last executing test programs: 57.311442142s ago: executing program 3 (id=409): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000009500"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) unshare(0x20000400) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r0, 0xe0, &(0x7f0000001840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x65, 0x8, 0x0, 0x0}}, 0x10) 56.606201518s ago: executing program 3 (id=412): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000400), 0x8) listen(r0, 0x0) shutdown(r0, 0x0) 56.32640807s ago: executing program 3 (id=414): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000040)=""/185) 54.285389575s ago: executing program 3 (id=422): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000640)='./file2\x00', 0x10050, &(0x7f00000000c0)={[{@errors_remount}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7}}]}, 0x3, 0x51e, &(0x7f0000000680)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000000340)={0x2020}, 0xcb0a) 53.396929067s ago: executing program 3 (id=428): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @remote}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0xffff, 0x2, 0x10, {0x2, 0x4e21, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x20000000) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x23}}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="1800000000000000100100000100000051d833483cc75d51900000000000000004000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319e2e66d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) 52.557653664s ago: executing program 3 (id=436): openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) unshare(0x20000480) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x8b, 0xfffa}, 0x1d, [0x7ffe, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x8, 0x4, 0x3c5b, 0x1, 0x3, 0x9, 0x1, 0x1f461e2c, 0x0, 0xe660, 0x4, 0x7, 0x101, 0x7fff, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x71, 0xfffffff8, 0x7, 0x0, 0x0, 0xd, 0x3e, 0x8f, 0x6, 0x10000006, 0x0, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x134, 0x7ffe, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0x6, 0x3, 0x0, 0x7, 0x5, 0x0, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x4, 0x8000, 0x9, 0x400, 0x5, 0x6, 0x7, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x2, 0xa, 0x4, 0x9, 0x8, 0x800, 0x6, 0x7, 0x8000, 0x1, 0xfe000000, 0xff7f, 0x2, 0x7f, 0x9, 0x2, 0xffffffff, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x2], [0x400, 0x4, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x83, 0x80000003, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0xf38, 0x8, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0xf, 0xd, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0xfffffff9, 0x1, 0x1, 0xffff, 0x0, 0x1a, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0x65], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x2, 0xf58, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7ffe, 0x8, 0x200a61d, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0xe, 0x6, 0xffffffff, 0x80000000, 0x6b4d7043, 0x8, 0xc8, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x7, 0x2, 0x4, 0x6, 0x1, 0x10080, 0x5, 0x8, 0x30b1d693, 0xa1f, 0x8, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffbf2441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 52.071531034s ago: executing program 32 (id=436): openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) unshare(0x20000480) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x8b, 0xfffa}, 0x1d, [0x7ffe, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x8, 0x4, 0x3c5b, 0x1, 0x3, 0x9, 0x1, 0x1f461e2c, 0x0, 0xe660, 0x4, 0x7, 0x101, 0x7fff, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x71, 0xfffffff8, 0x7, 0x0, 0x0, 0xd, 0x3e, 0x8f, 0x6, 0x10000006, 0x0, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x134, 0x7ffe, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0x6, 0x3, 0x0, 0x7, 0x5, 0x0, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x4, 0x8000, 0x9, 0x400, 0x5, 0x6, 0x7, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x2, 0xa, 0x4, 0x9, 0x8, 0x800, 0x6, 0x7, 0x8000, 0x1, 0xfe000000, 0xff7f, 0x2, 0x7f, 0x9, 0x2, 0xffffffff, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x2], [0x400, 0x4, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x83, 0x80000003, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0xf38, 0x8, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0xf, 0xd, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0xfffffff9, 0x1, 0x1, 0xffff, 0x0, 0x1a, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0x65], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x2, 0xf58, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7ffe, 0x8, 0x200a61d, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0xe, 0x6, 0xffffffff, 0x80000000, 0x6b4d7043, 0x8, 0xc8, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x7, 0x2, 0x4, 0x6, 0x1, 0x10080, 0x5, 0x8, 0x30b1d693, 0xa1f, 0x8, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffbf2441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 4.057618273s ago: executing program 2 (id=753): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x141000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000280)={0x80000001}) 3.552249153s ago: executing program 2 (id=758): r0 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x4e22, 0x1, @local, 0x5d5e}, 0x1c) 3.056814804s ago: executing program 0 (id=762): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000180)={0x28, r1, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x40480c0}, 0x4000004) 2.693081153s ago: executing program 1 (id=765): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$KVM_GET_MSRS_sys(r0, 0xc008ae88, &(0x7f0000000080)) 2.658737696s ago: executing program 0 (id=766): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000000), 0x2}, {0x3, &(0x7f0000000040)=0x2000000000003, 0x2}], 0x2, 0x0, 0x0, 0x0) 2.402715446s ago: executing program 1 (id=768): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@newqdisc={0x9c, 0x24, 0xf0b, 0x0, 0x1000000, {0x0, 0x0, 0x12, r1, {0x0, 0x300}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x6c, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x1}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x0, 0x0, 0x0, 0x0, 0xd645, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffff]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4, 0x3f}]}]}}]}, 0x9c}, 0x1, 0x7a00}, 0x0) 2.137687418s ago: executing program 1 (id=771): r0 = socket$inet6(0xa, 0x2, 0x3a) bind$inet6(r0, &(0x7f0000000400)={0xa, 0x4e23, 0x80, @empty}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='net/icmp6\x00') read$msr(r1, &(0x7f00000004c0)=""/4096, 0x1000) 2.131484238s ago: executing program 2 (id=772): setresuid(0x0, 0xffffffffffffffff, 0xee00) r0 = gettid() futex(&(0x7f0000000180), 0xb, 0x0, 0x0, &(0x7f0000000240), 0x2) prlimit64(r0, 0xb, 0x0, 0x0) 2.007805748s ago: executing program 4 (id=773): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@bridge_dellink={0x34, 0x11, 0x5, 0x0, 0x0, {0x7, 0x0, 0x0, r2}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x4, 0x0, 0x1, {0xc, 0x8, 0x0, 0x1, [{0x8}]}}]}]}, 0x34}}, 0x0) 1.935881814s ago: executing program 1 (id=774): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)={0x24, r1, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004800}, 0x80) 1.72748928s ago: executing program 4 (id=775): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000000380)={{0x80}, 'port0\x00', 0x7e, 0xa1c07, 0x6, 0x80000000, 0x100001, 0x0, 0x0, 0x0, 0x6}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8042, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) 1.72726489s ago: executing program 5 (id=776): bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000080)="18", 0x10, 0x0, &(0x7f00000000c0)={0x11, 0xc, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 1.704155802s ago: executing program 1 (id=777): syz_mount_image$reiserfs(&(0x7f0000001100), &(0x7f0000000040)='./bus\x00', 0xc2, &(0x7f0000000140)={[{@acl}, {@usrjquota_file, 0x4}, {@resize={'resize', 0x3d, 0x1875140b}}, {@commit={'commit', 0x3d, 0x7}}, {@usrjquota, 0x3d}]}, 0xff, 0x1115, &(0x7f0000002280)="$eJzs2D9rFEEYB+Df7B0Yq5NNvwhaWEhIODurFBGutbaRkMpUuSoiiN/FjyOp7EM+gEXAUhjZTdYTCUS5CxJ4Hpjd4Z13/pXvBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAK687D/bTdKOkSZJSbrubHGRpBvjj75MmpS8PlosD07mr5ZJJkN66Vs/q5+Wdu/JVjtv5+1e+2J7/2m7PH3/7u3x8dHJ9TIlXc4vN3+Rcn2eG22VzW8IAAAA90Rd2+zPJadj528q7vX3BwAAAG6z8QcFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgH9UZ6t+m+RHrTVNkpJ03dniIkn3Pw8IAAAArK2kyZvZTfEMzwArz/N1Vob42L6XPmc3n4f5D1aph00e3v3RAQAA4B6Z3ppRfqvHn2WaWuvHcexxptnZuer3v37g234yOT3I7q+a/NPwPb/8cDi2Uid3dB8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Cc7cEACAAAAIOj/63YECgAAAAAAAAAAAAAAAAAAAAAAAHwUAAD//wAQ3aw=") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000040)='./bus\x00', 0x2029c1b, 0x0, 0x1, 0x0, &(0x7f00000000c0)) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000000), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x113602) 1.60795421s ago: executing program 0 (id=778): r0 = inotify_init1(0x0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) 1.467407842s ago: executing program 5 (id=779): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r0, &(0x7f0000000100)={&(0x7f00000001c0)={0xa, 0x4e21, 0x80000, @private0}, 0x1c, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x18}, 0x0) 1.392631058s ago: executing program 0 (id=780): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xfd, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.386845578s ago: executing program 4 (id=781): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x13, r0, 0x0) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x20200009, 0x21, &(0x7f0000000240)={0x0, 0x6, 0xd, 0x360}, 0x8, 0x7, 0x7f, 0x0, 0x1, 0x101, 0x0}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x991950a34e80ecea, 0x11, r0, 0x7f772000) 1.205440873s ago: executing program 5 (id=782): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x4, @dev={0xfe, 0x80, '\x00', 0x38}, 0x9}]}, &(0x7f0000000040)=0x10) shutdown(r0, 0x2) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000800)={r1, @in={{0x2, 0x4e22, @empty}}, 0x9, 0x10}, 0x90) 1.100768391s ago: executing program 2 (id=783): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) sendmsg(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f0000000380)="2cbdd5e297a5f9f749f4f8fe3f134625ab52151dd066bb5f57b3b61d4b7dca6ba2f64501556e154307f50a2936afe8fccac94a48ca10b1562baf18738c017463c7947d0995e518c51c5ce7b79474f8149d5d880e151827ce7f4e3be08fd99929b962bcad69bb5f7d576e4cc1ca206f873a", 0x71}], 0x1}, 0x8940) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000100)="5fc908ce8cb5049e077f3ba953190a8ce22e51a45861006641e661523ed30e13487a64d3e98231a20c5e08ebe24801b531c63d06db0e6cca2bdb10dd7d02d74ab9dd95bd33747598fc1e063ff967b7c16abd2076323dca7cd2cc5ab8225b6d31c8029cfe91c8f8c054ff41", 0x6b}, {&(0x7f0000000980)="941dd634f75d70afed00837e63d7a620c1b5fd6f48660a86826b474ffb6274f02f52586f30140dafd6a0baffee63a7bafec8837268f35cf21be882e4ac6c522534080f35b3033aeb3f84e473f0b8c5a0d132378d8d7ff5299fd7616415c9c97f6331af9d07a746bb657558522dcee4c292efe922ce9584ec0ca31b7f5362419bd2084f5f9d2ef32bb866383dcb862e17ae85989ce20040b023f6d6b6cae15622b6b9ab922f95edd7f1fe11b20efdecc038027fe452320671c98e51817e1ab6e62610629bb0fa0b8513df543828b7dc90c220c6e7b17c4c7176508749", 0x50c}, {&(0x7f0000000480)="11", 0x10}], 0x3) 1.049066795s ago: executing program 5 (id=784): r0 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0xfffffbfd, 0x100, 0x2, 0x13b}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x8, 0x1}) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2}) io_uring_enter(r0, 0x2, 0x0, 0x0, 0x0, 0x0) 956.408163ms ago: executing program 4 (id=785): setregid(0x0, 0xee01) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) landlock_create_ruleset(0x0, 0x0, 0x0) migrate_pages(r0, 0x3, 0x0, 0x0) 834.293443ms ago: executing program 0 (id=786): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x8, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$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") mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./file1\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x110) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x4011, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e02a9000f1b70090403000000000008007639c2000000000000000000001c0000000000000080003500", "036c47c6780820d1cbf796ff010000292a1be79affbcc2542ded71038259ca173ce1a311ef54ec32d71e14efb48b000000000000000000000000000000000800", "f28359738e229a4c66810000000000d300e6d602000000000000ef0000000001", [0x200]}) 775.106937ms ago: executing program 5 (id=787): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000000000de820000c0"]) 482.581041ms ago: executing program 4 (id=788): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x141000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000280)={0x80000001}) 472.659142ms ago: executing program 2 (id=798): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0xd0f, 0x470bd30, 0x25dfdbff, {0x60, 0x0, 0x0, r2, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_ingress={0xc}, @TCA_RATE={0x6, 0x5, {0x2, 0x2}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x44080) 428.959655ms ago: executing program 1 (id=789): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80202, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="01000000000000009c000040"]) 295.279876ms ago: executing program 2 (id=790): syz_emit_ethernet(0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaa"], 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f0000000280)={r1, @in={{0x2, 0x4e24, @empty}}, 0x9, 0x3}, 0x90) 205.756723ms ago: executing program 5 (id=791): add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) mount$fuseblk(&(0x7f0000000000), 0x0, 0x0, 0x2010002, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600) 154.938297ms ago: executing program 0 (id=792): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="80000000", @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="6100330080000000ffffffffffff080211000000505050505050200000000000000000006400011003"], 0x80}}, 0x0) 0s ago: executing program 4 (id=793): syz_mount_image$ext4(&(0x7f0000000d80)='ext4\x00', &(0x7f0000000cc0)='./bus\x00', 0x21081e, &(0x7f0000000280)={[{@mb_optimize_scan}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@stripe={'stripe', 0x3d, 0x9}}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030000, 0x0, 0x1, 0x0, r0, 0x0}]) kernel console output (not intermixed with test programs): 94] usb 3-1: USB disconnect, device number 4 [ 104.706954][ T4494] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 104.782814][ T4816] loop3: detected capacity change from 0 to 64 [ 104.895602][ T4494] usb 2-1: Using ep0 maxpacket: 8 [ 104.904355][ T4494] usb 2-1: unable to get BOS descriptor or descriptor too short [ 104.929637][ T4494] usb 2-1: config 4 interface 0 has no altsetting 0 [ 104.966834][ T4494] usb 2-1: string descriptor 0 read error: -22 [ 104.989068][ T4494] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 105.016300][ T4494] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.059889][ T4494] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 105.104560][ T4494] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 105.146581][ T4494] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 105.175197][ T4494] usb 2-1: media controller created [ 105.216885][ T4494] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 105.318152][ T4804] usb 2-1: dvb_usb_au6610: wlen=0, aborting [ 105.505640][ T4786] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 105.538242][ T4494] zl10353_read_register: readreg error (reg=127, ret==0) [ 105.705580][ T4786] usb 4-1: Using ep0 maxpacket: 16 [ 105.719585][ T4786] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.745754][ T4494] usb 2-1: USB disconnect, device number 2 [ 105.852563][ T4786] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.880499][ T4834] loop2: detected capacity change from 0 to 1024 [ 105.904114][ T4786] usb 4-1: New USB device found, idVendor=22d4, idProduct=1503, bcdDevice= 0.00 [ 105.925309][ T4834] EXT4-fs: Ignoring removed orlov option [ 105.992178][ T4786] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.042145][ T4786] usb 4-1: config 0 descriptor?? [ 106.076442][ T4834] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 106.195433][ C0] sched: RT throttling activated [ 106.197516][ T26] audit: type=1800 audit(1756402628.623:6): pid=4834 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.147" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 106.287574][ T4827] loop4: detected capacity change from 0 to 131072 [ 106.309686][ T4827] F2FS-fs (loop4): Segment count (31) mismatch with total segments from devices (0) [ 106.319645][ T4827] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 106.342072][ T4827] F2FS-fs (loop4): invalid crc value [ 106.393458][ T4827] F2FS-fs (loop4): Found nat_bits in checkpoint [ 106.457737][ T4827] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 106.465212][ T4827] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 106.544410][ T4786] glorious 0003:22D4:1503.0002: unknown main item tag 0x0 [ 106.563888][ T4786] glorious 0003:22D4:1503.0002: unknown main item tag 0x0 [ 106.589125][ T4786] glorious 0003:22D4:1503.0002: unknown main item tag 0x0 [ 106.598551][ T4827] F2FS-fs (loop4): checksum invalid, nid = 4, ino_of_node = 4, efdbe231 vs. 15bb5891 [ 106.604096][ T4786] glorious 0003:22D4:1503.0002: unknown main item tag 0x0 [ 106.648910][ T4786] glorious 0003:22D4:1503.0002: unknown main item tag 0x0 [ 106.688217][ T4786] glorious 0003:22D4:1503.0002: hidraw0: USB HID v0.05 Device [Glorious Model I] on usb-dummy_hcd.3-1/input0 [ 106.744508][ T4786] usb 4-1: USB disconnect, device number 3 [ 106.764966][ T4850] syzkaller0: tun_chr_ioctl cmd 1074812117 [ 106.797724][ T4273] EXT4-fs (loop2): unmounting filesystem. [ 107.095840][ T4855] loop2: detected capacity change from 0 to 2048 [ 107.126789][ T4851] fido_id[4851]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 107.215996][ T4855] NILFS (loop2): invalid segment: Magic number mismatch [ 107.255232][ T4855] NILFS (loop2): trying rollback from an earlier position [ 107.357134][ T4855] NILFS (loop2): recovery complete [ 107.430803][ T4862] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 107.724307][ T4855] overlayfs: upper fs does not support tmpfile. [ 107.785750][ T4786] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 107.798746][ T4855] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 107.871201][ T4855] overlayfs: failed to set xattr on upper [ 107.893553][ T4855] overlayfs: ...falling back to xino=off. [ 107.975523][ T4786] usb 5-1: Using ep0 maxpacket: 16 [ 107.982844][ T4786] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 108.016009][ T4786] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 108.047653][ T4786] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 108.085541][ T4786] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 108.124971][ T4786] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 108.177589][ T4786] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 108.217325][ T4786] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 108.225396][ T4786] usb 5-1: Manufacturer: syz [ 108.277343][ T4786] usb 5-1: config 0 descriptor?? [ 108.593855][ T4318] kernel write not supported for file /sequencer (pid: 4318 comm: kworker/0:5) [ 108.705618][ T4786] rc_core: IR keymap rc-hauppauge not found [ 108.717718][ T4786] Registered IR keymap rc-empty [ 108.733222][ T4786] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 108.765560][ T4786] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 108.806242][ T4786] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 108.854263][ T4786] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input7 [ 108.904092][ T4786] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 108.945660][ T4786] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 108.985630][ T4786] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 109.035592][ T4786] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 109.047214][ T4902] loop2: detected capacity change from 0 to 512 [ 109.095619][ T4786] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 109.135697][ T4786] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 109.176793][ T4786] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 109.200383][ T4902] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 109.219590][ T4902] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.225676][ T4786] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 109.254414][ T4882] loop1: detected capacity change from 0 to 32768 [ 109.275658][ T4786] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 109.305757][ T4786] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 109.345603][ T4786] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 109.358378][ T4882] syz.1.166: attempt to access beyond end of device [ 109.358378][ T4882] loop1: rw=1, sector=4680032, nr_sectors = 8 limit=32768 [ 109.376789][ T4786] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 109.416856][ T4786] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 109.441194][ T4882] metapage_write_end_io: I/O error [ 109.477376][ T4786] usb 5-1: USB disconnect, device number 3 [ 109.497360][ T4882] ERROR: (device loop1): diWrite: ixpxd invalid [ 109.497360][ T4882] [ 109.561892][ T4882] ERROR: (device loop1): remounting filesystem as read-only [ 109.590253][ T4882] ERROR: (device loop1): txCommit: [ 109.590253][ T4882] [ 109.642850][ T4273] EXT4-fs (loop2): unmounting filesystem. [ 109.649107][ T4882] blkno = 8ed2c, nblocks = 1 [ 109.658356][ T4882] ERROR: (device loop1): dbUpdatePMap: blocks are outside the map [ 109.658356][ T4882] [ 109.736997][ T4882] UFO tlock:0xffffc9000287a120 [ 109.784933][ T4882] ERROR: (device loop1): dtReadFirst: DT_GETPAGE: dtree page corrupt [ 109.784933][ T4882] [ 109.829239][ T4882] jfs_readdir: unexpected rc = -5 from dtReadNext [ 110.020333][ T108] blkno = 8ed2c, nblocks = 4 [ 110.025063][ T108] ERROR: (device loop1): dbUpdatePMap: blocks are outside the map [ 110.025063][ T108] [ 110.063032][ T4264] syz-executor: attempt to access beyond end of device [ 110.063032][ T4264] loop1: rw=1, sector=4680032, nr_sectors = 8 limit=32768 [ 110.088021][ T4264] metapage_write_end_io: I/O error [ 110.108494][ T4264] JFS: metapage_get_blocks failed [ 110.113746][ T4264] JFS: metapage_get_blocks failed [ 110.160540][ T4264] JFS: metapage_get_blocks failed [ 110.187785][ T4264] JFS: metapage_get_blocks failed [ 110.205594][ T4582] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 110.306791][ T4924] loop3: detected capacity change from 0 to 8192 [ 110.364379][ T4924] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 110.379229][ T4924] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 110.389565][ T4924] REISERFS (device loop3): using ordered data mode [ 110.396391][ T4924] reiserfs: using flush barriers [ 110.417458][ T4582] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 110.431591][ T4924] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 110.448674][ T4582] usb 1-1: config 0 has no interface number 0 [ 110.470068][ T4582] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 110.479886][ T4924] REISERFS (device loop3): checking transaction log (loop3) [ 110.492677][ T4582] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.525491][ T4582] usb 1-1: Product: syz [ 110.545064][ T4582] usb 1-1: Manufacturer: syz [ 110.625498][ T4582] usb 1-1: SerialNumber: syz [ 110.652439][ T4582] usb 1-1: config 0 descriptor?? [ 110.900935][ T4582] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 110.922963][ T4582] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 110.947794][ T4924] REISERFS (device loop3): Using tea hash to sort names [ 110.979941][ T4924] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 111.005880][ T4582] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 111.014014][ T4582] usb 1-1: media controller created [ 111.047097][ T4924] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 111.143903][ T4582] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 112.245889][ T4582] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 112.260997][ T4335] Bluetooth: hci5: Frame reassembly failed (-84) [ 112.278242][ T4335] Bluetooth: hci5: Frame reassembly failed (-84) [ 112.297511][ T4957] Bluetooth: hci5: Frame reassembly failed (-84) [ 112.397530][ T4582] usb 1-1: USB disconnect, device number 3 [ 112.563423][ T4966] loop2: detected capacity change from 0 to 1024 [ 112.574769][ T4966] EXT4-fs: Ignoring removed bh option [ 112.631524][ T4966] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 112.719720][ T4966] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2818: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 112.937197][ T4980] device ip6gretap0 entered promiscuous mode [ 112.959759][ T4980] device ip6gretap0 left promiscuous mode [ 113.232068][ T4273] EXT4-fs (loop2): unmounting filesystem. [ 113.534264][ T4993] loop2: detected capacity change from 0 to 4096 [ 113.603638][ T4999] program syz.0.198 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 113.948437][ T5005] loop0: detected capacity change from 0 to 128 [ 114.153298][ T4984] loop4: detected capacity change from 0 to 32768 [ 114.275752][ T4271] Bluetooth: hci5: command 0x1003 tx timeout [ 114.275784][ T48] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 114.389003][ T4984] XFS (loop4): Mounting V5 Filesystem [ 114.526609][ T4984] XFS (loop4): Ending clean mount [ 114.554639][ T4984] XFS (loop4): Quotacheck needed: Please wait. [ 114.679082][ T4984] XFS (loop4): Quotacheck: Done. [ 114.773499][ T5009] loop2: detected capacity change from 0 to 32768 [ 114.819095][ T5025] netlink: 24 bytes leftover after parsing attributes in process `syz.1.207'. [ 114.891973][ T5009] JBD2: Ignoring recovery information on journal [ 114.913547][ T5029] netlink: 24 bytes leftover after parsing attributes in process `syz.1.207'. [ 115.044517][ T5009] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 115.100430][ T4276] XFS (loop4): Unmounting Filesystem [ 115.208808][ T26] audit: type=1804 audit(1756402637.663:7): pid=5009 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.202" name="/newroot/43/file1/file0" dev="loop2" ino=17058 res=1 errno=0 [ 115.375367][ T4273] ocfs2: Unmounting device (7,2) on (node local) [ 115.738927][ T5016] loop3: detected capacity change from 0 to 32768 [ 115.778273][ T5016] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.204 (5016) [ 115.794720][ T5044] netlink: 8 bytes leftover after parsing attributes in process `syz.1.213'. [ 115.827619][ T5016] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 115.845361][ T5044] netlink: 'syz.1.213': attribute type 14 has an invalid length. [ 115.860870][ T5016] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 115.890154][ T5044] netlink: 24 bytes leftover after parsing attributes in process `syz.1.213'. [ 115.922663][ T5016] BTRFS info (device loop3): using free space tree [ 116.281287][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 116.372739][ T5016] BTRFS info (device loop3): enabling ssd optimizations [ 116.566846][ T4268] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 117.471308][ T5051] loop2: detected capacity change from 0 to 32768 [ 117.507245][ T5051] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop2 scanned by syz.2.214 (5051) [ 117.538601][ T5091] loop3: detected capacity change from 0 to 64 [ 117.552961][ T5051] BTRFS info (device loop2): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 117.587970][ T5051] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 117.625773][ T5051] BTRFS info (device loop2): using free space tree [ 117.669291][ T4497] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 117.875756][ T4497] usb 2-1: Using ep0 maxpacket: 16 [ 117.895173][ T4497] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 117.915388][ T4497] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.934431][ T5097] netlink: 8 bytes leftover after parsing attributes in process `syz.3.223'. [ 117.935533][ T4497] usb 2-1: Product: syz [ 117.976394][ T4497] usb 2-1: Manufacturer: syz [ 117.996694][ T4497] usb 2-1: SerialNumber: syz [ 118.045149][ T4497] usb 2-1: config 0 descriptor?? [ 118.106302][ T5051] BTRFS info (device loop2): enabling ssd optimizations [ 118.169932][ T5081] loop4: detected capacity change from 0 to 32768 [ 118.261432][ T26] audit: type=1800 audit(1756402640.713:8): pid=5114 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.214" name="file1" dev="loop2" ino=261 res=0 errno=0 [ 118.495185][ T4497] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 118.532453][ T4497] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 118.582294][ T4497] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 118.621041][ T26] audit: type=1400 audit(1756402641.073:9): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=2626200D3A3A302020343A302020353A302020363A3020373A300A20454752455353207072696F72697479206D617070696E67733A pid=5116 comm="syz.0.225" [ 118.630862][ T4497] usb 2-1: media controller created [ 118.676375][ T5119] loop3: detected capacity change from 0 to 128 [ 118.737355][ T5119] EXT4-fs: Ignoring removed nobh option [ 118.760080][ T5121] device geneve2 entered promiscuous mode [ 118.782644][ T4497] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 118.845177][ T5119] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 118.888761][ T5119] ext4 filesystem being mounted at /53/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 118.923535][ T4497] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 118.943385][ T4497] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 118.949761][ T5125] loop0: detected capacity change from 0 to 64 [ 118.977525][ T4273] BTRFS info (device loop2): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 118.983151][ T5119] fscrypt (loop3, inode 12): Can't use IV_INO_LBLK_32 policy on filesystem 'loop3' because it doesn't have stable inode numbers [ 119.126917][ T4258] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 10 /dev/loop2 scanned by udevd (4258) [ 119.449010][ T4495] usb 2-1: USB disconnect, device number 3 [ 119.495337][ T4268] EXT4-fs (loop3): unmounting filesystem. [ 119.536843][ T4495] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 119.715815][ T5136] loop3: detected capacity change from 0 to 1024 [ 120.073892][ T5145] netlink: 'syz.1.237': attribute type 10 has an invalid length. [ 120.147942][ T5145] batman_adv: batadv0: Adding interface: team0 [ 120.229023][ T5145] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 120.318826][ T5145] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 120.529992][ T5149] loop4: detected capacity change from 0 to 8192 [ 120.564661][ T5149] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 120.568414][ T5160] loop1: detected capacity change from 0 to 128 [ 120.586576][ T5149] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 120.596938][ T5149] REISERFS (device loop4): using ordered data mode [ 120.603500][ T5149] reiserfs: using flush barriers [ 120.614509][ T5160] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 120.627230][ T5149] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 120.645060][ T5149] REISERFS (device loop4): checking transaction log (loop4) [ 120.655990][ T5160] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 120.665567][ T5149] REISERFS (device loop4): Using r5 hash to sort names [ 120.672976][ T5149] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 120.705541][ T4495] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 120.935752][ T4495] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 120.960285][ T4495] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 120.998290][ T4495] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 121.023673][ T4495] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.052612][ T4495] usb 3-1: Product: syz [ 121.065614][ T4495] usb 3-1: Manufacturer: syz [ 121.074982][ T4495] usb 3-1: SerialNumber: syz [ 121.093337][ T4495] usb 3-1: config 0 descriptor?? [ 121.107866][ T5155] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 121.121685][ T5155] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 121.220355][ T5165] loop4: detected capacity change from 0 to 4096 [ 121.257093][ T5165] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 121.381513][ T5155] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 121.411731][ T5155] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 121.856230][ T4495] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 122.048652][ T5182] netlink: 'syz.3.254': attribute type 21 has an invalid length. [ 122.059379][ T4495] dm9601 3-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 122.089007][ T4495] usb 3-1: USB disconnect, device number 5 [ 122.095147][ T5182] netlink: 'syz.3.254': attribute type 1 has an invalid length. [ 122.135147][ T5182] netlink: 'syz.3.254': attribute type 21 has an invalid length. [ 122.185522][ T5182] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.254'. [ 122.558218][ T4264] cgroup: fork rejected by pids controller in /syz1 [ 123.059605][ T5207] loop3: detected capacity change from 0 to 64 [ 123.095112][ T5207] hfs: hfs: Invalid key length: 94 [ 123.129032][ T5079] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 123.155593][ T4326] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 123.223381][ T4268] hfs: node 4:3 still has 1 user(s)! [ 123.260916][ T4384] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.358297][ T5211] loop3: detected capacity change from 0 to 2048 [ 123.359976][ T4326] usb 1-1: Using ep0 maxpacket: 32 [ 123.377068][ T5079] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.409466][ T4326] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 14385, setting to 1024 [ 123.425019][ T5079] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.425781][ T5211] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 123.456128][ T5079] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 123.458623][ T4384] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.465539][ T4326] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 123.495529][ T5079] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.526415][ T5079] usb 3-1: config 0 descriptor?? [ 123.559919][ T4326] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 123.586057][ T4326] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 123.610338][ T4326] usb 1-1: Product: syz [ 123.614743][ T4326] usb 1-1: Manufacturer: syz [ 123.632275][ T4326] usb 1-1: SerialNumber: syz [ 123.669204][ T4326] usb 1-1: config 0 descriptor?? [ 123.676040][ T5201] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 123.691556][ T4384] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.808259][ T5214] loop4: detected capacity change from 0 to 2048 [ 123.871853][ T5214] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 123.922742][ T4384] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.942275][ T5079] hid-steam 0003:28DE:1142.0003: unknown main item tag 0x0 [ 123.994755][ T5079] hid-steam 0003:28DE:1142.0003: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 124.020106][ T5217] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 124.052007][ T5079] hid-steam 0003:28DE:1142.0004: unknown main item tag 0x0 [ 124.156636][ T4495] usb 1-1: USB disconnect, device number 4 [ 124.169921][ T5218] NILFS (loop4): DAT doesn't have a block to manage vblocknr = 3044605952 [ 124.189109][ T5079] hid-steam 0003:28DE:1142.0004: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 124.295630][ T5218] NILFS error (device loop4): nilfs_bmap_truncate: broken bmap (inode number=15) [ 124.315620][ T5079] hid-steam 0003:28DE:1142.0003: Steam wireless receiver connected [ 124.323793][ T5079] hid-steam 0003:28DE:1142.0003: No HID_FEATURE_REPORT submitted - nothing to read [ 124.407251][ T5218] Remounting filesystem read-only [ 124.422717][ T5218] NILFS (loop4): error -5 truncating bmap (ino=15) [ 124.427233][ T5079] usb 3-1: USB disconnect, device number 6 [ 124.490678][ T5214] syz.4.271 (5214) used greatest stack depth: 20104 bytes left [ 124.519357][ T5079] hid-steam 0003:28DE:1142.0003: Steam wireless receiver disconnected [ 124.610932][ T4276] NILFS (loop4): disposed unprocessed dirty file(s) when detaching log writer [ 124.658890][ T5223] fido_id[5223]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 124.781644][ T5228] loop4: detected capacity change from 0 to 128 [ 124.835760][ T4786] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 124.927444][ T4265] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 124.939077][ T4265] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 124.951097][ T4265] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 124.953071][ T5233] netlink: 'syz.2.275': attribute type 1 has an invalid length. [ 124.971602][ T4271] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 124.980924][ T4271] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 124.989483][ T4271] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 124.995854][ T5233] netlink: 8 bytes leftover after parsing attributes in process `syz.2.275'. [ 125.029864][ T4786] usb 4-1: Using ep0 maxpacket: 32 [ 125.052998][ T4786] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 125.062503][ T4786] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.075685][ T4786] usb 4-1: config 0 descriptor?? [ 125.270092][ T5239] IPv6: NLM_F_CREATE should be specified when creating new route [ 125.293126][ T4786] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 125.319047][ T4786] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 125.381001][ T4786] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 125.404974][ T4786] usb 4-1: media controller created [ 125.441157][ T5241] loop4: detected capacity change from 0 to 736 [ 125.451917][ T4786] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 125.466861][ T5243] loop0: detected capacity change from 0 to 1024 [ 125.592834][ T4786] az6027: usb out operation failed. (-71) [ 125.627547][ T4786] az6027: usb out operation failed. (-71) [ 125.674228][ T4786] stb0899_attach: Driver disabled by Kconfig [ 125.694484][ T4786] az6027: no front-end attached [ 125.694484][ T4786] [ 125.739672][ T4786] az6027: usb out operation failed. (-71) [ 125.761437][ T4786] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 125.801673][ T4786] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input8 [ 125.862403][ T4786] dvb-usb: schedule remote query interval to 400 msecs. [ 125.883287][ T4786] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 125.922670][ T4786] usb 4-1: USB disconnect, device number 4 [ 126.019895][ T4786] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 126.066925][ T5253] netlink: 88 bytes leftover after parsing attributes in process `syz.4.281'. [ 126.082776][ T46] hfsplus: b-tree write err: -5, ino 3 [ 126.131530][ T4269] hfsplus: node 4:3 still has 1 user(s)! [ 126.522256][ T5245] loop2: detected capacity change from 0 to 32768 [ 126.606581][ T5083] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 126.717352][ T5245] XFS (loop2): Mounting V5 Filesystem [ 126.795596][ T5083] usb 1-1: Using ep0 maxpacket: 32 [ 126.806362][ T5083] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 126.834246][ T5245] XFS (loop2): Ending clean mount [ 126.836148][ T5083] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.872746][ T5083] usb 1-1: config 0 descriptor?? [ 127.085825][ T48] Bluetooth: hci0: command 0x0409 tx timeout [ 127.102447][ T5083] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 127.123006][ T4273] XFS (loop2): Unmounting Filesystem [ 127.147699][ T5083] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 127.222474][ T5083] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 127.247615][ T5083] usb 1-1: media controller created [ 127.274051][ T5083] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 127.326002][ T5229] chnl_net:caif_netlink_parms(): no params data found [ 127.754637][ T5291] loop4: detected capacity change from 0 to 256 [ 127.861565][ T5083] az6027: usb out operation failed. (-71) [ 127.881000][ T5083] stb0899_attach: Driver disabled by Kconfig [ 127.921942][ T5083] az6027: no front-end attached [ 127.921942][ T5083] [ 127.947203][ T5083] az6027: usb out operation failed. (-71) [ 127.953091][ T5083] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 128.037876][ T5083] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input9 [ 128.098795][ T5083] dvb-usb: schedule remote query interval to 400 msecs. [ 128.193752][ T5083] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 128.237542][ T5083] usb 1-1: USB disconnect, device number 5 [ 128.388894][ T5083] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 128.555573][ T4785] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 128.685687][ T5079] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 128.716446][ T4384] device hsr_slave_0 left promiscuous mode [ 128.724727][ T4384] device hsr_slave_1 left promiscuous mode [ 128.735354][ T4384] batman_adv: batadv0: Removing interface: team0 [ 128.748433][ T4384] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 128.756199][ T4785] usb 4-1: Using ep0 maxpacket: 16 [ 128.777640][ T4785] usb 4-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 128.794003][ T4384] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 128.823032][ T4785] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.832798][ T4785] usb 4-1: Product: syz [ 128.838473][ T4785] usb 4-1: Manufacturer: syz [ 128.843352][ T4785] usb 4-1: SerialNumber: syz [ 128.860992][ T4785] usb 4-1: config 0 descriptor?? [ 128.868689][ T4384] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 128.880880][ T5079] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 128.882806][ T4785] ums-onetouch 4-1:0.0: USB Mass Storage device detected [ 128.900255][ T4384] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 128.909662][ T4384] device bridge_slave_1 left promiscuous mode [ 128.912098][ T5079] usb 5-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 128.927935][ T4384] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.933773][ T5079] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.961493][ T4384] device bridge_slave_0 left promiscuous mode [ 128.971261][ T4384] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.974730][ T5079] usb 5-1: config 0 descriptor?? [ 129.014739][ T5312] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 129.098414][ T4384] device veth1_macvtap left promiscuous mode [ 129.131244][ T5083] usb 4-1: USB disconnect, device number 5 [ 129.132831][ T4384] device veth0_macvtap left promiscuous mode [ 129.155513][ T48] Bluetooth: hci0: command 0x041b tx timeout [ 129.175657][ T4384] device veth1_vlan left promiscuous mode [ 129.181945][ T4384] device veth0_vlan left promiscuous mode [ 129.458362][ T5079] arvo 0003:1E7D:30D4.0005: hidraw0: USB HID v1.01 Device [HID 1e7d:30d4] on usb-dummy_hcd.4-1/input0 [ 129.640123][ T4384] bond0 (unregistering): (slave bond1): Releasing backup interface [ 129.650848][ T4384] bond1 (unregistering): Released all slaves [ 129.674427][ T5079] usb 5-1: USB disconnect, device number 4 [ 129.824525][ T5339] loop3: detected capacity change from 0 to 256 [ 129.880889][ T26] audit: type=1800 audit(1756402652.333:10): pid=5339 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.304" name="file1" dev="loop3" ino=1048603 res=0 errno=0 [ 129.893135][ T5339] FAT-fs (loop3): error, invalid FAT chain (i_pos 196, last_block 1024) [ 130.082916][ T5341] loop3: detected capacity change from 0 to 1024 [ 130.163241][ T5341] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 130.172447][ T5341] ext4 filesystem being mounted at /74/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.316096][ T5345] EXT4-fs error (device loop3): ext4_map_blocks:745: inode #15: comm syz.3.305: lblock 0 mapped to illegal pblock 0 (length 6) [ 130.405224][ T5345] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 130.448902][ T5345] EXT4-fs (loop3): This should not happen!! Data will be lost [ 130.448902][ T5345] [ 130.684895][ T4384] team0 (unregistering): Port device team_slave_1 removed [ 130.754376][ T4384] team0 (unregistering): Port device team_slave_0 removed [ 130.854892][ T4384] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 130.940037][ T4384] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 131.091166][ T56] EXT4-fs error (device loop3): ext4_map_blocks:745: inode #15: block 8: comm kworker/u4:4: lblock 8 mapped to illegal pblock 8 (length 8) [ 131.109157][ T56] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 131.121915][ T56] EXT4-fs (loop3): This should not happen!! Data will be lost [ 131.121915][ T56] [ 131.178706][ T56] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 131.195707][ T56] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 2060 with max blocks 2048 with error 28 [ 131.208710][ T56] EXT4-fs (loop3): This should not happen!! Data will be lost [ 131.208710][ T56] [ 131.218475][ T56] EXT4-fs (loop3): Total free blocks count 0 [ 131.224538][ T56] EXT4-fs (loop3): Free/Dirty block details [ 131.230995][ T56] EXT4-fs (loop3): free_blocks=4293918720 [ 131.250253][ T48] Bluetooth: hci0: command 0x040f tx timeout [ 131.582016][ T5353] input: syz0 as /devices/virtual/input/input10 [ 131.803204][ T5356] capability: warning: `syz.3.310' uses deprecated v2 capabilities in a way that may be insecure [ 131.937859][ T4384] bond0 (unregistering): Released all slaves [ 132.029103][ T5229] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.040659][ T5229] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.049919][ T5229] device bridge_slave_0 entered promiscuous mode [ 132.061812][ T5229] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.093555][ T5229] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.112291][ T5229] device bridge_slave_1 entered promiscuous mode [ 132.234865][ T5229] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 132.313290][ T5229] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 132.489140][ T5229] team0: Port device team_slave_0 added [ 132.528067][ T5229] team0: Port device team_slave_1 added [ 132.730085][ T5229] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 132.778699][ T5229] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.817940][ T5372] loop2: detected capacity change from 0 to 512 [ 132.879243][ T5372] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 132.918576][ T5229] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 132.985741][ T5372] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 132.999392][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.006276][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.096118][ T5229] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 133.111037][ T5229] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 133.192259][ T5372] EXT4-fs (loop2): 1 truncate cleaned up [ 133.211853][ T5372] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 133.315526][ T48] Bluetooth: hci0: command 0x0419 tx timeout [ 133.336435][ T5229] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 133.615378][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 133.740307][ T5229] device hsr_slave_0 entered promiscuous mode [ 133.786096][ T5229] device hsr_slave_1 entered promiscuous mode [ 133.864378][ T4273] EXT4-fs (loop2): unmounting filesystem. [ 133.935873][ T5379] loop3: detected capacity change from 0 to 131072 [ 134.215958][ T5379] F2FS-fs (loop3): Test dummy encryption mode enabled [ 134.225682][ T5379] F2FS-fs (loop3): invalid crc value [ 134.276139][ T5379] F2FS-fs (loop3): Found nat_bits in checkpoint [ 134.343707][ T5379] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 134.447970][ T5379] F2FS-fs (loop3): access invalid blkaddr:1281 [ 134.454848][ T5379] CPU: 0 PID: 5379 Comm: syz.3.319 Not tainted syzkaller #0 [ 134.462639][ T5379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 134.472762][ T5379] Call Trace: [ 134.476177][ T5379] [ 134.479167][ T5379] dump_stack_lvl+0x168/0x22e [ 134.484013][ T5379] ? show_regs_print_info+0x12/0x12 [ 134.489277][ T5379] ? f2fs_get_next_page_offset+0x6a0/0x6a0 [ 134.495164][ T5379] f2fs_is_valid_blkaddr+0xc7e/0x1250 [ 134.500602][ T5379] f2fs_get_read_data_page+0x3ed/0x610 [ 134.506312][ T5379] ? f2fs_get_block+0x130/0x130 [ 134.511231][ T5379] ? add_lock_to_list+0x191/0x280 [ 134.516798][ T5379] ? __lock_acquire+0x28b5/0x7c50 [ 134.522276][ T5379] f2fs_find_data_page+0x9b/0x3a0 [ 134.527396][ T5379] __f2fs_find_entry+0x649/0xca0 [ 134.532525][ T5379] ? f2fs_find_target_dentry+0xbc0/0xbc0 [ 134.538400][ T5379] f2fs_lookup+0x242/0x830 [ 134.543068][ T5379] ? f2fs_encrypted_symlink_getattr+0x50/0x50 [ 134.549287][ T5379] ? __rwlock_init+0x140/0x140 [ 134.554200][ T5379] ? d_set_d_op+0xe5/0x370 [ 134.558782][ T5379] ? _raw_spin_unlock+0x24/0x40 [ 134.563714][ T5379] ? d_alloc+0x16f/0x1a0 [ 134.568131][ T5379] lookup_one_qstr_excl+0x10e/0x240 [ 134.573501][ T5379] filename_create+0x21e/0x450 [ 134.578324][ T5379] ? kern_path_create+0x50/0x50 [ 134.583375][ T5379] ? __virt_addr_valid+0x188/0x540 [ 134.588732][ T5379] ? __virt_addr_valid+0x465/0x540 [ 134.593918][ T5379] ? __phys_addr_symbol+0x2b/0x70 [ 134.599161][ T5379] do_mkdirat+0x9d/0x430 [ 134.603735][ T5379] ? vfs_mkdir+0x570/0x570 [ 134.608227][ T5379] __x64_sys_mkdirat+0x85/0x90 [ 134.613061][ T5379] do_syscall_64+0x4c/0xa0 [ 134.617583][ T5379] ? clear_bhb_loop+0x60/0xb0 [ 134.622505][ T5379] ? clear_bhb_loop+0x60/0xb0 [ 134.627514][ T5379] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 134.633671][ T5379] RIP: 0033:0x7fe00958d457 [ 134.638185][ T5379] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 134.658380][ T5379] RSP: 002b:00007fe00a498e68 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 134.666833][ T5379] RAX: ffffffffffffffda RBX: 00007fe00a498ef0 RCX: 00007fe00958d457 [ 134.674847][ T5379] RDX: 00000000000001ff RSI: 0000200000000040 RDI: 00000000ffffff9c [ 134.683013][ T5379] RBP: 00002000000002c0 R08: 00002000000000c0 R09: 0000000000000000 [ 134.691108][ T5379] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000200000000040 [ 134.699228][ T5379] R13: 00007fe00a498eb0 R14: 0000000000000000 R15: 0000000000000000 [ 134.708507][ T5379] [ 135.186776][ T5424] loop3: detected capacity change from 0 to 764 [ 135.823940][ T5438] loop4: detected capacity change from 0 to 2048 [ 135.931363][ T5438] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 136.043208][ T5229] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 136.097136][ T5229] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 136.187540][ T5229] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 136.236930][ T5229] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 136.305483][ T5082] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 136.467383][ T5229] 8021q: adding VLAN 0 to HW filter on device bond0 [ 136.516396][ T5082] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 136.543700][ T5082] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 136.553248][ T5229] 8021q: adding VLAN 0 to HW filter on device team0 [ 136.593642][ T5082] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 136.607170][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 136.635686][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 136.665268][ T5082] usb 3-1: config 0 interface 0 has no altsetting 0 [ 136.679821][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 136.717074][ T5082] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 136.733720][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 136.757965][ T5082] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 136.771350][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.778586][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 136.812468][ T5082] usb 3-1: config 0 interface 0 has no altsetting 0 [ 136.853304][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 136.868598][ T5082] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 136.894369][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 136.902886][ T5082] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 136.931871][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.939317][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 136.955614][ T5082] usb 3-1: config 0 interface 0 has no altsetting 0 [ 136.970772][ T5082] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 137.031617][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 137.039514][ T5082] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 137.080003][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 137.095893][ T5082] usb 3-1: config 0 interface 0 has no altsetting 0 [ 137.109236][ T5082] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 137.119421][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 137.176824][ T5082] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 137.193203][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 137.233500][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 137.250004][ T5082] usb 3-1: config 0 interface 0 has no altsetting 0 [ 137.273831][ T5082] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 137.289088][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 137.305789][ T5082] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 137.323490][ T5082] usb 3-1: config 0 interface 0 has no altsetting 0 [ 137.337719][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 137.366828][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 137.382341][ T5082] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 137.405979][ T5082] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 137.418483][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 137.438149][ T5082] usb 3-1: config 0 interface 0 has no altsetting 0 [ 137.452763][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 137.470600][ T5082] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 137.509758][ T5082] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 137.517343][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 137.555536][ T5082] usb 3-1: config 0 interface 0 has no altsetting 0 [ 137.562562][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 137.578320][ T5082] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 137.596907][ T5229] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 137.618868][ T5082] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 137.657246][ T5082] usb 3-1: Product: syz [ 137.675468][ T5082] usb 3-1: Manufacturer: syz [ 137.680204][ T5082] usb 3-1: SerialNumber: syz [ 137.716362][ T5082] usb 3-1: config 0 descriptor?? [ 137.767317][ T5082] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 138.093301][ C0] usb 3-1: yurex_control_callback - control failed: -71 [ 138.094299][ T4494] usb 3-1: USB disconnect, device number 7 [ 138.131257][ T4494] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 138.215757][ T5082] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 138.425574][ T5082] usb 4-1: Using ep0 maxpacket: 32 [ 138.449312][ T5082] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 138.471603][ T5082] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.513568][ T5082] usb 4-1: config 0 descriptor?? [ 138.528597][ T5082] gspca_main: sunplus-2.14.0 probing 041e:400b [ 138.624584][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 138.644022][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 138.672714][ T5229] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 138.741136][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 138.757099][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 138.809788][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 138.829547][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 138.865364][ T5229] device veth0_vlan entered promiscuous mode [ 138.879520][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 138.900082][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 138.931430][ T5229] device veth1_vlan entered promiscuous mode [ 139.025292][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 139.056000][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 139.100794][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 139.146416][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 139.193512][ T5229] device veth0_macvtap entered promiscuous mode [ 139.222733][ T5229] device veth1_macvtap entered promiscuous mode [ 139.294065][ T5229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.349243][ T5229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.378541][ T5229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.427413][ T5229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.452384][ T5229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.493691][ T5229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.533937][ T5229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.604297][ T5229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.604617][ T5516] loop0: detected capacity change from 0 to 131072 [ 139.632426][ T5516] F2FS-fs (loop0): invalid crc value [ 139.641655][ T5229] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 139.652736][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 139.677897][ T5516] F2FS-fs (loop0): Found nat_bits in checkpoint [ 139.692687][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 139.756089][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 139.772938][ T5516] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 139.856952][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 139.895551][ T5229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.926364][ T5516] F2FS-fs (loop0): list inode (7) has corrupted xattr [ 139.938498][ T5082] gspca_sunplus: reg_w_riv err -71 [ 139.943898][ T5082] sunplus: probe of 4-1:0.0 failed with error -71 [ 139.952487][ T5082] usb 4-1: USB disconnect, device number 6 [ 139.981304][ T5229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.003015][ T5229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.025444][ T5229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.035379][ T5229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.085474][ T5229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.095366][ T5229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.114456][ T5229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.137799][ T5229] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 140.150338][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 140.169779][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 140.199163][ T5229] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.229967][ T5229] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.238052][ T5536] netlink: 48 bytes leftover after parsing attributes in process `syz.4.364'. [ 140.250074][ T5229] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.275651][ T5229] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.537114][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.585608][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.665274][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 140.700270][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.720038][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.769902][ T5541] loop4: detected capacity change from 0 to 2048 [ 140.814291][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 140.928618][ T5541] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 140.942098][ T5541] UDF-fs: Scanning with blocksize 512 failed [ 141.010576][ T5541] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 141.194523][ T5554] loop3: detected capacity change from 0 to 4096 [ 141.241745][ T5554] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 141.250113][ T5082] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 141.351311][ T5554] System zones: 0-5 [ 141.406311][ T5554] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 141.502104][ T5082] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 141.551277][ T5082] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.597378][ T5082] usb 3-1: config 0 descriptor?? [ 141.616993][ T5567] loop1: detected capacity change from 0 to 512 [ 141.621054][ T5082] cp210x 3-1:0.0: cp210x converter detected [ 141.717022][ T5567] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.373: casefold flag without casefold feature [ 141.790242][ T5567] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.373: couldn't read orphan inode 15 (err -117) [ 141.821031][ T5567] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 141.837260][ T4268] EXT4-fs (loop3): unmounting filesystem. [ 141.899557][ T5567] fscrypt (loop1, inode 18): Mutually exclusive encryption flags (0x15) [ 141.952166][ T5574] loop4: detected capacity change from 0 to 512 [ 142.031023][ T5574] EXT4-fs error (device loop4): ext4_orphan_get:1426: comm syz.4.374: bad orphan inode 17 [ 142.042329][ T5082] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 142.117789][ T5082] usb 3-1: cp210x converter now attached to ttyUSB0 [ 142.156413][ T5229] EXT4-fs (loop1): unmounting filesystem. [ 142.169043][ T5574] ext4_test_bit(bit=16, block=4) = 1 [ 142.174649][ T5574] is_bad_inode(inode)=0 [ 142.179976][ T5574] NEXT_ORPHAN(inode)=0 [ 142.184372][ T5574] max_ino=32 [ 142.188312][ T5574] i_nlink=1 [ 142.192269][ T5574] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 142.305155][ T4786] usb 3-1: USB disconnect, device number 8 [ 142.336849][ T4786] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 142.419850][ T4786] cp210x 3-1:0.0: device disconnected [ 142.470944][ T4276] EXT4-fs (loop4): unmounting filesystem. [ 142.512652][ T5582] loop0: detected capacity change from 0 to 2048 [ 142.549711][ T5582] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 142.590754][ T5582] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 142.612936][ T4785] kernel read not supported for file /dsp1 (pid: 4785 comm: kworker/1:17) [ 142.663005][ T5582] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 142.688680][ T5582] UDF-fs: Scanning with blocksize 512 failed [ 142.739618][ T5582] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 143.155069][ T5600] loop1: detected capacity change from 0 to 764 [ 143.222553][ T5599] loop4: detected capacity change from 0 to 1024 [ 143.366041][ T4786] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 143.585610][ T4786] usb 4-1: Using ep0 maxpacket: 8 [ 143.593667][ T4786] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 143.627089][ T41] hfsplus: b-tree write err: -5, ino 4 [ 143.647753][ T4786] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 143.673013][ T4786] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 143.701424][ T4786] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.752968][ T4786] hub 4-1:1.0: bad descriptor, ignoring hub [ 143.776652][ T4786] hub: probe of 4-1:1.0 failed with error -5 [ 143.871737][ T5615] process 'syz.4.387' launched './file0' with NULL argv: empty string added [ 144.131137][ T5624] team0: No ports can be present during mode change [ 144.304078][ T4495] usb 4-1: USB disconnect, device number 7 [ 144.635764][ T4786] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 144.726260][ T4495] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 144.859682][ T4786] usb 5-1: unable to get BOS descriptor or descriptor too short [ 144.872457][ T4786] usb 5-1: config 6 has an invalid interface number: 200 but max is 0 [ 144.895654][ T4786] usb 5-1: config 6 has no interface number 0 [ 144.915959][ T4786] usb 5-1: config 6 interface 200 has no altsetting 0 [ 144.927738][ T4495] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 144.956228][ T4495] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 144.968728][ T4786] usb 5-1: New USB device found, idVendor=05d8, idProduct=810c, bcdDevice=18.5f [ 144.992198][ T4495] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 145.005476][ T4786] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.029798][ T4495] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.038306][ T5642] loop1: detected capacity change from 0 to 128 [ 145.038383][ T4786] usb 5-1: Product: syz [ 145.066652][ T4786] usb 5-1: Manufacturer: syz [ 145.073171][ T4495] hub 4-1:1.0: bad descriptor, ignoring hub [ 145.080741][ T4786] usb 5-1: SerialNumber: syz [ 145.086700][ T4495] hub: probe of 4-1:1.0 failed with error -5 [ 145.116458][ T5642] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 145.171114][ T5642] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 145.435756][ T4582] usb 4-1: USB disconnect, device number 8 [ 145.691619][ T4786] dvb-usb: found a 'Artec T14 - USB2.0 DVB-T' in warm state. [ 145.716350][ T4786] dvb-usb: bulk message failed: -71 (3/0) [ 145.748404][ T4786] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 145.776935][ T4786] dvbdev: DVB: registering new adapter (Artec T14 - USB2.0 DVB-T) [ 145.815658][ T4786] usb 5-1: media controller created [ 145.881718][ T4786] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 145.983795][ T4786] dvb-usb: bulk message failed: -71 (6/0) [ 146.014134][ T4786] dvb-usb: bulk message failed: -71 (6/0) [ 146.034437][ T4786] dvb-usb: no frontend was attached by 'Artec T14 - USB2.0 DVB-T' [ 146.063863][ T4786] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input11 [ 146.076228][ T5662] device sit0 entered promiscuous mode [ 146.089599][ T5662] netlink: 'syz.3.400': attribute type 1 has an invalid length. [ 146.108482][ T4786] dvb-usb: schedule remote query interval to 150 msecs. [ 146.123515][ T4786] dvb-usb: Artec T14 - USB2.0 DVB-T successfully initialized and connected. [ 146.132967][ T5662] netlink: 1 bytes leftover after parsing attributes in process `syz.3.400'. [ 146.175738][ T4786] usb 5-1: USB disconnect, device number 5 [ 146.265941][ T5650] loop2: detected capacity change from 0 to 32768 [ 146.330912][ T5650] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop2 scanned by syz.2.397 (5650) [ 146.509235][ T5650] BTRFS info (device loop2): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 146.525924][ T5650] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 146.578826][ T5650] BTRFS info (device loop2): using free space tree [ 146.602180][ T5652] loop0: detected capacity change from 0 to 32768 [ 146.621295][ T4786] dvb-usb: Artec T14 - USB2.0 DVB-T successfully deinitialized and disconnected. [ 146.736515][ T5652] ERROR: (device loop0): xtSearch: XT_GETPAGE: xtree page corrupt [ 146.736515][ T5652] [ 146.752463][ T5652] xtLookup: xtSearch returned -5 [ 146.758618][ T5652] free_index: error reading directory table [ 146.963736][ T5683] loop3: detected capacity change from 0 to 2048 [ 146.975826][ T5650] BTRFS info (device loop2): enabling ssd optimizations [ 147.016133][ T5683] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 147.061860][ T5654] loop1: detected capacity change from 0 to 40427 [ 147.161558][ T5654] F2FS-fs (loop1): invalid crc value [ 147.237378][ T5654] F2FS-fs (loop1): Found nat_bits in checkpoint [ 147.406809][ T4273] BTRFS info (device loop2): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 147.440996][ T5654] F2FS-fs (loop1): Cannot turn on quotas: -2 on 0 [ 147.475928][ T5654] F2FS-fs (loop1): Cannot turn on quotas: -2 on 1 [ 147.525867][ T5654] F2FS-fs (loop1): Start checkpoint disabled! [ 147.665354][ T5654] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 147.741060][ T4258] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 10 /dev/loop2 scanned by udevd (4258) [ 148.909936][ T5718] loop4: detected capacity change from 0 to 512 [ 148.974255][ T5718] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 149.052381][ T5718] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002] [ 149.093546][ T5718] EXT4-fs (loop4): orphan cleanup on readonly fs [ 149.131991][ T5718] EXT4-fs error (device loop4): ext4_orphan_get:1426: comm syz.4.413: bad orphan inode 267 [ 149.150916][ T5718] EXT4-fs (loop4): Remounting filesystem read-only [ 149.160266][ T5718] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 149.219681][ T5718] EXT4-fs warning (device loop4): dx_probe:893: inode #2: comm syz.4.413: dx entry: limit 0 != root limit 125 [ 149.255498][ T4581] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 149.277003][ T5718] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.413: Corrupt directory, running e2fsck is recommended [ 149.306300][ T5698] loop0: detected capacity change from 0 to 32768 [ 149.402266][ T5698] XFS (loop0): Mounting V5 Filesystem [ 149.459741][ T4581] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 149.479848][ T4276] EXT4-fs (loop4): unmounting filesystem. [ 149.493649][ T4581] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 149.566893][ T5698] XFS (loop0): Ending clean mount [ 149.583523][ T4581] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 149.610824][ T4581] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 149.629563][ T4581] usb 4-1: Manufacturer: syz [ 149.656107][ T4581] usb 4-1: config 0 descriptor?? [ 149.713358][ T5698] XFS (loop0): Quotacheck needed: Please wait. [ 149.750808][ T4495] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 149.842511][ T5698] XFS (loop0): Quotacheck: Done. [ 149.995730][ T4495] usb 2-1: Using ep0 maxpacket: 32 [ 149.995739][ T4581] rc_core: IR keymap rc-hauppauge not found [ 149.995755][ T4581] Registered IR keymap rc-empty [ 149.996771][ T4581] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 150.003975][ T4495] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 150.029044][ T4581] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input12 [ 150.072460][ T5740] loop4: detected capacity change from 0 to 4096 [ 150.093563][ T4495] usb 2-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 150.114202][ T4495] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.131384][ T4495] usb 2-1: Product: syz [ 150.138912][ T4495] usb 2-1: Manufacturer: syz [ 150.141226][ C0] igorplugusb 4-1:0.0: Error: urb status = -32 [ 150.143558][ T4495] usb 2-1: SerialNumber: syz [ 150.211181][ T4269] XFS (loop0): Unmounting Filesystem [ 150.230580][ T4495] usb 2-1: config 0 descriptor?? [ 150.252548][ T4303] usb 4-1: USB disconnect, device number 9 [ 150.270457][ T5740] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 150.290706][ T5733] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 150.343275][ T5740] ntfs3: loop4: Failed to load $Extend. [ 150.637390][ T5733] loop1: detected capacity change from 0 to 8 [ 150.817588][ T5733] SQUASHFS error: lzo decompression failed, data probably corrupt [ 150.835126][ T5733] SQUASHFS error: Failed to read block 0x91: -5 [ 150.847330][ T5733] SQUASHFS error: Unable to read metadata cache entry [8f] [ 150.855322][ T5733] SQUASHFS error: Unable to read inode 0x11f [ 150.975258][ T5748] loop3: detected capacity change from 0 to 512 [ 151.000014][ T4495] usb 2-1: USB disconnect, device number 4 [ 151.031682][ T5748] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 151.055767][ T5748] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e028, mo2=0002] [ 151.106206][ T5748] System zones: 0-1, 15-15, 18-18, 34-34 [ 151.113043][ T5748] EXT4-fs (loop3): orphan cleanup on readonly fs [ 151.215844][ T5748] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=0 [ 151.225334][ T5748] EXT4-fs warning (device loop3): ext4_enable_quotas:7068: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 151.267818][ T5748] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 151.276315][ T5748] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.422: bg 0: block 40: padding at end of block bitmap is not set [ 151.362784][ T5756] loop4: detected capacity change from 0 to 128 [ 151.363962][ T5748] EXT4-fs (loop3): Remounting filesystem read-only [ 151.406627][ T5748] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6165: Corrupt filesystem [ 151.436860][ T5748] EXT4-fs (loop3): Remounting filesystem read-only [ 151.454279][ T5748] EXT4-fs (loop3): 1 truncate cleaned up [ 151.465578][ T5748] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 151.466468][ T5756] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 151.528924][ T5743] loop2: detected capacity change from 0 to 40427 [ 151.574047][ T5756] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 151.595913][ T5743] F2FS-fs (loop2): Small segment_count (9 < 1 * 24) [ 151.602597][ T5743] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 151.716934][ T5743] F2FS-fs (loop2): Found nat_bits in checkpoint [ 151.724363][ T26] audit: type=1800 audit(1756402674.173:11): pid=5756 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.424" name="file1" dev="loop4" ino=94 res=0 errno=0 [ 151.765030][ T4268] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #13: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic f300, entries 1, max 4(0), depth 0(0) [ 151.795642][ T4268] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #13: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic f300, entries 1, max 4(0), depth 0(0) [ 151.881039][ T5743] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 151.904905][ T5743] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 152.264847][ T4273] syz-executor: attempt to access beyond end of device [ 152.264847][ T4273] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 152.266367][ T5774] loop0: detected capacity change from 0 to 512 [ 152.392945][ T5774] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.432: inode #1: comm syz.0.432: iget: illegal inode # [ 152.458315][ T5774] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.432: error while reading EA inode 1 err=-117 [ 152.489182][ T4268] EXT4-fs (loop3): unmounting filesystem. [ 152.587798][ T5774] EXT4-fs (loop0): 1 orphan inode deleted [ 152.595653][ T5774] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 152.788359][ T4269] EXT4-fs (loop0): unmounting filesystem. [ 152.806779][ T4384] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.030332][ T4384] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.227028][ T4384] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.417324][ T4384] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.671465][ T5805] loop1: detected capacity change from 0 to 512 [ 153.682300][ T5804] netlink: 12 bytes leftover after parsing attributes in process `syz.2.446'. [ 153.730245][ T5805] EXT4-fs: Ignoring removed orlov option [ 153.789440][ T5805] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 153.955535][ T5805] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 154.026838][ T5805] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2195: inode #15: comm syz.1.445: corrupted in-inode xattr [ 154.108664][ T5805] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.445: couldn't read orphan inode 15 (err -117) [ 154.162798][ T4265] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 154.175187][ T4265] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 154.184754][ T4265] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 154.196842][ T4265] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 154.202654][ T5805] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 154.213429][ T4265] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 154.221546][ T4265] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 154.688648][ T5229] EXT4-fs (loop1): unmounting filesystem. [ 155.038094][ T5831] netlink: 'syz.1.450': attribute type 6 has an invalid length. [ 155.335318][ T5812] chnl_net:caif_netlink_parms(): no params data found [ 155.873018][ T5812] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.944028][ T5812] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.971963][ T5812] device bridge_slave_0 entered promiscuous mode [ 156.208768][ T5812] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.232311][ T5812] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.243518][ T5812] device bridge_slave_1 entered promiscuous mode [ 156.274939][ T5846] loop2: detected capacity change from 0 to 32768 [ 156.282040][ T48] Bluetooth: hci1: command 0x0409 tx timeout [ 156.303085][ T5846] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.456 (5846) [ 156.353984][ T5846] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 156.368283][ T5846] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 156.395578][ T5846] BTRFS info (device loop2): using free space tree [ 156.684503][ T5846] BTRFS info (device loop2): enabling ssd optimizations [ 156.704927][ T5812] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 156.744918][ T5812] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 156.825518][ T4581] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 156.912634][ T5812] team0: Port device team_slave_0 added [ 156.950506][ T4273] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 156.965040][ T4384] device hsr_slave_0 left promiscuous mode [ 156.987470][ T4384] device hsr_slave_1 left promiscuous mode [ 156.995671][ T5705] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 157.015628][ T4581] usb 1-1: Using ep0 maxpacket: 8 [ 157.024868][ T4581] usb 1-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=44.b2 [ 157.043878][ T4384] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 157.051718][ T4581] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.064680][ T4384] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 157.072500][ T4581] usb 1-1: Product: syz [ 157.094372][ T4581] usb 1-1: Manufacturer: syz [ 157.122119][ T4581] usb 1-1: SerialNumber: syz [ 157.156911][ T4581] usb 1-1: config 0 descriptor?? [ 157.187197][ T4384] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 157.194938][ T4384] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 157.202318][ T5705] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 157.202350][ T5705] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 157.202385][ T5705] usb 5-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 157.202410][ T5705] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.245144][ T5705] usb 5-1: config 0 descriptor?? [ 157.383489][ T4581] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 157.530821][ T4384] device bridge_slave_1 left promiscuous mode [ 157.573701][ T4384] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.615704][ T4384] device bridge_slave_0 left promiscuous mode [ 157.622195][ T4384] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.762656][ T4384] device veth1_macvtap left promiscuous mode [ 157.779396][ T4384] device veth0_macvtap left promiscuous mode [ 157.799765][ T4384] device veth1_vlan left promiscuous mode [ 157.805825][ T4384] device veth0_vlan left promiscuous mode [ 157.986420][ T4581] gspca_sunplus: reg_w_riv err -71 [ 157.991903][ T4581] sunplus: probe of 1-1:0.0 failed with error -71 [ 158.039300][ T4581] usb 1-1: USB disconnect, device number 6 [ 158.095801][ T5705] hid-led: probe of 0003:0FC5:B080.0006 failed with error -71 [ 158.140983][ T5705] usb 5-1: USB disconnect, device number 6 [ 158.356976][ T48] Bluetooth: hci1: command 0x041b tx timeout [ 158.815904][ T5928] 9p: Unknown uid 00000000004294967295 [ 159.455788][ T4384] team0 (unregistering): Port device team_slave_1 removed [ 159.586735][ T4384] team0 (unregistering): Port device team_slave_0 removed [ 159.715335][ T4384] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 159.822379][ T4384] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 160.435700][ T48] Bluetooth: hci1: command 0x040f tx timeout [ 160.455100][ T4492] hid-generic 0003:0004:0000.0007: unknown main item tag 0x0 [ 160.463950][ T4492] hid-generic 0003:0004:0000.0007: unknown main item tag 0x0 [ 160.472023][ T4492] hid-generic 0003:0004:0000.0007: unknown main item tag 0x0 [ 160.580297][ T4492] hid-generic 0003:0004:0000.0007: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 160.841700][ T4384] bond0 (unregistering): Released all slaves [ 160.971485][ T5812] team0: Port device team_slave_1 added [ 160.982440][ T5922] netlink: 'syz.1.475': attribute type 3 has an invalid length. [ 160.990789][ T5922] netlink: 72 bytes leftover after parsing attributes in process `syz.1.475'. [ 161.051884][ T5933] device macsec0 entered promiscuous mode [ 161.073405][ T5933] device macsec0 left promiscuous mode [ 161.195685][ T5942] loop1: detected capacity change from 0 to 512 [ 161.214865][ T5942] EXT4-fs: Ignoring removed oldalloc option [ 161.266498][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 161.299642][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 161.359782][ T5942] EXT4-fs error (device loop1): ext4_xattr_inode_iget:400: comm syz.1.482: Parent and EA inode have the same ino 15 [ 161.387154][ T5812] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 161.400084][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 161.408150][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 161.436870][ T5812] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 161.598735][ T5812] device hsr_slave_0 entered promiscuous mode [ 161.647894][ T5812] device hsr_slave_1 entered promiscuous mode [ 161.684321][ T5812] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 161.718632][ T5942] EXT4-fs error (device loop1): ext4_xattr_inode_iget:400: comm syz.1.482: Parent and EA inode have the same ino 15 [ 161.724813][ T5812] Cannot create hsr debugfs directory [ 161.797705][ T5942] EXT4-fs (loop1): 1 orphan inode deleted [ 161.803719][ T5942] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 161.878030][ T5959] loop2: detected capacity change from 0 to 512 [ 161.996271][ T5959] EXT4-fs (loop2): 1 truncate cleaned up [ 162.022577][ T5959] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 162.100668][ T5229] EXT4-fs (loop1): unmounting filesystem. [ 162.111306][ T5083] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 162.286426][ T5965] loop4: detected capacity change from 0 to 1024 [ 162.325667][ T5083] usb 1-1: Using ep0 maxpacket: 32 [ 162.335325][ T5083] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 162.363125][ T5965] ext4: Unknown parameter 'nouser_xattr' [ 162.396864][ T5083] usb 1-1: config 0 has no interface number 0 [ 162.440880][ T5812] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 162.455137][ T5083] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 162.515593][ T4265] Bluetooth: hci1: command 0x0419 tx timeout [ 162.532162][ T5083] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.550968][ T5083] usb 1-1: Product: syz [ 162.555337][ T5083] usb 1-1: Manufacturer: syz [ 162.560909][ T5083] usb 1-1: SerialNumber: syz [ 162.567994][ T5083] usb 1-1: config 0 descriptor?? [ 162.584761][ T5812] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 162.595316][ T5083] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 162.620326][ T4273] EXT4-fs (loop2): unmounting filesystem. [ 162.649661][ T5812] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 162.707791][ T5812] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 162.793368][ T5083] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 162.830394][ T5083] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 163.240669][ T5812] 8021q: adding VLAN 0 to HW filter on device bond0 [ 163.249774][ C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 163.258705][ T5082] usb 1-1: USB disconnect, device number 7 [ 163.279663][ T5082] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 163.322544][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 163.349451][ T5082] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 163.358434][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 163.381997][ T5082] quatech2 1-1:0.51: device disconnected [ 163.399667][ T5812] 8021q: adding VLAN 0 to HW filter on device team0 [ 163.452871][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 163.477178][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 163.492989][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.500244][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 163.543655][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 163.560525][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 163.575174][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 163.584610][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.591944][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 163.608971][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 163.643160][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 163.664479][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 163.690423][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 163.720285][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 163.730023][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 163.746243][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 163.756042][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 163.765071][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 163.780033][ T5812] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 163.870351][ T5812] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 163.904913][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 163.926948][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 164.058958][ T6013] loop0: detected capacity change from 0 to 128 [ 164.079721][ T6013] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 164.221034][ T6013] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 164.814527][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 164.864753][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 164.877048][ T6020] loop0: detected capacity change from 0 to 8192 [ 164.902006][ T5812] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 164.920287][ T6028] loop7: detected capacity change from 0 to 7 [ 164.928039][ T6020] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 164.992220][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 165.001861][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 165.037308][ T6010] loop4: detected capacity change from 0 to 40427 [ 165.038177][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 165.053461][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 165.053959][ T6020] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 165.071239][ T6020] REISERFS (device loop0): using ordered data mode [ 165.078611][ T6020] reiserfs: using flush barriers [ 165.125544][ T6010] F2FS-fs (loop4): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 165.134213][ T6010] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 165.142838][ T6020] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 165.179133][ T4385] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 165.196508][ T6020] REISERFS (device loop0): checking transaction log (loop0) [ 165.204919][ T6010] F2FS-fs (loop4): invalid crc value [ 165.215586][ T4385] Buffer I/O error on dev loop7, logical block 0, async page read [ 165.223789][ T4385] ldm_validate_partition_table(): Disk read failed. [ 165.277391][ T6010] F2FS-fs (loop4): Found nat_bits in checkpoint [ 165.335810][ T4385] Dev loop7: unable to read RDB block 0 [ 165.341563][ T4385] loop7: unable to read partition table [ 165.396375][ T4385] loop7: partition table beyond EOD, truncated [ 165.527783][ T6010] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 165.540424][ T6020] REISERFS (device loop0): Using tea hash to sort names [ 165.550573][ T6010] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 165.581585][ T6020] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 165.750566][ T6045] netlink: 8 bytes leftover after parsing attributes in process `syz.2.508'. [ 165.769579][ T6010] syz.4.502: attempt to access beyond end of device [ 165.769579][ T6010] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 165.793829][ T6038] loop1: detected capacity change from 0 to 8192 [ 166.000366][ T4276] syz-executor: attempt to access beyond end of device [ 166.000366][ T4276] loop4: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 166.273966][ T6054] netlink: 'syz.1.512': attribute type 18 has an invalid length. [ 166.657952][ T6060] loop2: detected capacity change from 0 to 2048 [ 166.771775][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 166.808333][ T6060] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 166.818468][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 166.830508][ T6060] ext4 filesystem being mounted at /102/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 166.871063][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 166.921205][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 166.966548][ T5812] device veth0_vlan entered promiscuous mode [ 166.976378][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 166.996180][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 167.031892][ T5812] device veth1_vlan entered promiscuous mode [ 167.033369][ T6070] netlink: 36 bytes leftover after parsing attributes in process `syz.1.516'. [ 167.122387][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 167.155794][ T4273] EXT4-fs (loop2): unmounting filesystem. [ 167.177994][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 167.235065][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 167.272529][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 167.310811][ T5812] device veth0_macvtap entered promiscuous mode [ 167.354952][ T5812] device veth1_macvtap entered promiscuous mode [ 167.370471][ T6074] mmap: syz.2.517 (6074) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 167.439869][ T5812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.491665][ T6076] loop1: detected capacity change from 0 to 1024 [ 167.505528][ T5812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.526979][ T5812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.592504][ T5812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.642511][ T5812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.681857][ T5812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.728188][ T5812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.785437][ T5812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.817726][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 167.826268][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 167.849013][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 167.909721][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 167.936627][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 167.968917][ T5812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.042048][ T5812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.082877][ T5812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.133354][ T5812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.170748][ T5812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.198406][ T5812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.240781][ T5812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.279914][ T5812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.327160][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 168.345849][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 168.400064][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 168.420069][ T5812] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.435762][ T5812] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.444822][ T5812] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.485142][ T5812] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.746437][ T4346] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.804477][ T4346] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.918987][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 168.952546][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.982061][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.061541][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 169.588859][ T6102] loop2: detected capacity change from 0 to 32768 [ 169.714151][ T6122] loop0: detected capacity change from 0 to 1024 [ 169.775584][ T6102] XFS (loop2): Mounting V5 Filesystem [ 169.877722][ T6102] XFS (loop2): Ending clean mount [ 170.112087][ T6104] loop1: detected capacity change from 0 to 32768 [ 170.232265][ T4273] XFS (loop2): Unmounting Filesystem [ 170.266292][ T46] hfsplus: b-tree write err: -5, ino 4 [ 170.293133][ T6104] XFS (loop1): Mounting V5 Filesystem [ 170.612518][ T6104] XFS (loop1): Ending clean mount [ 170.897860][ T6155] Bluetooth: MGMT ver 1.22 [ 171.155952][ T5229] XFS (loop1): Unmounting Filesystem [ 171.230771][ T6157] loop5: detected capacity change from 0 to 512 [ 171.385458][ T6157] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 171.404368][ T6157] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 171.734960][ T6174] loop4: detected capacity change from 0 to 128 [ 171.823257][ T6174] VFS: Found a Xenix FS (block size = 512) on device loop4 [ 171.863098][ T6148] loop0: detected capacity change from 0 to 32768 [ 172.005698][ T6174] syz.4.540: attempt to access beyond end of device [ 172.005698][ T6174] loop4: rw=0, sector=8767744, nr_sectors = 1 limit=128 [ 172.020412][ T6174] Buffer I/O error on dev loop4, logical block 8767744, async page read [ 172.025331][ T6148] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 172.029119][ T6174] syz.4.540: attempt to access beyond end of device [ 172.029119][ T6174] loop4: rw=0, sector=13269809, nr_sectors = 1 limit=128 [ 172.052994][ T6174] Buffer I/O error on dev loop4, logical block 13269809, async page read [ 172.061583][ T6174] syz.4.540: attempt to access beyond end of device [ 172.061583][ T6174] loop4: rw=0, sector=1157, nr_sectors = 1 limit=128 [ 172.075089][ T6174] Buffer I/O error on dev loop4, logical block 1157, async page read [ 172.105557][ T6174] syz.4.540: attempt to access beyond end of device [ 172.105557][ T6174] loop4: rw=0, sector=3211264, nr_sectors = 1 limit=128 [ 172.314175][ T6174] Buffer I/O error on dev loop4, logical block 3211264, async page read [ 172.426521][ T6174] syz.4.540: attempt to access beyond end of device [ 172.426521][ T6174] loop4: rw=0, sector=8768635, nr_sectors = 1 limit=128 [ 172.445197][ T4269] (syz-executor,4269,1):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72 [ 172.542145][ T4269] ocfs2: Unmounting device (7,0) on (node local) [ 172.569995][ T6174] Buffer I/O error on dev loop4, logical block 8768635, async page read [ 172.704631][ T6174] syz.4.540: attempt to access beyond end of device [ 172.704631][ T6174] loop4: rw=0, sector=13466417, nr_sectors = 1 limit=128 [ 172.895611][ T6174] Buffer I/O error on dev loop4, logical block 13466417, async page read [ 173.000123][ T6174] syz.4.540: attempt to access beyond end of device [ 173.000123][ T6174] loop4: rw=0, sector=209285, nr_sectors = 1 limit=128 [ 173.053541][ T6174] Buffer I/O error on dev loop4, logical block 209285, async page read [ 173.074150][ T6174] syz.4.540: attempt to access beyond end of device [ 173.074150][ T6174] loop4: rw=0, sector=8767744, nr_sectors = 1 limit=128 [ 173.110475][ T5812] EXT4-fs (loop5): unmounting filesystem. [ 173.162626][ T6174] Buffer I/O error on dev loop4, logical block 8767744, async page read [ 173.284190][ T6174] syz.4.540: attempt to access beyond end of device [ 173.284190][ T6174] loop4: rw=0, sector=13269809, nr_sectors = 1 limit=128 [ 173.374185][ T6174] Buffer I/O error on dev loop4, logical block 13269809, async page read [ 173.428553][ T6174] syz.4.540: attempt to access beyond end of device [ 173.428553][ T6174] loop4: rw=0, sector=1157, nr_sectors = 1 limit=128 [ 173.651829][ T6174] Buffer I/O error on dev loop4, logical block 1157, async page read [ 173.741134][ T6206] netlink: 4 bytes leftover after parsing attributes in process `syz.5.547'. [ 173.895843][ T26] audit: type=1800 audit(1756402696.253:12): pid=6174 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.540" name="/" dev="loop4" ino=2 res=0 errno=0 [ 173.915345][ C0] vkms_vblank_simulate: vblank timer overrun [ 173.966123][ T6190] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 174.066563][ T6192] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 174.367678][ T4276] sysv_free_block: trying to free block not in datazone [ 174.384910][ T6220] loop1: detected capacity change from 0 to 256 [ 174.477589][ T6174] syz.4.540 (6174) used greatest stack depth: 19872 bytes left [ 174.547103][ T6199] loop0: detected capacity change from 0 to 131072 [ 174.565341][ T6199] F2FS-fs (loop0): Invalid log sectorsize (67108873) [ 174.572404][ T6199] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 174.585077][ T4276] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 174.597205][ T6199] F2FS-fs (loop0): invalid crc value [ 174.597833][ T6220] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x23633d53, utbl_chksum : 0xe619d30d) [ 174.731597][ T6199] F2FS-fs (loop0): Found nat_bits in checkpoint [ 174.887133][ T6199] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 174.894586][ T6199] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 175.128272][ T6238] netlink: 48 bytes leftover after parsing attributes in process `syz.2.553'. [ 175.222946][ T6243] loop1: detected capacity change from 0 to 64 [ 175.845503][ T5705] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 176.045474][ T5705] usb 2-1: Using ep0 maxpacket: 8 [ 176.052800][ T5705] usb 2-1: config 150 has an invalid interface number: 204 but max is 1 [ 176.092694][ T5705] usb 2-1: config 150 has no interface number 0 [ 176.119842][ T5705] usb 2-1: config 150 interface 204 has no altsetting 0 [ 176.152497][ T5705] usb 2-1: config 150 interface 1 has no altsetting 0 [ 176.190077][ T5705] usb 2-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 176.220422][ T5705] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.258929][ T5705] usb 2-1: Product: syz [ 176.273615][ T5705] usb 2-1: Manufacturer: syz [ 176.283800][ T5705] usb 2-1: SerialNumber: syz [ 176.534096][ T5705] xr_serial 2-1:150.204: xr_serial converter detected [ 176.564850][ T6249] loop2: detected capacity change from 0 to 32768 [ 176.584022][ T6251] loop5: detected capacity change from 0 to 32768 [ 176.635639][ T6249] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.557 (6249) [ 176.670708][ T6251] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop5 scanned by syz.5.558 (6251) [ 176.706824][ T6249] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 176.729576][ T6249] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 176.754381][ T6251] BTRFS info (device loop5): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 176.806789][ T6249] BTRFS info (device loop2): enabling auto defrag [ 176.813312][ T6249] BTRFS info (device loop2): doing ref verification [ 176.820278][ T6251] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm [ 176.854212][ T6251] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_LZO (0x8) [ 176.865493][ T6249] BTRFS info (device loop2): use no compression [ 176.871826][ T6249] BTRFS info (device loop2): force clearing of disk cache [ 176.894996][ T6251] BTRFS info (device loop5): use lzo compression, level 0 [ 176.932552][ T6249] BTRFS info (device loop2): max_inline at 57 [ 176.938983][ T6251] BTRFS info (device loop5): using free space tree [ 176.965694][ T6249] BTRFS info (device loop2): disabling free space tree [ 177.085856][ T6277] io-wq is not configured for unbound workers [ 177.156974][ T5705] xr_serial ttyUSB0: Failed to set reg 0x0d: -71 [ 177.177020][ T5705] xr_serial: probe of ttyUSB0 failed with error -71 [ 177.191801][ T5705] usb 2-1: USB disconnect, device number 5 [ 177.199753][ T5705] xr_serial 2-1:150.204: device disconnected [ 177.342342][ T6251] BTRFS info (device loop5): enabling ssd optimizations [ 177.352509][ T6249] BTRFS info (device loop2): enabling ssd optimizations [ 177.399191][ T6249] BTRFS info (device loop2): rebuilding free space tree [ 177.530741][ T6249] BTRFS info (device loop2): disabling free space tree [ 177.585710][ T6249] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 177.620755][ T6249] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 177.745230][ T6251] BTRFS warning (device loop5): failed to trim 1 device(s), last error -512 [ 177.955951][ T5812] BTRFS info (device loop5): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 178.050374][ T6314] device netdevsim0 entered promiscuous mode [ 178.509516][ T6314] device netdevsim0 left promiscuous mode [ 178.510287][ T4273] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 179.059485][ T6262] loop4: detected capacity change from 0 to 32768 [ 179.114461][ T6262] XFS: attr2 mount option is deprecated. [ 179.189289][ T6262] XFS: ikeep mount option is deprecated. [ 179.421217][ T6262] XFS (loop4): Mounting V5 Filesystem [ 179.616009][ T6262] XFS (loop4): log mount failed [ 179.843044][ T6354] loop5: detected capacity change from 0 to 4096 [ 179.899347][ T6354] NILFS (loop5): invalid segment: Checksum error in segment payload [ 179.936650][ T6354] NILFS (loop5): trying rollback from an earlier position [ 180.110966][ T6354] NILFS (loop5): recovery complete [ 180.125174][ T6364] loop2: detected capacity change from 0 to 256 [ 180.165781][ T6367] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 180.194331][ T6364] exfat: Deprecated parameter 'utf8' [ 180.227337][ T6364] exfat: Deprecated parameter 'utf8' [ 180.232931][ T6364] exfat: Deprecated parameter 'utf8' [ 180.304881][ T6364] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d) [ 180.633450][ T6375] loop1: detected capacity change from 0 to 2048 [ 180.754249][ T6375] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 180.847530][ T6375] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 180.886017][ T6375] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 8 with error 28 [ 180.960756][ T6375] EXT4-fs (loop1): This should not happen!! Data will be lost [ 180.960756][ T6375] [ 181.012353][ T6375] EXT4-fs (loop1): Total free blocks count 0 [ 181.031025][ T6375] EXT4-fs (loop1): Free/Dirty block details [ 181.052810][ T6375] EXT4-fs (loop1): free_blocks=2415919504 [ 181.093931][ T6375] EXT4-fs (loop1): dirty_blocks=16 [ 181.103253][ T6375] EXT4-fs (loop1): Block reservation details [ 181.131015][ T6375] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 181.138567][ T6385] loop5: detected capacity change from 0 to 256 [ 181.245944][ T6385] FAT-fs (loop5): Directory bread(block 64) failed [ 181.275480][ T6385] FAT-fs (loop5): Directory bread(block 65) failed [ 181.282458][ T6385] FAT-fs (loop5): Directory bread(block 66) failed [ 181.366880][ T6385] FAT-fs (loop5): Directory bread(block 67) failed [ 181.374284][ T6385] FAT-fs (loop5): Directory bread(block 68) failed [ 181.404116][ T5229] EXT4-fs (loop1): unmounting filesystem. [ 181.411792][ T6385] FAT-fs (loop5): Directory bread(block 69) failed [ 181.441906][ T6385] FAT-fs (loop5): Directory bread(block 70) failed [ 181.500276][ T6385] FAT-fs (loop5): Directory bread(block 71) failed [ 181.525703][ T6385] FAT-fs (loop5): Directory bread(block 72) failed [ 181.532417][ T6385] FAT-fs (loop5): Directory bread(block 73) failed [ 181.718381][ T6397] loop1: detected capacity change from 0 to 2048 [ 181.752326][ T6397] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 181.791926][ T6397] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 181.822886][ T6397] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 160: 0x0b != 0xd4 [ 181.863502][ T6397] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 182.288585][ T6389] loop2: detected capacity change from 0 to 40427 [ 182.315807][ T6389] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x16481 [ 182.324244][ T6389] F2FS-fs (loop2): Project quota feature not enabled. Cannot enable project quota enforcement. [ 182.844310][ T6402] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 182.865880][ T6403] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 182.881970][ T6403] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 182.960477][ T6427] device dummy0 entered promiscuous mode [ 182.974146][ T6403] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 182.991857][ T6427] device dummy0 left promiscuous mode [ 182.995122][ T6403] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 183.013837][ T6403] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 183.080320][ T6403] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 183.088411][ T6403] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 183.099286][ T6403] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 183.120882][ T6403] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 183.132102][ T6403] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 183.140577][ T6403] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 183.150604][ T6403] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 183.162429][ T6403] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 183.373303][ T6412] loop1: detected capacity change from 0 to 32768 [ 183.439904][ T6412] XFS: ikeep mount option is deprecated. [ 183.508056][ T6436] loop2: detected capacity change from 0 to 2048 [ 183.553332][ T6412] XFS (loop1): Mounting V5 Filesystem [ 183.652744][ T6450] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 183.796697][ T6436] NILFS (loop2): error -2 truncating bmap (ino=16) [ 183.836627][ T6412] XFS (loop1): Ending clean mount [ 183.873101][ T6412] XFS (loop1): Quotacheck needed: Please wait. [ 183.968931][ T6450] NILFS (loop2): vblocknr = 15 has abnormal lifetime: start cno (= 4128770) > current cno (= 3) [ 184.008829][ T6457] PKCS8: Unsupported PKCS#8 version [ 184.015148][ T6450] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=16) [ 184.015528][ T6412] XFS (loop1): Quotacheck: Done. [ 184.070868][ T6450] Remounting filesystem read-only [ 184.091664][ T4273] NILFS (loop2): disposed unprocessed dirty file(s) when stopping log writer [ 184.205967][ T48] Bluetooth: hci2: command 0x0c1a tx timeout [ 184.209985][ T26] audit: type=1800 audit(1756402706.663:13): pid=6412 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.591" name="bus" dev="loop1" ino=9290 res=0 errno=0 [ 184.288426][ T6463] loop4: detected capacity change from 0 to 4096 [ 184.321286][ T6463] ntfs: volume version 3.1. [ 184.356371][ T6467] netlink: 28 bytes leftover after parsing attributes in process `syz.0.608'. [ 184.372853][ T6463] ntfs: (device loop4): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set iso8859-13. You might want to try to use the mount option nls=utf8. [ 184.406983][ T26] audit: type=1800 audit(1756402706.703:14): pid=6412 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.591" name="file1" dev="loop1" ino=9286 res=0 errno=0 [ 184.466180][ T5229] XFS (loop1): Unmounting Filesystem [ 184.485171][ T6463] ntfs: (device loop4): ntfs_filldir(): Skipping unrepresentable inode 0x4. [ 184.702182][ T6474] loop5: detected capacity change from 0 to 256 [ 184.810632][ T6474] netlink: 8 bytes leftover after parsing attributes in process `syz.5.612'. [ 184.995591][ T4265] Bluetooth: hci3: command 0x0c1a tx timeout [ 185.063840][ T6484] sg_write: data in/out 41084/1 bytes for SCSI command 0x1c-- guessing data in; [ 185.063840][ T6484] program syz.4.618 not setting count and/or reply_len properly [ 185.155564][ T4265] Bluetooth: hci1: command 0x0c1a tx timeout [ 185.155595][ T48] Bluetooth: hci4: command 0x0c1a tx timeout [ 185.459092][ T6490] loop2: detected capacity change from 0 to 4096 [ 185.520302][ T6498] netlink: 'syz.5.623': attribute type 2 has an invalid length. [ 185.552495][ T6498] netlink: 10 bytes leftover after parsing attributes in process `syz.5.623'. [ 185.583218][ T6499] netlink: 8 bytes leftover after parsing attributes in process `syz.1.610'. [ 185.603331][ T6501] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 185.931375][ T6507] loop2: detected capacity change from 0 to 1024 [ 186.275654][ T48] Bluetooth: hci2: command 0x0406 tx timeout [ 186.387855][ T6515] input: syz0 as /devices/virtual/input/input15 [ 186.473432][ T6492] loop4: detected capacity change from 0 to 32768 [ 187.075494][ T48] Bluetooth: hci3: command 0x0406 tx timeout [ 187.235646][ T48] Bluetooth: hci1: command 0x0406 tx timeout [ 187.241938][ T48] Bluetooth: hci4: command 0x0406 tx timeout [ 187.578390][ T6553] netlink: 'syz.2.644': attribute type 3 has an invalid length. [ 187.610517][ T6555] loop5: detected capacity change from 0 to 512 [ 187.667180][ T6555] EXT4-fs: Ignoring removed oldalloc option [ 187.683463][ T6555] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 187.776723][ T6555] EXT4-fs (loop5): 1 truncate cleaned up [ 187.794515][ T6563] loop1: detected capacity change from 0 to 512 [ 187.803691][ T6563] EXT4-fs: Ignoring removed nobh option [ 187.810363][ T6555] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 187.939785][ T5812] EXT4-fs (loop5): unmounting filesystem. [ 187.969154][ T6563] EXT4-fs error (device loop1): ext4_do_update_inode:5254: inode #3: comm syz.1.649: corrupted inode contents [ 188.020227][ T6563] EXT4-fs error (device loop1): ext4_dirty_inode:6119: inode #3: comm syz.1.649: mark_inode_dirty error [ 188.081996][ T6563] EXT4-fs error (device loop1): ext4_do_update_inode:5254: inode #3: comm syz.1.649: corrupted inode contents [ 188.144952][ T6563] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #3: comm syz.1.649: mark_inode_dirty error [ 188.204819][ T6563] Quota error (device loop1): write_blk: dquota write failed [ 188.232262][ T6563] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 188.255729][ T6563] EXT4-fs error (device loop1): ext4_acquire_dquot:6816: comm syz.1.649: Failed to acquire dquot type 0 [ 188.302600][ T6563] EXT4-fs error (device loop1): ext4_do_update_inode:5254: inode #16: comm syz.1.649: corrupted inode contents [ 188.323163][ T6563] EXT4-fs error (device loop1): ext4_dirty_inode:6119: inode #16: comm syz.1.649: mark_inode_dirty error [ 188.341392][ T6563] EXT4-fs error (device loop1): ext4_do_update_inode:5254: inode #16: comm syz.1.649: corrupted inode contents [ 188.354778][ T6563] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #16: comm syz.1.649: mark_inode_dirty error [ 188.397691][ T6563] EXT4-fs error (device loop1): ext4_do_update_inode:5254: inode #16: comm syz.1.649: corrupted inode contents [ 188.458855][ T6563] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 188.486000][ T6563] EXT4-fs error (device loop1): ext4_do_update_inode:5254: inode #16: comm syz.1.649: corrupted inode contents [ 188.523658][ T6563] EXT4-fs error (device loop1): ext4_truncate:4312: inode #16: comm syz.1.649: mark_inode_dirty error [ 188.555709][ T6563] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 188.604256][ T6563] EXT4-fs (loop1): 1 truncate cleaned up [ 188.622168][ T6585] netlink: 48 bytes leftover after parsing attributes in process `syz.5.657'. [ 188.624424][ T6563] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 188.666103][ T6563] ext4 filesystem being mounted at /63/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 188.966864][ T5229] EXT4-fs (loop1): unmounting filesystem. [ 189.202146][ T6600] loop5: detected capacity change from 0 to 128 [ 189.227888][ T6600] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 189.260434][ T6600] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 189.474433][ T6579] loop2: detected capacity change from 0 to 32768 [ 189.497274][ T6579] XFS: attr2 mount option is deprecated. [ 189.523154][ T6579] XFS: ikeep mount option is deprecated. [ 189.523825][ T9] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 189.679592][ T6579] XFS (loop2): Mounting V5 Filesystem [ 189.832842][ T6579] XFS (loop2): Ending clean mount [ 189.849920][ T6579] XFS (loop2): Quotacheck needed: Please wait. [ 189.944787][ T6579] XFS (loop2): Quotacheck: Done. [ 190.054256][ T26] audit: type=1800 audit(1756402712.503:15): pid=6579 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.653" name="bus" dev="loop2" ino=9291 res=0 errno=0 [ 190.389724][ T4273] XFS (loop2): Unmounting Filesystem [ 190.516466][ T6602] loop0: detected capacity change from 0 to 32768 [ 190.643845][ T6635] loop4: detected capacity change from 0 to 128 [ 190.671791][ T6602] XFS (loop0): Mounting V5 Filesystem [ 190.941643][ T6602] XFS (loop0): Ending clean mount [ 191.203344][ T6655] netlink: 132 bytes leftover after parsing attributes in process `syz.4.680'. [ 191.263847][ T4269] XFS (loop0): Unmounting Filesystem [ 192.522000][ T6684] loop2: detected capacity change from 0 to 1024 [ 192.555536][ T6653] loop5: detected capacity change from 0 to 40427 [ 192.559068][ T6659] loop4: detected capacity change from 0 to 32768 [ 192.592109][ T6653] F2FS-fs (loop5): Small segment_count (9 < 1 * 24) [ 192.609995][ T6653] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 192.629117][ T6684] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 192.689666][ T6659] ocfs2: Slot 0 on device (7,4) was already allocated to this node! [ 192.729189][ T6653] F2FS-fs (loop5): Found nat_bits in checkpoint [ 192.825835][ T6692] binder: 6691:6692 ioctl c00c620f 0 returned -14 [ 192.838791][ T6659] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 192.872713][ T6699] trusted_key: encrypted_key: keyword 'load' not allowed when called from .update method [ 193.031711][ T6659] ocfs2: Unmounting device (7,4) on (node local) [ 193.042185][ T6653] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 193.065623][ T6653] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 193.189627][ T11] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 193.222638][ T11] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 53 with error 28 [ 193.267843][ T11] EXT4-fs (loop2): This should not happen!! Data will be lost [ 193.267843][ T11] [ 193.306805][ T6653] binfmt_misc: register: failed to install interpreter file ./file2 [ 193.309105][ T11] EXT4-fs (loop2): Total free blocks count 0 [ 193.335862][ T11] EXT4-fs (loop2): Free/Dirty block details [ 193.350816][ T11] EXT4-fs (loop2): free_blocks=68451041280 [ 193.369514][ T11] EXT4-fs (loop2): dirty_blocks=64 [ 193.388046][ T11] EXT4-fs (loop2): Block reservation details [ 193.418185][ T11] EXT4-fs (loop2): i_reserved_data_blocks=4 [ 193.479632][ T4273] EXT4-fs (loop2): unmounting filesystem. [ 193.565943][ T5812] bio_check_eod: 4 callbacks suppressed [ 193.565961][ T5812] syz-executor: attempt to access beyond end of device [ 193.565961][ T5812] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 193.741401][ T6719] loop2: detected capacity change from 0 to 512 [ 193.812473][ T6719] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 193.825825][ T4785] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 193.897759][ T6719] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 194.015452][ T4785] usb 1-1: Using ep0 maxpacket: 32 [ 194.022725][ T4785] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 194.041348][ T4785] usb 1-1: config 0 has no interface number 0 [ 194.055736][ T4785] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 194.115578][ T4785] usb 1-1: config 0 interface 85 has no altsetting 0 [ 194.148507][ T4785] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 194.197665][ T4785] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.235554][ T4785] usb 1-1: Product: syz [ 194.257689][ T4785] usb 1-1: Manufacturer: syz [ 194.277721][ T4785] usb 1-1: SerialNumber: syz [ 194.315087][ T4785] usb 1-1: config 0 descriptor?? [ 194.345912][ T4273] EXT4-fs (loop2): unmounting filesystem. [ 194.438584][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.445083][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.676061][ T6736] 8021q: adding VLAN 0 to HW filter on device bond1 [ 194.703594][ T6736] bond0: (slave bond1): Enslaving as an active interface with an up link [ 194.925742][ T4371] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 194.932800][ T6745] syz.4.707[6745] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 194.933615][ T6745] syz.4.707[6745] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 194.950143][ T4785] appletouch 1-1:0.85: Geyser mode initialized. [ 194.986449][ T4785] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.85/input/input16 [ 195.076491][ T4492] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 195.115465][ T4371] usb 6-1: Using ep0 maxpacket: 32 [ 195.122628][ T4371] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 195.130638][ T6731] loop1: detected capacity change from 0 to 32768 [ 195.166513][ T4785] usb 1-1: USB disconnect, device number 8 [ 195.178626][ T4371] usb 6-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 195.203849][ T4371] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.213536][ T6731] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop1 scanned by syz.1.702 (6731) [ 195.222535][ T4371] usb 6-1: Product: syz [ 195.230696][ T4371] usb 6-1: Manufacturer: syz [ 195.248902][ T4371] usb 6-1: SerialNumber: syz [ 195.265321][ T4371] usb 6-1: config 0 descriptor?? [ 195.272626][ T4492] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 195.287540][ T6731] BTRFS info (device loop1): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 195.304668][ T4492] usb 3-1: config 0 interface 0 has no altsetting 0 [ 195.312670][ T6739] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 195.334175][ T4492] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 195.342279][ T6731] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 195.375594][ T4492] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 195.402744][ T6731] BTRFS info (device loop1): using free space tree [ 195.417339][ T4492] usb 3-1: Product: syz [ 195.421671][ T4492] usb 3-1: Manufacturer: syz [ 195.475703][ T4492] usb 3-1: SerialNumber: syz [ 195.500036][ T4492] usb 3-1: config 0 descriptor?? [ 195.521076][ T4492] usb 3-1: selecting invalid altsetting 0 [ 195.588493][ T4785] appletouch 1-1:0.85: input: appletouch disconnected [ 195.610804][ T6739] loop5: detected capacity change from 0 to 8 [ 195.685442][ T6739] SQUASHFS error: lzo decompression failed, data probably corrupt [ 195.730937][ T4492] usb 3-1: USB disconnect, device number 9 [ 195.755552][ T6739] SQUASHFS error: Failed to read block 0x91: -5 [ 195.762118][ T6739] SQUASHFS error: Unable to read metadata cache entry [8f] [ 195.769623][ T6739] SQUASHFS error: Unable to read inode 0x11f [ 195.853316][ T4303] usb 6-1: USB disconnect, device number 2 [ 195.968539][ T6731] BTRFS info (device loop1): enabling ssd optimizations [ 196.016189][ T4745] udevd[4745]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 196.128882][ T5229] BTRFS info (device loop1): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 196.598914][ T6792] loop2: detected capacity change from 0 to 512 [ 196.622533][ T6792] EXT4-fs: Ignoring removed nobh option [ 196.710145][ T6797] loop5: detected capacity change from 0 to 1024 [ 196.722137][ T6792] EXT4-fs error (device loop2): ext4_do_update_inode:5254: inode #3: comm syz.2.715: corrupted inode contents [ 196.877593][ T6792] EXT4-fs error (device loop2): ext4_dirty_inode:6119: inode #3: comm syz.2.715: mark_inode_dirty error [ 196.904224][ T6792] EXT4-fs error (device loop2): ext4_do_update_inode:5254: inode #3: comm syz.2.715: corrupted inode contents [ 196.942688][ T6792] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #3: comm syz.2.715: mark_inode_dirty error [ 196.963701][ T6792] Quota error (device loop2): write_blk: dquota write failed [ 196.974580][ T6792] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 197.047312][ T4346] hfsplus: b-tree write err: -5, ino 4 [ 197.055724][ T6792] EXT4-fs error (device loop2): ext4_acquire_dquot:6816: comm syz.2.715: Failed to acquire dquot type 0 [ 197.105355][ T6792] EXT4-fs error (device loop2): ext4_do_update_inode:5254: inode #16: comm syz.2.715: corrupted inode contents [ 197.138830][ T6792] EXT4-fs error (device loop2): ext4_dirty_inode:6119: inode #16: comm syz.2.715: mark_inode_dirty error [ 197.187920][ T6792] EXT4-fs error (device loop2): ext4_do_update_inode:5254: inode #16: comm syz.2.715: corrupted inode contents [ 197.211121][ T6792] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #16: comm syz.2.715: mark_inode_dirty error [ 197.239102][ T6792] EXT4-fs error (device loop2): ext4_do_update_inode:5254: inode #16: comm syz.2.715: corrupted inode contents [ 197.261901][ T6792] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 197.311118][ T6792] EXT4-fs error (device loop2): ext4_do_update_inode:5254: inode #16: comm syz.2.715: corrupted inode contents [ 197.380824][ T6792] EXT4-fs error (device loop2): ext4_truncate:4312: inode #16: comm syz.2.715: mark_inode_dirty error [ 197.429462][ T6792] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 197.460673][ T6792] EXT4-fs (loop2): 1 truncate cleaned up [ 197.469358][ T6792] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 197.480652][ T6815] binder: 6813:6815 ioctl 400c620e 200000000040 returned -22 [ 197.532233][ T6792] ext4 filesystem being mounted at /139/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 197.804726][ T4273] EXT4-fs (loop2): unmounting filesystem. [ 198.772203][ T6851] loop5: detected capacity change from 0 to 512 [ 198.865655][ T6851] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 198.979825][ T6851] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 199.017779][ T6851] ext4 filesystem being mounted at /42/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 199.173782][ T6865] Driver unsupported XDP return value 0 on prog (id 65) dev N/A, expect packet loss! [ 199.311894][ T5812] EXT4-fs (loop5): unmounting filesystem. [ 199.546328][ T6874] loop5: detected capacity change from 0 to 1024 [ 199.586798][ T6874] EXT4-fs: Ignoring removed nobh option [ 199.666812][ T6874] EXT4-fs error (device loop5): ext4_ext_check_inode:520: inode #11: comm syz.5.737: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 199.744368][ T6883] sp0: Synchronizing with TNC [ 199.839244][ T6874] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.737: couldn't read orphan inode 11 (err -117) [ 199.892515][ T6874] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 200.051189][ T6874] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:477: comm syz.5.737: Invalid block bitmap block 0 in block_group 0 [ 200.090105][ T6874] Quota error (device loop5): write_blk: dquota write failed [ 200.124277][ T6874] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 200.169869][ T6874] EXT4-fs error (device loop5): ext4_acquire_dquot:6816: comm syz.5.737: Failed to acquire dquot type 0 [ 200.207320][ T6892] loop0: detected capacity change from 0 to 16 [ 200.251438][ T6889] EXT4-fs error (device loop5): __ext4_get_inode_loc:4507: comm syz.5.737: Invalid inode table block 8589934593 in block_group 0 [ 200.294066][ T6892] erofs: (device loop0): mounted with root inode @ nid 36. [ 200.390246][ T6892] syz.0.743: attempt to access beyond end of device [ 200.390246][ T6892] loop0: rw=524288, sector=34359738360, nr_sectors = 1976 limit=16 [ 200.497034][ T4384] EXT4-fs error (device loop5): __ext4_get_inode_loc:4507: comm kworker/u4:7: Invalid inode table block 8589934593 in block_group 0 [ 200.539174][ T5812] EXT4-fs (loop5): unmounting filesystem. [ 200.543557][ T6896] loop4: detected capacity change from 0 to 8192 [ 200.645089][ T6896] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 200.711503][ T6896] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 200.724562][ T6896] REISERFS (device loop4): using ordered data mode [ 200.740484][ T6896] reiserfs: using flush barriers [ 200.746400][ T6906] loop5: detected capacity change from 0 to 256 [ 200.797166][ T6906] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 200.815065][ T6896] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 200.846139][ T6906] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 200.893722][ T6896] REISERFS (device loop4): checking transaction log (loop4) [ 200.923316][ T6906] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 200.965253][ T6896] REISERFS (device loop4): Using r5 hash to sort names [ 201.012753][ T6896] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 201.241827][ T6916] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 201.436080][ T6922] loop1: detected capacity change from 0 to 512 [ 201.586344][ T6922] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.754: casefold flag without casefold feature [ 201.635517][ T4271] Bluetooth: hci2: command 0x0406 tx timeout [ 201.641733][ T4271] Bluetooth: hci3: command 0x0406 tx timeout [ 201.702358][ T6922] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.754: couldn't read orphan inode 15 (err -117) [ 201.716446][ T6922] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 201.743437][ T6932] loop0: detected capacity change from 0 to 64 [ 201.996699][ T5229] EXT4-fs (loop1): unmounting filesystem. [ 202.579457][ T6952] ptrace attach of "./syz-executor exec"[4276] was attempted by ""[6952] [ 202.699392][ T6958] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 202.848961][ T6966] loop4: detected capacity change from 0 to 1024 [ 202.926449][ T6966] EXT4-fs: Ignoring removed orlov option [ 202.977183][ T6966] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 203.126395][ T4276] EXT4-fs (loop4): unmounting filesystem. [ 203.805750][ T6988] loop1: detected capacity change from 0 to 8192 [ 203.896771][ T6988] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 203.927791][ T7001] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 203.966190][ T6988] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 204.036782][ T6988] REISERFS (device loop1): using ordered data mode [ 204.095572][ T6988] reiserfs: using flush barriers [ 204.150837][ T6988] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 7, max trans age 7 [ 204.218763][ T6988] REISERFS (device loop1): checking transaction log (loop1) [ 204.256883][ T6988] REISERFS (device loop1): Using r5 hash to sort names [ 204.305984][ T6988] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 204.401627][ T6988] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 204.476136][ T7021] loop0: detected capacity change from 0 to 512 [ 204.491268][ T6988] REISERFS warning (device loop1): reiserfs-13077 reiserfs_fh_to_dentry: nfsd/reiserfs, fhtype=255, len=3 - odd [ 204.561882][ T7021] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 204.603987][ T7021] ext4 filesystem being mounted at /160/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 205.102013][ T4269] EXT4-fs (loop0): unmounting filesystem. [ 205.154338][ T7023] ------------[ cut here ]------------ [ 205.160888][ T7023] kernel BUG at fs/buffer.c:2666! [ 205.216238][ T7023] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 205.222825][ T7023] CPU: 0 PID: 7023 Comm: kmmpd-loop0 Not tainted syzkaller #0 [ 205.230337][ T7023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 205.240411][ T7046] loop4: detected capacity change from 0 to 512 [ 205.240729][ T7023] RIP: 0010:submit_bh_wbc+0x4ac/0x4d0 [ 205.252513][ T7023] Code: 01 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c c0 fe ff ff 48 89 ef e8 d5 68 e2 ff e9 b3 fe ff ff e8 8b 4c 92 ff 0f 0b e8 84 4c 92 ff <0f> 0b e8 7d 4c 92 ff 0f 0b e8 76 4c 92 ff 0f 0b e8 6f 4c 92 ff 0f [ 205.272259][ T7023] RSP: 0018:ffffc9000dc2fcc8 EFLAGS: 00010293 [ 205.278458][ T7023] RAX: ffffffff81ee839c RBX: 0000000000000000 RCX: ffff888073cf3b80 [ 205.286586][ T7023] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 205.294585][ T7023] RBP: 0000000000003801 R08: dffffc0000000000 R09: ffffed100a091e1e [ 205.302704][ T7023] R10: ffffed100a091e1e R11: 1ffff1100a091e1d R12: 1ffff1100a091e1d [ 205.310718][ T7023] R13: 0000000000000000 R14: ffff88805048f0e8 R15: ffff88807747a000 [ 205.318730][ T7023] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 205.328058][ T7023] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 205.334948][ T7023] CR2: 00007fad2dce56c0 CR3: 000000006755e000 CR4: 00000000003526f0 [ 205.343135][ T7023] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 205.351322][ T7023] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 205.359535][ T7023] Call Trace: [ 205.362826][ T7023] [ 205.365768][ T7023] ? debug_object_free+0x2a2/0x3e0 [ 205.370908][ T7023] write_mmp_block_thawed+0x360/0x4f0 [ 205.376580][ T7023] ? read_mmp_block+0x6f0/0x6f0 [ 205.381542][ T7023] ? rcu_read_lock_any_held+0xb0/0x120 [ 205.387017][ T7023] ? rcu_read_lock_bh_held+0xe0/0xe0 [ 205.392402][ T7023] ? kmmpd+0x6f7/0x980 [ 205.396575][ T7023] write_mmp_block+0x13e/0x3a0 [ 205.401375][ T7023] kmmpd+0x6f7/0x980 [ 205.405334][ T7023] kthread+0x29d/0x330 [ 205.409432][ T7023] ? write_mmp_block_thawed+0x4f0/0x4f0 [ 205.415111][ T7023] ? kthread_blkcg+0xd0/0xd0 [ 205.419725][ T7023] ret_from_fork+0x1f/0x30 [ 205.424178][ T7023] [ 205.427219][ T7023] Modules linked in: [ 205.490309][ T7023] ---[ end trace 0000000000000000 ]--- [ 205.493205][ T7046] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 205.499326][ T7023] RIP: 0010:submit_bh_wbc+0x4ac/0x4d0 [ 205.505621][ T7046] ext4 filesystem being mounted at /172/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 205.512674][ T7023] Code: 01 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c c0 fe ff ff 48 89 ef e8 d5 68 e2 ff e9 b3 fe ff ff e8 8b 4c 92 ff 0f 0b e8 84 4c 92 ff <0f> 0b e8 7d 4c 92 ff 0f 0b e8 76 4c 92 ff 0f 0b e8 6f 4c 92 ff 0f [ 205.540563][ T7023] RSP: 0018:ffffc9000dc2fcc8 EFLAGS: 00010293 [ 205.547291][ T7023] RAX: ffffffff81ee839c RBX: 0000000000000000 RCX: ffff888073cf3b80 [ 205.555314][ T7023] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 205.564141][ T7023] RBP: 0000000000003801 R08: dffffc0000000000 R09: ffffed100a091e1e [ 205.572319][ T7023] R10: ffffed100a091e1e R11: 1ffff1100a091e1d R12: 1ffff1100a091e1d [ 205.581776][ T7023] R13: 0000000000000000 R14: ffff88805048f0e8 R15: ffff88807747a000 [ 205.589988][ T7023] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 205.599040][ T7023] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 205.605760][ T7023] CR2: 00007ffd9b11a0b8 CR3: 0000000078c2e000 CR4: 00000000003526e0 [ 205.613862][ T7023] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 205.621967][ T7023] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 205.630140][ T7023] Kernel panic - not syncing: Fatal exception [ 205.636842][ T7023] Kernel Offset: disabled [ 205.641200][ T7023] Rebooting in 86400 seconds..