last executing test programs: 54.408716723s ago: executing program 3 (id=279): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002000)=ANY=[@ANYBLOB="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"], 0x1, 0x21b, &(0x7f0000000300)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0/file3\x00', 0x1d0) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file3\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x2) 54.009781945s ago: executing program 3 (id=282): bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') preadv(r0, &(0x7f0000000640)=[{&(0x7f0000000140)=""/134, 0x86}], 0x1, 0x0, 0x0) 53.636510656s ago: executing program 3 (id=285): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='illinois\x00', 0x9) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f0000000080)) 53.407268614s ago: executing program 3 (id=287): io_setup(0x4, &(0x7f00000014c0)=0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_tables_matches\x00') io_submit(r0, 0x1, &(0x7f0000000280)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x7, 0x0, r1, 0x0}]) 53.072369951s ago: executing program 3 (id=291): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) 52.923412393s ago: executing program 3 (id=293): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000ffffffff000000000e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014002200b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xe, 0x0, &(0x7f0000000440)="66d4492a0a1b30e699005a6d88a8", 0x0, 0x1498, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x9}, 0x50) 37.306559725s ago: executing program 32 (id=293): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000ffffffff000000000e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014002200b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xe, 0x0, &(0x7f0000000440)="66d4492a0a1b30e699005a6d88a8", 0x0, 0x1498, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x9}, 0x50) 6.072434729s ago: executing program 2 (id=591): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xa8, 0xff}) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='stack\x00') readv(r0, &(0x7f0000000340)=[{&(0x7f0000000140)=""/95, 0x5f}], 0x1) 5.876209816s ago: executing program 2 (id=594): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x88a, &(0x7f00000001c0)={[{@usrquota}, {@usrjquota, 0x22}, {@data_ordered}, {@noload}, {@noinit_itable}, {@grpjquota, 0x22}, {@init_itable}, {@jqfmt_vfsold}, {@noblock_validity}]}, 0xfe, 0x44e, &(0x7f0000000900)="$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") syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x41, &(0x7f0000000880)={[{@nouser_xattr}, {@nodiscard}, {@usrjquota}, {@grpjquota}, {@grpjquota}, {@minixdf}, {@quota}, {@noload}, {@block_validity}]}, 0x64, 0x51c, &(0x7f0000001740)="$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") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x28c8428, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) 5.178020532s ago: executing program 2 (id=597): r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0xda, 0xa1, 0x8c, 0x40, 0x6189, 0x182d, 0x173, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xef, 0x0, 0x2, 0xca, 0xea, 0x76, 0x0, [], [{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0x3}}, {{0x9, 0x5, 0x82, 0x2, 0x1ff, 0x40}}]}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 2.925812024s ago: executing program 2 (id=614): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001e000503"], 0x14}, 0x1, 0x8000000}, 0x0) recvmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) 2.756671458s ago: executing program 2 (id=617): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x9, 0x0, 0x8a, 0x1000000, 0x0, 0x2000000}}) 2.572735432s ago: executing program 2 (id=618): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000080)={[{@commit}, {@heartbeat_none}, {@dir_resv_level={'dir_resv_level', 0x3d, 0x3}}, {@coherency_full}, {@coherency_full}, {@localalloc={'localalloc', 0x3d, 0x10000}}, {@coherency_full}, {@acl}, {@localflocks}]}, 0x2, 0x442c, &(0x7f00000088c0)="$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") symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') syz_usb_connect(0x4, 0x24, 0x0, 0x0) 1.830488842s ago: executing program 1 (id=623): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000002c0)={0x30, r1, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x48800}, 0x20000000) 1.628167959s ago: executing program 0 (id=624): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002000)=ANY=[@ANYBLOB="757466383d312c6e6f6e756d7461696c3d302c6e6f6e756d7461696c3d302c756e695f786c6174653d302c73686f72746e616d653d77696e39352c000f3556feecb6412e00c80bdee16891f8bf67c9f201996782a86d4bab33b4f23383380e4ccafc9da9def41b05c1dfb2cfa24e43aedf5536d3bce06ddda97c586bc37fab5366b1ab6fee95cc224e56e681e82dd4dbbde3785fdd0fc4e7df753a0e2658aa5e88e1d38366c7908a7b2b678ee4b4bfc7aafa2101c157745926241af5ac30189eced78c1611b972d03bfef046f4adcada230ef0ac02ede79fb7d92a8354670c01cb80361c1fde2cef3204a182323c318e10ef11cb24c435d589b17a396377800f"], 0x1, 0x21b, &(0x7f0000000300)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0/file3\x00', 0x1d0) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file3\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x2) 1.628070779s ago: executing program 4 (id=625): mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x2000009, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$bt_hci(r0, 0x11e, 0x1, 0x0, &(0x7f0000000740)) 1.470867032s ago: executing program 4 (id=626): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x6c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x1, @loopback={0xff00000000000000}}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x6c}}, 0x0) 1.377287139s ago: executing program 0 (id=627): syz_open_dev$sg(&(0x7f0000000080), 0xf9ba, 0x143882) syz_open_dev$sg(&(0x7f0000000080), 0xf9ba, 0x14b082) close(0x3) 1.375350959s ago: executing program 1 (id=628): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000002c0)={'dac02\x00', [0x4f27, 0x10003, 0x10002, 0x7f, 0x201, 0xcc7, 0xeff, 0x0, 0x7, 0xffffffff, 0x2000002, 0x3, 0x1, 0xffffffdc, 0x6, 0xe1cb, 0x4, 0x1a449, 0x8, 0x44000003, 0x89, 0xfffffffd, 0x0, 0x20001e46, 0x8, 0xe66, 0x47, 0x8, 0x108, 0x8000000, 0x8]}) 1.129896639s ago: executing program 1 (id=629): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r0, 0x10d, 0x9e, &(0x7f0000000040), &(0x7f0000000080)=0x4) 1.014230538s ago: executing program 0 (id=630): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x30, 0x0, 0x0, 0xfffff034}, {0x80000006, 0xe, 0x0, 0x3}]}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000300)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x2, @broadcast}}}}}}, 0x0) 994.06562ms ago: executing program 4 (id=631): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2c000000130001c3000000000000000000000800", @ANYRES32=r1, @ANYBLOB="0000d400000000000a0001"], 0x2c}}, 0x0) 933.840475ms ago: executing program 1 (id=632): setreuid(0xee01, 0xee01) r0 = semget$private(0x0, 0x20000000102, 0x0) semctl$SETALL(r0, 0x0, 0x11, 0x0) 743.00373ms ago: executing program 0 (id=633): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000200b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r1}, 0x10) 688.442595ms ago: executing program 4 (id=634): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 540.719607ms ago: executing program 1 (id=635): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x5, 0x4, 0x4, 0x8, 0x1}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xf, &(0x7f0000000e80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0xa6}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 520.027648ms ago: executing program 0 (id=636): syz_mount_image$hfs(&(0x7f0000000140), &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYRES8=0x0, @ANYRESOCT, @ANYRES32=0x0, @ANYRES8, @ANYRESOCT], 0x1, 0x273, &(0x7f0000001200)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) write$FUSE_WRITE(r0, &(0x7f00000000c0)={0x18}, 0xfffffdef) 480.964681ms ago: executing program 4 (id=637): syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000480), 0x1, 0x3da, &(0x7f00000004c0)="$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") lsetxattr$security_ima(&(0x7f0000000300)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0)=@sha1={0x1, "ca46bb42f431c3e0a36fd25058505cb8e13b6aee"}, 0xfd3f, 0x0) lsetxattr$security_ima(&(0x7f0000000300)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0)=@sha1={0x1, "ca46bb42f431c3e0a36fd25058505cb8e13b6aee"}, 0xfd3f, 0x0) 54.350236ms ago: executing program 4 (id=638): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000040)={0xf, {"a2e3ad21ed0d09f91b33090987f70e06d038e7ff7fc6e5539b0d650e8b089b3f3b006d090890e0878f0e1ac6e7049b336d959b6c9a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b37070d074b0936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdb4d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b910100e193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b43f0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42aaed469edccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15ffffffffffffffff1243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4abffff03861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7ccc57c2bb1e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190ba60420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e83f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d4860467520e3b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f423500c7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b51028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a640517705da56e9ebf08fa53282bf86dbb58c549069ff6ea15aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f473d6d87a1bb44fe5ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3faf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae0038de8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06a070089c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb2d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6619b6c8f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9cc8036cbd65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea7fcb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c2fe59439cdda66e8238926407a4eddd5d0fc5a752f90000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400", 0xffffffffffffff26}}, 0x1006) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 305.04µs ago: executing program 1 (id=639): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELSETELEM={0x20, 0xe, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x48}, 0x1, 0x0, 0x0, 0x14000815}, 0x0) 0s ago: executing program 0 (id=640): r0 = socket$inet(0x2b, 0x801, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x84, @multicast2, 0x0, 0x0, 'dh\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x84, @multicast2, 0xffff, 0x0, 'nq\x00'}, 0x2c) kernel console output (not intermixed with test programs): face will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.147856][ T5795] Bluetooth: hci1: command tx timeout [ 75.164353][ T5800] Bluetooth: hci3: command tx timeout [ 75.165722][ T5791] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.304729][ T5791] hsr_slave_0: entered promiscuous mode [ 75.312024][ T5791] hsr_slave_1: entered promiscuous mode [ 75.318641][ T5791] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 75.326233][ T5791] Cannot create hsr debugfs directory [ 75.336007][ T5788] hsr_slave_0: entered promiscuous mode [ 75.342922][ T5788] hsr_slave_1: entered promiscuous mode [ 75.349303][ T5788] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 75.356860][ T5788] Cannot create hsr debugfs directory [ 75.572316][ T5784] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 75.610590][ T5784] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 75.622573][ T5784] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 75.667591][ T5784] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 75.753400][ T5785] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 75.781003][ T5785] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 75.792382][ T5785] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 75.812637][ T5785] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 75.833493][ T5791] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 75.853114][ T5791] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 75.868872][ T5791] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 75.900146][ T5791] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 75.976358][ T5788] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 75.986281][ T5788] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 76.000897][ T5788] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 76.032899][ T5788] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 76.165442][ T5785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.202695][ T5785] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.216788][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.224166][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.240640][ T5784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.258319][ T5791] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.285118][ T3485] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.292273][ T3485] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.329456][ T5784] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.348101][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.355570][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.385477][ T5791] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.406624][ T3485] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.413793][ T3485] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.446239][ T2972] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.453422][ T2972] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.465732][ T2972] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.472911][ T2972] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.523626][ T5788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.597234][ T5788] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.635844][ T742] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.643087][ T742] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.674773][ T742] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.681964][ T742] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.967312][ T5785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.137198][ T5785] veth0_vlan: entered promiscuous mode [ 77.149889][ T5800] Bluetooth: hci0: command tx timeout [ 77.153016][ T5795] Bluetooth: hci2: command tx timeout [ 77.175747][ T5785] veth1_vlan: entered promiscuous mode [ 77.229925][ T5795] Bluetooth: hci3: command tx timeout [ 77.233976][ T5800] Bluetooth: hci1: command tx timeout [ 77.256149][ T5784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.363158][ T5784] veth0_vlan: entered promiscuous mode [ 77.373924][ T5785] veth0_macvtap: entered promiscuous mode [ 77.397259][ T5785] veth1_macvtap: entered promiscuous mode [ 77.411431][ T5791] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.422782][ T5784] veth1_vlan: entered promiscuous mode [ 77.451384][ T5788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.515824][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.543856][ T5784] veth0_macvtap: entered promiscuous mode [ 77.568898][ T5784] veth1_macvtap: entered promiscuous mode [ 77.581821][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.600425][ T5791] veth0_vlan: entered promiscuous mode [ 77.610202][ T5788] veth0_vlan: entered promiscuous mode [ 77.622990][ T5785] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.632367][ T5785] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.641251][ T5785] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.650765][ T5785] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.681455][ T5791] veth1_vlan: entered promiscuous mode [ 77.701544][ T5788] veth1_vlan: entered promiscuous mode [ 77.732222][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.744450][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.757266][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.797387][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.810878][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.823267][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.848015][ T5784] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.856743][ T5784] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.866224][ T5784] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.880377][ T5784] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.916634][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.928617][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.965949][ T5791] veth0_macvtap: entered promiscuous mode [ 77.990582][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.995234][ T5788] veth0_macvtap: entered promiscuous mode [ 78.004616][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.022795][ T5791] veth1_macvtap: entered promiscuous mode [ 78.045711][ T5788] veth1_macvtap: entered promiscuous mode [ 78.132948][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.145700][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.149504][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.169588][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.179895][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.190634][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.201980][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.234664][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.245871][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.259304][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.270150][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.282727][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.331185][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.339595][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.357958][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.359203][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.377759][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.389662][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.401807][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.426914][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.448754][ T5875] syz.2.5[5875]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 78.449969][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.469794][ T5791] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.472485][ T5875] loop2: detected capacity change from 0 to 64 [ 78.480337][ T5791] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.513623][ T5791] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.526901][ T5791] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.565965][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.595125][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.605453][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.616257][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.626366][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.638473][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.650920][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.728576][ T5788] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.737346][ T5788] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.760401][ T5788] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.773183][ T5788] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.007259][ T1078] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.034962][ T1078] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.053829][ T3485] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.074124][ T3485] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.184273][ T5889] loop2: detected capacity change from 0 to 512 [ 79.207623][ T1078] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.228769][ T5800] Bluetooth: hci0: command tx timeout [ 79.228939][ T5795] Bluetooth: hci2: command tx timeout [ 79.240870][ T1078] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.309244][ T5795] Bluetooth: hci1: command tx timeout [ 79.309845][ T5800] Bluetooth: hci3: command tx timeout [ 79.337565][ T3485] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.384472][ T3485] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.407328][ T5893] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10'. [ 79.422485][ T5889] EXT4-fs (loop2): Test dummy encryption mode enabled [ 79.431337][ T5889] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 79.463354][ T5889] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 79.608800][ T5889] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2244: inode #15: comm syz.2.9: corrupted in-inode xattr: e_name out of bounds [ 79.704948][ T5889] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2867: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 79.739805][ T5889] EXT4-fs (loop2): 1 orphan inode deleted [ 79.747142][ T5889] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.085115][ T5912] loop3: detected capacity change from 0 to 1024 [ 80.091134][ T5785] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.104650][ T5910] loop1: detected capacity change from 0 to 2048 [ 80.146876][ T5910] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 80.222957][ T5914] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 80.254300][ T5913] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 80.267108][ T5915] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 80.506070][ T3485] hfsplus: b-tree write err: -5, ino 4 [ 81.229031][ T5934] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.305876][ T5934] bridge_slave_1 (unregistering): left allmulticast mode [ 81.313632][ T5800] Bluetooth: hci2: command tx timeout [ 81.315750][ T5917] loop2: detected capacity change from 0 to 40427 [ 81.327348][ T5800] Bluetooth: hci0: command tx timeout [ 81.330959][ T5934] bridge_slave_1 (unregistering): left promiscuous mode [ 81.343340][ T5934] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.350417][ T5917] F2FS-fs (loop2): Small segment_count (9 < 1 * 24) [ 81.358060][ T5917] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 81.376914][ T5879] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 81.389241][ T5800] Bluetooth: hci1: command tx timeout [ 81.394920][ T5800] Bluetooth: hci3: command tx timeout [ 81.432270][ T5917] F2FS-fs (loop2): Found nat_bits in checkpoint [ 81.537956][ T5917] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 81.551881][ T5917] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 81.584972][ T5879] usb 2-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 81.605902][ T5879] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.626091][ T5879] usb 2-1: Product: syz [ 81.651581][ T5879] usb 2-1: Manufacturer: syz [ 81.656247][ T5879] usb 2-1: SerialNumber: syz [ 81.685583][ T5879] usb 2-1: config 0 descriptor?? [ 81.721742][ T5879] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 81.820033][ T5785] syz-executor: attempt to access beyond end of device [ 81.820033][ T5785] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 81.865232][ T5785] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 82.469265][ T5879] usb 2-1: USB disconnect, device number 2 [ 82.717289][ T5945] loop3: detected capacity change from 0 to 8192 [ 82.991392][ T5951] loop0: detected capacity change from 0 to 256 [ 83.005395][ T5952] loop2: detected capacity change from 0 to 256 [ 83.017233][ T5951] exfat: Deprecated parameter 'utf8' [ 83.029007][ T5952] exfat: Deprecated parameter 'namecase' [ 83.132859][ T5951] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x349f764f, utbl_chksum : 0xe619d30d) [ 83.133987][ T5952] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 83.373083][ T5956] tipc: Started in network mode [ 83.404695][ T5956] tipc: Node identity aaaaaaaaaa2a, cluster identity 4711 [ 83.438880][ T5956] tipc: Enabled bearer , priority 10 [ 83.546273][ T5958] loop2: detected capacity change from 0 to 512 [ 83.598714][ T5958] ======================================================= [ 83.598714][ T5958] WARNING: The mand mount option has been deprecated and [ 83.598714][ T5958] and is ignored by this kernel. Remove the mand [ 83.598714][ T5958] option from the mount to silence this warning. [ 83.598714][ T5958] ======================================================= [ 83.680953][ T5960] sp0: Synchronizing with TNC [ 83.709248][ T5958] EXT4-fs: Ignoring removed nobh option [ 83.730563][ T5958] EXT4-fs (loop2): orphan cleanup on readonly fs [ 83.780718][ T5958] EXT4-fs error (device loop2): ext4_do_update_inode:5230: inode #3: comm syz.2.34: corrupted inode contents [ 83.805077][ T5959] [U] è` [ 83.841815][ T5958] EXT4-fs error (device loop2): ext4_dirty_inode:6106: inode #3: comm syz.2.34: mark_inode_dirty error [ 83.887180][ T5958] EXT4-fs error (device loop2): ext4_do_update_inode:5230: inode #3: comm syz.2.34: corrupted inode contents [ 83.909254][ T5958] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #3: comm syz.2.34: mark_inode_dirty error [ 83.952128][ T5958] Quota error (device loop2): write_blk: dquota write failed [ 83.968004][ T5958] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 83.994697][ T5958] EXT4-fs error (device loop2): ext4_acquire_dquot:6940: comm syz.2.34: Failed to acquire dquot type 0 [ 84.024620][ T5958] EXT4-fs error (device loop2): ext4_do_update_inode:5230: inode #16: comm syz.2.34: corrupted inode contents [ 84.046821][ T5958] EXT4-fs error (device loop2): ext4_dirty_inode:6106: inode #16: comm syz.2.34: mark_inode_dirty error [ 84.084028][ T5958] EXT4-fs error (device loop2): ext4_do_update_inode:5230: inode #16: comm syz.2.34: corrupted inode contents [ 84.129162][ T5958] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #16: comm syz.2.34: mark_inode_dirty error [ 84.148910][ T5958] EXT4-fs error (device loop2): ext4_do_update_inode:5230: inode #16: comm syz.2.34: corrupted inode contents [ 84.174056][ T5958] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 84.207474][ T5958] EXT4-fs error (device loop2): ext4_do_update_inode:5230: inode #16: comm syz.2.34: corrupted inode contents [ 84.226155][ T5958] EXT4-fs error (device loop2): ext4_truncate:4288: inode #16: comm syz.2.34: mark_inode_dirty error [ 84.269217][ T5958] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 84.286992][ T5958] EXT4-fs (loop2): 1 truncate cleaned up [ 84.310014][ T5958] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 84.350356][ T5979] loop1: detected capacity change from 0 to 47 [ 84.382381][ T5977] loop3: detected capacity change from 0 to 2048 [ 84.452099][ T5977] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 84.478331][ T5958] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 84.508605][ T5977] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 84.544961][ T5958] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 84.548084][ T5977] UDF-fs: Scanning with blocksize 512 failed [ 84.570354][ T787] tipc: Node number set to 8432298 [ 84.652017][ T5977] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 84.657973][ T5785] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.204475][ T6001] loop1: detected capacity change from 0 to 64 [ 86.078097][ T6029] netlink: 8 bytes leftover after parsing attributes in process `syz.1.66'. [ 86.094784][ T6031] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 86.507994][ T5879] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 86.522639][ T6044] loop2: detected capacity change from 0 to 4096 [ 86.533796][ T6044] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 86.547828][ T5776] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 86.640007][ T6044] ntfs3: loop2: ino=1e, "file1" The size of extended attributes must not exceed 64KiB [ 86.687818][ T5879] usb 2-1: Using ep0 maxpacket: 16 [ 86.700514][ T5879] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 86.723591][ T5879] usb 2-1: New USB device found, idVendor=046d, idProduct=c53f, bcdDevice= 0.00 [ 86.748006][ T5776] usb 1-1: Using ep0 maxpacket: 16 [ 86.759136][ T5879] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.773434][ T5879] usb 2-1: config 0 descriptor?? [ 86.778884][ T5776] usb 1-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 86.788473][ T5776] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.796554][ T5776] usb 1-1: Product: syz [ 86.804897][ T5776] usb 1-1: Manufacturer: syz [ 86.811295][ T5776] usb 1-1: SerialNumber: syz [ 86.826651][ T5776] usb 1-1: config 0 descriptor?? [ 86.846144][ T5776] visor 1-1:0.0: Sony Clie 3.5 converter detected [ 86.910752][ T1188] cfg80211: failed to load regulatory.db [ 87.283423][ T5776] usb 1-1: clie_3_5_startup: get interface number bad return length: 0 [ 87.301401][ T5776] visor: probe of 1-1:0.0 failed with error -5 [ 87.439586][ T6066] loop2: detected capacity change from 0 to 1024 [ 87.447293][ T6066] EXT4-fs: Ignoring removed nobh option [ 87.456291][ T6066] EXT4-fs: Ignoring removed bh option [ 87.475818][ T6066] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 87.536131][ T5776] usb 1-1: USB disconnect, device number 2 [ 87.543524][ T5853] usb 2-1: USB disconnect, device number 3 [ 87.561327][ T6066] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.677148][ T5785] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.778099][ T6076] loop2: detected capacity change from 0 to 1024 [ 88.317790][ T6090] netlink: 16 bytes leftover after parsing attributes in process `syz.2.92'. [ 88.416019][ T6084] loop3: detected capacity change from 0 to 8192 [ 88.459609][ T6084] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 88.500527][ T6084] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 88.511749][ T6084] REISERFS (device loop3): using ordered data mode [ 88.519333][ T6084] reiserfs: using flush barriers [ 88.535606][ T6084] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 88.562764][ T6084] REISERFS (device loop3): checking transaction log (loop3) [ 88.627011][ T6084] REISERFS (device loop3): Using r5 hash to sort names [ 88.676408][ T6084] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 88.740187][ T6099] loop2: detected capacity change from 0 to 256 [ 88.769043][ T6099] exfat: Deprecated parameter 'utf8' [ 88.821222][ T6099] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 89.151943][ T6105] loop2: detected capacity change from 0 to 512 [ 89.210421][ T6105] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 89.307190][ T6105] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.374272][ T6105] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.429309][ T6097] loop0: detected capacity change from 0 to 40427 [ 89.494829][ T6097] F2FS-fs (loop0): invalid crc value [ 89.519867][ T6097] F2FS-fs (loop0): Found nat_bits in checkpoint [ 89.536591][ T6109] loop3: detected capacity change from 0 to 4096 [ 89.627238][ T6109] NILFS (loop3): invalid segment: Checksum error in segment payload [ 89.665951][ T6109] NILFS (loop3): trying rollback from an earlier position [ 89.700677][ T5785] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.715412][ T6097] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 89.736610][ T6109] NILFS (loop3): recovery complete [ 89.771697][ T6112] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 89.968803][ T6114] overlayfs: conflicting options: verity=require,redirect_dir=nofollow [ 90.277264][ T6117] loop3: detected capacity change from 0 to 64 [ 90.376986][ T6104] loop1: detected capacity change from 0 to 32768 [ 90.397784][ T27] audit: type=1800 audit(1756417242.652:2): pid=6117 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.103" name="file1" dev="loop3" ino=5 res=0 errno=0 [ 90.579176][ T6104] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 90.765126][ T6133] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 90.797105][ T6104] XFS (loop1): Ending clean mount [ 91.042608][ T5788] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 91.323840][ T6139] loop2: detected capacity change from 0 to 64 [ 91.447616][ T6127] loop3: detected capacity change from 0 to 32768 [ 91.484508][ T6127] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.105 (6127) [ 91.560361][ T6127] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 91.584972][ T6127] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 91.633938][ T6127] BTRFS info (device loop3): use no compression [ 91.650564][ T6127] BTRFS info (device loop3): use zlib compression, level 3 [ 91.675875][ T6127] BTRFS info (device loop3): using free space tree [ 91.844688][ T6127] BTRFS info (device loop3): enabling ssd optimizations [ 91.894873][ T6127] BTRFS info (device loop3): auto enabling async discard [ 91.960611][ T6167] loop2: detected capacity change from 0 to 256 [ 91.983719][ T6167] exfat: Deprecated parameter 'utf8' [ 92.023822][ T6167] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 92.035709][ T6166] loop1: detected capacity change from 0 to 4096 [ 92.158380][ T6168] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 92.333738][ T5791] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 92.575410][ T6175] warning: `syz.1.119' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 92.988039][ T6185] netlink: 642 bytes leftover after parsing attributes in process `syz.2.123'. [ 93.476463][ T6200] Driver unsupported XDP return value 0 on prog (id 5) dev N/A, expect packet loss! [ 93.548146][ T5800] Bluetooth: hci3: command tx timeout [ 94.161072][ T6196] loop1: detected capacity change from 0 to 32768 [ 94.185119][ T6196] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.128 (6196) [ 94.249830][ T6196] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 94.270851][ T6196] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 94.290392][ T6196] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 94.296698][ T6195] loop0: detected capacity change from 0 to 32768 [ 94.338333][ T6196] BTRFS info (device loop1): use lzo compression, level 0 [ 94.375776][ T6196] BTRFS info (device loop1): using free space tree [ 94.659761][ T6196] BTRFS info (device loop1): enabling ssd optimizations [ 94.666784][ T6196] BTRFS info (device loop1): auto enabling async discard [ 95.069750][ T6208] loop3: detected capacity change from 0 to 32768 [ 95.111814][ T6208] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 95.185041][ T5788] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 95.436042][ T6208] XFS (loop3): Ending clean mount [ 95.487999][ T5853] usb 3-1: new low-speed USB device number 2 using dummy_hcd [ 95.517544][ T6208] XFS (loop3): Quotacheck needed: Please wait. [ 95.609979][ T6208] XFS (loop3): Quotacheck: Done. [ 95.698973][ T6256] netlink: 4 bytes leftover after parsing attributes in process `syz.1.142'. [ 95.729199][ T5853] usb 3-1: config 4 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 95.755278][ T5853] usb 3-1: config 4 interface 0 altsetting 6 endpoint 0x81 has invalid wMaxPacketSize 0 [ 95.776113][ T27] audit: type=1800 audit(1756417248.052:3): pid=6208 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.133" name="file1" dev="loop3" ino=9286 res=0 errno=0 [ 95.808434][ T5853] usb 3-1: config 4 interface 0 has no altsetting 0 [ 95.827829][ T5853] usb 3-1: New USB device found, idVendor=04d9, idProduct=a067, bcdDevice= 0.00 [ 95.867173][ T5853] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.039675][ T5791] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 96.301030][ T6263] netlink: 32 bytes leftover after parsing attributes in process `syz.1.149'. [ 96.351905][ T5853] holtek_mouse 0003:04D9:A067.0002: unknown main item tag 0x0 [ 96.412259][ T5853] holtek_mouse 0003:04D9:A067.0002: hidraw0: USB HID v0.00 Device [HID 04d9:a067] on usb-dummy_hcd.2-1/input0 [ 96.551124][ T6267] netlink: 16215 bytes leftover after parsing attributes in process `syz.1.150'. [ 96.650672][ T5853] usb 3-1: USB disconnect, device number 2 [ 96.719389][ T6264] fido_id[6264]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 96.905416][ T6270] loop3: detected capacity change from 0 to 4096 [ 96.944844][ T6270] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 96.984562][ T6270] ntfs: volume version 3.1. [ 97.130129][ T6270] ntfs: (device loop3): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set koi8-ru. You might want to try to use the mount option nls=utf8. [ 97.181571][ T6270] ntfs: (device loop3): ntfs_filldir(): Skipping unrepresentable inode 0x4. [ 97.606562][ T6290] loop3: detected capacity change from 0 to 2048 [ 97.636348][ T6290] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 97.715670][ T6290] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.777325][ T6299] loop0: detected capacity change from 0 to 512 [ 97.784806][ T6299] EXT4-fs: Ignoring removed bh option [ 97.793792][ T6299] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 97.841935][ T6299] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 97.860699][ T6299] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 97.898913][ T6299] EXT4-fs (loop0): orphan cleanup on readonly fs [ 97.905321][ T6299] EXT4-fs error (device loop0): ext4_quota_enable:7127: comm syz.0.164: Bad quota inum: 4294967291, type: 0 [ 97.950211][ T6302] loop2: detected capacity change from 0 to 256 [ 97.990297][ T6299] EXT4-fs warning (device loop0): ext4_enable_quotas:7175: Failed to enable quota tracking (type=0, err=-117, ino=4294967291). Please run e2fsck to fix. [ 98.011192][ T5791] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.027581][ T6299] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 98.036930][ T6299] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 98.299718][ T5784] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.639789][ T6291] loop1: detected capacity change from 0 to 32768 [ 98.703551][ T6291] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 98.896633][ T6330] loop3: detected capacity change from 0 to 512 [ 98.980343][ T6330] EXT4-fs (loop3): orphan cleanup on readonly fs [ 98.991366][ T6330] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 99.005773][ T6330] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 99.025079][ T6330] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #13: comm syz.3.174: attempt to clear invalid blocks 2 len 1 [ 99.122140][ T6330] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.174: invalid indirect mapped block 1819239214 (level 0) [ 99.125349][ T6291] XFS (loop1): Ending clean mount [ 99.168897][ T6291] XFS (loop1): Quotacheck needed: Please wait. [ 99.175518][ T6330] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.174: invalid indirect mapped block 1819239214 (level 1) [ 99.240425][ T6330] EXT4-fs (loop3): 1 truncate cleaned up [ 99.258179][ T6330] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 99.284023][ T6291] XFS (loop1): Quotacheck: Done. [ 99.477323][ T5791] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.617192][ T6343] sd 0:0:1:0: device reset [ 99.626041][ T6341] syz.2.180 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 99.682632][ T5788] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 100.102185][ T6339] loop0: detected capacity change from 0 to 32768 [ 100.158195][ T6339] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.179 (6339) [ 100.242061][ T6339] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 100.277860][ T6339] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 100.293728][ T6339] BTRFS info (device loop0): using free space tree [ 100.323849][ T6358] loop2: detected capacity change from 0 to 256 [ 100.423205][ T6358] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x76936814, utbl_chksum : 0xe619d30d) [ 100.561848][ T6358] syz.2.188: attempt to access beyond end of device [ 100.561848][ T6358] loop2: rw=0, sector=311, nr_sectors = 1 limit=256 [ 100.610832][ T6339] BTRFS info (device loop0): enabling ssd optimizations [ 100.628412][ T6378] netlink: 4 bytes leftover after parsing attributes in process `syz.1.190'. [ 100.650191][ T6339] BTRFS info (device loop0): auto enabling async discard [ 100.729170][ T6381] netlink: 16 bytes leftover after parsing attributes in process `syz.2.191'. [ 100.768899][ T6382] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0 [ 100.993898][ T5784] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 101.241167][ T6393] loop2: detected capacity change from 0 to 512 [ 101.298095][ T6393] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 101.374560][ T6393] EXT4-fs (loop2): 1 truncate cleaned up [ 101.410637][ T6393] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.574854][ T6404] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 101.580975][ T6393] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2244: inode #15: comm syz.2.198: corrupted in-inode xattr: overlapping e_value [ 101.647830][ T6393] EXT4-fs (loop2): Remounting filesystem read-only [ 101.654421][ T6393] EXT4-fs warning (device loop2): ext4_xattr_set_entry:1781: inode #15: comm syz.2.198: unable to update i_inline_off [ 101.790427][ T5785] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.031497][ T5853] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 102.208417][ T1188] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 102.230787][ T5853] usb 2-1: config 0 has an invalid interface number: 64 but max is 0 [ 102.247825][ T5853] usb 2-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 102.268128][ T5853] usb 2-1: config 0 has no interface number 0 [ 102.286844][ T5853] usb 2-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 102.306803][ T5853] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.327119][ T5853] usb 2-1: Product: syz [ 102.337445][ T5853] usb 2-1: Manufacturer: syz [ 102.354913][ T5853] usb 2-1: SerialNumber: syz [ 102.370279][ T5853] usb 2-1: config 0 descriptor?? [ 102.404470][ T1188] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 102.436105][ T1188] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.448060][ T6430] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 102.459560][ T1188] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.471556][ T1188] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 102.492756][ T1188] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 102.507963][ T1188] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 102.516443][ T1188] usb 4-1: Manufacturer: syz [ 102.544476][ T1188] usb 4-1: config 0 descriptor?? [ 102.697592][ T6436] loop2: detected capacity change from 0 to 1024 [ 102.752547][ T6436] syz.2.215: attempt to access beyond end of device [ 102.752547][ T6436] loop2: rw=0, sector=201326592, nr_sectors = 2 limit=1024 [ 102.767344][ T6436] Buffer I/O error on dev loop2, logical block 100663296, async page read [ 102.778896][ T6436] syz.2.215: attempt to access beyond end of device [ 102.778896][ T6436] loop2: rw=0, sector=201326592, nr_sectors = 2 limit=1024 [ 102.793345][ T6436] Buffer I/O error on dev loop2, logical block 100663296, async page read [ 102.812860][ T5853] usb 2-1: Found UVC 0.00 device syz (046d:0823) [ 102.830080][ T5853] usb 2-1: No valid video chain found. [ 102.921354][ T5870] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 103.012438][ T1188] appleir 0003:05AC:8243.0003: item fetching failed at offset 0/1 [ 103.022554][ T1188] appleir 0003:05AC:8243.0003: parse failed [ 103.031052][ T1188] appleir: probe of 0003:05AC:8243.0003 failed with error -22 [ 103.057574][ T1188] usb 2-1: USB disconnect, device number 4 [ 103.108442][ T5870] usb 1-1: Using ep0 maxpacket: 32 [ 103.115765][ T5870] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.134205][ T5870] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.155450][ T5870] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 103.164743][ T5870] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 103.173814][ T5870] usb 1-1: Product: syz [ 103.178444][ T5870] usb 1-1: Manufacturer: syz [ 103.190111][ T5870] hub 1-1:4.0: USB hub found [ 103.236910][ T5879] usb 4-1: USB disconnect, device number 2 [ 103.419417][ T5870] hub 1-1:4.0: 9 ports detected [ 103.424878][ T5870] hub 1-1:4.0: insufficient power available to use all downstream ports [ 103.626944][ C1] raw-gadget.2 gadget.0: ignoring, device is not running [ 103.650818][ C1] raw-gadget.2 gadget.0: ignoring, device is not running [ 103.664362][ C1] raw-gadget.2 gadget.0: ignoring, device is not running [ 103.673163][ C1] raw-gadget.2 gadget.0: ignoring, device is not running [ 103.684978][ T5870] hub 1-1:4.0: hub_hub_status failed (err = -32) [ 103.710809][ T5870] hub 1-1:4.0: config failed, can't get hub status (err -32) [ 103.769286][ T5870] usb 1-1: USB disconnect, device number 3 [ 103.770111][ T6447] loop2: detected capacity change from 0 to 32768 [ 103.872231][ T6447] syz.2.220: attempt to access beyond end of device [ 103.872231][ T6447] loop2: rw=1, sector=4701696, nr_sectors = 8 limit=32768 [ 103.906198][ T6447] metapage_write_end_io: I/O error [ 103.917626][ T6447] ERROR: (device loop2): diWrite: ixpxd invalid [ 103.917626][ T6447] [ 103.936979][ T6447] ERROR: (device loop2): remounting filesystem as read-only [ 103.948154][ T6447] ERROR: (device loop2): txCommit: [ 103.948154][ T6447] [ 103.964652][ T6447] blkno = 8f7c0, nblocks = 1 [ 103.969698][ T6447] ERROR: (device loop2): dbUpdatePMap: blocks are outside the map [ 103.969698][ T6447] [ 103.996795][ T6447] ERROR: (device loop2): dbAllocNext: Corrupt dmap page [ 103.996795][ T6447] [ 103.998066][ T5879] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 104.011227][ T6447] ialloc: diAlloc returned -5! [ 104.101405][ T5785] syz-executor: attempt to access beyond end of device [ 104.101405][ T5785] loop2: rw=1, sector=4701696, nr_sectors = 8 limit=32768 [ 104.133267][ T5785] metapage_write_end_io: I/O error [ 104.238699][ T5879] usb 2-1: config 0 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.290140][ T5879] usb 2-1: config 0 interface 0 has no altsetting 0 [ 104.296875][ T5879] usb 2-1: New USB device found, idVendor=056a, idProduct=00b4, bcdDevice= 0.00 [ 104.321596][ T5879] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.343302][ T5879] usb 2-1: config 0 descriptor?? [ 104.594503][ T6459] loop0: detected capacity change from 0 to 8192 [ 104.631889][ T6459] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 104.657971][ T6459] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 104.699920][ T6459] REISERFS (device loop0): using ordered data mode [ 104.712256][ T6459] reiserfs: using flush barriers [ 104.726284][ T6459] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 104.743436][ T6459] REISERFS (device loop0): checking transaction log (loop0) [ 104.763692][ T6459] REISERFS (device loop0): Using r5 hash to sort names [ 104.779115][ T6459] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 104.810837][ T5879] wacom 0003:056A:00B4.0004: Unknown device_type for 'HID 056a:00b4'. Assuming pen. [ 104.858460][ T6459] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 104.928486][ T5879] wacom 0003:056A:00B4.0004: hidraw0: USB HID v8.00 Device [HID 056a:00b4] on usb-dummy_hcd.1-1/input0 [ 104.989635][ T5879] input: Wacom Intuos3 12x19 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:00B4.0004/input/input5 [ 105.065489][ T6459] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 105.110137][ T6459] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 105.233667][ T5879] usb 2-1: USB disconnect, device number 5 [ 105.303047][ T6471] loop3: detected capacity change from 0 to 8192 [ 105.355020][ T6471] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 105.404772][ T6471] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 105.439216][ T6471] REISERFS (device loop3): using ordered data mode [ 105.449914][ T6471] reiserfs: using flush barriers [ 105.505076][ T6471] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 105.522018][ T6471] REISERFS (device loop3): checking transaction log (loop3) [ 105.534908][ T6471] REISERFS (device loop3): Using rupasov hash to sort names [ 105.544266][ T6471] REISERFS (device loop3): using 3.5.x disk format [ 105.558282][ T6471] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 105.578080][ T6471] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 105.607047][ T6471] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 105.624097][ T6471] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 UNKNOWN] (nlink == 1) not found (pos 2) [ 105.659014][ T6471] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 105.786026][ T6471] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 105.815348][ T6471] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 105.965525][ T6488] loop0: detected capacity change from 0 to 512 [ 106.005521][ T6488] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 106.089035][ T6488] EXT4-fs (loop0): 1 truncate cleaned up [ 106.100562][ T6488] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.163905][ T6492] loop3: detected capacity change from 0 to 512 [ 106.204260][ T6492] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 106.260858][ T6492] EXT4-fs (loop3): 1 truncate cleaned up [ 106.295908][ T6492] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.325092][ T5784] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.519200][ T6484] loop1: detected capacity change from 0 to 32768 [ 106.544840][ T5791] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.085166][ T6516] capability: warning: `syz.2.246' uses deprecated v2 capabilities in a way that may be insecure [ 107.464055][ T6525] loop1: detected capacity change from 0 to 1024 [ 107.530140][ T6528] loop0: detected capacity change from 0 to 256 [ 107.552671][ T6528] exfat: Deprecated parameter 'namecase' [ 107.604119][ T6528] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x2eabf3fa, utbl_chksum : 0xe619d30d) [ 107.621257][ T42] hfsplus: b-tree write err: -5, ino 4 [ 107.698101][ T5853] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 107.932457][ T5853] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 107.947090][ T6534] loop0: detected capacity change from 0 to 128 [ 107.958102][ T5853] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 107.987384][ T5853] usb 3-1: config 0 interface 0 has no altsetting 0 [ 107.996758][ T5853] usb 3-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 108.026157][ T5853] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.069288][ T5853] usb 3-1: config 0 descriptor?? [ 108.287973][ T6530] loop3: detected capacity change from 0 to 32768 [ 108.393573][ T6539] loop0: detected capacity change from 0 to 8192 [ 108.413068][ T6539] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 108.444271][ T6539] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 108.458202][ T6539] REISERFS (device loop0): using ordered data mode [ 108.465665][ T6539] reiserfs: using flush barriers [ 108.483169][ T6539] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 108.519834][ T6539] REISERFS (device loop0): checking transaction log (loop0) [ 108.538006][ T5853] hid-rmi 0003:06CB:81A7.0005: hidraw0: USB HID v0.00 Device [HID 06cb:81a7] on usb-dummy_hcd.2-1/input0 [ 108.543079][ T6539] REISERFS (device loop0): Using r5 hash to sort names [ 108.568339][ T6539] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 108.582159][ T6539] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 108.781173][ T5853] usb 3-1: USB disconnect, device number 3 [ 108.969184][ T6543] netlink: 4 bytes leftover after parsing attributes in process `syz.3.259'. [ 109.784870][ T6575] loop1: detected capacity change from 0 to 512 [ 109.872286][ T27] audit: type=1326 audit(1756417262.152:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6581 comm="syz.2.277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdac78ebe9 code=0x7ffc0000 [ 109.935945][ T27] audit: type=1326 audit(1756417262.192:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6581 comm="syz.2.277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdac78ebe9 code=0x7ffc0000 [ 109.938530][ T6575] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.275: iget: bad i_size value: 38620345925642 [ 109.960827][ T27] audit: type=1326 audit(1756417262.202:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6581 comm="syz.2.277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fbdac78ebe9 code=0x7ffc0000 [ 109.960878][ T27] audit: type=1326 audit(1756417262.202:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6581 comm="syz.2.277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdac78ebe9 code=0x7ffc0000 [ 109.960918][ T27] audit: type=1326 audit(1756417262.202:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6581 comm="syz.2.277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdac78ebe9 code=0x7ffc0000 [ 109.960957][ T27] audit: type=1326 audit(1756417262.202:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6581 comm="syz.2.277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=129 compat=0 ip=0x7fbdac78ebe9 code=0x7ffc0000 [ 109.960995][ T27] audit: type=1326 audit(1756417262.202:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6581 comm="syz.2.277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fbdac785ba7 code=0x7ffc0000 [ 110.096811][ T6586] loop3: detected capacity change from 0 to 128 [ 110.121651][ T27] audit: type=1326 audit(1756417262.202:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6581 comm="syz.2.277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbdac72ade9 code=0x7ffc0000 [ 110.130649][ T6575] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.275: couldn't read orphan inode 15 (err -117) [ 110.225878][ T27] audit: type=1326 audit(1756417262.202:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6581 comm="syz.2.277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdac78ebe9 code=0x7ffc0000 [ 110.261551][ T6575] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.275760][ T27] audit: type=1326 audit(1756417262.202:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6581 comm="syz.2.277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdac78ebe9 code=0x7ffc0000 [ 110.299332][ T6588] loop2: detected capacity change from 0 to 512 [ 110.373623][ T6588] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 110.432467][ T6588] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c018, mo2=00c2] [ 110.478010][ T6588] System zones: 0-2, 18-18, 34-34 [ 110.483512][ T6588] EXT4-fs (loop2): orphan cleanup on readonly fs [ 110.525979][ T6588] EXT4-fs error (device loop2): ext4_quota_enable:7131: inode #15: comm syz.2.280: iget: bad i_size value: 360287970189639690 [ 110.557371][ T6588] EXT4-fs error (device loop2): ext4_quota_enable:7134: comm syz.2.280: Bad quota inode: 15, type: 2 [ 110.593997][ T6588] EXT4-fs warning (device loop2): ext4_enable_quotas:7175: Failed to enable quota tracking (type=2, err=-117, ino=15). Please run e2fsck to fix. [ 110.620397][ T6595] loop0: detected capacity change from 0 to 8192 [ 110.623785][ T5788] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.694319][ T6588] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 110.698533][ T6595] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 110.705229][ T6588] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 110.728620][ T6595] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 110.739218][ T6595] REISERFS (device loop0): using ordered data mode [ 110.745764][ T6595] reiserfs: using flush barriers [ 110.770293][ T6595] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 110.790781][ T6595] REISERFS (device loop0): checking transaction log (loop0) [ 110.811631][ T6595] REISERFS (device loop0): Using r5 hash to sort names [ 110.821195][ T6595] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 110.859569][ T5785] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.016800][ T6603] binder: 6602:6603 ioctl c00c620f 200000000500 returned -22 [ 111.157273][ T6607] loop1: detected capacity change from 0 to 22 [ 111.208832][ T6607] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 111.264874][ T6607] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 111.927825][ T787] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 112.134943][ T6613] loop0: detected capacity change from 0 to 32768 [ 112.145815][ T6625] loop1: detected capacity change from 0 to 4096 [ 112.170204][ T6613] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.288 (6613) [ 112.170701][ T787] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.216415][ T787] usb 3-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00 [ 112.247415][ T787] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.269302][ T6613] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 112.293960][ T6613] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 112.307407][ T787] usb 3-1: config 0 descriptor?? [ 112.336836][ T6613] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8) [ 112.384991][ T6613] BTRFS info (device loop0): use lzo compression, level 0 [ 112.428152][ T6613] BTRFS info (device loop0): using free space tree [ 112.638181][ T6613] BTRFS info (device loop0): enabling ssd optimizations [ 112.645496][ T6613] BTRFS info (device loop0): auto enabling async discard [ 112.784515][ T787] hid_mf 0003:0079:1846.0006: hidraw0: USB HID v0.00 Device [HID 0079:1846] on usb-dummy_hcd.2-1/input0 [ 112.807619][ T787] hid_mf 0003:0079:1846.0006: Force feedback for HJZ Mayflash game controller adapters by Marcel Hasler [ 113.086660][ T787] usb 3-1: USB disconnect, device number 4 [ 113.118028][ T5784] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 113.259376][ T5796] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 10 /dev/loop0 scanned by udevd (5796) [ 113.285423][ T6650] loop1: detected capacity change from 0 to 8192 [ 113.357130][ T6655] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 113.377939][ T6650] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 113.460176][ T6650] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 113.535256][ T6650] REISERFS (device loop1): using ordered data mode [ 113.576246][ T6650] reiserfs: using flush barriers [ 113.637796][ T6650] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 113.721444][ T6650] REISERFS (device loop1): checking transaction log (loop1) [ 113.767927][ T6650] REISERFS (device loop1): Using r5 hash to sort names [ 113.775228][ T6650] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 113.847781][ T6650] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 114.978065][ T787] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 115.129636][ T27] audit: type=1800 audit(1756417267.402:14): pid=6684 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.314" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 115.199824][ T787] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 115.220942][ T787] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 115.250651][ T787] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 115.260422][ T787] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.290994][ T787] usb 1-1: Product: syz [ 115.295232][ T787] usb 1-1: Manufacturer: syz [ 115.319512][ T787] usb 1-1: SerialNumber: syz [ 115.924333][ T6690] loop1: detected capacity change from 0 to 32768 [ 115.942285][ T787] usb 1-1: 0:2 : does not exist [ 115.946114][ T6696] ip6tnl1: entered allmulticast mode [ 115.964216][ T6690] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 115.972862][ T6690] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 115.989899][ T787] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 116.005687][ T6690] syz.1.317: attempt to access beyond end of device [ 116.005687][ T6690] loop1: rw=12288, sector=154618822868, nr_sectors = 4 limit=32768 [ 116.020899][ T6690] gfs2: fsid=syz:syz.0: can't lookup journal index: 0 [ 116.126490][ T787] usb 1-1: USB disconnect, device number 4 [ 116.266529][ T5796] udevd[5796]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 116.317836][ T6701] netlink: 20 bytes leftover after parsing attributes in process `syz.0.322'. [ 116.817796][ T787] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 117.034827][ T787] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.058319][ T787] usb 1-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 117.078662][ T787] usb 1-1: config 0 interface 0 has no altsetting 0 [ 117.085441][ T787] usb 1-1: New USB device found, idVendor=06cb, idProduct=73f6, bcdDevice= 0.00 [ 117.100430][ T787] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.117943][ T787] usb 1-1: config 0 descriptor?? [ 117.532950][ T6714] loop2: detected capacity change from 0 to 4096 [ 117.596682][ T6715] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 117.626558][ T787] itetech 0003:06CB:73F6.0007: hidraw0: USB HID v0.01 Device [HID 06cb:73f6] on usb-dummy_hcd.0-1/input0 [ 117.890674][ T1188] usb 1-1: USB disconnect, device number 5 [ 117.971056][ T6719] loop1: detected capacity change from 0 to 1024 [ 117.974657][ T6720] loop2: detected capacity change from 0 to 1024 [ 118.012462][ T6720] EXT4-fs: Ignoring removed bh option [ 118.070211][ T6719] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.085440][ T6720] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 118.184049][ T6720] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.271917][ T6720] EXT4-fs error (device loop2): ext4_check_all_de:666: inode #12: block 7: comm syz.2.329: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=124 fake=0 [ 118.284538][ T5788] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.304392][ T6720] EXT4-fs (loop2): Remounting filesystem read-only [ 118.418427][ T5785] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.768331][ T6732] usb usb1: check_ctrlrecip: process 6732 (syz.1.334) requesting ep 01 but needs 81 [ 118.907840][ T5795] Bluetooth: hci3: command tx timeout [ 119.028942][ T6738] loop0: detected capacity change from 0 to 2048 [ 119.103921][ T6738] loop0: p1 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 p217 p218 p219 p220 p221 p222 p223 p224 p225 p22 [ 119.119135][ T6738] loop0: p4 start 65529 is beyond EOD, truncated [ 119.264173][ T6738] loop0: p5 start 65529 is beyond EOD, truncated [ 119.271083][ T6738] loop0: p6 start 65529 is beyond EOD, truncated [ 119.277456][ T6738] loop0: p7 start 65529 is beyond EOD, truncated [ 119.337946][ T6738] loop0: p8 start 65529 is beyond EOD, truncated [ 119.358031][ T6738] loop0: p9 start 65529 is beyond EOD, truncated [ 119.367616][ T6738] loop0: p10 start 65529 is beyond EOD, truncated [ 119.381468][ T6738] loop0: p11 start 65529 is beyond EOD, truncated [ 119.396375][ T6738] loop0: p12 start 65529 is beyond EOD, truncated [ 119.409884][ T6738] loop0: p13 start 65529 is beyond EOD, truncated [ 119.435862][ T6738] loop0: p14 start 65529 is beyond EOD, truncated [ 119.460390][ T6738] loop0: p15 start 65529 is beyond EOD, truncated [ 119.479350][ T6738] loop0: p16 start 65529 is beyond EOD, truncated [ 119.491805][ T6738] loop0: p17 start 65529 is beyond EOD, truncated [ 119.506736][ T6738] loop0: p18 start 65529 is beyond EOD, truncated [ 119.517811][ T6738] loop0: p19 start 65529 is beyond EOD, truncated [ 119.518000][ T5853] IPVS: starting estimator thread 0... [ 119.535359][ T6738] loop0: p20 start 65529 is beyond EOD, truncated [ 119.557930][ T6738] loop0: p21 start 65529 is beyond EOD, truncated [ 119.577896][ T6738] loop0: p22 start 65529 is beyond EOD, truncated [ 119.605958][ T6738] loop0: p23 start 65529 is beyond EOD, truncated [ 119.633433][ T6738] loop0: p24 start 65529 is beyond EOD, truncated [ 119.643013][ T6738] loop0: p25 start 65529 is beyond EOD, truncated [ 119.658083][ T6752] IPVS: using max 17 ests per chain, 40800 per kthread [ 119.676828][ T6755] loop2: detected capacity change from 0 to 128 [ 119.686574][ T6738] loop0: p26 start 65529 is beyond EOD, truncated [ 119.693282][ T6756] netlink: 8 bytes leftover after parsing attributes in process `syz.1.344'. [ 119.693359][ T6756] netlink: 4 bytes leftover after parsing attributes in process `syz.1.344'. [ 119.693749][ T6756] netlink: 'syz.1.344': attribute type 3 has an invalid length. [ 119.707135][ T6738] loop0: p27 start 65529 is beyond EOD, [ 119.778584][ T6755] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 119.798755][ T6738] truncated [ 119.801937][ T6738] loop0: p28 start 65529 is beyond EOD, truncated [ 119.827534][ T6755] ext4 filesystem being mounted at /112/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 119.829342][ T6738] loop0: p29 start 65529 is beyond EOD, truncated [ 119.866891][ T6738] loop0: p30 start 65529 is beyond EOD, truncated [ 119.873841][ T6738] loop0: p31 start 65529 is beyond EOD, truncated [ 119.881114][ T6738] loop0: p32 start 65529 is beyond EOD, truncated [ 119.887585][ T6738] loop0: p33 start 65529 is beyond EOD, truncated [ 119.894222][ T6738] loop0: p34 start 65529 is beyond EOD, truncated [ 119.900778][ T6738] loop0: p35 start 65529 is beyond EOD, truncated [ 119.909477][ T6738] loop0: p36 start 65529 is beyond EOD, truncated [ 119.915971][ T6738] loop0: p37 start 65529 is beyond EOD, truncated [ 119.926165][ T6738] loop0: p38 start 65529 is beyond EOD, truncated [ 119.940605][ T6738] loop0: p39 start 65529 is beyond EOD, truncated [ 119.947092][ T6738] loop0: p40 start 65529 is beyond EOD, truncated [ 119.980500][ T6738] loop0: p41 start 65529 is beyond EOD, truncated [ 119.987010][ T6738] loop0: p42 start 65529 is beyond EOD, truncated [ 120.008329][ T6738] loop0: p43 start 65529 is beyond EOD, truncated [ 120.036203][ T6738] loop0: p44 start 65529 is beyond EOD, truncated [ 120.044280][ T6738] loop0: p45 start 65529 is beyond EOD, truncated [ 120.057532][ T5785] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 120.075028][ T6738] loop0: p46 start 65529 is beyond EOD, truncated [ 120.081744][ T6738] loop0: p47 start 65529 is beyond EOD, truncated [ 120.102393][ T6738] loop0: p48 start 65529 is beyond EOD, truncated [ 120.119177][ T6738] loop0: p49 start 65529 is beyond EOD, truncated [ 120.125686][ T6738] loop0: p50 start 65529 is beyond EOD, truncated [ 120.171501][ T6738] loop0: p51 start 65529 is beyond EOD, truncated [ 120.201653][ T6738] loop0: p52 start 65529 is beyond EOD, truncated [ 120.217947][ T6738] loop0: p53 start 65529 is beyond EOD, truncated [ 120.224479][ T6738] loop0: p54 start 65529 is beyond EOD, truncated [ 120.231066][ T6738] loop0: p55 start 65529 is beyond EOD, truncated [ 120.238518][ T6738] loop0: p56 start 65529 is beyond EOD, truncated [ 120.244990][ T6738] loop0: p57 start 65529 is beyond EOD, truncated [ 120.254054][ T6738] loop0: p58 start 65529 is beyond EOD, truncated [ 120.260746][ T6738] loop0: p59 start 65529 is beyond EOD, truncated [ 120.268148][ T6738] loop0: p60 start 65529 is beyond EOD, truncated [ 120.274630][ T6738] loop0: p61 start 65529 is beyond EOD, truncated [ 120.304789][ T6738] loop0: p62 start 65529 is beyond EOD, truncated [ 120.311513][ T6738] loop0: p63 start 65529 is beyond EOD, truncated [ 120.322920][ T6738] loop0: p64 start 65529 is beyond EOD, truncated [ 120.329801][ T6738] loop0: p65 start 65529 is beyond EOD, truncated [ 120.336349][ T6738] loop0: p66 start 65529 is beyond EOD, truncated [ 120.348086][ T6738] loop0: p67 start 65529 is beyond EOD, truncated [ 120.354978][ T6738] loop0: p68 start 65529 is beyond EOD, truncated [ 120.385195][ T6738] loop0: p69 start 65529 is beyond EOD, truncated [ 120.408561][ T6738] loop0: p70 start 65529 is beyond EOD, truncated [ 120.415064][ T6738] loop0: p71 start 65529 is beyond EOD, truncated [ 120.426954][ T6738] loop0: p72 start 65529 is beyond EOD, truncated [ 120.434894][ T6738] loop0: p73 start 65529 is beyond EOD, truncated [ 120.447581][ T6738] loop0: p74 start 65529 is beyond EOD, truncated [ 120.464486][ T6738] loop0: p75 start 65529 is beyond EOD, truncated [ 120.475522][ T6738] loop0: p76 start 65529 is beyond EOD, truncated [ 120.482548][ T6738] loop0: p77 start 65529 is beyond EOD, truncated [ 120.494861][ T6738] loop0: p78 start 65529 is beyond EOD, truncated [ 120.518035][ T6738] loop0: p79 start 65529 is beyond EOD, truncated [ 120.524536][ T6738] loop0: p80 start 65529 is beyond EOD, truncated [ 120.537913][ T5853] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 120.538995][ T6738] loop0: p81 start 65529 is beyond EOD, truncated [ 120.567946][ T6738] loop0: p82 start 65529 is beyond EOD, truncated [ 120.574506][ T6738] loop0: p83 start 65529 is beyond EOD, truncated [ 120.614779][ T6738] loop0: p84 start 65529 is beyond EOD, truncated [ 120.631047][ T6738] loop0: p85 start 65529 is beyond EOD, truncated [ 120.647861][ T6738] loop0: p86 start 65529 is beyond EOD, truncated [ 120.654398][ T6738] loop0: p87 start 65529 is beyond EOD, truncated [ 120.678778][ T6738] loop0: p88 start 65529 is beyond EOD, truncated [ 120.695721][ T6738] loop0: p89 start 65529 is beyond EOD, truncated [ 120.716859][ T6738] loop0: p90 start 65529 is beyond EOD, truncated [ 120.728786][ T6771] loop1: detected capacity change from 0 to 256 [ 120.736909][ T6738] loop0: p91 start 65529 is beyond EOD, truncated [ 120.754590][ T6738] loop0: p92 start 65529 is beyond EOD, truncated [ 120.761444][ T6738] loop0: p93 start 65529 is beyond EOD, truncated [ 120.775131][ T6738] loop0: p94 start 65529 is beyond EOD, truncated [ 120.784444][ T6738] loop0: p95 start 65529 is beyond EOD, truncated [ 120.792254][ T5853] usb 3-1: New USB device found, idVendor=0b95, idProduct=772b, bcdDevice=a2.4c [ 120.802024][ T5853] usb 3-1: New USB device strings: Mfr=24, Product=2, SerialNumber=3 [ 120.810322][ T6738] loop0: p96 start 65529 is beyond EOD, truncated [ 120.819101][ T6738] loop0: p97 start 65529 is beyond EOD, truncated [ 120.825587][ T6738] loop0: p98 start 65529 is beyond EOD, truncated [ 120.837592][ T6771] FAT-fs (loop1): Directory bread(block 64) failed [ 120.844653][ T6771] FAT-fs (loop1): Directory bread(block 65) failed [ 120.853136][ T5853] usb 3-1: Product: syz [ 120.857643][ T5853] usb 3-1: Manufacturer: syz [ 120.862369][ T5853] usb 3-1: SerialNumber: syz [ 120.869684][ T6738] loop0: p99 start 65529 is beyond EOD, truncated [ 120.876166][ T6738] loop0: p100 start 65529 is beyond EOD, truncated [ 120.883943][ T6771] FAT-fs (loop1): Directory bread(block 66) failed [ 120.893954][ T5853] usb 3-1: config 0 descriptor?? [ 120.903024][ T6771] FAT-fs (loop1): Directory bread(block 67) failed [ 120.909596][ T6738] loop0: p101 start 65529 is beyond EOD, truncated [ 120.909624][ T6738] loop0: p102 start 65529 is beyond EOD, truncated [ 120.909642][ T6738] loop0: p103 start 65529 is beyond EOD, truncated [ 120.909659][ T6738] loop0: p104 start 65529 is beyond EOD, truncated [ 120.909677][ T6738] loop0: p105 start 65529 is beyond EOD, truncated [ 120.909695][ T6738] loop0: p106 start 65529 is beyond EOD, truncated [ 120.909712][ T6738] loop0: p107 start 65529 is beyond EOD, truncated [ 120.909730][ T6738] loop0: p108 start 65529 is beyond EOD, truncated [ 120.909746][ T6738] loop0: p109 start 65529 is beyond EOD, truncated [ 120.909763][ T6738] loop0: p110 start 65529 is beyond EOD, truncated [ 120.909781][ T6738] loop0: p111 start 65529 is beyond EOD, truncated [ 120.909805][ T6738] loop0: p112 start 65529 is beyond EOD, truncated [ 120.909824][ T6738] loop0: p113 start 65529 is beyond EOD, truncated [ 120.909844][ T6738] loop0: p114 start 65529 is beyond EOD, [ 120.922391][ T6771] FAT-fs (loop1): Directory bread(block 68) failed [ 120.933209][ T6738] truncated [ 120.947042][ T6771] FAT-fs (loop1): Directory bread(block 69) failed [ 120.977770][ T6738] loop0: p115 start 65529 is beyond EOD, [ 120.984497][ T6771] FAT-fs (loop1): Directory bread(block 70) failed [ 121.007832][ T6738] truncated [ 121.015807][ T6771] FAT-fs (loop1): Directory bread(block 71) failed [ 121.037844][ T6738] loop0: p116 start 65529 is beyond EOD, truncated [ 121.048067][ T6771] FAT-fs (loop1): Directory bread(block 72) failed [ 121.056293][ T6738] loop0: p117 start 65529 is beyond EOD, truncated [ 121.065008][ T6771] FAT-fs (loop1): Directory bread(block 73) failed [ 121.079193][ T6738] loop0: p118 start 65529 is beyond EOD, truncated [ 121.096095][ T6738] loop0: p119 start 65529 is beyond EOD, truncated [ 121.116398][ T6738] loop0: p120 start 65529 is beyond EOD, truncated [ 121.146841][ T6738] loop0: p121 start 65529 is beyond EOD, truncated [ 121.167091][ T6738] loop0: p122 start 65529 is beyond EOD, truncated [ 121.203590][ T6738] loop0: p123 start 65529 is beyond EOD, truncated [ 121.220912][ T6738] loop0: p124 start 65529 is beyond EOD, truncated [ 121.227490][ T6738] loop0: p125 start 65529 is beyond EOD, truncated [ 121.248552][ T6738] loop0: p126 start 65529 is beyond EOD, truncated [ 121.269137][ T6738] loop0: p127 start 65529 is beyond EOD, truncated [ 121.288290][ T6738] loop0: p128 start 65529 is beyond EOD, truncated [ 121.294867][ T6738] loop0: p129 start 65529 is beyond EOD, truncated [ 121.337117][ T6738] loop0: p130 start 65529 is beyond EOD, truncated [ 121.362051][ T6738] loop0: p131 start 65529 is beyond EOD, truncated [ 121.373071][ T6738] loop0: p132 start 65529 is beyond EOD, truncated [ 121.387292][ T6738] loop0: p133 start 65529 is beyond EOD, truncated [ 121.396021][ T6738] loop0: p134 start 65529 is beyond EOD, truncated [ 121.410953][ T6738] loop0: p135 start 65529 is beyond EOD, truncated [ 121.419858][ T6738] loop0: p136 start 65529 is beyond EOD, truncated [ 121.426706][ T6738] loop0: p137 start 65529 is beyond EOD, truncated [ 121.440452][ T6738] loop0: p138 start 65529 is beyond EOD, truncated [ 121.447173][ T6738] loop0: p139 start 65529 is beyond EOD, truncated [ 121.455296][ T6738] loop0: p140 start 65529 is beyond EOD, truncated [ 121.467338][ T6738] loop0: p141 start 65529 is beyond EOD, truncated [ 121.483070][ T6738] loop0: p142 start 65529 is beyond EOD, truncated [ 121.489785][ T6738] loop0: p143 start 65529 is beyond EOD, truncated [ 121.496463][ T6738] loop0: p144 start 65529 is beyond EOD, truncated [ 121.508569][ T6738] loop0: p145 start 65529 is beyond EOD, truncated [ 121.515134][ T6738] loop0: p146 start 65529 is beyond EOD, truncated [ 121.526449][ T6738] loop0: p147 start 65529 is beyond EOD, truncated [ 121.530912][ T5853] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 121.554295][ T6738] loop0: p148 start 65529 is beyond EOD, truncated [ 121.559242][ T5853] asix: probe of 3-1:0.0 failed with error -71 [ 121.563171][ T6738] loop0: p149 start 65529 is beyond EOD, truncated [ 121.586340][ T6738] loop0: p150 start 65529 is beyond EOD, truncated [ 121.589055][ T5853] usb 3-1: USB disconnect, device number 5 [ 121.609166][ T6738] loop0: p151 start 65529 is beyond EOD, truncated [ 121.622935][ T6738] loop0: p152 start 65529 is beyond EOD, truncated [ 121.640389][ T6738] loop0: p153 start 65529 is beyond EOD, truncated [ 121.647155][ T6738] loop0: p154 start 65529 is beyond EOD, truncated [ 121.655431][ T6738] loop0: p155 start 65529 is beyond EOD, truncated [ 121.660138][ T5870] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 121.662726][ T6738] loop0: p156 start 65529 is beyond EOD, truncated [ 121.684028][ T6738] loop0: p157 start 65529 is beyond EOD, truncated [ 121.691150][ T6738] loop0: p158 start 65529 is beyond EOD, truncated [ 121.702816][ T6738] loop0: p159 start 65529 is beyond EOD, truncated [ 121.709683][ T6738] loop0: p160 start 65529 is beyond EOD, truncated [ 121.716405][ T6738] loop0: p161 start 65529 is beyond EOD, truncated [ 121.728787][ T6738] loop0: p162 start 65529 is beyond EOD, truncated [ 121.735441][ T6738] loop0: p163 start 65529 is beyond EOD, truncated [ 121.745923][ T6738] loop0: p164 start 65529 is beyond EOD, truncated [ 121.754290][ T6738] loop0: p165 start 65529 is beyond EOD, truncated [ 121.763681][ T6738] loop0: p166 start 65529 is beyond EOD, truncated [ 121.770563][ T6738] loop0: p167 start 65529 is beyond EOD, truncated [ 121.782585][ T6738] loop0: p168 start 65529 is beyond EOD, truncated [ 121.789882][ T6738] loop0: p169 start 65529 is beyond EOD, truncated [ 121.796449][ T6738] loop0: p170 start 65529 is beyond EOD, truncated [ 121.808402][ T6738] loop0: p171 start 65529 is beyond EOD, truncated [ 121.815090][ T6738] loop0: p172 start 65529 is beyond EOD, truncated [ 121.825840][ T6738] loop0: p173 start 65529 is beyond EOD, truncated [ 121.833919][ T6738] loop0: p174 start 65529 is beyond EOD, truncated [ 121.844599][ T6738] loop0: p175 start 65529 is beyond EOD, truncated [ 121.852563][ T6738] loop0: p176 start 65529 is beyond EOD, truncated [ 121.861070][ T6738] loop0: p177 start 65529 is beyond EOD, truncated [ 121.867639][ T6738] loop0: p178 start 65529 is beyond EOD, [ 121.870913][ T5870] usb 2-1: Using ep0 maxpacket: 32 [ 121.872339][ T6738] truncated [ 121.886879][ T6738] loop0: p179 start 65529 is beyond EOD, truncated [ 121.893739][ T6738] loop0: p180 start 65529 is beyond EOD, truncated [ 121.894816][ T5870] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 121.900951][ T6738] loop0: p181 start 65529 is beyond EOD, truncated [ 121.919224][ T6738] loop0: p182 start 65529 is beyond EOD, truncated [ 121.925967][ T6738] loop0: p183 start 65529 is beyond EOD, truncated [ 121.933416][ T5870] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 121.934431][ T6738] loop0: p184 start 65529 is beyond EOD, truncated [ 121.956525][ T6738] loop0: p185 start 65529 is beyond EOD, truncated [ 121.957294][ T5870] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 121.966064][ T6738] loop0: p186 start 65529 is beyond EOD, truncated [ 121.991509][ T6738] loop0: p187 start 65529 is beyond EOD, truncated [ 121.997719][ T5870] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 122.001470][ T6738] loop0: p188 start 65529 is beyond EOD, truncated [ 122.023377][ T6738] loop0: p189 start 65529 is beyond EOD, truncated [ 122.028480][ T5870] usb 2-1: config 0 interface 0 has no altsetting 0 [ 122.031449][ T6738] loop0: p190 start 65529 is beyond EOD, truncated [ 122.047213][ T6738] loop0: p191 start 65529 is beyond EOD, truncated [ 122.047496][ T5870] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 122.063873][ T5870] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 122.072909][ T6738] loop0: p192 start 65529 is beyond EOD, truncated [ 122.086996][ T6738] loop0: p193 start 65529 is beyond EOD, truncated [ 122.094253][ T5870] usb 2-1: Product: syz [ 122.096743][ T6738] loop0: p194 start 65529 is beyond EOD, [ 122.104387][ T5870] usb 2-1: Manufacturer: syz [ 122.105339][ T6738] truncated [ 122.124643][ T5870] usb 2-1: SerialNumber: syz [ 122.124899][ T6738] loop0: p195 start 65529 is beyond EOD, truncated [ 122.136647][ T6738] loop0: p196 start 65529 is beyond EOD, truncated [ 122.145024][ T5870] usb 2-1: config 0 descriptor?? [ 122.167085][ T5870] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 122.168084][ T6738] loop0: p197 start 65529 is beyond EOD, truncated [ 122.206576][ T5870] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 122.212712][ T6738] loop0: p198 start 65529 is beyond EOD, truncated [ 122.232457][ T6738] loop0: p199 start 65529 is beyond EOD, truncated [ 122.240611][ T6738] loop0: p200 start 65529 is beyond EOD, truncated [ 122.247306][ T6738] loop0: p201 start 65529 is beyond EOD, truncated [ 122.257433][ T6738] loop0: p202 start 65529 is beyond EOD, truncated [ 122.266004][ T6738] loop0: p203 start 65529 is beyond EOD, truncated [ 122.281824][ T6738] loop0: p204 start 65529 is beyond EOD, truncated [ 122.295024][ T6738] loop0: p205 start 65529 is beyond EOD, truncated [ 122.304255][ T6738] loop0: p206 start 65529 is beyond EOD, truncated [ 122.315885][ T6738] loop0: p207 start 65529 is beyond EOD, truncated [ 122.327428][ T6738] loop0: p208 start 65529 is beyond EOD, truncated [ 122.340373][ T6738] loop0: p209 start 65529 is beyond EOD, truncated [ 122.347195][ T6738] loop0: p210 start 65529 is beyond EOD, truncated [ 122.361784][ T6738] loop0: p211 start 65529 is beyond EOD, truncated [ 122.368542][ T6738] loop0: p212 start 65529 is beyond EOD, truncated [ 122.375235][ T6738] loop0: p213 start 65529 is beyond EOD, truncated [ 122.410528][ T6738] loop0: p214 start 65529 is beyond EOD, truncated [ 122.443184][ T6738] loop0: p215 start 65529 is beyond EOD, truncated [ 122.457956][ T6738] loop0: p216 start 65529 is beyond EOD, truncated [ 122.489841][ T6738] loop0: p217 start 65529 is beyond EOD, truncated [ 122.501227][ T6738] loop0: p218 start 65529 is beyond EOD, truncated [ 122.515580][ T6738] loop0: p219 start 65529 is beyond EOD, truncated [ 122.535496][ T6738] loop0: p220 start 65529 is beyond EOD, truncated [ 122.538945][ T5870] usb 2-1: USB disconnect, device number 6 [ 122.557068][ T6738] loop0: p221 start 65529 is beyond EOD, truncated [ 122.566329][ T5870] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 122.575796][ T6738] loop0: p222 start 65529 is beyond EOD, truncated [ 122.595703][ T6738] loop0: p223 start 65529 is beyond EOD, truncated [ 122.621941][ T6738] loop0: p224 start 65529 is beyond EOD, truncated [ 122.638408][ T6738] loop0: p225 start 65529 is beyond EOD, truncated [ 122.657890][ T6738] loop0: p226 start 65529 is beyond EOD, truncated [ 122.664563][ T6738] loop0: p227 start 65529 is beyond EOD, truncated [ 122.682051][ T6738] loop0: p228 start 65529 is beyond EOD, truncated [ 122.689571][ T6738] loop0: p229 start 65529 is beyond EOD, truncated [ 122.697371][ T6738] loop0: p230 start 65529 is beyond EOD, truncated [ 122.709579][ T6738] loop0: p231 start 65529 is beyond EOD, truncated [ 122.716230][ T6738] loop0: p232 start 65529 is beyond EOD, truncated [ 122.727050][ T6738] loop0: p233 start 65529 is beyond EOD, truncated [ 122.736524][ T6738] loop0: p234 start 65529 is beyond EOD, truncated [ 122.746196][ T6738] loop0: p235 start 65529 is beyond EOD, truncated [ 122.756887][ T6738] loop0: p236 start 65529 is beyond EOD, truncated [ 122.767557][ T6738] loop0: p237 start 65529 is beyond EOD, truncated [ 122.777583][ T6738] loop0: p238 start 65529 is beyond EOD, truncated [ 122.808690][ T6738] loop0: p239 start 65529 is beyond EOD, truncated [ 122.820589][ T6738] loop0: p240 start 65529 is beyond EOD, truncated [ 122.829759][ T6738] loop0: p241 start 65529 is beyond EOD, truncated [ 122.859153][ T6738] loop0: p242 start 65529 is beyond EOD, truncated [ 122.865739][ T6738] loop0: p243 start 65529 is beyond EOD, truncated [ 122.884011][ T6738] loop0: p244 start 65529 is beyond EOD, truncated [ 122.890926][ T6738] loop0: p245 start 65529 is beyond EOD, truncated [ 122.915801][ T6738] loop0: p246 start 65529 is beyond EOD, truncated [ 122.932509][ T6738] loop0: p247 start 65529 is beyond EOD, truncated [ 122.948118][ T6738] loop0: p248 start 65529 is beyond EOD, truncated [ 122.973031][ T6738] loop0: p249 start 65529 is beyond EOD, truncated [ 122.979960][ T6738] loop0: p250 start 65529 is beyond EOD, truncated [ 122.986517][ T6738] loop0: p251 start 65529 is beyond EOD, truncated [ 122.997982][ T6738] loop0: p252 start 65529 is beyond EOD, truncated [ 123.005458][ T6738] loop0: p253 start 65529 is beyond EOD, truncated [ 123.017889][ T6738] loop0: p254 start 65529 is beyond EOD, truncated [ 123.024469][ T6738] loop0: p255 start 65529 is beyond EOD, truncated [ 123.779797][ T6792] Bluetooth: hci0: Opcode 0x0c03 failed: -112 [ 123.827010][ T6781] loop2: detected capacity change from 0 to 32768 [ 123.863117][ T6781] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 123.947973][ T6781] XFS (loop2): Ending clean mount [ 123.965048][ T6781] XFS (loop2): Quotacheck needed: Please wait. [ 124.057274][ T6781] XFS (loop2): Quotacheck: Done. [ 124.212259][ T6805] netlink: 208 bytes leftover after parsing attributes in process `syz.0.363'. [ 124.242230][ T6781] xfs: Unexpected value for 'quota' [ 124.351437][ T5785] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 124.506051][ T6793] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 124.554353][ T6807] loop0: detected capacity change from 0 to 1024 [ 124.562102][ T6793] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 124.606555][ T6793] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 124.682732][ T6793] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 124.712477][ T6793] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 124.738278][ T6793] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 124.769769][ T6793] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 124.807620][ T6793] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 124.816306][ T6793] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 124.827130][ T42] hfsplus: b-tree write err: -5, ino 4 [ 124.837341][ T6793] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 124.989441][ T6809] netlink: 'syz.2.364': attribute type 4 has an invalid length. [ 125.006796][ T6809] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.364'. [ 125.026300][ T6811] [U] [ 125.029366][ T6811] [U] [ 125.032095][ T6811] [U] [ 125.034819][ T6811] [U] [ 125.037546][ T6811] [U] [ 125.040271][ T6811] [U] [ 125.043006][ T6811] [U] [ 125.045730][ T6811] [U] [ 125.075256][ T6811] [U] [ 125.078037][ T6811] [U] [ 125.080782][ T6811] [U] [ 125.107222][ T6810] [U] [ 125.382413][ T6821] netlink: 4 bytes leftover after parsing attributes in process `syz.2.371'. [ 125.682753][ T6826] loop0: detected capacity change from 0 to 4096 [ 125.798225][ T6826] ntfs3: loop0: Failed to initialize $Secure::$SDH (-22). [ 125.805617][ T6826] ntfs3: loop0: Failed to initialize $Secure (-22). [ 125.857997][ T787] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 126.079939][ T787] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 126.109321][ T787] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 126.129326][ T787] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 126.147799][ T787] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 126.166397][ T787] usb 3-1: Manufacturer: syz [ 126.182318][ T787] usb 3-1: config 0 descriptor?? [ 126.337775][ T787] rc_core: IR keymap rc-hauppauge not found [ 126.343895][ T787] Registered IR keymap rc-empty [ 126.377883][ T787] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 126.412791][ T787] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input8 [ 126.588122][ T5795] Bluetooth: hci1: command 0x0c1a tx timeout [ 126.748132][ T5795] Bluetooth: hci2: command 0x0c1a tx timeout [ 126.755590][ T6835] rc rc0: two consecutive events of type space [ 126.803451][ T6826] loop0: detected capacity change from 0 to 32768 [ 126.830768][ T5795] Bluetooth: hci3: command 0x0c1a tx timeout [ 126.849875][ T6826] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.373 (6826) [ 126.960872][ T5879] usb 3-1: USB disconnect, device number 6 [ 126.997114][ T6826] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 127.038323][ T6826] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 127.047148][ T6826] BTRFS info (device loop0): using free space tree [ 127.215561][ T6833] loop1: detected capacity change from 0 to 32768 [ 127.281395][ T6826] BTRFS info (device loop0): enabling ssd optimizations [ 127.319903][ T6833] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 127.325281][ T6826] BTRFS info (device loop0): auto enabling async discard [ 127.622367][ T6833] XFS (loop1): Ending clean mount [ 127.660517][ T6833] XFS (loop1): Quotacheck needed: Please wait. [ 127.766936][ T5784] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 127.821953][ T6833] XFS (loop1): Quotacheck: Done. [ 128.134193][ T5788] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 128.177445][ T5800] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 128.207866][ T5800] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 128.228617][ T5800] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 128.264406][ T5800] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 128.276423][ T5800] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 128.284329][ T5800] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 128.341923][ T1078] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.393403][ T5796] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop0 scanned by udevd (5796) [ 128.519433][ T1078] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.588591][ T5870] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 128.642216][ T1078] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.676965][ T5795] Bluetooth: hci1: command 0x0c1a tx timeout [ 128.733246][ T6876] loop1: detected capacity change from 0 to 8192 [ 128.745318][ T6876] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 128.771112][ T6876] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 128.789956][ T6876] REISERFS (device loop1): using ordered data mode [ 128.796680][ T6876] reiserfs: using flush barriers [ 128.802356][ T5870] usb 3-1: Using ep0 maxpacket: 16 [ 128.811532][ T5870] usb 3-1: config 0 has an invalid interface number: 251 but max is 0 [ 128.828603][ T5870] usb 3-1: config 0 has no interface number 0 [ 128.828696][ T5795] Bluetooth: hci2: command 0x0c1a tx timeout [ 128.834996][ T5870] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 128.852401][ T6876] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 128.869096][ T5870] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 128.883432][ T6876] REISERFS (device loop1): checking transaction log (loop1) [ 128.913257][ T1078] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.924340][ T5870] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 128.938478][ T5870] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.960499][ T6876] REISERFS (device loop1): Using r5 hash to sort names [ 128.969764][ T5870] usb 3-1: Product: syz [ 128.974305][ T5870] usb 3-1: Manufacturer: syz [ 128.989653][ T5870] usb 3-1: SerialNumber: syz [ 129.010366][ T5870] usb 3-1: config 0 descriptor?? [ 129.037305][ T6870] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 129.072925][ T6870] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 129.159560][ T6876] REISERFS warning (device loop1): super-6502 reiserfs_getopt: unknown mount option "noload" [ 129.326057][ T6870] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 129.360741][ T6870] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 129.627193][ T6880] loop1: detected capacity change from 0 to 16384 [ 129.771266][ T6886] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 129.803050][ T5870] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 129.847196][ T5870] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71 [ 129.929696][ T5870] asix: probe of 3-1:0.251 failed with error -71 [ 129.969957][ T5870] usb 3-1: USB disconnect, device number 7 [ 130.040305][ T6867] chnl_net:caif_netlink_parms(): no params data found [ 130.316554][ T6896] loop1: detected capacity change from 0 to 2048 [ 130.348192][ T5795] Bluetooth: hci3: command tx timeout [ 130.376491][ T6896] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 130.439934][ T6896] NILFS (loop1): mounting unchecked fs [ 130.587912][ T6896] NILFS (loop1): recovery complete [ 130.680267][ T6907] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 130.750955][ T5795] Bluetooth: hci1: command 0x0c1a tx timeout [ 130.881451][ T6892] loop0: detected capacity change from 0 to 32768 [ 130.910675][ T5795] Bluetooth: hci2: command 0x0c1a tx timeout [ 131.117234][ T6867] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.173851][ T6867] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.219144][ T6867] bridge_slave_0: entered allmulticast mode [ 131.229860][ T6867] bridge_slave_0: entered promiscuous mode [ 131.246461][ T6892] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 131.255198][ T6867] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.278386][ T6867] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.306994][ T6867] bridge_slave_1: entered allmulticast mode [ 131.339232][ T11] (kworker/u4:0,11,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=16, inode=66, rec_len=491, name_len=2 [ 131.348447][ T6867] bridge_slave_1: entered promiscuous mode [ 131.723465][ T6867] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 131.728629][ T5784] ocfs2: Unmounting device (7,0) on (node local) [ 131.889204][ T6867] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 132.095855][ T6867] team0: Port device team_slave_0 added [ 132.138573][ T6867] team0: Port device team_slave_1 added [ 132.428335][ T5795] Bluetooth: hci3: command tx timeout [ 132.564326][ T6937] loop2: detected capacity change from 0 to 8192 [ 132.654897][ T6937] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 132.685244][ T6867] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 132.702889][ T6867] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.814565][ T6867] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 132.888881][ T6867] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 132.895884][ T6867] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.993943][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.006330][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.047977][ T6867] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 133.342196][ T6956] capability: warning: `syz.2.405' uses 32-bit capabilities (legacy support in use) [ 133.470845][ T6867] hsr_slave_0: entered promiscuous mode [ 133.520553][ T6867] hsr_slave_1: entered promiscuous mode [ 133.561435][ T6867] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 133.571278][ T6960] loop2: detected capacity change from 0 to 512 [ 133.583692][ T6867] Cannot create hsr debugfs directory [ 133.638113][ T6960] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.677964][ T6960] ext4 filesystem being mounted at /135/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.835428][ T6960] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 133.857353][ T6945] loop0: detected capacity change from 0 to 40427 [ 133.919911][ T6971] loop1: detected capacity change from 0 to 16 [ 133.937406][ T1078] hsr_slave_0: left promiscuous mode [ 133.983493][ T5785] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.992812][ T6945] F2FS-fs (loop0): invalid crc value [ 134.011533][ T6971] erofs: (device loop1): mounted with root inode @ nid 36. [ 134.047417][ T1078] hsr_slave_1: left promiscuous mode [ 134.075339][ T1078] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 134.097019][ T1078] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 134.102579][ T6945] F2FS-fs (loop0): Found nat_bits in checkpoint [ 134.131198][ T1078] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 134.153914][ T1078] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 134.188834][ T1078] bridge_slave_0: left allmulticast mode [ 134.194558][ T1078] bridge_slave_0: left promiscuous mode [ 134.222234][ T6945] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 134.236236][ T1078] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.379789][ T5784] syz-executor: attempt to access beyond end of device [ 134.379789][ T5784] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 134.406213][ T1078] veth1_macvtap: left promiscuous mode [ 134.422032][ T5784] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 134.424386][ T1078] veth0_macvtap: left promiscuous mode [ 134.454660][ T1078] veth1_vlan: left promiscuous mode [ 134.468381][ T1078] veth0_vlan: left promiscuous mode [ 134.511378][ T5795] Bluetooth: hci3: command tx timeout [ 134.698031][ T28] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 134.784147][ T6987] loop1: detected capacity change from 0 to 2048 [ 134.805133][ T6987] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 134.892459][ T6987] UDF-fs: unknown compression code (0) [ 134.912442][ T28] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.949605][ T28] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.988180][ T28] usb 3-1: New USB device found, idVendor=172f, idProduct=0038, bcdDevice= 0.00 [ 134.997302][ T28] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.077482][ T28] usb 3-1: config 0 descriptor?? [ 135.318243][ T5879] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 135.337467][ T6991] loop0: detected capacity change from 0 to 1024 [ 135.482859][ T48] hfsplus: b-tree write err: -5, ino 4 [ 135.530371][ T5879] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 135.554434][ T5879] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 135.578254][ T28] waltop 0003:172F:0038.0008: hidraw0: USB HID v0.00 Device [HID 172f:0038] on usb-dummy_hcd.2-1/input0 [ 135.599710][ T5879] usb 2-1: New USB device found, idVendor=046d, idProduct=c532, bcdDevice= 0.00 [ 135.616298][ T5879] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.641105][ T5879] usb 2-1: config 0 descriptor?? [ 135.654271][ T6993] loop0: detected capacity change from 0 to 512 [ 135.727534][ T6993] EXT4-fs: Ignoring removed orlov option [ 135.746413][ T6993] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 135.767146][ T6993] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 135.807983][ T6993] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2244: inode #15: comm syz.0.417: corrupted in-inode xattr: e_value size too large [ 135.836297][ T5776] usb 3-1: USB disconnect, device number 8 [ 135.871811][ T6993] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.417: couldn't read orphan inode 15 (err -117) [ 135.909798][ T6993] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.057537][ T1078] team0 (unregistering): Port device team_slave_1 removed [ 136.062070][ T5784] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.205735][ T1078] team0 (unregistering): Port device team_slave_0 removed [ 136.266378][ T1078] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 136.327495][ T787] usb 2-1: USB disconnect, device number 7 [ 136.385078][ T1078] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 136.522124][ T7003] loop2: detected capacity change from 0 to 256 [ 136.554014][ T7003] exfat: Deprecated parameter 'namecase' [ 136.560979][ T7003] exfat: Deprecated parameter 'utf8' [ 136.587807][ T5795] Bluetooth: hci3: command tx timeout [ 136.608211][ T7003] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6d3f72e, utbl_chksum : 0xe619d30d) [ 137.099834][ T1078] bond0 (unregistering): Released all slaves [ 138.017001][ T6867] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 138.039839][ T6867] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 138.047841][ T787] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 138.076667][ T6867] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 138.117171][ T6867] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 138.153472][ T27] audit: type=1326 audit(1756417290.432:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7033 comm="syz.0.430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f643058ebe9 code=0x7ffc0000 [ 138.199039][ T27] audit: type=1326 audit(1756417290.462:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7033 comm="syz.0.430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f643058ebe9 code=0x7ffc0000 [ 138.279949][ T787] usb 2-1: config 0 interface 0 has no altsetting 0 [ 138.286975][ T787] usb 2-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 138.304647][ T27] audit: type=1326 audit(1756417290.462:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7033 comm="syz.0.430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f643058ebe9 code=0x7ffc0000 [ 138.358521][ T787] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.394399][ T787] usb 2-1: config 0 descriptor?? [ 138.409204][ T27] audit: type=1326 audit(1756417290.462:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7033 comm="syz.0.430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f643058ec23 code=0x7ffc0000 [ 138.478270][ T27] audit: type=1326 audit(1756417290.462:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7033 comm="syz.0.430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f643058ec23 code=0x7ffc0000 [ 138.559097][ T27] audit: type=1326 audit(1756417290.462:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7033 comm="syz.0.430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f643058ebe9 code=0x7ffc0000 [ 138.584813][ T6867] 8021q: adding VLAN 0 to HW filter on device bond0 [ 138.618664][ T27] audit: type=1326 audit(1756417290.462:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7033 comm="syz.0.430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f643058ebe9 code=0x7ffc0000 [ 138.658699][ T27] audit: type=1326 audit(1756417290.462:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7033 comm="syz.0.430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f643058ebe9 code=0x7ffc0000 [ 138.683643][ T6867] 8021q: adding VLAN 0 to HW filter on device team0 [ 138.696832][ T7050] Bluetooth: MGMT ver 1.22 [ 138.708590][ T27] audit: type=1326 audit(1756417290.462:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7033 comm="syz.0.430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f643058ebe9 code=0x7ffc0000 [ 138.711714][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.738536][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state [ 138.830042][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.834951][ T787] zeroplus 0003:0C12:0005.000A: unknown main item tag 0x0 [ 138.837227][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state [ 138.867405][ T787] zeroplus 0003:0C12:0005.000A: hidraw0: USB HID v1.01 Device [HID 0c12:0005] on usb-dummy_hcd.1-1/input0 [ 138.895220][ T787] zeroplus 0003:0C12:0005.000A: no inputs found [ 138.983340][ T6867] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 139.156864][ T787] usb 2-1: USB disconnect, device number 8 [ 139.437995][ T7069] loop0: detected capacity change from 0 to 64 [ 139.685074][ T6867] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 140.430097][ T7106] netlink: 16 bytes leftover after parsing attributes in process `syz.2.446'. [ 140.497192][ T7110] loop1: detected capacity change from 0 to 64 [ 140.753186][ T5795] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 140.758631][ T6867] veth0_vlan: entered promiscuous mode [ 140.774727][ T5795] Bluetooth: hci1: unexpected event for opcode 0x0c5b [ 140.817164][ T6867] veth1_vlan: entered promiscuous mode [ 140.911873][ T6867] veth0_macvtap: entered promiscuous mode [ 140.950679][ T6867] veth1_macvtap: entered promiscuous mode [ 141.052725][ T6867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.097869][ T6867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.137893][ T6867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.173447][ T6867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.195767][ T6867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.207880][ T6867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.220172][ T6867] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 141.234543][ T6867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.245490][ T6867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.256344][ T6867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.280718][ T6867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.295795][ T6867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.306340][ T6867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.318548][ T28] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 141.330141][ T6867] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 141.364665][ T7127] loop0: detected capacity change from 0 to 4096 [ 141.378744][ T7126] geneve2: entered promiscuous mode [ 141.395841][ T7126] geneve2: entered allmulticast mode [ 141.412275][ T6867] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.434598][ T6867] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.443889][ T6867] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.453248][ T6867] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.528108][ T28] usb 3-1: Using ep0 maxpacket: 16 [ 141.559538][ T28] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 141.580803][ T28] usb 3-1: config 0 has no interfaces? [ 141.620093][ T28] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 141.651407][ T28] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.683292][ T28] usb 3-1: Product: syz [ 141.691504][ T2972] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.700191][ T28] usb 3-1: Manufacturer: syz [ 141.715663][ T28] usb 3-1: SerialNumber: syz [ 141.721009][ T2972] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.756768][ T28] r8152-cfgselector 3-1: config 0 descriptor?? [ 141.824028][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.844859][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.002177][ T7136] sp0: Synchronizing with TNC [ 142.010514][ T28] usbip-host 3-1: 3-1 is not in match_busid table... skip! [ 142.214383][ T28] usb 3-1: USB disconnect, device number 9 [ 142.524391][ T7146] loop1: detected capacity change from 0 to 4096 [ 142.577895][ T7153] loop0: detected capacity change from 0 to 256 [ 142.670863][ T7153] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 142.840571][ T7146] ntfs3: loop1: failed to convert "0000" to iso8859-14 [ 143.435553][ T7169] loop0: detected capacity change from 0 to 128 [ 143.467116][ T7169] EXT4-fs: Ignoring removed mblk_io_submit option [ 143.559094][ T7169] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 143.592128][ T7169] ext4 filesystem being mounted at /119/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 143.759650][ T7169] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:406: inode #2: comm syz.0.467: No space for directory leaf checksum. Please run e2fsck -D. [ 143.830521][ T7169] EXT4-fs error (device loop0): __ext4_find_entry:1696: inode #2: comm syz.0.467: checksumming directory block 0 [ 143.963400][ T5784] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 144.158902][ T7183] process 'syz.1.471' launched '/dev/fd/3' with NULL argv: empty string added [ 144.224584][ T7185] loop0: detected capacity change from 0 to 512 [ 144.272782][ T7156] loop4: detected capacity change from 0 to 32768 [ 144.371710][ T7185] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 144.423342][ T7156] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 144.697846][ T7156] XFS (loop4): Ending clean mount [ 144.800436][ T7156] XFS (loop4): Quotacheck needed: Please wait. [ 144.833065][ T7167] loop2: detected capacity change from 0 to 32768 [ 145.003825][ T7156] XFS (loop4): Quotacheck: Done. [ 145.378094][ T6867] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 146.129640][ T7225] loop0: detected capacity change from 0 to 4096 [ 146.209951][ T7202] loop1: detected capacity change from 0 to 32768 [ 146.233192][ T7231] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 146.341448][ T7225] syz.0.482 (7225) used greatest stack depth: 19440 bytes left [ 146.428423][ T5870] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 146.637887][ T5870] usb 3-1: Using ep0 maxpacket: 8 [ 146.660830][ T5870] usb 3-1: config 0 interface 0 altsetting 42 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 146.704640][ T5870] usb 3-1: config 0 interface 0 has no altsetting 0 [ 146.734809][ T5870] usb 3-1: New USB device found, idVendor=056a, idProduct=00d6, bcdDevice= 0.00 [ 146.766485][ T5870] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.792095][ T5870] usb 3-1: config 0 descriptor?? [ 146.865761][ T7247] netlink: 8 bytes leftover after parsing attributes in process `syz.1.486'. [ 147.280680][ T5870] wacom 0003:056A:00D6.000B: Unknown device_type for 'HID 056a:00d6'. Assuming pen. [ 147.348547][ T5870] wacom 0003:056A:00D6.000B: hidraw0: USB HID v0.07 Device [HID 056a:00d6] on usb-dummy_hcd.2-1/input0 [ 147.421426][ T5870] input: Wacom BambooPT 2FG 4x5 Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:00D6.000B/input/input10 [ 147.482781][ T7262] loop4: detected capacity change from 0 to 512 [ 147.585958][ T5870] usb 3-1: USB disconnect, device number 10 [ 147.643399][ T7263] fido_id[7263]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 148.639745][ T7293] bridge0: entered promiscuous mode [ 148.658501][ T7293] macvtap1: entered promiscuous mode [ 148.665826][ T7293] bridge0: port 3(macvtap1) entered blocking state [ 148.710300][ T7293] bridge0: port 3(macvtap1) entered disabled state [ 148.728112][ T7293] macvtap1: entered allmulticast mode [ 148.743984][ T7293] bridge0: entered allmulticast mode [ 148.771499][ T7293] macvtap1: left allmulticast mode [ 148.787320][ T7293] bridge0: left allmulticast mode [ 148.824592][ T7293] bridge0: left promiscuous mode [ 149.015031][ T7274] loop1: detected capacity change from 0 to 32768 [ 149.090825][ T7274] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 149.178485][ T7274] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 149.311169][ T7317] loop0: detected capacity change from 0 to 16 [ 149.376387][ T7317] erofs: (device loop0): mounted with root inode @ nid 36. [ 149.525460][ T7321] netlink: 'syz.2.511': attribute type 3 has an invalid length. [ 149.571986][ T5788] ocfs2: Unmounting device (7,1) on (node local) [ 150.314420][ T7315] loop4: detected capacity change from 0 to 32768 [ 150.331605][ T7315] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.510 (7315) [ 150.386059][ T7315] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 150.402113][ T5853] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 150.402304][ T7315] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 150.424055][ T7315] BTRFS info (device loop4): enabling auto defrag [ 150.432252][ T7315] BTRFS info (device loop4): doing ref verification [ 150.439218][ T7315] BTRFS info (device loop4): use no compression [ 150.446230][ T7315] BTRFS info (device loop4): force clearing of disk cache [ 150.461689][ T7315] BTRFS info (device loop4): max_inline at 4096 [ 150.504232][ T7315] BTRFS info (device loop4): disabling free space tree [ 150.592596][ T5853] usb 2-1: Using ep0 maxpacket: 16 [ 150.616640][ T5853] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.696923][ T7315] BTRFS info (device loop4): enabling ssd optimizations [ 150.704830][ T5853] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 150.725344][ T7315] BTRFS info (device loop4): auto enabling async discard [ 150.734680][ T5853] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 150.756171][ T7315] BTRFS info (device loop4): rebuilding free space tree [ 150.768323][ T5853] usb 2-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.00 [ 150.788599][ T5853] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.810633][ T5853] usb 2-1: config 0 descriptor?? [ 150.842962][ T7315] BTRFS info (device loop4): disabling free space tree [ 150.856356][ T7315] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 150.869533][ T7315] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 150.982315][ T6867] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 151.076711][ T5796] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 11 /dev/loop4 scanned by udevd (5796) [ 151.243702][ T5853] ryos 0003:1E7D:31CE.000C: hidraw0: USB HID v0.00 Device [HID 1e7d:31ce] on usb-dummy_hcd.1-1/input0 [ 151.554102][ T5870] usb 2-1: USB disconnect, device number 9 [ 151.592830][ T7378] loop2: detected capacity change from 0 to 256 [ 151.692159][ T7378] FAT-fs (loop2): Directory bread(block 64) failed [ 151.717140][ T7378] FAT-fs (loop2): Directory bread(block 65) failed [ 151.727889][ T7378] FAT-fs (loop2): Directory bread(block 66) failed [ 151.749205][ T7378] FAT-fs (loop2): Directory bread(block 67) failed [ 151.755895][ T7378] FAT-fs (loop2): Directory bread(block 68) failed [ 151.793396][ T7378] FAT-fs (loop2): Directory bread(block 69) failed [ 151.819810][ T7378] FAT-fs (loop2): Directory bread(block 70) failed [ 151.826426][ T7378] FAT-fs (loop2): Directory bread(block 71) failed [ 151.838417][ T7378] FAT-fs (loop2): Directory bread(block 72) failed [ 151.845015][ T7378] FAT-fs (loop2): Directory bread(block 73) failed [ 152.261080][ T7384] loop1: detected capacity change from 0 to 128 [ 152.419711][ T7376] loop4: detected capacity change from 0 to 40427 [ 152.491504][ T7376] F2FS-fs (loop4): Found nat_bits in checkpoint [ 152.549434][ T7376] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 152.625783][ T7376] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 152.782292][ T6867] syz-executor: attempt to access beyond end of device [ 152.782292][ T6867] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 152.796738][ T6867] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 152.955401][ T7399] loop2: detected capacity change from 0 to 256 [ 153.419875][ T7408] loop2: detected capacity change from 0 to 64 [ 153.494402][ T7412] loop4: detected capacity change from 0 to 256 [ 153.574578][ T7412] FAT-fs (loop4): Directory bread(block 64) failed [ 153.591246][ T7412] FAT-fs (loop4): Directory bread(block 65) failed [ 153.609614][ T7412] FAT-fs (loop4): Directory bread(block 66) failed [ 153.637480][ T7412] FAT-fs (loop4): Directory bread(block 67) failed [ 153.676540][ T7412] FAT-fs (loop4): Directory bread(block 68) failed [ 153.707880][ T7412] FAT-fs (loop4): Directory bread(block 69) failed [ 153.714590][ T7412] FAT-fs (loop4): Directory bread(block 70) failed [ 153.759102][ T7412] FAT-fs (loop4): Directory bread(block 71) failed [ 153.765803][ T7412] FAT-fs (loop4): Directory bread(block 72) failed [ 153.792858][ T7412] FAT-fs (loop4): Directory bread(block 73) failed [ 154.366236][ T7434] loop2: detected capacity change from 0 to 4096 [ 154.396032][ T7434] ntfs: (device loop2): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 154.424260][ T7434] ntfs: (device loop2): ntfs_read_locked_inode(): $DATA attribute is missing. [ 154.433876][ T7434] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 154.444634][ T7438] netlink: 191416 bytes leftover after parsing attributes in process `syz.4.549'. [ 154.448875][ T7434] ntfs: (device loop2): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 154.507541][ T7434] ntfs: volume version 3.1. [ 155.014042][ T7452] sp0: Synchronizing with TNC [ 155.420858][ T27] audit: type=1326 audit(1756417307.692:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7466 comm="syz.0.558" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f643058ebe9 code=0x0 [ 155.987518][ T7489] loop4: detected capacity change from 0 to 24 [ 156.024785][ T7489] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 156.061945][ T7489] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 156.989933][ T7524] loop0: detected capacity change from 0 to 64 [ 157.538396][ C1] sd 0:0:1:0: [sda] tag#5659 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 157.548913][ C1] sd 0:0:1:0: [sda] tag#5659 CDB: Read(6) 08 00 00 00 00 00 [ 157.560940][ T7536] vlan2: entered allmulticast mode [ 157.607201][ T7536] bond0: entered allmulticast mode [ 157.632132][ T7536] bond_slave_0: entered allmulticast mode [ 157.682299][ T7536] bond_slave_1: entered allmulticast mode [ 157.856130][ T7542] netlink: 'syz.4.584': attribute type 28 has an invalid length. [ 158.288053][ T5776] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 158.359588][ T7558] bridge: RTM_NEWNEIGH with unconfigured vlan 3 on bridge0 [ 158.487962][ T5776] usb 2-1: Using ep0 maxpacket: 16 [ 158.512504][ T5776] usb 2-1: config 1 has an invalid descriptor of length 79, skipping remainder of the config [ 158.537743][ T5776] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 158.546698][ T5776] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 158.573591][ T7560] loop0: detected capacity change from 0 to 2048 [ 158.578326][ T7562] loop2: detected capacity change from 0 to 512 [ 158.602552][ T5776] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 158.618802][ T7560] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 158.630139][ T5776] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.648054][ T5776] usb 2-1: Product: syz [ 158.657736][ T5776] usb 2-1: Manufacturer: syz [ 158.662391][ T5776] usb 2-1: SerialNumber: syz [ 158.690055][ T7562] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 158.721106][ T7564] loop4: detected capacity change from 0 to 2048 [ 158.759756][ T7562] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 158.823565][ T7564] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 158.851475][ T7562] EXT4-fs (loop2): 1 truncate cleaned up [ 158.879220][ T7562] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.973845][ T7562] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 158.976084][ T5776] cdc_ncm 2-1:1.0: skipping garbage [ 159.017905][ T5776] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 159.069742][ T5776] cdc_ncm 2-1:1.0: bind() failure [ 159.108020][ T5776] usb 2-1: USB disconnect, device number 10 [ 159.171295][ T5785] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.248558][ T7568] veth0_to_bond: entered allmulticast mode [ 159.549278][ T7579] program syz.0.600 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 159.598031][ T5853] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 159.820312][ T5853] usb 3-1: config 0 has an invalid interface number: 239 but max is 0 [ 159.848096][ T5853] usb 3-1: config 0 has no interface number 0 [ 159.854287][ T5853] usb 3-1: config 0 interface 239 altsetting 0 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 159.879283][ T5853] usb 3-1: config 0 interface 239 altsetting 0 endpoint 0x82 has invalid maxpacket 511, setting to 64 [ 159.913986][ T5853] usb 3-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73 [ 159.937923][ T5853] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.965194][ T5853] usb 3-1: Product: syz [ 159.990924][ T5853] usb 3-1: Manufacturer: syz [ 159.995603][ T5853] usb 3-1: SerialNumber: syz [ 160.050163][ T5853] usb 3-1: config 0 descriptor?? [ 160.056200][ T7571] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 160.068046][ T7571] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 160.124326][ T7597] loop4: detected capacity change from 0 to 128 [ 160.195432][ T7598] netlink: 20 bytes leftover after parsing attributes in process `syz.1.605'. [ 160.350565][ T7571] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 160.368712][ T7571] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 160.561305][ T7605] loop1: detected capacity change from 0 to 128 [ 160.592568][ T7605] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 160.665546][ T7605] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 160.801228][ T5853] asix 3-1:0.239 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 160.811855][ T5853] asix: probe of 3-1:0.239 failed with error -71 [ 160.856189][ T5853] usb 3-1: USB disconnect, device number 11 [ 160.887312][ T7605] UDF-fs: error (device loop1): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 48 marked as free, partition length is 40) [ 160.897327][ T7608] netlink: 56 bytes leftover after parsing attributes in process `syz.4.609'. [ 160.996404][ T7585] loop0: detected capacity change from 0 to 32768 [ 162.310092][ T7645] loop0: detected capacity change from 0 to 16 [ 162.364261][ T7645] erofs: (device loop0): mounted with root inode @ nid 36. [ 162.406038][ T7645] erofs: (device loop0): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 36 [ 162.438635][ T7645] syz.0.612: attempt to access beyond end of device [ 162.438635][ T7645] loop0: rw=0, sector=296, nr_sectors = 8 limit=16 [ 162.492700][ T7645] erofs: (device loop0): z_erofs_read_folio: read error -117 @ 0 of nid 36 [ 162.537930][ T7645] erofs: (device loop0): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 162.756870][ T7656] loop0: detected capacity change from 0 to 128 [ 162.990428][ T7634] loop2: detected capacity change from 0 to 32768 [ 163.050136][ T7661] tipc: Started in network mode [ 163.055522][ T7661] tipc: Node identity ff000000000000000000000000000001, cluster identity 4711 [ 163.102887][ T7634] JBD2: Ignoring recovery information on journal [ 163.112591][ T7661] tipc: Enabling of bearer rejected, failed to enable media [ 163.191354][ T7634] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 163.517397][ T7634] OCFS2: ERROR (device loop2): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #1792 has bad signature [ 163.584132][ T7634] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 163.657938][ T7634] OCFS2: File system is now read-only. [ 163.663492][ T7634] (syz.2.618,7634,1):ocfs2_search_chain:1785 ERROR: status = -30 [ 163.687986][ T7634] (syz.2.618,7634,0):ocfs2_search_chain:1871 ERROR: status = -30 [ 163.718056][ T7634] (syz.2.618,7634,0):ocfs2_claim_suballoc_bits:1940 ERROR: status = -30 [ 163.740015][ T7634] (syz.2.618,7634,0):ocfs2_claim_suballoc_bits:1983 ERROR: status = -30 [ 163.778681][ T7634] (syz.2.618,7634,0):ocfs2_claim_new_inode:2216 ERROR: status = -30 [ 163.799010][ T7634] (syz.2.618,7634,0):ocfs2_claim_new_inode:2231 ERROR: status = -30 [ 163.829411][ T7634] (syz.2.618,7634,0):ocfs2_mknod_locked:639 ERROR: status = -30 [ 163.866592][ T7634] (syz.2.618,7634,0):ocfs2_symlink:1944 ERROR: status = -30 [ 163.888461][ T7634] (syz.2.618,7634,0):ocfs2_symlink:2068 ERROR: status = -30 [ 163.928016][ T7690] loop0: detected capacity change from 0 to 64 [ 163.942163][ T7692] loop4: detected capacity change from 0 to 512 [ 164.012620][ T7692] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.090325][ T7690] hfs: request for non-existent node 237 in B*Tree [ 164.134753][ T7690] hfs: request for non-existent node 237 in B*Tree [ 164.176862][ T7690] hfs: request for non-existent node 237 in B*Tree [ 164.196632][ T7690] hfs: request for non-existent node 237 in B*Tree [ 164.318869][ T3485] hfs: request for non-existent node 237 in B*Tree [ 164.320370][ T6867] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.325915][ T3485] hfs: request for non-existent node 237 in B*Tree [ 164.374848][ T3485] ------------[ cut here ]------------ [ 164.380692][ T3485] kernel BUG at fs/hfs/inode.c:449! [ 164.393834][ T3485] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 164.399968][ T3485] CPU: 1 PID: 3485 Comm: kworker/u4:9 Not tainted syzkaller #0 [ 164.407569][ T3485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2025 [ 164.417749][ T3485] Workqueue: writeback wb_workfn (flush-7:0) [ 164.423785][ T3485] RIP: 0010:hfs_write_inode+0x7c4/0x7d0 [ 164.429367][ T3485] Code: c7 c1 00 f3 ee 96 80 e1 07 80 c1 03 38 c1 0f 8c 7d fe ff ff 48 c7 c7 00 f3 ee 96 e8 e6 d4 85 ff e9 6c fe ff ff e8 bc 8e 2e ff <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 55 41 57 41 56 41 [ 164.449004][ T3485] RSP: 0018:ffffc9000ccb7360 EFLAGS: 00010293 [ 164.455083][ T3485] RAX: ffffffff825700e4 RBX: ffff888076c52228 RCX: ffff88802dd18000 [ 164.463060][ T3485] RDX: 0000000000000000 RSI: ffffffff8cf37f60 RDI: 0000000000000000 [ 164.471038][ T3485] RBP: ffffc9000ccb74f0 R08: ffff88802dd18000 R09: 0000000000000003 [ 164.479019][ T3485] R10: 0000000000000004 R11: 0000000000000000 R12: dffffc0000000000 [ 164.486996][ T3485] R13: 1ffff92001996e70 R14: ffff888076c521d8 R15: 0000000000000000 [ 164.494973][ T3485] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 164.503903][ T3485] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 164.510490][ T3485] CR2: 000055b2416a4950 CR3: 000000007e088000 CR4: 00000000003506e0 [ 164.518468][ T3485] Call Trace: [ 164.521746][ T3485] [ 164.524681][ T3485] ? hfs_inode_write_fork+0x1a0/0x1a0 [ 164.530153][ T3485] ? __rwlock_init+0x150/0x150 [ 164.534925][ T3485] __writeback_single_inode+0x705/0xee0 [ 164.540483][ T3485] writeback_sb_inodes+0x77c/0xef0 [ 164.545626][ T3485] ? queue_io+0x560/0x560 [ 164.549974][ T3485] ? rcu_is_watching+0x15/0xb0 [ 164.554746][ T3485] wb_writeback+0x450/0xba0 [ 164.559269][ T3485] ? queue_io+0x3a1/0x560 [ 164.563690][ T3485] ? percpu_ref_tryget+0x250/0x250 [ 164.568807][ T3485] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 164.575097][ T3485] ? lockdep_hardirqs_on+0x98/0x150 [ 164.580335][ T3485] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 164.586497][ T3485] wb_workfn+0x3ff/0xe20 [ 164.590779][ T3485] ? inode_wait_for_writeback+0x200/0x200 [ 164.596521][ T3485] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 164.602507][ T3485] ? read_lock_is_recursive+0x20/0x20 [ 164.607885][ T3485] ? _raw_spin_unlock_irq+0x23/0x50 [ 164.613089][ T3485] ? process_scheduled_works+0x957/0x15b0 [ 164.618811][ T3485] ? process_scheduled_works+0x957/0x15b0 [ 164.624532][ T3485] process_scheduled_works+0xa45/0x15b0 [ 164.630092][ T3485] ? assign_work+0x400/0x400 [ 164.634776][ T3485] ? assign_work+0x39e/0x400 [ 164.639369][ T3485] worker_thread+0xa55/0xfc0 [ 164.643966][ T3485] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 164.649875][ T3485] ? _raw_spin_unlock+0x40/0x40 [ 164.654733][ T3485] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 164.660637][ T3485] kthread+0x2fa/0x390 [ 164.664706][ T3485] ? pr_cont_work+0x560/0x560 [ 164.669392][ T3485] ? kthread_blkcg+0xd0/0xd0 [ 164.673981][ T3485] ret_from_fork+0x48/0x80 [ 164.678402][ T3485] ? kthread_blkcg+0xd0/0xd0 [ 164.682990][ T3485] ret_from_fork_asm+0x11/0x20 [ 164.687777][ T3485] [ 164.690809][ T3485] Modules linked in: [ 164.765297][ T3485] ---[ end trace 0000000000000000 ]--- [ 164.773924][ T3485] RIP: 0010:hfs_write_inode+0x7c4/0x7d0 [ 164.784168][ T5785] ocfs2: Unmounting device (7,2) on (node local) [ 164.787736][ T3485] Code: c7 c1 00 f3 ee 96 80 e1 07 80 c1 03 38 c1 0f 8c 7d fe ff ff 48 c7 c7 00 f3 ee 96 e8 e6 d4 85 ff e9 6c fe ff ff e8 bc 8e 2e ff <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 55 41 57 41 56 41 [ 164.854314][ T3485] RSP: 0018:ffffc9000ccb7360 EFLAGS: 00010293 [ 164.881042][ T3485] RAX: ffffffff825700e4 RBX: ffff888076c52228 RCX: ffff88802dd18000 [ 164.902179][ T3485] RDX: 0000000000000000 RSI: ffffffff8cf37f60 RDI: 0000000000000000 [ 164.928393][ T3485] RBP: ffffc9000ccb74f0 R08: ffff88802dd18000 R09: 0000000000000003 [ 164.936446][ T3485] R10: 0000000000000004 R11: 0000000000000000 R12: dffffc0000000000 [ 164.962417][ T3485] R13: 1ffff92001996e70 R14: ffff888076c521d8 R15: 0000000000000000 [ 164.978104][ T3485] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 164.997713][ T3485] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 165.004380][ T3485] CR2: 000055c61029e008 CR3: 000000000cb30000 CR4: 00000000003506f0 [ 165.025509][ T3485] Kernel panic - not syncing: Fatal exception [ 165.031755][ T3485] Kernel Offset: disabled [ 165.036112][ T3485] Rebooting in 86400 seconds..