truncate cleaned up [ 270.017289][T10460] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 270.154879][ T7982] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.574977][T10485] loop3: detected capacity change from 0 to 8192 [ 270.612901][T10485] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 270.692511][T10485] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 270.743811][T10485] REISERFS (device loop3): using ordered data mode [ 270.750672][T10485] reiserfs: using flush barriers [ 270.812545][T10485] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 270.884020][T10485] REISERFS (device loop3): checking transaction log (loop3) [ 270.919885][T10485] REISERFS (device loop3): Using r5 hash to sort names [ 270.954291][T10485] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 271.260653][T10496] loop1: detected capacity change from 0 to 40427 [ 271.281612][T10496] F2FS-fs (loop1): Fix alignment : internally, start(4096) end(16896) block(12288) [ 271.330528][T10496] F2FS-fs (loop1): invalid crc value [ 271.349007][T10496] F2FS-fs (loop1): Found nat_bits in checkpoint [ 271.517156][T10496] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 271.791181][T10496] F2FS-fs (loop1): Try to recover all the superblocks, ret: 0 [ 272.163139][T10520] loop3: detected capacity change from 0 to 4096 [ 272.186436][T10520] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [ 272.309201][T10520] ntfs3: loop3: Failed to initialize $Extend/$ObjId. [ 272.728044][T10527] loop1: detected capacity change from 0 to 256 [ 272.825979][T10516] loop2: detected capacity change from 0 to 32768 [ 272.865330][T10531] loop5: detected capacity change from 0 to 512 [ 272.875934][T10516] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.1680 (10516) [ 272.937734][T10531] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 272.978187][T10516] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 272.987453][T10531] ext4 filesystem being mounted at /211/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 273.018210][T10516] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 273.027720][T10516] BTRFS info (device loop2): setting nodatasum [ 273.034490][T10516] BTRFS info (device loop2): force zlib compression, level 3 [ 273.044641][T10516] BTRFS info (device loop2): turning on flush-on-commit [ 273.051840][T10516] BTRFS info (device loop2): max_inline at 4096 [ 273.058466][T10516] BTRFS info (device loop2): using free space tree [ 273.182953][T10516] BTRFS info (device loop2): enabling ssd optimizations [ 273.292290][ T7982] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.472788][ T5774] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 273.757228][ T5768] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop2 scanned by udevd (5768) [ 274.181041][T10572] loop5: detected capacity change from 0 to 256 [ 274.247566][T10554] loop1: detected capacity change from 0 to 32768 [ 274.289255][ T5891] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 274.414217][ T28] audit: type=1800 audit(1789403001.314:130): pid=10554 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1687" name="file1" dev="loop1" ino=4 res=0 errno=0 [ 274.729035][T10580] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1698'. [ 274.774614][T10580] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1698'. [ 275.061544][T10591] synth uevent: /devices/platform/pcspkr: unknown uevent action string [ 275.096704][T10591] platform pcspkr: uevent: failed to send synthetic uevent: -22 [ 275.380235][T10601] loop5: detected capacity change from 0 to 512 [ 275.424256][T10601] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 275.511924][T10601] EXT4-fs (loop5): 1 truncate cleaned up [ 275.534393][T10601] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 275.681021][ T7982] EXT4-fs error (device loop5): ext4_lookup:1860: inode #17: comm syz-executor: iget: bad extended attribute block 2048 [ 275.706479][ T7982] EXT4-fs error (device loop5): ext4_lookup:1860: inode #17: comm syz-executor: iget: bad extended attribute block 2048 [ 275.842924][T10614] pci 0000:00:01.0: MSI/MSI-X disallowed for future drivers [ 276.179858][ T7982] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.387051][ T2956] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.426946][T10632] loop3: detected capacity change from 0 to 256 [ 276.677048][ T2956] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.824742][ T2956] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.001453][ T2956] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.165198][T10641] loop1: detected capacity change from 0 to 4096 [ 277.176231][T10641] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [ 277.288642][T10641] ntfs3: loop1: Failed to initialize $Extend/$ObjId. [ 277.775971][ T5781] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 277.791152][ T5781] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 277.822657][ T5781] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 277.833916][ T5781] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 277.855056][ T5781] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 277.863604][ T5781] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 278.189978][T10662] loop2: detected capacity change from 0 to 8 [ 278.335953][T10662] SQUASHFS error: Failed to read block 0x2d7: -5 [ 278.354546][T10649] loop3: detected capacity change from 0 to 32768 [ 278.376569][T10653] lo speed is unknown, defaulting to 1000 [ 278.400800][T10662] SQUASHFS error: Unable to read metadata cache entry [2d5] [ 279.859587][ T7607] kernel write not supported for file net/rpc/auth.unix.gid/channel (pid: 7607 comm: kworker/0:5) [ 279.966846][ T5781] Bluetooth: hci2: command tx timeout [ 280.012014][T10653] chnl_net:caif_netlink_parms(): no params data found [ 280.678123][T10653] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.702774][T10653] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.726415][T10653] bridge_slave_0: entered allmulticast mode [ 280.754014][T10653] bridge_slave_0: entered promiscuous mode [ 280.770306][T10653] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.804976][T10653] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.823004][T10653] bridge_slave_1: entered allmulticast mode [ 280.846636][T10653] bridge_slave_1: entered promiscuous mode [ 281.226283][T10653] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 281.265267][T10653] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 281.449505][T10653] team0: Port device team_slave_0 added [ 281.514445][T10653] team0: Port device team_slave_1 added [ 281.528562][T10735] loop1: detected capacity change from 0 to 32768 [ 281.568121][T10735] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 10 [ 281.670871][T10653] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 281.710542][T10653] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 281.828659][T10653] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 281.915578][ T2956] hsr_slave_0: left promiscuous mode [ 281.921917][ T2956] hsr_slave_1: left promiscuous mode [ 281.930619][ T2956] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 281.939476][T10746] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1757'. [ 281.953176][ T2956] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 281.965659][ T2956] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 281.965947][ T5891] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 10 [ 281.974691][ T2956] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 282.007822][ T2956] bridge_slave_1: left allmulticast mode [ 282.030278][ T2956] bridge_slave_1: left promiscuous mode [ 282.042673][ T5781] Bluetooth: hci2: command tx timeout [ 282.053220][ T2956] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.214706][ T2956] bridge_slave_0: left allmulticast mode [ 282.220487][ T2956] bridge_slave_0: left promiscuous mode [ 282.263136][ T2956] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.390503][ T2956] veth1_macvtap: left promiscuous mode [ 282.396771][ T2956] veth0_macvtap: left promiscuous mode [ 282.414009][ T2956] veth1_vlan: left promiscuous mode [ 282.430702][ T2956] veth0_vlan: left promiscuous mode [ 283.686810][ T2956] team0 (unregistering): Port device team_slave_1 removed [ 283.773075][ T2956] team0 (unregistering): Port device team_slave_0 removed [ 283.859073][ T2956] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 283.959853][ T2956] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 284.134037][ T5781] Bluetooth: hci2: command tx timeout [ 284.653535][ T2956] bond0 (unregistering): Released all slaves [ 284.779024][T10653] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 284.786525][T10653] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 284.816415][T10653] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 285.019948][T10653] hsr_slave_0: entered promiscuous mode [ 285.058735][T10653] hsr_slave_1: entered promiscuous mode [ 285.531968][ T2956] IPVS: stop unused estimator thread 0... [ 285.794878][T10653] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 285.945632][T10653] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 285.990095][T10653] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 286.084427][T10653] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 286.204148][ T5784] Bluetooth: hci2: command tx timeout [ 286.304462][T10799] netlink: 'syz.1.1777': attribute type 1 has an invalid length. [ 286.332529][T10799] nbd: error processing sock list [ 286.342720][T10799] block nbd3: shutting down sockets [ 286.467054][T10653] 8021q: adding VLAN 0 to HW filter on device bond0 [ 286.538294][T10805] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1778'. [ 286.576836][T10653] 8021q: adding VLAN 0 to HW filter on device team0 [ 286.602156][ T2916] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.609950][ T2916] bridge0: port 1(bridge_slave_0) entered forwarding state [ 286.661310][ T2916] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.668836][ T2916] bridge0: port 2(bridge_slave_1) entered forwarding state [ 286.825848][T10653] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 287.356890][T10807] loop1: detected capacity change from 0 to 32768 [ 287.404316][T10807] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.1779 (10807) [ 287.411844][T10653] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 287.463734][T10807] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 287.522593][T10807] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 287.532212][T10807] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 287.583382][T10807] BTRFS info (device loop1): use zstd compression, level 3 [ 287.612551][T10807] BTRFS info (device loop1): using free space tree [ 287.734846][T10807] BTRFS info (device loop1): enabling ssd optimizations [ 287.755029][T10807] BTRFS info (device loop1): auto enabling async discard [ 288.060245][ T5777] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 288.417381][ T5891] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 9 /dev/loop1 scanned by udevd (5891) [ 288.506936][T10653] veth0_vlan: entered promiscuous mode [ 288.551271][T10653] veth1_vlan: entered promiscuous mode [ 288.651344][T10819] loop2: detected capacity change from 0 to 32768 [ 288.716864][T10653] veth0_macvtap: entered promiscuous mode [ 288.785381][T10653] veth1_macvtap: entered promiscuous mode [ 288.878560][T10653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 288.942531][T10653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.976279][T10653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 289.013348][T10653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.043781][T10653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 289.088331][T10653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.146802][T10653] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 289.189994][T10653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 289.276698][T10653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.345178][T10653] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 289.395432][T10653] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.458888][T10653] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 289.611355][T10653] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.669792][T10653] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.719213][T10653] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.749051][T10653] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.838547][T10893] loop2: detected capacity change from 0 to 1024 [ 290.234043][ T2947] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 290.242096][ T2947] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 290.253447][T10893] Quota error (device loop2): do_check_range: Getting block 64 out of range 1-5 [ 290.353682][T10893] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 290.394447][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 290.408482][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 290.456054][T10893] EXT4-fs error (device loop2): ext4_acquire_dquot:6953: comm syz.2.1792: Failed to acquire dquot type 0 [ 290.527561][T10893] EXT4-fs error (device loop2): mb_free_blocks:1970: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 290.636794][T10893] EXT4-fs (loop2): 1 truncate cleaned up [ 290.669549][T10893] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 290.965004][T10893] Quota error (device loop2): do_check_range: Getting block 64 out of range 1-5 [ 291.052882][T10893] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 291.128259][T10893] EXT4-fs error (device loop2): ext4_acquire_dquot:6953: comm syz.2.1792: Failed to acquire dquot type 0 [ 291.133703][T10904] loop1: detected capacity change from 0 to 40427 [ 291.202676][T10904] F2FS-fs (loop1): build fault injection attr: rate: 14, type: 0x7ffff [ 291.232471][T10904] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x30e4 [ 291.252572][T10904] F2FS-fs (loop1): invalid crc value [ 291.308332][T10904] F2FS-fs (loop1): Found nat_bits in checkpoint [ 291.447386][T10904] F2FS-fs (loop1): inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x665/0x970 [ 291.451640][ T5774] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.472968][T10935] syzkaller1: tun_chr_ioctl cmd 2147767517 [ 291.565173][T10904] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 291.705100][T10904] syz.1.1797: attempt to access beyond end of device [ 291.705100][T10904] loop1: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 291.773545][T10939] F2FS-fs (loop1): inject no more block in inc_valid_node_count of f2fs_new_node_page+0x181/0x910 [ 291.856743][T10945] loop2: detected capacity change from 0 to 512 [ 291.940316][T10945] EXT4-fs: Ignoring removed bh option [ 292.009495][T10945] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 292.086784][T10945] EXT4-fs (loop2): 1 truncate cleaned up [ 292.155837][T10945] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 292.378807][T10952] pim6reg: entered allmulticast mode [ 292.425828][T10951] pim6reg: left allmulticast mode [ 292.596098][ T5774] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.000762][ T28] audit: type=1800 audit(1789403019.894:131): pid=10969 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1814" name="idVendor" dev="configfs" ino=25999 res=0 errno=0 [ 293.203138][T10974] ip_tables: iptables: counters copy to user failed while replacing table [ 293.294758][T10977] vxcan0: tx address claim with dest, not broadcast [ 293.465550][T10983] netem: change failed [ 293.892225][ T28] audit: type=1326 audit(1789403020.784:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10992 comm="syz.2.1820" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fecb999e159 code=0x0 [ 293.935906][T10991] loop1: detected capacity change from 0 to 4096 [ 293.957084][T10991] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 294.132719][T10991] ntfs3: loop1: ino=3, ntfs_set_state failed, -22. [ 294.166610][T10991] ntfs3: loop1: ino=5, "/" mi_enum_attr [ 294.175269][T10991] ntfs3: loop1: ino=3, ntfs_set_state failed, -22. [ 294.192872][T10991] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 294.232682][T10991] ntfs3: loop1: ino=3, ntfs_set_state failed, -22. [ 294.392941][ T42] ntfs3: loop1: ino=3, ntfs3_write_inode failed, -22. [ 294.743037][T10995] loop6: detected capacity change from 0 to 32768 [ 294.871026][T10995] XFS (loop6): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 295.109812][T10995] XFS (loop6): Ending clean mount [ 295.472650][T10653] XFS (loop6): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 295.615938][T11038] loop3: detected capacity change from 0 to 4096 [ 295.642774][T11038] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 295.758270][T11038] ntfs3: loop3: ino=19, mi_enum_attr [ 295.828390][T11038] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 296.013919][T11046] binder: 11044:11046 ioctl 40046205 0 returned -22 [ 296.497599][T11058] loop6: detected capacity change from 0 to 512 [ 296.585794][T11058] EXT4-fs (loop6): 1 truncate cleaned up [ 296.620536][T11058] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 296.737702][T11058] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.1838: invalid indirect mapped block 234881024 (level 0) [ 296.826779][T11058] EXT4-fs (loop6): Remounting filesystem read-only [ 296.985064][T11070] bond0: option slaves: interface +d does not exist! [ 297.035276][T10653] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.493417][T11089] kAFS: Invalid Command on /proc/fs/afs/cells file [ 297.529685][T11091] netlink: 277 bytes leftover after parsing attributes in process `syz.3.1848'. [ 297.880116][T11101] loop3: detected capacity change from 0 to 512 [ 297.929614][T11101] EXT4-fs (loop3): 1 truncate cleaned up [ 297.943154][T11101] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 297.980492][T11107] loop2: detected capacity change from 0 to 4096 [ 297.994853][T11107] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 298.027896][T11101] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.1852: invalid indirect mapped block 234881024 (level 0) [ 298.064248][T11101] EXT4-fs (loop3): Remounting filesystem read-only [ 298.231875][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.309905][T11107] ntfs3: loop2: ino=19, mi_enum_attr [ 298.347238][T11107] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 298.647695][ T28] audit: type=1326 audit(1789403025.544:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11120 comm="syz.1.1858" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6700f9e159 code=0x0 [ 298.699490][T11123] kAFS: Invalid Command on /proc/fs/afs/cells file [ 299.306847][T11144] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 300.667600][T11197] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 300.849620][T11205] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.874479][T11205] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.881957][T11205] bridge0: port 1(bridge_slave_0) entered forwarding state [ 300.902783][T11205] bridge_slave_0: left allmulticast mode [ 300.908776][T11205] bridge_slave_0: left promiscuous mode [ 300.925871][T11205] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.952908][T11205] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 301.115019][T11215] loop6: detected capacity change from 0 to 128 [ 301.374461][T11220] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 301.708309][T11236] gretap0: entered promiscuous mode [ 302.543885][T11265] loop2: detected capacity change from 0 to 512 [ 302.582228][T11265] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 302.658503][T11265] EXT4-fs error (device loop2): ext4_orphan_get:1434: comm syz.2.1923: bad orphan inode 131083 [ 302.751650][T11265] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 303.025397][T11281] loop3: detected capacity change from 0 to 128 [ 303.380061][ T59] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.545938][ T59] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.691495][ T5774] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 303.709825][ T59] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.868006][ T59] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.269616][ T5781] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 304.285715][ T5781] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 304.296314][ T5781] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 304.319206][ T5781] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 304.337112][ T5781] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 304.354425][ T5781] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 304.537549][T11312] loop1: detected capacity change from 0 to 128 [ 304.641110][T11316] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1941'. [ 304.681126][T11312] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 304.754370][T11312] hpfs: filesystem error: improperly stopped [ 304.760514][T11312] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 304.769635][T11312] hpfs: You really don't want any checks? You are crazy... [ 304.796622][T11312] hpfs: hpfs_map_sector(): read error [ 304.802132][T11312] hpfs: code page support is disabled [ 304.811892][T11312] hpfs: hpfs_map_4sectors(): unaligned read [ 304.846431][T11303] lo speed is unknown, defaulting to 1000 [ 304.863765][T11312] hpfs: hpfs_map_4sectors(): unaligned read [ 304.869930][T11312] hpfs: filesystem error: unable to find root dir [ 304.930752][T11324] loop3: detected capacity change from 0 to 512 [ 304.981944][T11321] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1942'. [ 305.011790][T11324] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 305.080692][T11324] EXT4-fs error (device loop3): ext4_orphan_get:1434: comm syz.3.1943: bad orphan inode 131083 [ 305.139818][T11324] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 306.143285][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.446804][ T5784] Bluetooth: hci2: command tx timeout [ 306.978753][T11303] chnl_net:caif_netlink_parms(): no params data found [ 307.385813][T11373] loop3: detected capacity change from 0 to 32768 [ 307.542876][T11373] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 307.625646][T11303] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.635214][T11373] XFS (loop3): Ending clean mount [ 307.667454][T11303] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.690070][T11303] bridge_slave_0: entered allmulticast mode [ 307.723543][T11303] bridge_slave_0: entered promiscuous mode [ 307.823541][T11373] XFS (loop3): User initiated shutdown received. [ 307.830168][T11373] XFS (loop3): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x105/0x150 (fs/xfs/xfs_fsops.c:491). Shutting down filesystem. [ 307.882747][ T59] hsr_slave_0: left promiscuous mode [ 307.903016][ T59] hsr_slave_1: left promiscuous mode [ 307.914742][T11373] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [ 307.923429][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 307.930937][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 307.948155][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 307.972519][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 307.988561][ T59] bridge_slave_1: left allmulticast mode [ 308.001999][ T5775] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 308.010840][ T59] bridge_slave_1: left promiscuous mode [ 308.023180][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.048438][ T59] bridge_slave_0: left allmulticast mode [ 308.067002][ T59] bridge_slave_0: left promiscuous mode [ 308.079206][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.232286][ T59] veth1_macvtap: left promiscuous mode [ 308.238580][ T59] veth0_macvtap: left promiscuous mode [ 308.247546][T11415] loop2: detected capacity change from 0 to 1024 [ 308.262950][ T59] veth1_vlan: left promiscuous mode [ 308.268644][ T59] veth0_vlan: left promiscuous mode [ 308.522494][ T5784] Bluetooth: hci2: command tx timeout [ 309.511890][T11426] loop2: detected capacity change from 0 to 1764 [ 309.637705][ T59] team0 (unregistering): Port device team_slave_1 removed [ 309.748090][ T59] team0 (unregistering): Port device team_slave_0 removed [ 309.857579][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 309.961940][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 310.588291][ T59] bond0 (unregistering): Released all slaves [ 310.609598][ T5784] Bluetooth: hci2: command tx timeout [ 310.708221][T11303] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.717450][T11303] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.724968][T11303] bridge_slave_1: entered allmulticast mode [ 310.732075][T11303] bridge_slave_1: entered promiscuous mode [ 310.843239][T11303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 310.876912][T11303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 310.990041][ C1] vkms_vblank_simulate: vblank timer overrun [ 311.122627][T11303] team0: Port device team_slave_0 added [ 311.164862][T11303] team0: Port device team_slave_1 added [ 311.279946][T11303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 311.279965][T11303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 311.279991][T11303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 311.282014][T11303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 311.282031][T11303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 311.282055][T11303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 311.351697][T11445] nvme_fcloop: unknown parameter or missing value 'ww' [ 311.472184][T11303] hsr_slave_0: entered promiscuous mode [ 311.473891][T11303] hsr_slave_1: entered promiscuous mode [ 311.707628][T11455] loop2: detected capacity change from 0 to 4096 [ 311.738880][T11455] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 311.759332][ C1] vkms_vblank_simulate: vblank timer overrun [ 311.920552][T11455] ntfs: volume version 3.1. [ 312.207866][T11468] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 312.294470][T11472] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 312.693106][ T5784] Bluetooth: hci2: command tx timeout [ 312.735889][T11482] 9p: Unknown access argument 18446744073709551615: -34 [ 313.034236][T11492] loop2: detected capacity change from 0 to 1024 [ 313.065858][T11492] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 313.080955][T11495] ima: policy update failed [ 313.109382][ T28] audit: type=1802 audit(1789403040.004:134): pid=11495 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.1997" res=0 errno=0 [ 313.173896][T11492] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 313.259771][T11492] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 313.447375][ T5774] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 313.922245][T11303] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 313.980926][T11303] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 314.040661][T11303] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 314.079052][T11303] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 314.377801][T11303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 314.434136][T11303] 8021q: adding VLAN 0 to HW filter on device team0 [ 314.480466][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.487800][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 314.574468][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.581725][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 314.681719][T11545] loop3: detected capacity change from 0 to 256 [ 314.730398][T11545] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 314.751143][T11522] loop2: detected capacity change from 0 to 32768 [ 315.247957][T11558] MTRR 1 not used [ 315.466952][T11303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 315.983268][T11556] loop3: detected capacity change from 0 to 40427 [ 316.020588][T11556] F2FS-fs (loop3): Fix alignment : internally, start(4096) end(16896) block(12288) [ 316.090031][T11556] F2FS-fs (loop3): invalid crc value [ 316.133400][T11556] F2FS-fs (loop3): Found nat_bits in checkpoint [ 316.251017][T11590] loop1: detected capacity change from 0 to 256 [ 316.280003][T11590] exfat: Deprecated parameter 'utf8' [ 316.288850][T11590] exfat: Deprecated parameter 'utf8' [ 316.318243][T11591] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2019'. [ 316.337131][T11556] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 316.370113][T11590] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 316.410333][T11303] veth0_vlan: entered promiscuous mode [ 316.460188][T11303] veth1_vlan: entered promiscuous mode [ 316.564611][T11556] F2FS-fs (loop3): Try to recover all the superblocks, ret: 0 [ 316.637321][T11597] f2fs_ckpt-7:3: attempt to access beyond end of device [ 316.637321][T11597] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 316.680153][T11598] F2FS-fs (loop3): sanity_check_inode: corrupted inode i_blocks i_ino=b iblocks=0, run fsck to fix. [ 316.687081][T11303] veth0_macvtap: entered promiscuous mode [ 316.716328][T11597] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 316.767796][T11303] veth1_macvtap: entered promiscuous mode [ 316.797867][T11303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 316.812764][T11303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.835734][T11303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 316.858991][T11603] loop1: detected capacity change from 0 to 256 [ 316.864535][T11303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.896905][T11303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 316.925321][T11303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.949902][T11603] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x024dac45, utbl_chksum : 0xe619d30d) [ 316.965491][T11303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 317.010722][T11303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 317.067221][T11303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.105981][T11303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 317.134953][T11303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.177858][T11303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 317.265156][T11303] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.279886][T11303] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.297368][T11303] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.339856][T11303] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.413390][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.420136][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.424203][T11616] loop1: detected capacity change from 0 to 8192 [ 317.582252][T11616] loop1: p1 p2 p4[EZD] [ 317.659563][T11616] loop1: p4 start 201326592 is beyond EOD, truncated [ 317.694680][ T2956] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 317.727347][ T2956] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 317.832319][ T2899] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 317.853420][ T2899] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 318.192305][ T5891] udevd[5891]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 318.216414][ T9434] udevd[9434]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 318.628151][T11648] input: syz1 as /devices/virtual/input/input10 [ 318.884606][T11625] loop2: detected capacity change from 0 to 40427 [ 318.937041][T11625] F2FS-fs (loop2): Small segment_count (9 < 1 * 24) [ 318.949148][T11625] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 318.993547][T11625] F2FS-fs (loop2): invalid crc value [ 319.014072][T11625] F2FS-fs (loop2): Found nat_bits in checkpoint [ 319.216544][T11625] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 319.256193][T11625] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 319.420748][T11672] loop3: detected capacity change from 0 to 256 [ 319.463590][T11672] exfat: Deprecated parameter 'namecase' [ 319.469841][T11672] exfat: Deprecated parameter 'namecase' [ 319.486958][ T5774] syz-executor: attempt to access beyond end of device [ 319.486958][ T5774] loop2: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 319.523075][T11672] exfat: Deprecated parameter 'namecase' [ 319.566589][T11672] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 319.579418][ T5774] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 320.388407][T11704] loop6: detected capacity change from 0 to 512 [ 320.963636][T11723] loop2: detected capacity change from 0 to 256 [ 321.038178][T11723] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 321.808392][T11752] loop6: detected capacity change from 0 to 7 [ 321.845409][T11752] Dev loop6: unable to read RDB block 7 [ 321.851628][T11752] loop6: unable to read partition table [ 321.883315][T11752] loop6: partition table beyond EOD, truncated [ 321.908786][T11752] loop_reread_partitions: partition scan of loop6 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 322.263101][T11737] loop6: detected capacity change from 0 to 32768 [ 323.530199][T11806] snd_dummy snd_dummy.0: control 0:0:0:syz0:16384 is already present [ 323.692546][ T5780] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 323.770450][T11790] loop3: detected capacity change from 0 to 32768 [ 323.885025][ T28] audit: type=1800 audit(1789403050.754:135): pid=11790 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2081" name="file1" dev="loop3" ino=4 res=0 errno=0 [ 323.889598][ T5780] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 323.952130][ T5780] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.971159][ T5780] usb 3-1: config 0 descriptor?? [ 324.010507][ T5780] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 324.217629][ T5780] gp8psk: usb in 128 operation failed. [ 324.448555][ T5780] gp8psk: FW Version = 0.00.0 (0x0) Build 2000/00/00 [ 324.634502][T11839] snd_dummy snd_dummy.0: control 0:0:0:syz0:16384 is already present [ 324.649963][ T5780] gp8psk: usb in 149 operation failed. [ 324.658331][ T5780] gp8psk: failed to get FPGA version [ 324.682563][ T5780] gp8psk: usb in 138 operation failed. [ 324.688113][ T5780] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 324.722218][ T5780] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 324.763312][ T5780] usb 3-1: USB disconnect, device number 13 [ 324.814379][T11845] loop3: detected capacity change from 0 to 8 [ 324.929762][T11845] SQUASHFS error: Unable to read directory block [629:fe] [ 325.920167][T11866] loop2: detected capacity change from 0 to 32768 [ 326.169752][T11888] loop6: detected capacity change from 0 to 1024 [ 326.591663][T11902] loop6: detected capacity change from 0 to 256 [ 326.616244][T11902] exfat: Deprecated parameter 'namecase' [ 326.628418][T11902] exfat: Deprecated parameter 'namecase' [ 326.658349][T11902] exfat: Deprecated parameter 'namecase' [ 326.663173][ T5816] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 326.704152][T11902] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 327.334288][T11925] loop2: detected capacity change from 0 to 256 [ 327.405818][ T28] audit: type=1800 audit(1789403054.294:136): pid=11925 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2122" name="file1" dev="loop2" ino=1048695 res=0 errno=0 [ 328.094950][T11934] loop6: detected capacity change from 0 to 32768 [ 328.157468][ T28] audit: type=1800 audit(1789403055.054:137): pid=11934 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2124" name="file1" dev="loop6" ino=4 res=0 errno=0 [ 330.572230][T11990] loop6: detected capacity change from 0 to 256 [ 330.610063][T11990] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 330.620790][ T5840] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 330.823341][ T5840] usb 3-1: Using ep0 maxpacket: 8 [ 330.844308][ T5840] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 330.885927][ T5840] usb 3-1: config 179 has no interface number 0 [ 330.892290][ T5840] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 330.911944][ T5840] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 330.928768][ T5840] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 330.952678][ T5840] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 330.975982][ T5840] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 330.994237][ T5840] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 331.007326][ T5840] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.029311][T11981] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 331.232157][T12000] MTRR 1 not used [ 331.606090][ T5840] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input11 [ 331.895484][ T5816] usb 4-1: unable to read config index 0 descriptor/start: -32 [ 331.925916][ T5816] usb 4-1: chopping to 0 config(s) [ 331.932268][ T5816] usb 4-1: can't read configurations, error -32 [ 331.953389][ T1199] usb 3-1: USB disconnect, device number 14 [ 331.953447][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 331.968406][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 331.980901][ T1199] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 332.113708][ T5816] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 332.163619][T11998] loop1: detected capacity change from 0 to 40427 [ 332.201186][T11998] F2FS-fs (loop1): Fix alignment : internally, start(4096) end(16896) block(12288) [ 332.224137][T11998] F2FS-fs (loop1): invalid crc value [ 332.260197][T11998] F2FS-fs (loop1): Found nat_bits in checkpoint [ 332.282844][ T5816] usb 4-1: device descriptor read/64, error -32 [ 332.381843][T11998] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 332.423429][ T5816] usb usb4-port1: attempt power cycle [ 332.470690][T12019] loop6: detected capacity change from 0 to 256 [ 332.485676][T12019] exfat: Deprecated parameter 'utf8' [ 332.504661][T12019] exfat: Deprecated parameter 'utf8' [ 332.519869][T11998] F2FS-fs (loop1): Try to recover all the superblocks, ret: 0 [ 332.541371][T12021] f2fs_ckpt-7:1: attempt to access beyond end of device [ 332.541371][T12021] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 332.550150][T12019] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 332.575969][T12009] loop3: detected capacity change from 0 to 32768 [ 332.590714][T12022] F2FS-fs (loop1): sanity_check_inode: corrupted inode i_blocks i_ino=b iblocks=0, run fsck to fix. [ 332.602650][T12021] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 332.862486][ T5816] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 332.894041][ T5816] usb 4-1: device descriptor read/8, error -32 [ 333.192481][ T5816] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 333.247078][ T5816] usb 4-1: device descriptor read/8, error -32 [ 333.286824][T12031] ima: policy update failed [ 333.322905][ T28] audit: type=1802 audit(1789403060.214:138): pid=12031 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.6.2160" res=0 errno=0 [ 333.402734][ T5816] usb usb4-port1: unable to enumerate USB device [ 333.537948][T12038] 9p: Unknown access argument 18446744073709551615: -34 [ 333.611047][T12040] loop6: detected capacity change from 0 to 1024 [ 333.656145][T12040] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 333.768548][T12040] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 333.890496][T12040] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 334.018264][T11303] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 334.255896][T12057] loop1: detected capacity change from 0 to 4096 [ 334.283806][T12057] ntfs: (device loop1): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 334.497921][T12057] ntfs: volume version 3.1. [ 334.870529][T12080] loop3: detected capacity change from 0 to 1024 [ 334.922663][T12080] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 335.045785][T12080] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 335.104086][T12080] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 335.289546][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 335.543220][T12088] loop2: detected capacity change from 0 to 40427 [ 335.560497][T12088] F2FS-fs (loop2): Fix alignment : internally, start(4096) end(16896) block(12288) [ 335.595955][T12088] F2FS-fs (loop2): invalid crc value [ 335.610640][T12088] F2FS-fs (loop2): Found nat_bits in checkpoint [ 335.811817][T12088] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 335.891725][T12089] loop1: detected capacity change from 0 to 32768 [ 335.911550][T12088] F2FS-fs (loop2): Try to recover all the superblocks, ret: 0 [ 335.951445][T12105] f2fs_ckpt-7:2: attempt to access beyond end of device [ 335.951445][T12105] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 335.986805][T12105] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 335.999213][T12106] F2FS-fs (loop2): sanity_check_inode: corrupted inode i_blocks i_ino=b iblocks=0, run fsck to fix. [ 336.236509][T12111] loop6: detected capacity change from 0 to 4096 [ 336.262762][T12111] ntfs: (device loop6): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 336.430525][T12111] ntfs: volume version 3.1. [ 336.547510][T12119] loop1: detected capacity change from 0 to 256 [ 336.611844][ T28] audit: type=1800 audit(1789403063.504:139): pid=12119 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2184" name="file1" dev="loop1" ino=1048700 res=0 errno=0 [ 336.898752][T12122] loop1: detected capacity change from 0 to 1024 [ 337.170219][T12130] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 337.234092][T12130] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 337.500874][T12126] loop6: detected capacity change from 0 to 32768 [ 337.555871][T12126] XFS (loop6): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 337.668517][T12126] XFS (loop6): Ending clean mount [ 337.838868][T12126] XFS (loop6): User initiated shutdown received. [ 337.845435][T12126] XFS (loop6): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x105/0x150 (fs/xfs/xfs_fsops.c:491). Shutting down filesystem. [ 337.864981][T12126] XFS (loop6): Please unmount the filesystem and rectify the problem(s) [ 337.953396][T11303] XFS (loop6): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 338.058339][T12153] loop3: detected capacity change from 0 to 4096 [ 338.089287][T12153] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 338.289771][T12153] ntfs: volume version 3.1. [ 338.433012][ T5818] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 338.907486][ T5818] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 338.915274][ T5818] usb 3-1: can't read configurations, error -71 [ 339.087770][T12164] loop1: detected capacity change from 0 to 4096 [ 339.166663][T12164] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 339.368051][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 339.714367][T12185] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 339.737880][T12185] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 339.867725][T12177] loop2: detected capacity change from 0 to 32768 [ 339.901906][T12177] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 339.998248][T12177] XFS (loop2): Ending clean mount [ 340.062301][T12177] XFS (loop2): User initiated shutdown received. [ 340.074525][T12177] XFS (loop2): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x105/0x150 (fs/xfs/xfs_fsops.c:491). Shutting down filesystem. [ 340.088521][T12177] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 340.116193][ T5774] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 340.388222][T12202] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2210'. [ 340.489919][T12206] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2220'. [ 340.504849][T12206] ipvlan3: entered allmulticast mode [ 340.510273][T12206] syz_tun: entered allmulticast mode [ 341.162606][ T5784] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 341.167924][ T5781] Bluetooth: hci4: command 0xfc11 tx timeout [ 341.572709][ T5814] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 341.792447][ T1199] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 341.974835][ T1199] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 341.984856][ T1199] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 341.994261][ T1199] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 342.005502][ T1199] usb 3-1: config 0 interface 0 has no altsetting 0 [ 342.013486][ T1199] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 342.023256][ T1199] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 342.034695][ T1199] usb 3-1: config 0 interface 0 has no altsetting 0 [ 342.042706][ T1199] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 342.051674][ T1199] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 342.062773][ T1199] usb 3-1: config 0 interface 0 has no altsetting 0 [ 342.070648][ T1199] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 342.079644][ T1199] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 342.090696][ T1199] usb 3-1: config 0 interface 0 has no altsetting 0 [ 342.101721][ T1199] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 342.110764][ T1199] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 342.122555][ T1199] usb 3-1: config 0 interface 0 has no altsetting 0 [ 342.130426][ T1199] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 342.139691][ T1199] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 342.150939][ T1199] usb 3-1: config 0 interface 0 has no altsetting 0 [ 342.158766][ T1199] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 342.167798][ T1199] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 342.179115][ T1199] usb 3-1: config 0 interface 0 has no altsetting 0 [ 342.187229][ T1199] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 342.196276][ T1199] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 342.211969][ T1199] usb 3-1: config 0 interface 0 has no altsetting 0 [ 342.220800][ T1199] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 342.230488][ T1199] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 342.238968][ T1199] usb 3-1: Product: syz [ 342.243311][ T1199] usb 3-1: Manufacturer: syz [ 342.248003][ T1199] usb 3-1: SerialNumber: syz [ 342.258408][ T1199] usb 3-1: config 0 descriptor?? [ 342.271588][ T1199] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 342.658222][ C0] usb 3-1: yurex_control_callback - control failed: -71 [ 342.677491][ T1199] usb 3-1: USB disconnect, device number 17 [ 342.690270][ T1199] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 342.917091][ T5840] IPVS: starting estimator thread 0... [ 342.926063][T12244] unchecked MSR access error: WRMSR to 0x404 (tried to write 0x0000000000000001) at rIP: 0xffffffff81357752 (__mcheck_cpu_init_clear_banks+0x102/0x1e0) [ 342.942196][T12244] Call Trace: [ 342.945514][T12244] [ 342.948481][T12244] mce_cpu_restart+0xce/0x1b0 [ 342.953195][T12244] ? mce_restart+0x180/0x180 [ 342.957826][T12244] smp_call_function_many_cond+0xb71/0x1190 [ 342.963754][T12244] ? _raw_spin_unlock+0x40/0x40 [ 342.968639][T12244] ? mce_restart+0x180/0x180 [ 342.973278][T12244] ? smp_call_function_many+0x40/0x40 [ 342.978685][T12244] ? __timer_delete_sync+0x23d/0x2e0 [ 342.984017][T12244] ? timer_delete_sync+0x20/0x20 [ 342.988988][T12244] ? mutex_lock_nested+0x20/0x20 [ 342.993964][T12244] ? _parse_integer_limit+0x19c/0x1e0 [ 342.999379][T12244] ? mce_restart+0x180/0x180 [ 343.004005][T12244] on_each_cpu_cond_mask+0x3f/0x80 [ 343.009169][T12244] mce_restart+0x104/0x180 [ 343.013625][T12244] set_bank+0x27f/0x390 [ 343.017844][T12244] ? show_bank+0x2a0/0x2a0 [ 343.022297][T12244] ? sysfs_kf_write+0x187/0x2a0 [ 343.027186][T12244] ? sysfs_kf_read+0x360/0x360 [ 343.031985][T12244] kernfs_fop_write_iter+0x3a4/0x520 [ 343.037312][T12244] vfs_write+0x474/0x9a0 [ 343.041609][T12244] ? file_end_write+0x250/0x250 [ 343.046509][T12244] ? __fget_files+0x3fc/0x460 [ 343.051243][T12244] ? __fdget_pos+0x2a3/0x330 [ 343.055882][T12244] ? ksys_write+0x74/0x260 [ 343.060343][T12244] ksys_write+0x151/0x260 [ 343.064718][T12244] ? __ia32_sys_read+0x90/0x90 [ 343.069530][T12244] ? lockdep_hardirqs_on+0x98/0x150 [ 343.074810][T12244] do_syscall_64+0x55/0xb0 [ 343.079280][T12244] ? clear_bhb_loop+0x40/0x90 [ 343.084001][T12244] ? clear_bhb_loop+0x40/0x90 [ 343.088723][T12244] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 343.094659][T12244] RIP: 0033:0x7f9ec5f9e159 [ 343.099108][T12244] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 343.118764][T12244] RSP: 002b:00007f9ec6da2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 343.127310][T12244] RAX: ffffffffffffffda RBX: 00007f9ec6225fa0 RCX: 00007f9ec5f9e159 [ 343.135318][T12244] RDX: 0000000000000001 RSI: 0000200000000340 RDI: 0000000000000003 [ 343.143516][T12244] RBP: 00007f9ec603503b R08: 0000000000000000 R09: 0000000000000000 [ 343.151581][T12244] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 343.159683][T12244] R13: 00007f9ec6226038 R14: 00007f9ec6225fa0 R15: 00007ffc842658d8 [ 343.167717][T12244] [ 343.213550][T12250] kAFS: bad VL server IP address [ 343.303744][T12245] IPVS: using max 21 ests per chain, 50400 per kthread [ 343.407244][T12256] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2235'. [ 343.835214][T12269] kAFS: bad VL server IP address [ 344.382244][T12283] block2mtd: too many arguments [ 344.592648][T12291] mmap: syz.2.2251 (12291) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 344.772946][T12296] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2252'. [ 345.139855][T12309] loop3: detected capacity change from 0 to 2048 [ 345.190773][T12309] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 345.257214][T12315] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2261'. [ 345.279462][T12309] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 345.282473][T12315] ipvlan2: entered allmulticast mode [ 345.864776][T12331] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2269'. [ 345.892477][T12331] bridge0: entered allmulticast mode [ 346.846061][ T5814] usb 7-1: unable to read config index 0 descriptor/start: -32 [ 346.875760][ T5814] usb 7-1: chopping to 0 config(s) [ 346.888623][ T5814] usb 7-1: can't read configurations, error -32 [ 347.082720][ T5814] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 347.264075][ T5814] usb 7-1: device descriptor read/64, error -32 [ 347.389814][ T5814] usb usb7-port1: attempt power cycle [ 347.822987][ T5814] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 347.875786][ T5814] usb 7-1: device descriptor read/8, error -32 [ 348.093436][T12414] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2305'. [ 348.172549][ T5814] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 348.235073][ T5814] usb 7-1: device descriptor read/8, error -32 [ 348.372748][ T5814] usb usb7-port1: unable to enumerate USB device [ 349.201241][T12443] loop3: detected capacity change from 0 to 512 [ 349.227430][T12440] Bluetooth: hci4: Frame reassembly failed (-84) [ 349.252678][ T2947] Bluetooth: hci4: Frame reassembly failed (-84) [ 349.256546][T12443] EXT4-fs: Ignoring removed orlov option [ 349.287375][T12443] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 349.345426][T12443] EXT4-fs (loop3): 1 truncate cleaned up [ 349.351933][T12443] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 349.473081][T12424] comedi comedi1: reset error (fatal) [ 349.530987][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 350.022915][T12457] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 350.040067][T12457] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 351.242609][ T5784] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 351.340774][T12460] loop6: detected capacity change from 0 to 512 [ 351.370992][T12460] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 351.407977][T12460] EXT4-fs error (device loop6): ext4_orphan_get:1434: comm syz.6.2330: bad orphan inode 131083 [ 351.503896][T12460] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 351.626972][T11303] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 351.934199][T12477] loop1: detected capacity change from 0 to 2048 [ 351.967583][T12477] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 352.042548][T12477] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 352.106038][ T2947] Bluetooth: hci4: Frame reassembly failed (-84) [ 352.128971][T12484] Bluetooth: hci4: Frame reassembly failed (-84) [ 352.597180][T12501] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2346'. [ 353.610814][T12541] loop6: detected capacity change from 0 to 512 [ 353.637283][T12541] EXT4-fs: Ignoring removed orlov option [ 353.647800][ T28] audit: type=1400 audit(1789403080.544:140): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="p" pid=12542 comm="syz.1.2365" name="p" offset=58 [ 353.673616][T12541] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 353.711939][T12541] EXT4-fs (loop6): 1 truncate cleaned up [ 353.763864][T12541] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 353.975480][T11303] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 354.122903][ T5784] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 354.123151][ T5781] Bluetooth: hci4: command 0xfc11 tx timeout [ 354.772300][ T2956] Bluetooth: hci4: Frame reassembly failed (-84) [ 354.778984][ T2956] Bluetooth: hci4: Frame reassembly failed (-84) [ 354.833697][T12575] Bluetooth: hci4: Frame reassembly failed (-84) [ 355.075087][T12588] loop1: detected capacity change from 0 to 128 [ 355.097169][T12588] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 355.128956][T12588] ext4 filesystem being mounted at /571/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 355.294166][ T5777] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 355.578154][T12607] loop1: detected capacity change from 0 to 764 [ 356.127295][T12629] loop2: detected capacity change from 0 to 128 [ 356.159807][ T28] audit: type=1800 audit(1789403083.054:141): pid=12629 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2407" name="file1" dev="loop2" ino=1048703 res=0 errno=0 [ 356.197408][ T28] audit: type=1800 audit(1789403083.084:142): pid=12629 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2407" name="file1" dev="loop2" ino=1048703 res=0 errno=0 [ 356.251063][T12633] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2409'. [ 356.518059][T12639] loop1: detected capacity change from 0 to 128 [ 356.766864][ T5784] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 356.877474][T12649] loop3: detected capacity change from 0 to 512 [ 356.944980][T12649] EXT4-fs (loop3): 1 truncate cleaned up [ 356.951448][T12649] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 357.059409][T12649] EXT4-fs error (device loop3): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.3.2417: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 357.177176][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 357.275536][T12659] loop2: detected capacity change from 0 to 256 [ 357.387848][T12659] FAT-fs (loop2): Directory bread(block 64) failed [ 357.400729][T12664] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2424'. [ 357.411161][T12659] FAT-fs (loop2): Directory bread(block 65) failed [ 357.428210][T12659] FAT-fs (loop2): Directory bread(block 66) failed [ 357.438373][T12659] FAT-fs (loop2): Directory bread(block 67) failed [ 357.447932][T12664] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.455802][T12664] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.485766][T12659] FAT-fs (loop2): Directory bread(block 68) failed [ 357.502897][T12659] FAT-fs (loop2): Directory bread(block 69) failed [ 357.502901][T12664] bridge0: entered allmulticast mode [ 357.503025][T12659] FAT-fs (loop2): Directory bread(block 70) failed [ 357.568602][T12659] FAT-fs (loop2): Directory bread(block 71) failed [ 357.591032][T12659] FAT-fs (loop2): Directory bread(block 72) failed [ 357.598603][T12667] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2425'. [ 357.614831][T12659] FAT-fs (loop2): Directory bread(block 73) failed [ 357.625247][T12669] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 357.644055][T12667] veth1: entered promiscuous mode [ 357.652230][T12669] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 357.676443][T12667] veth1: left promiscuous mode [ 358.035990][T12680] i2c i2c-0: new_device: Instantiated device tps6598x at 0x03 [ 358.057070][T12683] ieee802154 phy0 wpan0: encryption failed: -22 [ 358.314524][T12689] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2435'. [ 358.368223][T12689] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.395768][T12689] bridge0: entered allmulticast mode [ 358.770104][T12709] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 358.930663][T12717] netlink: 'syz.3.2448': attribute type 1 has an invalid length. [ 358.943231][T12717] netlink: 'syz.3.2448': attribute type 1 has an invalid length. [ 359.822871][T12737] loop6: detected capacity change from 0 to 512 [ 359.915026][T12737] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 359.982485][T12737] ext4 filesystem being mounted at /120/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 360.031247][T12742] loop3: detected capacity change from 0 to 512 [ 360.097361][T12729] loop2: detected capacity change from 0 to 131072 [ 360.106861][T12729] F2FS-fs (loop2): Wrong secs_per_zone / total_sections (512, 24) [ 360.114948][T12729] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 360.124027][T12729] F2FS-fs (loop2): Test dummy encryption mode enabled [ 360.136599][T12729] F2FS-fs (loop2): invalid crc value [ 360.150519][T12742] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 360.168053][T12729] F2FS-fs (loop2): Found nat_bits in checkpoint [ 360.229416][T12742] ext4 filesystem being mounted at /676/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 360.242004][T12729] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix. [ 360.268039][T12729] F2FS-fs (loop2): Start checkpoint disabled! [ 360.291770][T11303] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 360.312852][T12729] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 360.320059][T12729] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 360.483632][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 360.617759][ T2899] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix. [ 360.855324][ C1] vkms_vblank_simulate: vblank timer overrun [ 360.889226][T12758] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 360.926010][T12758] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 361.020671][T12753] loop6: detected capacity change from 0 to 32768 [ 361.037996][T12753] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 scanned by syz.6.2462 (12753) [ 361.088357][T12753] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 361.122739][T12753] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm [ 361.131835][T12753] BTRFS info (device loop6): using free space tree [ 361.219578][T12753] BTRFS info (device loop6): enabling ssd optimizations [ 361.245964][T12753] BTRFS info (device loop6): auto enabling async discard [ 361.323015][ T28] audit: type=1800 audit(1789403088.214:143): pid=12753 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2462" name="file1" dev="loop6" ino=260 res=0 errno=0 [ 361.395291][T11303] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 361.660609][T12780] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 361.683018][T12780] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 361.888750][T12784] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2466'. [ 362.816688][T12809] bonding: mM% is being created... [ 362.845507][T12809] bonding: mM% creation failed [ 363.006384][T12786] comedi comedi1: reset error (fatal) [ 363.917967][T12817] loop6: detected capacity change from 0 to 32768 [ 363.942886][T12817] BTRFS error: device /dev/loop6 already registered with a higher generation, found 8 expect 10 [ 364.127433][ T5891] BTRFS error: device /dev/loop6 already registered with a higher generation, found 8 expect 10 [ 364.313061][T12834] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2489'. [ 364.326106][T12831] loop6: detected capacity change from 0 to 2048 [ 364.372509][T12831] UDF-fs: error (device loop6): udf_process_sequence: Primary Volume Descriptor not found! [ 364.438925][T12831] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 365.033481][T12851] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 365.049498][T12849] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2495'. [ 365.207097][T12858] loop3: detected capacity change from 0 to 512 [ 365.324247][T12858] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 365.363108][T12858] ext4 filesystem being mounted at /688/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 365.529071][T12869] loop2: detected capacity change from 0 to 512 [ 365.547391][T12869] EXT4-fs error (device loop2): __ext4_iget:5091: inode #11: block 1: comm syz.2.2502: invalid block [ 365.583347][T12869] EXT4-fs error (device loop2): ext4_orphan_get:1413: comm syz.2.2502: couldn't read orphan inode 11 (err -117) [ 365.651881][T12869] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 365.704127][T12874] loop1: detected capacity change from 0 to 512 [ 365.716164][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 365.729649][T12874] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 365.795761][T12874] EXT4-fs error (device loop1): ext4_orphan_get:1434: comm syz.1.2504: bad orphan inode 131083 [ 365.810395][T12869] EXT4-fs error (device loop2): ext4_add_entry:2488: inode #2: comm syz.2.2502: Directory hole found for htree leaf block 0 [ 365.813709][T12856] loop6: detected capacity change from 0 to 40427 [ 365.841808][T12874] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 365.911989][T12856] F2FS-fs (loop6): invalid crc value [ 365.966939][T12856] F2FS-fs (loop6): Found nat_bits in checkpoint [ 365.991562][ T5774] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 366.137544][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 366.192727][T12856] F2FS-fs (loop6): Start checkpoint disabled! [ 366.296993][T12883] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 366.368603][T12856] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 366.451979][T12856] syz.6.2497: attempt to access beyond end of device [ 366.451979][T12856] loop6: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 366.667647][ T49] kworker/u4:3: attempt to access beyond end of device [ 366.667647][ T49] loop6: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 366.700712][ T49] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 366.708121][ T49] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 366.862408][T12877] comedi comedi1: reset error (fatal) [ 367.202289][T12900] loop2: detected capacity change from 0 to 512 [ 367.282199][T12900] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 367.323362][T12900] ext4 filesystem being mounted at /657/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 367.514468][ T5774] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 367.681595][T12908] loop2: detected capacity change from 0 to 256 [ 367.740397][T12908] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 368.512009][T12925] loop2: detected capacity change from 0 to 256 [ 368.671425][T12928] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2524'. [ 368.777774][T12932] program syz.6.2526 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 368.887010][T12936] loop6: detected capacity change from 0 to 512 [ 368.910550][ T27] ================================================================== [ 368.910623][ T27] BUG: KASAN: vmalloc-out-of-bounds in drm_fbdev_generic_helper_fb_dirty+0x57e/0xab0 [ 368.910751][ T27] Write of size 32 at addr ffffc900040b2960 by task kworker/1:1/27 [ 368.910760][ T27] [ 368.910836][ T27] CPU: 1 PID: 27 Comm: kworker/1:1 Not tainted syzkaller #0 [ 368.910873][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 368.910880][ T27] Workqueue: events drm_fb_helper_damage_work [ 368.910900][ T27] Call Trace: [ 368.910931][ T27] [ 368.910966][ T27] dump_stack_lvl+0x18c/0x250 [ 368.911063][ T27] ? drm_fbdev_generic_helper_fb_dirty+0x57e/0xab0 [ 368.911098][ T27] ? show_regs_print_info+0x20/0x20 [ 368.911111][ T27] ? load_image+0x420/0x420 [ 368.911142][ T27] print_report+0xa8/0x210 [ 368.911167][ T27] ? drm_fbdev_generic_helper_fb_dirty+0x57e/0xab0 [ 368.911186][ T27] kasan_report+0x117/0x150 [ 368.911227][ T27] ? drm_fbdev_generic_helper_fb_dirty+0x57e/0xab0 [ 368.911242][ T27] kasan_check_range+0x241/0x290 [ 368.911254][ T27] ? drm_fbdev_generic_helper_fb_dirty+0x57e/0xab0 [ 368.911267][ T27] __asan_memcpy+0x40/0x70 [ 368.911282][ T27] drm_fbdev_generic_helper_fb_dirty+0x57e/0xab0 [ 368.911299][ T27] ? drm_fbdev_generic_helper_fb_probe+0x520/0x520 [ 368.911317][ T27] drm_fb_helper_damage_work+0x22f/0x6f0 [ 368.911331][ T27] ? __lock_acquire+0x7d80/0x7d80 [ 368.911357][ T27] ? drm_fb_helper_resume_worker+0x50/0x50 [ 368.911370][ T27] ? _raw_spin_unlock_irq+0x23/0x50 [ 368.911443][ T27] ? process_scheduled_works+0x975/0x1600 [ 368.911466][ T27] ? process_scheduled_works+0x975/0x1600 [ 368.911479][ T27] process_scheduled_works+0xa60/0x1600 [ 368.911498][ T27] ? worker_attach_to_pool+0x370/0x370 [ 368.911517][ T27] ? assign_work+0x3cc/0x5d0 [ 368.911530][ T27] worker_thread+0xa5e/0xfe0 [ 368.911545][ T27] ? _raw_spin_unlock+0x40/0x40 [ 368.911556][ T27] ? __kthread_parkme+0x71/0x1c0 [ 368.911568][ T27] kthread+0x2fa/0x390 [ 368.911578][ T27] ? pr_cont_work+0x550/0x550 [ 368.911590][ T27] ? kthread_blkcg+0xd0/0xd0 [ 368.911600][ T27] ret_from_fork+0x48/0x80 [ 368.911617][ T27] ? kthread_blkcg+0xd0/0xd0 [ 368.911627][ T27] ret_from_fork_asm+0x11/0x20 [ 368.911651][ T27] [ 368.911676][ T27] [ 368.911679][ T27] The buggy address belongs to a vmalloc virtual mapping [ 368.911712][ T27] Memory state around the buggy address: [ 368.911722][ T27] ffffc900040b2800: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 368.911728][ T27] ffffc900040b2880: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 368.911735][ T27] >ffffc900040b2900: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 368.911739][ T27] ^ [ 368.911745][ T27] ffffc900040b2980: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 368.911750][ T27] ffffc900040b2a00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 368.911755][ T27] ================================================================== [ 368.911790][ T27] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 368.911798][ T27] CPU: 1 PID: 27 Comm: kworker/1:1 Not tainted syzkaller #0 [ 368.911813][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 368.911822][ T27] Workqueue: events drm_fb_helper_damage_work [ 368.911843][ T27] Call Trace: [ 368.911849][ T27] [ 368.911854][ T27] dump_stack_lvl+0x18c/0x250 [ 368.911868][ T27] ? show_regs_print_info+0x20/0x20 [ 368.911881][ T27] ? load_image+0x420/0x420 [ 368.911894][ T27] panic+0x2ca/0x720 [ 368.911905][ T27] ? bpf_jit_dump+0xd0/0xd0 [ 368.911914][ T27] ? _raw_spin_unlock_irqrestore+0xc0/0x120 [ 368.911926][ T27] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 368.911937][ T27] ? _raw_spin_unlock+0x40/0x40 [ 368.911947][ T27] ? print_memory_metadata+0x314/0x400 [ 368.911960][ T27] ? drm_fbdev_generic_helper_fb_dirty+0x57e/0xab0 [ 368.911973][ T27] check_panic_on_warn+0x84/0xa0 [ 368.911986][ T27] ? drm_fbdev_generic_helper_fb_dirty+0x57e/0xab0 [ 368.912000][ T27] end_report+0x6f/0x130 [ 368.912013][ T27] kasan_report+0x128/0x150 [ 368.912025][ T27] ? drm_fbdev_generic_helper_fb_dirty+0x57e/0xab0 [ 368.912039][ T27] kasan_check_range+0x241/0x290 [ 368.912051][ T27] ? drm_fbdev_generic_helper_fb_dirty+0x57e/0xab0 [ 368.912064][ T27] __asan_memcpy+0x40/0x70 [ 368.912077][ T27] drm_fbdev_generic_helper_fb_dirty+0x57e/0xab0 [ 368.912094][ T27] ? drm_fbdev_generic_helper_fb_probe+0x520/0x520 [ 368.912108][ T27] drm_fb_helper_damage_work+0x22f/0x6f0 [ 368.912122][ T27] ? __lock_acquire+0x7d80/0x7d80 [ 368.912134][ T27] ? drm_fb_helper_resume_worker+0x50/0x50 [ 368.912147][ T27] ? _raw_spin_unlock_irq+0x23/0x50 [ 368.912158][ T27] ? process_scheduled_works+0x975/0x1600 [ 368.912170][ T27] ? process_scheduled_works+0x975/0x1600 [ 368.912182][ T27] process_scheduled_works+0xa60/0x1600 [ 368.912200][ T27] ? worker_attach_to_pool+0x370/0x370 [ 368.912214][ T27] ? assign_work+0x3cc/0x5d0 [ 368.912227][ T27] worker_thread+0xa5e/0xfe0 [ 368.912245][ T27] ? _raw_spin_unlock+0x40/0x40 [ 368.912261][ T27] ? __kthread_parkme+0x71/0x1c0 [ 368.912280][ T27] kthread+0x2fa/0x390 [ 368.912295][ T27] ? pr_cont_work+0x550/0x550 [ 368.912317][ T27] ? kthread_blkcg+0xd0/0xd0 [ 368.912330][ T27] ret_from_fork+0x48/0x80 [ 368.912347][ T27] ? kthread_blkcg+0xd0/0xd0 [ 368.912362][ T27] ret_from_fork_asm+0x11/0x20 [ 368.912385][ T27] [ 368.912520][ T27] Kernel Offset: disabled