last executing test programs: 1m0.348929884s ago: executing program 5 (id=463): r0 = fsopen(&(0x7f0000000180)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@map=r1, 0x33, 0x1, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 1m0.201118861s ago: executing program 5 (id=466): r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000340)=ANY=[], 0x0) ioctl$EVIOCRMFF(r0, 0x4004550d, 0x0) 59.285948256s ago: executing program 5 (id=478): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000e80)="d91254e5dbd9441c7d3b74c637ddaf573e3fc10c114cb90ec0b739071e4394ea0097434be2c96c09fc7188f4f38a421d3964f42667376f4284c837ff4c6b3c9efc50cc7698316fcaa3814867d7c2983e11d0d0f6d78ce5cfaf04607ca765787e76f3b1f218caf376b0eba0f39c21b3c112e6bea26c7d24b2a62a", 0x7a}], 0x1, 0x0, 0x0, 0x40000}, 0x20000004) 59.070072478s ago: executing program 5 (id=481): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x400, &(0x7f00000029c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x8001}}, {@journal_dev={'journal_dev', 0x3d, 0x9676}}, {@errors_remount}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [{@smackfsfloor={'smackfsfloor', 0x3d, 'ext4\x00'}}, {@fsname={'fsname', 0x3d, 'minixdf'}}], 0x2c}, 0x84, 0x45a, &(0x7f0000000480)="$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") syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x200010e, &(0x7f0000000140)={[{@inlinecrypt}, {@nodelalloc}, {@jqfmt_vfsold}, {@test_dummy_encryption}, {@block_validity}, {@quota}]}, 0x3, 0x460, &(0x7f0000001380)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount(0x0, &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x20, &(0x7f0000000140)='usrjquota=') 58.251920667s ago: executing program 5 (id=494): syz_mount_image$romfs(&(0x7f0000000140), &(0x7f0000000280)='./file0\x00', 0x208008, &(0x7f0000000000)=ANY=[], 0x0, 0x163, &(0x7f00000004c0)="$eJzs2rFK+0AcB/Dfn39F6OjoVKhUQZukidZVx+LmG5Q21wYvtiSCNC8gToLCOfgSgk/g6JjRTRdRXyJy5oxJLVaLkIjfz5Jv+TWXX+7CTVf3Bm6D+XWiteHp7sOCN3ArTWuzwxqsTbEWEVVkCKPoXKMP7pJ6GJE24Q/5WnqOr9WVntg5Zg63zbxbAgAAAAAAAAAAAAAAAAAAAACAL6qVVSj3hXvEHG43UlV/FOy1Obc9P6f2clerqDNcxAS/kPNjZeqrT0S1LZkcse3JuiF//EvuP1NhuS/4/fj86gfuUPdHQd1x2z27Z++bptU01g1jw9Rfx9KTEd/Gu1Q9URhdGRpFSlJPnTe7zZw3Cya/oFr/0qIjTg7Hn/a+/t8JNzPd9fvDYzHaKGxolWb9ov56+E+FaCMVpmybpSn14ijPxdfuvFW9lvuf1hnwrir+7JypJ1G2lNeLA8DnXgIAAP//W3E+HQ==") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) 57.532285551s ago: executing program 5 (id=504): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1ae96d0103010000", 0x8) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x3, "e699ddb6"}]}}, 0x0}, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000040)=ANY=[], 0xffc9) 57.497283275s ago: executing program 32 (id=504): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1ae96d0103010000", 0x8) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x3, "e699ddb6"}]}}, 0x0}, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000040)=ANY=[], 0xffc9) 50.934700591s ago: executing program 4 (id=571): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x20, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x40083, 0x715cb}}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x4000040) 50.487753085s ago: executing program 4 (id=575): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r1, 0x0, 0x0, 0x8812, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1, 0x7fffffff, 0x2}, 0x20) 50.208231395s ago: executing program 4 (id=578): socket$kcm(0x10, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000011008188040f80ec59acbc0413a181000d00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) 49.796295463s ago: executing program 4 (id=580): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000b80)={[{@nombcache}, {@abort}, {@dioread_lock}, {@norecovery}, {@discard}, {@lazytime}, {@noload}, {@usrquota}, {@noauto_da_alloc}]}, 0xfe, 0x558, &(0x7f0000000c00)="$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") mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}], [], 0x2c}) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0xa0) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 49.147765071s ago: executing program 4 (id=586): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.events\x00', 0x275a, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000000)) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x2, 0x0, 0x4, 0x4000007fffffff}) fcntl$lock(r0, 0x24, &(0x7f00000001c0)={0x2, 0x0, 0x72e, 0x4}) 47.940894379s ago: executing program 4 (id=595): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080), 0x4) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10) 47.532874098s ago: executing program 33 (id=595): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080), 0x4) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10) 38.282287958s ago: executing program 6 (id=690): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x11, &(0x7f0000000100)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x17}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 38.222469883s ago: executing program 6 (id=691): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000880)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x9, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) 37.886437894s ago: executing program 6 (id=693): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r0, &(0x7f0000000000)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0x3, 0x0, 0x3, 0x0, 0x2, 0x3e, 0x0, 0x301, 0x38, 0x0, 0xf, 0x0, 0x20, 0x1, 0x4}, [{0x3, 0x8, 0xf3, 0x81, 0x4, 0x4, 0xc, 0x400}]}, 0x58) close(r0) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) 37.618313868s ago: executing program 6 (id=697): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000b80)={[{@nombcache}, {@abort}, {@dioread_lock}, {@norecovery}, {@discard}, {@lazytime}, {@noload}, {@usrquota}, {@noauto_da_alloc}]}, 0xfe, 0x558, &(0x7f0000000c00)="$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") mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}], [], 0x2c}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340), 0x0, &(0x7f0000000140)={[{@index_off}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './bus'}}]}) 37.121188653s ago: executing program 6 (id=701): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, 0x12, r0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 36.783539204s ago: executing program 6 (id=704): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_TX_RATES={0x20, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x1c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x0, 0xa28, 0x200, 0x6, 0x68c0, 0x9, 0xa]}}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 36.417212456s ago: executing program 34 (id=704): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_TX_RATES={0x20, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x1c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x0, 0xa28, 0x200, 0x6, 0x68c0, 0x9, 0xa]}}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 14.937585789s ago: executing program 2 (id=916): r0 = syz_mount_image$btrfs(&(0x7f0000000080), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f0000003a40), 0x0, 0x559e, &(0x7f0000005680)="$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") ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f00000001c0)={0x1}) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x5000940e, &(0x7f0000003a80)={{}, "67007fd20187e707f2c23217151d4c4507c7c085dd422660bda48e086cd2f808d5b6478c8cbea9b2ad3af2c0d89a0bb3693d4bbafc396326520398d1d306eeadbbc30061f8c77ac113c986ac3224717ffd13eb5d9385058a7f43f0bec54d7a9cfa0e9476ad1f5e3929aef800b6e05130321698ce486a9a471cb5f990a6090d5d08dbd76281074ccfcba7c541d1d90c7cda0c00db3fe016f476c4f0d8477d5a2a63b0b5996608f3285284834f76f3abc4fd6eb7bc98d25cf13ea9bf76c926015175d32ddb51f55aeb94cf79c5ae462344cb76d37e3de8268f6775462964f874cb532b06eb9e5530765b8a15c416f2c9f5d623d5d36f4e599dfe1e61ab723a38cfd8df003314b67e2497f1bb0e8ffe1c2ff51245449a41628b7d19ed163d3b8ef7c0e388c519f373534a70b19dcd3dcf73f734adaa0f56c44ba98f11293a837651846e44acda315cdbad251e91e7b45db0d2d7101ecda1b990580e8b80f770cbeefaa053ff8113c0d2c656ef14974ccd03d326d9072d8f6c124270df133679938a39ac6dcdca3fb6a36fda27694d8546d156fd3f99394266c1e5829fb6f4eda46914d2b68d41d3e00cef0dd85ffac1ec37e766cf9585332485e97d76760403dba1f42e6bb11da51fce5e6c82fdded15ae1c92fbe33baa213cae97aa116641bda9c59969d93b8103f1bf383339b9e9e416d42f9b1235acb1d899dcf6088bef22d6dbc724689d26f14e0a8fc335c16bcb28686703314e9e8abb715eb9120dc40e39e56c046cd30e8802cf0035f6edae9a27c205b9e27d0b43659bd004c3a0825e3320aa20a36407f1ca381a6b50a45023028b011c36cc34723e6e394fa695d5110c5b151aa11a5b5a8ab538b38a19e44b5d2b5ba263141a8737e76555e5be78f54a3ba1bb366c6d7411a4c3431b7ae422dfcc785676a072d6609a708acfb703c330194565e3761b403798a6b2ed1da656da27dff2f4a13475e5f50e0cb9eac745ee6457cdd7cb4e46d4e34e27e2c5655340eb88cfdb31cb7ed3b8358fc2907eb2f63bda192403b0672de72aebb73ef7098b4a85a71dc73ce05b5e0e45b7a19f9c9a41df892172c4ef46f0d201ed67b69b62adc742fdf5c2f6052896873fc83180d2759b44b840944d440868fb03f660084af14293e83b65678e8a2372cc3664fb4f5a726463c7d002a92e3d2c4622dd21bba56df7679849a1d1ac1e35128447dd10908b045d722416cbbd79ea389687a8106d8f6954553084025c541a264dc2c3b75b53e803f24b4fcbeef27f22c98b6034cd767c5c3bc8a22eba95e5e6b3b2494b16b0b32419b6308132ec59a94afceed06d8a4742cd91a445c8816ec2642a6546743d1ffb15dd31925b640f462ea7978320d1f840a0c21f6afbe13f6b5a6eadf6dba255ac7f3d25b5d16abc14aae4dbc8561fd3bcb82a1c857611165af6194d9ad865ee7b3b053dbf5c3b943563c0530b00aed8d184b50d3deed849622d9570bab5947254c847bfdbebf0b6551cedefad75618e806261d0ebdba27a5145b409cde45b2bdf794f6726c6bd5d3ca62a8bdf7ee594aa1089b8ac761435b82555b40d72d9d6948e8987ac516f53f68e4f60358793bc42fbfcef881a669be7fc94c18d7c61fc3c62ed434312924af7d4d7fa85bd1546650f35b0eb9be3b62fb527ce90deee19e0642d82da3915f69a36e6c4c44c32e78f589bf49eba8292ff8e5c0949e5783b61ae181c698e7afb88a6bf77909226902405ad152907a149cdbf23e1c324dc1854ae14d3c43e4efcba4f8d3e6a7f3229061f459db0265c2a73286e24e51dcc0349c7f861b52c38fe33f15ce3757acb6a8fbfa0eb32cd58e57f0cb9bec752ce76a42fcb99e08c16cb0ed770d65c33756fb420472b78016bc346d3dfd41b779e858230d99fc806c759b9584f3f54538b78f31c69aac5250c750ecc32b4cdbef817076effc0b98e87f1ad6ec0c851c4b5c7cc55a48eb042d89f1c380f21e5d0cc5bfce73940f7e1156a824804efb2d0105a27a1ca7bcd66855e816cc027550821890e4511eedf28b839e90ce6d373fec645b22a060f3ef86e387ad20407555f508069b36f57a218a4bb3977267c66d94ecc80a2222a78bd9891394b6a66d2f48a2a926f5568f41b86d413492f68bf49a138442d40439e6a2425b06c88c8552b325642bc4fd6d0ac80056560073e827f651ec0db7c4e2a369afb625e669367a28ac6706ce1433696ccaf1416a43cdfa94b1f27664f3685d1bb72157d7577b20e9921def1460cfcd2cd806e3bafa83a3b5b4b4dac5d5f05d92d125fc295ea07ca4206b3f85a18f6f0c941d8df2f3dc57c87d9abcc7c3dbf91d7fa2f42df7b7df6371a901417507ab1093dbc0a17bca7575f4cbe6eb8151c9a6b76b04651c2c41e0bffc37708f1327ac3b204abe8af964a9cdb9997fdce64f36e606f4eb0e4564dc56ad43bb1b250ae4c64b6ba42499ee90ba37c6692f77218a49cb7ce38b3f8c8c58b3f6de5754d1b0890661145f023f83aff39d82030f4d7c1a6893b17b0379d63819c71b02a8ca450be5c97215d148812b1aeeeb0ee91534f7f83c17951140aaad6ccd8f7e5dca522139211d5f7358e32becc1d720a4ae7e08a6e48087761bbb1afbd3c4a0374d4ce65c192abefe6e4279f31249f0623490d30b8dc6094b6063ea503460e028b3ed76113bcb60b64d324d1b654d38cd64fe6384e928de69093f32c0967566cb9c65cd6c190292bbee355fb3ae73f8f5e702be3f414cf0f75b6165f96ff0c2d11de264eefd28e4760b65e9e51a43a9968b74cfce50bdf200712b90c0591b258ca61f5394d68acc5ec281a5b35088aa5a78ad8978336d4bcbdfb940922fd2d09d9a2dbc2699a0d36389b08557149345bb6ff59bd01bab3701e8baf0de315bba270ef22fadccb80609e86ac75185c651e466307360e78f6ba4dd02a62d72b78ff03709375465b6f0c88b8fbcfb8d52e11866615c1bbf3d38da0b7b102e3f5cd0d8fd86d98fa7ed24a6b010b194a7a5b80fb6fb2b35e72a0c01af3042b14ff708f943849162a39bf7a501dbdff99a53ea7981a23a2ef0a5ee2cf6d8fdba31a8248adec3e753862544717db3a480534ec80e42c622f66e29bb124086e8f712a8ddad70449590653e764f98d7068664af7564608ceef80c8a1ad852632e667fd70b6d7184914e7044eaeab7508e026a5a5c9b935130e76f962c472837f69a7f36742cac425440e337d367f82099ff8f66435fb1c2daf847e35e5e5ded5a5211ae1321a2bf2b82d60f9745464c97468c7516d54d18d7f6f9385c2aa2d6fb81894d30805c87babc2c6472f6e36a8efee06995e64408bac05bc6ca50caca126cee2a00e527b4de778453efb3dd855249470778d280c7cce57571603a78f991ddae9690c6f9cb2f222d2441a113efdbef1e1d8786560dd6b39cc5b957185abf0ae65b2b0b1e2f2042d4d42575a3119418b5056dc5c12b0fceafa050026fecf61e746597b9717656f601fbf0c55ea1ead2484708bed524320ba1a109d705e60a53a2cafcae32c48b527cf5b2f9415ba26026164d71380ee95fbb8a467da5a686eeb618cd5591b2b975e888540f7b6b95c4b357b65c2f6a82958dd32f2fc95e1909ef5237604115b0d7202b596ac347d37595ba449e96718d7c3fc90f0970d70df061b201bdf5a0acad80c6961fac488a4b0a33a7a82ee5ffed2a772f51b023fcbdd1b0063014012f53602f2a55d76ece6484a5022e86c5af75989d7b7a48a53f4a19a3007af6f66d2c17b298c81ea3b91c4da6ae0ebe908e623c6a8c8d45e6d5564c5cc873916d7a4ae0800dae31f1b43fd37585dd7a4c9bbab7bbd446001321809dc42c754db49cab3e200dfca0f5a0533aca50414c426787d5a799460bb2e4e0a4a68d447e506cf37bf76b22a9d13f15d4094ba02b3420616f85fffbc4304a27d93c7f260f1bb3a8279fa39a95966363a86c910527a1c4fae7d30423c706cfe47db865b697ed300dbc03000000cdf1ad524da027b62228bffec02ab4c759ffda774bbe4d950f25871c44ac0ebe56a3e30a49238c24150fb7f2eff97637bf8d88415ba133d51355880307455c09ba009b240614f1f9bbd77b9f9ca56ed1faa61d1fa1c1d366d380d67eb12a597b258fab8932b7fdb73b9452c74a4ebd0334dd580ff941447631ad9b464cf2ce346fc08cb743fd87dbed585e3218802f281c0fbff9a5fe2f3355f36f19e4bfd96262af0f8fd08f715752d79759191a249b60f05f6671eec600d29862ad71afc84f1de0c5ba6557cada7610625744ef1110d5016bb027699b3fd438978672a9aa228f68f9368036abef754fda4bd3cf9c88dddb28ae11238747b513e95c78828ab1143445077052d4699a1260c40b887b898f1a596de0ed908f1813de47c99b6fa498bc892aec67966139db8fbe6d17b3b6542da9868b5313de5b7651cda2c61aa2912951cf14d037ed1ab1ebfa9183852519c4717332f676a4fa79cc1c4c49253467195266a9edcb070e7caebc7d9f55d0ab773fcf85f089adbd6ba953f69eafec2e89dda7322041785d75895ecb46158989472f5a1bc7a28909741d0da7b11eaba264b5ff44bea22fae4ce9dc46fc71722b8153c8ac1e361f66116725bc5684b028a5d734bcbe4b8e746379f939cc50b8e15dfd12fbabe657d5158c31c42dc7b422ed3432b0cab81f2f5e9989ba00fc30c19141d3a97635cfe88e0d8eb5ca148b33635550f47af5d4bd06841c455b1f09c64681267b0d7a84cbd9a494b92a0fb6272f92f0f03a133f2d52ec8d94d32766607c54b955ebb8d91c34796b090b7894f36382db5f2856a63df7437d671dd815d0d313ba8f44b0d9e01d714daa4135f19089f2a3688ed2422670f54ab36f4a68626830e260c453b0d4e989f311149ebc755e984d6dd66e79b6cb394965f654cde57990a4274fd08a256c356f0dc05e608513b9b316821851c08356c1182476b085ca9b069f789601d60a8580a9d672b4b8d8b1747959b98e80b5d17501347c3c10aa52cfc7869f96890614778014baa91613767e4223c7f516cfba8b60f882ba233bd2f30b122c682ebf2f29fa1253d3c81bab5cf744d7262e4f00fc55b69caceee1d405184397d699776bdce71fd2306c1d8a70378be27cf07c000d30f8fe484eaea13b9b13ca7b3863d3233884497741ab4f2355dec89302ca459cf251c18b7d50dc0465113d8aeb44679551d0b8ea7595df9c35184b58334dfd5edd3a5a49d0d7528d130c268ecc505d5de015a825f821d648951619815a5a75dc06f070140e42005f670f6798cb86df0a80531005b9df0a14294d6994fb989f2ce6b1bbd82da15f03d94bea32a3272d438c2033f35e41473a5b70240d41a69076095693de5e0ccf50236588436c28e7f2b77992f2c56e7598e5500fe7c5e421dc1a0a1e2ec623bb279cedc62baa1613782d90a7cea40082ce647d3eadbbf76c4e601a78643aeed701e1a86c7dfe620bbe47e42a00b2cbd92635ed41e6a71371a5a938d7b38e6a30861b1ee2b8917cadc53bf7ad203582e051065432fadad2ec8d2435b50a08827ff89a8badb1220f59fb6606ddf5efd3a0d07f5be5fb907061adf171da7e30f6bb5aa9af9d1732d8e2b789edf0827862c742c8264c54e0b9ddf131087c08a24cda2b344ef035b6d3c57ee87f856377901e5f87bdb6a58f0e0347275868e1d9cd999a5800"}) ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, 0x0) 12.993915382s ago: executing program 2 (id=937): r0 = io_uring_setup(0x79af, &(0x7f0000000100)={0x0, 0xaa00, 0x2}) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSRS485(r1, 0x5437, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 11.875004151s ago: executing program 2 (id=945): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="00e099427c5cbccbbab42748f3101d3f91be082efd3331f744975d7b136dc54efd06b783fda1430600000027679294e6a6ce0ecbe663d53dbc699942e945fa548cf85ea11e44ffc16d0975889a1769c713c03732880ea92ee2978b19e7393b687f1f94d4fc0d16a91990d9eb70c31527be057f5da431ee5763a0bc45dfcd044deb44c3289725209108082425d9512df934256b886ccf6b8c002468cce8ae9863299dbd113526f91175ddfd6bfa6b599a465d9a09a4c88f7d4ad28d9fcf37f9eeb4b1e55f7bc40e9c847c93cd8a3a4ad06132ed5c9af3f531720b2914ddb78bd4cab3ea61f0fd198c57", 0xe9) 11.19284738s ago: executing program 2 (id=952): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000000)={[{@errors_remount}, {@grpquota}]}, 0x4, 0x4f2, &(0x7f0000000c80)="$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") mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='hugetlbfs\x00', 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2020) 10.573680373s ago: executing program 2 (id=961): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f000000c300)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14}}, 0x68}}, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000c00)={0x20, 0x17, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x10}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x0) 9.423023041s ago: executing program 2 (id=973): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a\x99]V\xe3\xb6!\xae\xf79k\x90\x88\v8I!\xfdQ\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xd9\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xd2#\x9e\x97\xf4*\xc9\xdd[\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x95\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x02\xb9(\xf6\x1c\x83\xb1J\xec', 0x42, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r0, &(0x7f0000004600)=""/102381, 0xfffffceb, 0x0, 0x0) 9.077110011s ago: executing program 35 (id=973): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a\x99]V\xe3\xb6!\xae\xf79k\x90\x88\v8I!\xfdQ\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xd9\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xd2#\x9e\x97\xf4*\xc9\xdd[\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x95\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x02\xb9(\xf6\x1c\x83\xb1J\xec', 0x42, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r0, &(0x7f0000004600)=""/102381, 0xfffffceb, 0x0, 0x0) 8.906638686s ago: executing program 7 (id=979): syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='nodots,allow_utime=000000000034,usefree,check=strict,dots,\x00'/70], 0x1, 0x1e9, &(0x7f00000002c0)="$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") r0 = open(&(0x7f0000001780)='./bus\x00', 0x64842, 0x0) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x3000}], 0x1, 0x7800, 0x0, 0x3) rename(&(0x7f0000000440)='./bus\x00', &(0x7f00000003c0)='./file1\x00') 8.181125093s ago: executing program 7 (id=984): syz_mount_image$bcachefs(&(0x7f00000000c0), &(0x7f0000000180)='./file1\x00', 0x10, &(0x7f0000000480)=ANY=[@ANYRES32=0x0], 0xff, 0x59d5, &(0x7f00000007c0)="$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") socket$packet(0x11, 0x2, 0x300) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000e40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 5.353559662s ago: executing program 7 (id=995): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000002200f30c0000000000feff00760000000f00001e37000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x3c20, &(0x7f0000001800)={0x0, 0xf520, 0x80, 0x3, 0x3ae}, &(0x7f0000000240), &(0x7f0000001880)) io_uring_register$IORING_REGISTER_RING_FDS(r1, 0x14, &(0x7f0000002c40)=[{0x0, 0x0, 0x0, 0x0, 0x0}], 0x1) 4.05311394s ago: executing program 8 (id=1007): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r0, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001200)=ANY=[@ANYBLOB="050000000300"/16, @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) recvmmsg(r0, &(0x7f0000000ec0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/27, 0x1b}, {0x0}], 0x2}}], 0x2, 0x40000022, 0x0) 3.950198228s ago: executing program 8 (id=1009): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x24}}, 0x0) 3.91107213s ago: executing program 0 (id=1010): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/4\x00') mount$9p_fd(0x0, &(0x7f0000000180)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 3.860000061s ago: executing program 8 (id=1011): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="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", 0x13c}], 0x2}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x16, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffef4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b18, &(0x7f0000000000)={'wlan1\x00'}) 3.77551382s ago: executing program 3 (id=1013): r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) getsockname$netlink(r0, 0x0, &(0x7f0000000080)) 3.650849938s ago: executing program 0 (id=1014): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x170, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xa}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x8c, 0x1, {0x1, 0x4000006, 0x37, 0x3, 0x0, 0xb, 0x6, 0xffffffff, 0x2, 0x0, 0x14, 0x9, 0x8, 0x0, 0x8bc, 0x6}}, @TCA_GRED_DPS={0x0, 0x3, {0x6, 0xe, 0x0, 0x7}}, @TCA_GRED_PARMS={0x0, 0x1, {0xfffffff7, 0x1, 0xdd, 0xc, 0x2d6f, 0x4, 0x1, 0x6, 0x3, 0x3, 0xe, 0x1b, 0x13, 0x5, 0x200, 0x4}}, @TCA_GRED_STAB={0x0, 0x2, "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"}]}}]}, 0x170}}, 0x0) 3.319016952s ago: executing program 1 (id=1015): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/reserved_size', 0x81, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x1}) r0 = socket$isdn_base(0x22, 0x3, 0x0) ioctl(r0, 0x8b32, &(0x7f0000000040)) 3.084565137s ago: executing program 3 (id=1016): r0 = socket(0x1e, 0x2, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000480), 0x4) sendmsg$tipc(r0, &(0x7f0000000c00)={&(0x7f0000000780)=@id={0x1e, 0x3, 0x0, {0x4e24}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x24048040}, 0x80801) recvmmsg(r0, &(0x7f00000070c0)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000a40)=""/188, 0xbc}], 0x1}}], 0xc000, 0x2, 0x0) 2.865115757s ago: executing program 3 (id=1017): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_BETA={0x8, 0x6, 0x13}, @TCA_FQ_PIE_ALPHA={0x8, 0x5, 0x13}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x22008800) 2.381813998s ago: executing program 7 (id=1018): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8042, 0x0) fcntl$setlease(r0, 0x400, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x183203, 0x0) fcntl$setlease(r0, 0x400, 0x1) 1.590867216s ago: executing program 8 (id=1019): syz_open_dev$vim2m(&(0x7f0000000680), 0x0, 0x2) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r1 = socket(0x1d, 0x2, 0x6) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 1.521573866s ago: executing program 1 (id=1020): r0 = landlock_create_ruleset(&(0x7f0000000080)={0x8000}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) r1 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$RNDADDENTROPY(r1, 0xc0045878, 0x0) 1.52084099s ago: executing program 0 (id=1021): r0 = epoll_create1(0x80000) r1 = syz_open_dev$evdev(&(0x7f0000000180), 0x1, 0x2) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)={0x40000005}) epoll_wait(r0, &(0x7f0000000080)=[{}], 0x1, 0x7f36be39) 1.413863635s ago: executing program 1 (id=1022): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f00000004c0)='./file1\x00', 0x1804810, &(0x7f0000000180)=ANY=[], 0xfe, 0x676, &(0x7f0000001040)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000080)=""/43, 0x2b) getdents(r0, 0xfffffffffffffffd, 0xbb) 1.398865956s ago: executing program 7 (id=1023): syz_mount_image$jfs(&(0x7f0000001cc0), &(0x7f0000001c80)='./file0\x00', 0x800000, &(0x7f00000005c0)=ANY=[], 0x1, 0x5dce, &(0x7f0000013b40)="$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") r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000) truncate(&(0x7f0000000000)='./file2\x00', 0x2200) symlinkat(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', r0, &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1.325152251s ago: executing program 3 (id=1024): r0 = syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x0, 0x11500}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_TIMEOUT={0xb, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001400)={0x0, 0x3938700}}) io_uring_enter(r0, 0x6b4d, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x0, 0x3, 0x7, 0x0, 0x0) 1.307179086s ago: executing program 0 (id=1025): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="d4fa0c511aad03aa5ed217677bc41c027d9c830c439c7f821ddd78b6915cb170e7603acf9e433c2903bb6773f4b0130668a1e5b5e08d21d0b69c28ca3455aed65855c86f3d1e5789d26375a0d85eaf5e92e19c9affcf76e7a94e76556d2b104ebf645747fadc91460f4b3c94e1a89b51be4a6aa4c65285f988329a8163b69c51b801500a5bacd0463976e2960e2679ef2feee5e6ce6bb78a51fb0e15820d13e4a5aa9e0742a6f8d677ad28fea356657bb550c8311b682d9003c82267a15aa7334bc53b65b9119a1a7d905c7dd365b85c230bbad0d5d0a79819e112637819d9a187cfdf782c6127d2d4281926ab0e22f7346b616fe28ed0b9f4a0c9fdac6d3a90a9c38b5e31448a45546388c95045bc22fe88c43b82a0a5d3eb61c238a5159ea98db9c00aeef644ae98a8cb8dffff3b7ba14d7971910b559623af8295", 0x13c}], 0x2}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="010000"], 0x20000600}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b18, &(0x7f0000000000)={'wlan1\x00'}) 1.086414167s ago: executing program 1 (id=1026): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x51) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x4, @loopback}, 0x1c) shutdown(r0, 0x2) 1.014363754s ago: executing program 0 (id=1027): connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xd7, 0x0) mmap$usbfs(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) munmap(&(0x7f0000ff6000/0x3000)=nil, 0x3000) 935.787762ms ago: executing program 3 (id=1028): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x500) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x34, 0x0, 0x0) 869.532842ms ago: executing program 0 (id=1029): r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0xfffd, 0x3, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) syz_mount_image$xfs(&(0x7f0000000340), &(0x7f0000000000)='./file3\x00', 0x2210a5d, &(0x7f0000000140)={[{@nolazytime}]}, 0x1, 0x96b1, &(0x7f0000000800)="$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") 815.05623ms ago: executing program 1 (id=1030): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x3c, r0, 0x9, 0x0, 0xfffffffe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x14, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_IDX={0x5, 0x2, 0x1}]}, @NL80211_ATTR_MAC={0xa}]}, 0x3c}}, 0x0) 610.443435ms ago: executing program 8 (id=1031): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4008af25, &(0x7f0000000000)) 493.468252ms ago: executing program 1 (id=1032): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x10, &(0x7f0000000c80), 0xff, 0x249, &(0x7f0000000880)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000240)=@reiserfs_2={0x8, 0x2, {0xb}}, 0x0) rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 127.917614ms ago: executing program 3 (id=1033): syz_mount_image$udf(&(0x7f0000000480), &(0x7f00000004c0)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00b96fa236bfd596c74e808dd7b85a97c6ab3f6173849702311b635ac7a4e02bb352424c"], 0x1, 0x46f, &(0x7f0000000540)="$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") mkdir(&(0x7f0000000100)='./bus\x00', 0x1) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./bus/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='./bus/file0\x00') 92.553ms ago: executing program 8 (id=1034): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x3f, 0x822f01) write$evdev(0xffffffffffffffff, &(0x7f00000001c0)=[{{}, 0x2, 0x1, 0x8000}], 0x18) openat$mice(0xffffffffffffff9c, &(0x7f0000000bc0), 0x0) write$char_usb(r0, &(0x7f0000000040)="e2", 0x918) 0s ago: executing program 7 (id=1035): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000000)="c5", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x13}, 0x1c) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000040)={0x0, 0xfff, 0x9, 0xb}, &(0x7f0000000080)=0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): 0427 [ 115.485685][ T5831] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 115.565623][ T5918] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 115.719733][ T6849] dummy0: entered promiscuous mode [ 115.765084][ T5918] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 115.791515][ T5918] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.831523][ T6849] dummy0: left promiscuous mode [ 115.843276][ T5918] usb 2-1: config 0 descriptor?? [ 115.876054][ T5918] cp210x 2-1:0.0: cp210x converter detected [ 116.341011][ T5895] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 116.500995][ T5895] usb 5-1: Using ep0 maxpacket: 16 [ 116.508795][ T5895] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 116.529867][ T5895] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 116.551459][ T5895] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.585471][ T5895] usb 5-1: Product: syz [ 116.605580][ T5895] usb 5-1: Manufacturer: syz [ 116.620202][ T5895] usb 5-1: SerialNumber: syz [ 116.666822][ T5895] usb 5-1: config 0 descriptor?? [ 116.683323][ T5895] hub 5-1:0.0: bad descriptor, ignoring hub [ 116.696620][ T5895] hub 5-1:0.0: probe with driver hub failed with error -5 [ 116.742287][ T5918] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 116.755872][ T5895] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input6 [ 116.762204][ T5918] usb 2-1: cp210x converter now attached to ttyUSB0 [ 116.843210][ T6878] capability: warning: `syz.5.311' uses deprecated v2 capabilities in a way that may be insecure [ 116.966009][ T5898] usb 2-1: USB disconnect, device number 7 [ 116.978012][ T6877] loop2: detected capacity change from 0 to 8192 [ 116.987241][ T5898] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 116.998313][ T6884] loop5: detected capacity change from 0 to 1024 [ 117.000434][ T5898] cp210x 2-1:0.0: device disconnected [ 117.020496][ T6877] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 117.060604][ T29] audit: type=1800 audit(1734765811.239:18): pid=6877 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.310" name="file1" dev="loop2" ino=1048613 res=0 errno=0 [ 117.142073][ T6853] usb 5-1: reset high-speed USB device number 2 using dummy_hcd [ 117.355124][ T6888] nbd: nbd5 already in use [ 117.711151][ T5898] usb 5-1: USB disconnect, device number 2 [ 118.033772][ T6907] loop3: detected capacity change from 0 to 4096 [ 118.053053][ T6912] loop5: detected capacity change from 0 to 64 [ 118.379350][ T5852] Bluetooth: hci1: command tx timeout [ 118.479310][ T6925] IPVS: Scheduler module ip_vs_ not found [ 118.487986][ T6900] loop1: detected capacity change from 0 to 40427 [ 118.527412][ T6900] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 118.550743][ T6900] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 118.579199][ T6931] loop4: detected capacity change from 0 to 1024 [ 118.610376][ T6931] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 118.635943][ T6900] F2FS-fs (loop1): Found nat_bits in checkpoint [ 118.658850][ T6931] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 118.687532][ T6931] EXT4-fs (loop4): orphan cleanup on readonly fs [ 118.714322][ T6931] Quota error (device loop4): v2_read_file_info: Can't read info structure [ 118.724544][ T6900] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 118.732569][ T6900] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 118.742970][ T6931] EXT4-fs warning (device loop4): ext4_enable_quotas:7156: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 118.758824][ T6931] EXT4-fs (loop4): Cannot turn on quotas: error -5 [ 118.791159][ T6931] EXT4-fs (loop4): 1 truncate cleaned up [ 118.803598][ T6931] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 118.912988][ T6946] loop5: detected capacity change from 0 to 256 [ 118.924598][ T5992] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.410624][ T6959] loop3: detected capacity change from 0 to 1024 [ 119.862349][ T6954] loop5: detected capacity change from 0 to 40427 [ 119.906118][ T6968] netlink: 32 bytes leftover after parsing attributes in process `syz.4.349'. [ 119.916665][ T6968] netlink: 32 bytes leftover after parsing attributes in process `syz.4.349'. [ 119.940613][ T6965] loop1: detected capacity change from 0 to 2048 [ 119.999796][ T6965] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 120.016255][ T6954] F2FS-fs (loop5): Found nat_bits in checkpoint [ 120.160562][ T6954] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 120.356155][ T6973] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.377633][ T6988] netlink: 8 bytes leftover after parsing attributes in process `syz.0.356'. [ 120.441701][ T5839] syz-executor: attempt to access beyond end of device [ 120.441701][ T5839] loop5: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 120.504595][ T5839] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 120.538912][ T5839] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 120.616679][ T6994] loop4: detected capacity change from 0 to 764 [ 120.684216][ T6996] loop1: detected capacity change from 0 to 256 [ 120.748960][ T6996] FAT-fs (loop1): Directory bread(block 64) failed [ 120.758380][ T6996] FAT-fs (loop1): Directory bread(block 65) failed [ 120.772179][ T6996] FAT-fs (loop1): Directory bread(block 66) failed [ 120.800993][ T6996] FAT-fs (loop1): Directory bread(block 67) failed [ 120.819931][ T6996] FAT-fs (loop1): Directory bread(block 68) failed [ 120.837962][ T6996] FAT-fs (loop1): Directory bread(block 69) failed [ 120.857495][ T6996] FAT-fs (loop1): Directory bread(block 70) failed [ 120.868396][ T6996] FAT-fs (loop1): Directory bread(block 71) failed [ 120.896971][ T6996] FAT-fs (loop1): Directory bread(block 72) failed [ 120.916610][ T6996] FAT-fs (loop1): Directory bread(block 73) failed [ 120.926436][ T7000] loop2: detected capacity change from 0 to 1024 [ 121.009254][ T7000] hfsplus: request for non-existent node 3 in B*Tree [ 121.038090][ T7000] hfsplus: request for non-existent node 3 in B*Tree [ 121.114872][ T7000] hfsplus: request for non-existent node 4 in B*Tree [ 121.140919][ T7000] hfsplus: request for non-existent node 4 in B*Tree [ 121.668866][ T7009] loop1: detected capacity change from 0 to 32768 [ 121.691083][ T7009] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.369 (7009) [ 121.813329][ T7009] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 121.824623][ T7009] BTRFS info (device loop1): using sha256 (sha256-ni) checksum algorithm [ 121.833185][ T7009] BTRFS info (device loop1): using free-space-tree [ 121.941117][ T7027] loop4: detected capacity change from 0 to 256 [ 122.142138][ T6990] loop0: detected capacity change from 0 to 65536 [ 122.167748][ T7012] loop3: detected capacity change from 0 to 32768 [ 122.206986][ T7012] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.368 (7012) [ 122.287891][ T7012] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 122.337860][ T6990] XFS (loop0): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 122.339298][ T7012] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 122.371067][ T7012] BTRFS info (device loop3): using free-space-tree [ 122.483536][ T6990] XFS (loop0): Ending clean mount [ 122.516823][ T6990] XFS (loop0): Quotacheck needed: Please wait. [ 122.543605][ T5840] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 122.625285][ T6990] XFS (loop0): Quotacheck: Done. [ 122.748510][ T7012] BTRFS error (device loop3): balance: invalid convert system profile raid1c3 [ 122.830706][ T7025] loop2: detected capacity change from 0 to 32768 [ 122.874794][ T7025] BTRFS: device /dev/loop2 (7:2) using temp-fsid 1cd59a46-a128-4d95-8068-d6cf09167166 [ 122.888110][ T7025] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.373 (7025) [ 122.949212][ T7025] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 122.961700][ T7025] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 122.970423][ T7025] BTRFS info (device loop2): using free-space-tree [ 122.978674][ T5833] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 123.313418][ T5831] XFS (loop0): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 123.513322][ T7104] netlink: 132 bytes leftover after parsing attributes in process `syz.3.379'. [ 123.521019][ T5827] BTRFS info (device loop2): last unmount of filesystem 1cd59a46-a128-4d95-8068-d6cf09167166 [ 123.854539][ T7111] loop5: detected capacity change from 0 to 4096 [ 123.908802][ T7116] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 124.397521][ T7129] ptrace attach of "./syz-executor exec"[5831] was attempted by ""[7129] [ 124.735781][ T7136] loop1: detected capacity change from 0 to 128 [ 124.806582][ T7140] netlink: 20 bytes leftover after parsing attributes in process `syz.5.400'. [ 125.419102][ T5895] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 125.585340][ T7167] loop0: detected capacity change from 0 to 512 [ 125.611874][ T7167] EXT4-fs: Ignoring removed oldalloc option [ 125.631105][ T5895] usb 2-1: Using ep0 maxpacket: 16 [ 125.651100][ T7167] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 125.752432][ T5895] usb 2-1: config 0 has an invalid interface number: 39 but max is 0 [ 125.761518][ T5895] usb 2-1: config 0 has no interface number 0 [ 125.770070][ T5898] IPVS: starting estimator thread 0... [ 125.858258][ T5895] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=70.6d [ 125.868939][ T5895] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.877135][ T5895] usb 2-1: Product: syz [ 125.881439][ T5895] usb 2-1: Manufacturer: syz [ 125.886050][ T5895] usb 2-1: SerialNumber: syz [ 125.893229][ T7167] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2863: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 125.945127][ T5895] usb 2-1: config 0 descriptor?? [ 125.950426][ T7167] EXT4-fs (loop0): 1 truncate cleaned up [ 125.965673][ T7167] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.992981][ T5895] i2c-tiny-usb 2-1:0.39: version 70.6d found at bus 002 address 008 [ 126.002398][ T7174] IPVS: using max 19 ests per chain, 45600 per kthread [ 126.049168][ T29] audit: type=1800 audit(1734765820.233:19): pid=7167 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.412" name="bus" dev="loop0" ino=18 res=0 errno=0 [ 126.245566][ T5831] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.383673][ T5895] (null): failure reading functionality [ 126.391022][ T5895] i2c i2c-1: failure reading functionality [ 126.400225][ T5895] i2c i2c-1: connected i2c-tiny-usb device [ 126.407554][ T5895] usb 2-1: USB disconnect, device number 8 [ 126.445612][ T7175] loop3: detected capacity change from 0 to 32768 [ 126.560982][ T3068] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 126.588868][ T5898] kernel write not supported for file /zero (pid: 5898 comm: kworker/0:5) [ 126.711405][ T3068] usb 5-1: Using ep0 maxpacket: 32 [ 126.723075][ T3068] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 126.739214][ T3068] usb 5-1: config 0 has no interface number 0 [ 126.761555][ T7190] sctp: [Deprecated]: syz.0.422 (pid 7190) Use of struct sctp_assoc_value in delayed_ack socket option. [ 126.761555][ T7190] Use struct sctp_sack_info instead [ 126.792109][ T3068] usb 5-1: config 0 interface 12 has no altsetting 0 [ 126.802057][ T3068] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 126.811598][ T3068] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.826479][ T3068] usb 5-1: Product: syz [ 126.837573][ T3068] usb 5-1: Manufacturer: syz [ 126.842543][ T3068] usb 5-1: SerialNumber: syz [ 126.850244][ T3068] usb 5-1: config 0 descriptor?? [ 126.896701][ T7196] loop3: detected capacity change from 0 to 512 [ 126.961112][ T7196] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 127.012236][ T5898] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 127.037135][ T7196] EXT4-fs (loop3): 1 truncate cleaned up [ 127.045142][ T7196] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.088482][ T29] audit: type=1800 audit(1734765821.273:20): pid=7196 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.421" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 127.267357][ T5898] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 127.277517][ T3068] f81534 5-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 127.285069][ T5898] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.285105][ T5898] usb 3-1: Product: syz [ 127.285125][ T5898] usb 3-1: Manufacturer: syz [ 127.285146][ T5898] usb 3-1: SerialNumber: syz [ 127.332087][ T5898] usb 3-1: config 0 descriptor?? [ 127.333989][ T3068] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 127.370872][ T3068] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 127.404451][ T3068] f81534 5-1:0.12: probe with driver f81534 failed with error -71 [ 127.434380][ T3068] usb 5-1: USB disconnect, device number 3 [ 127.451072][ T5833] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.584514][ T29] audit: type=1800 audit(1734765821.763:21): pid=7210 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.430" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 127.617994][ T5913] usb 3-1: USB disconnect, device number 3 [ 127.660402][ T7198] loop0: detected capacity change from 0 to 40427 [ 127.680912][ T7198] F2FS-fs (loop0): Invalid log blocks per segment (4278190089) [ 127.688525][ T7198] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 127.705347][ T7198] F2FS-fs (loop0): invalid crc value [ 127.729076][ T7198] F2FS-fs (loop0): Found nat_bits in checkpoint [ 127.809856][ T7198] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 127.817753][ T7198] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 127.926869][ T7225] loop4: detected capacity change from 0 to 512 [ 127.963598][ T7225] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.435: corrupted in-inode xattr: invalid ea_ino [ 127.968837][ T7198] syz.0.425: attempt to access beyond end of device [ 127.968837][ T7198] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 128.001494][ T7225] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.435: couldn't read orphan inode 15 (err -117) [ 128.017599][ T7225] EXT4-fs (loop4): mounted filesystem 00000007-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.017624][ T7198] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 128.128069][ T7228] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 128.224935][ T5913] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 128.282585][ T5992] EXT4-fs (loop4): unmounting filesystem 00000007-0000-0000-0000-000000000000. [ 128.425281][ T5913] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 128.434648][ T5913] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.454259][ T5913] usb 3-1: Product: syz [ 128.464505][ T5913] usb 3-1: Manufacturer: syz [ 128.487177][ T5913] usb 3-1: SerialNumber: syz [ 128.505522][ T5913] usb 3-1: config 0 descriptor?? [ 128.583193][ T7240] loop3: detected capacity change from 0 to 128 [ 128.594596][ T7240] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 128.654041][ T7245] loop1: detected capacity change from 0 to 2048 [ 128.719977][ T7245] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.754816][ T5898] usb 3-1: USB disconnect, device number 4 [ 128.805181][ T29] audit: type=1800 audit(1734765822.993:22): pid=7245 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.444" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 129.004929][ T5840] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.511831][ T7268] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 129.511831][ T7268] The task syz.3.449 (7268) triggered the difference, watch for misbehavior. [ 129.546370][ T7270] mmap: syz.4.452 (7270) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 130.080323][ T7285] vlan2: entered allmulticast mode [ 130.104972][ T7285] batadv0: entered allmulticast mode [ 130.141730][ T7285] batadv0: left allmulticast mode [ 130.465780][ T7252] loop0: detected capacity change from 0 to 65536 [ 130.509845][ T7305] loop4: detected capacity change from 0 to 2048 [ 130.570487][ T7252] XFS (loop0): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 130.573552][ T7311] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 130.585581][ T7310] netlink: 8 bytes leftover after parsing attributes in process `syz.2.467'. [ 130.641701][ T7311] NILFS (loop4): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 130.653496][ T7311] NILFS error (device loop4): nilfs_bmap_propagate: broken bmap (inode number=4) [ 130.673999][ T7311] Remounting filesystem read-only [ 130.735241][ T5992] NILFS (loop4): disposed unprocessed dirty file(s) when stopping log writer [ 130.765623][ T7252] XFS (loop0): Ending clean mount [ 130.871072][ T3068] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 130.884533][ T7252] XFS (loop0): EXPERIMENTAL online shrink feature enabled. Use at your own risk! [ 131.036463][ T3068] usb 4-1: config 0 has an invalid descriptor of length 49, skipping remainder of the config [ 131.071308][ T3068] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x1D, changing to 0xD [ 131.141018][ T3068] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 26159, setting to 64 [ 131.158612][ T3068] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 131.175497][ T3068] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 131.185193][ T3068] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 131.202941][ T5831] XFS (loop0): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 131.207729][ T3068] usb 4-1: Manufacturer: syz [ 131.252034][ T3068] usb 4-1: config 0 descriptor?? [ 131.258765][ T7313] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 131.276760][ T3068] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 131.474320][ T3068] usb 4-1: USB disconnect, device number 6 [ 131.504182][ T5918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.636937][ T7342] loop5: detected capacity change from 0 to 512 [ 131.690183][ T7342] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 131.691253][ T7345] loop4: detected capacity change from 0 to 16 [ 131.701086][ T7342] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.481: invalid indirect mapped block 8 (level 2) [ 131.755429][ T7345] erofs (device loop4): mounted with root inode @ nid 36. [ 131.769739][ T7345] erofs (device loop4): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 131.829295][ T7342] EXT4-fs (loop5): Remounting filesystem read-only [ 131.836377][ T7342] EXT4-fs (loop5): 1 truncate cleaned up [ 131.838993][ T7345] erofs (device loop4): failed to decompress -5 in[46, 4050] out[1851] [ 131.854272][ T7342] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.888599][ T7345] erofs (device loop4): read error -117 @ 43 of nid 36 [ 131.959804][ T29] audit: type=1326 audit(1734765826.143:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7355 comm="syz.2.486" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9df3f85d29 code=0x0 [ 132.059223][ T7359] loop0: detected capacity change from 0 to 256 [ 132.096694][ T7359] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001034b, chksum : 0x6322ccb6, utbl_chksum : 0xe619d30d) [ 132.211810][ T7342] EXT4-fs: Can't set or change test_dummy_encryption on remount [ 132.212293][ T7365] loop1: detected capacity change from 0 to 1024 [ 132.233819][ T7365] EXT4-fs: Ignoring removed i_version option [ 132.301669][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.308086][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.342265][ T7365] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.373222][ T7373] loop3: detected capacity change from 0 to 2048 [ 132.406049][ T7373] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 132.426225][ T7376] loop0: detected capacity change from 0 to 512 [ 132.433920][ T7376] EXT4-fs: Ignoring removed orlov option [ 132.447218][ T7376] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 132.486189][ T7377] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 132.500766][ T7376] EXT4-fs (loop0): orphan cleanup on readonly fs [ 132.502021][ T5840] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.514119][ T7376] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.492: bg 0: block 248: padding at end of block bitmap is not set [ 132.542189][ T3068] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.573390][ T7376] Quota error (device loop0): write_blk: dquota write failed [ 132.581925][ T7376] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 132.592320][ T7376] EXT4-fs error (device loop0): ext4_acquire_dquot:6938: comm syz.0.492: Failed to acquire dquot type 1 [ 132.629446][ T7376] EXT4-fs (loop0): 1 truncate cleaned up [ 132.637342][ T7376] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 132.643906][ T7373] NILFS (loop3): DAT doesn't have a block to manage vblocknr = 3044605952 [ 132.658698][ T7373] NILFS error (device loop3): nilfs_bmap_truncate: broken bmap (inode number=15) [ 132.668544][ T7376] syz.0.492 (7376) used greatest stack depth: 17656 bytes left [ 132.710593][ T5831] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.731664][ T7373] Remounting filesystem read-only [ 132.736728][ T7373] NILFS (loop3): error -5 truncating bmap (ino=15) [ 132.801409][ T5833] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer [ 132.907987][ T5839] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.358544][ T7401] loop1: detected capacity change from 0 to 64 [ 133.378585][ T12] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.421557][ T5842] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 133.430353][ T5842] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 133.451289][ T5842] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 133.461385][ T5842] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 133.478978][ T5842] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 133.486414][ T5842] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 133.573883][ T5918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.583775][ T12] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.689032][ T7413] loop4: detected capacity change from 0 to 512 [ 133.711092][ T7413] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 133.726930][ T7413] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 133.740980][ T5898] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 133.777795][ T7413] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended [ 133.807455][ T12] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.826583][ T7413] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 133.846700][ T7413] System zones: 0-2, 18-18, 34-34 [ 133.869433][ T7413] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1145: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 133.899689][ T7413] EXT4-fs (loop4): 1 truncate cleaned up [ 133.913525][ T5898] usb 3-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 133.922242][ T7413] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.938532][ T5898] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 133.981613][ T5898] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 134.006425][ T5898] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 134.019959][ T5898] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.042734][ T7407] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 134.056414][ T12] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.170471][ T29] audit: type=1800 audit(1734765828.353:24): pid=7413 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.511" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 134.278685][ T12] bridge_slave_0: left allmulticast mode [ 134.288682][ T12] bridge_slave_0: left promiscuous mode [ 134.305516][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.340133][ T5992] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.408997][ T7438] loop1: detected capacity change from 0 to 4096 [ 134.418286][ T5900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.432321][ T7438] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512). [ 134.510696][ T7442] loop4: detected capacity change from 0 to 128 [ 134.519968][ T7442] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 134.580238][ T7442] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 134.635392][ T5913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.831342][ T5918] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 134.999799][ T5918] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.049692][ T5918] usb 4-1: config 0 interface 0 has no altsetting 0 [ 135.098312][ T5918] usb 4-1: New USB device found, idVendor=044e, idProduct=1215, bcdDevice= 0.00 [ 135.149667][ T5918] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.194776][ T7453] netlink: 'syz.4.529': attribute type 1 has an invalid length. [ 135.236528][ T5918] usb 4-1: config 0 descriptor?? [ 135.362292][ T5898] aiptek 3-1:17.0: Aiptek using 400 ms programming speed [ 135.377567][ T5898] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.0/input/input7 [ 135.431187][ T5898] usb 3-1: USB disconnect, device number 5 [ 135.431260][ C0] aiptek 3-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 135.445595][ T7459] loop0: detected capacity change from 0 to 2048 [ 135.484543][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 135.498629][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 135.510383][ T12] bond0 (unregistering): Released all slaves [ 135.528957][ T7459] Alternate GPT is invalid, using primary GPT. [ 135.537384][ T7459] loop0: p1 p2 p3 [ 135.574366][ T5842] Bluetooth: hci4: command tx timeout [ 135.652467][ T5913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.685518][ T5918] hid-alps 0003:044E:1215.0003: unbalanced collection at end of report description [ 135.705809][ T5918] hid-alps 0003:044E:1215.0003: parse failed [ 135.716103][ T5918] hid-alps 0003:044E:1215.0003: probe with driver hid-alps failed with error -22 [ 135.793396][ T7402] chnl_net:caif_netlink_parms(): no params data found [ 135.967282][ T5918] usb 4-1: USB disconnect, device number 7 [ 136.160768][ T7402] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.169626][ T7402] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.186420][ T7402] bridge_slave_0: entered allmulticast mode [ 136.200942][ T7402] bridge_slave_0: entered promiscuous mode [ 136.243264][ T7402] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.250547][ T7402] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.276913][ T7402] bridge_slave_1: entered allmulticast mode [ 136.290407][ T7402] bridge_slave_1: entered promiscuous mode [ 136.349865][ T12] hsr_slave_0: left promiscuous mode [ 136.371326][ T12] hsr_slave_1: left promiscuous mode [ 136.387735][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 136.417111][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 136.429720][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 136.445159][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 136.468114][ T7495] netlink: 8 bytes leftover after parsing attributes in process `syz.0.542'. [ 136.518928][ T12] veth1_macvtap: left promiscuous mode [ 136.536824][ T12] veth0_macvtap: left promiscuous mode [ 136.549641][ T12] veth1_vlan: left promiscuous mode [ 136.556497][ T12] veth0_vlan: left promiscuous mode [ 136.701777][ T5913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.742746][ T7501] loop2: detected capacity change from 0 to 1024 [ 136.790070][ T7501] hfsplus: walked past end of dir [ 136.968897][ T9] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 137.133543][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 137.150760][ T9] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 137.173075][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.184577][ T9] usb 5-1: Product: syz [ 137.189252][ T9] usb 5-1: Manufacturer: syz [ 137.194652][ T9] usb 5-1: SerialNumber: syz [ 137.206233][ T9] usb 5-1: config 0 descriptor?? [ 137.366293][ T12] team0 (unregistering): Port device team_slave_1 removed [ 137.426366][ T9] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 137.435569][ T12] team0 (unregistering): Port device team_slave_0 removed [ 137.494311][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.655899][ T5842] Bluetooth: hci4: command tx timeout [ 137.733931][ T5918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.849583][ T7402] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 137.867988][ T9] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 137.901245][ T9] usb 5-1: USB disconnect, device number 4 [ 137.930459][ T7509] batman_adv: batadv0: Adding interface: macvlan0 [ 137.950656][ T7509] batman_adv: batadv0: The MTU of interface macvlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 138.010265][ T7509] batman_adv: batadv0: Interface activated: macvlan0 [ 138.039030][ T7402] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 138.064720][ T7511] netlink: 32 bytes leftover after parsing attributes in process `syz.0.552'. [ 138.149052][ T7515] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.171360][ T7515] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.199736][ T7515] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.242866][ T7402] team0: Port device team_slave_0 added [ 138.253766][ T7402] team0: Port device team_slave_1 added [ 138.264231][ T7520] loop0: detected capacity change from 0 to 64 [ 138.372545][ T7402] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 138.407066][ T7402] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 138.449756][ T7520] hfs: request for non-existent node 327680 in B*Tree [ 138.485659][ T7520] hfs: request for non-existent node 327680 in B*Tree [ 138.500980][ T7402] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 138.529514][ T29] audit: type=1800 audit(1734765832.713:25): pid=7520 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.555" name="file1" dev="loop0" ino=18 res=0 errno=0 [ 138.594224][ T7402] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 138.606121][ T7402] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 138.683014][ T1134] hfs: request for non-existent node 327680 in B*Tree [ 138.699846][ T7402] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 138.701986][ T1134] hfs: request for non-existent node 327680 in B*Tree [ 138.768425][ T12] IPVS: stop unused estimator thread 0... [ 138.775905][ T5918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.933472][ T7513] loop1: detected capacity change from 0 to 32768 [ 138.957480][ T7402] hsr_slave_0: entered promiscuous mode [ 138.974123][ T7513] btrfs: Deprecated parameter 'usebackuproot' [ 138.991985][ T7513] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 138.996399][ T7402] hsr_slave_1: entered promiscuous mode [ 139.023589][ T7513] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.551 (7513) [ 139.043138][ T7402] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 139.081310][ T7402] Cannot create hsr debugfs directory [ 139.092224][ T7513] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 139.130621][ T7513] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 139.161073][ T7513] BTRFS info (device loop1): using free-space-tree [ 139.181083][ T7538] batadv_slave_1: entered promiscuous mode [ 139.251211][ T7537] batadv_slave_1: left promiscuous mode [ 139.292533][ T7513] BTRFS info (device loop1): rebuilding free space tree [ 139.335653][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.492123][ T7513] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 139.507764][ T7560] netlink: 12 bytes leftover after parsing attributes in process `syz.0.567'. [ 139.686196][ T7525] loop2: detected capacity change from 0 to 32768 [ 139.731049][ T5842] Bluetooth: hci4: command tx timeout [ 139.793793][ T7402] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 139.827693][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.864137][ T7525] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 139.896212][ T7402] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 139.985349][ T7402] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 140.029494][ T7402] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 140.053940][ T7525] XFS (loop2): Ending clean mount [ 140.131114][ T9] XFS (loop2): Metadata CRC error detected at xfs_rmapbt_read_verify+0x41/0xd0, xfs_rmapbt block 0x14 [ 140.158534][ T9] XFS (loop2): Unmount and run xfs_repair [ 140.176766][ T9] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 140.198896][ T9] 00000000: 52 4d 42 33 00 00 00 0c ff ff ff ff ff ff ff ff RMB3............ [ 140.225462][ T9] 00000010: 00 a7 50 00 00 00 00 14 00 00 00 01 00 00 00 80 ..P............. [ 140.254230][ T9] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 140.278968][ T9] 00000030: 00 00 00 00 5b af 3b 1d 00 00 00 00 00 00 00 01 ....[.;......... [ 140.313927][ T9] 00000040: ff ff ff ff ff ff ff fd 00 00 00 00 00 00 00 00 ................ [ 140.341525][ T7402] 8021q: adding VLAN 0 to HW filter on device bond0 [ 140.343190][ T9] 00000050: 00 00 00 01 00 00 00 02 ff ff ff ff ff ff ff fb ................ [ 140.392913][ T9] 00000060: 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 02 ................ [ 140.402527][ T7402] 8021q: adding VLAN 0 to HW filter on device team0 [ 140.430466][ T4369] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.437660][ T4369] bridge0: port 1(bridge_slave_0) entered forwarding state [ 140.452986][ T9] 00000070: ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00 ................ [ 140.470106][ T7525] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x14 len 4 error 74 [ 140.498587][ T1134] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.505768][ T1134] bridge0: port 2(bridge_slave_1) entered forwarding state [ 140.538172][ T5895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.549132][ T7525] XFS (loop2): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xab0 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [ 140.572516][ T7525] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 140.588441][ T7596] netlink: 'syz.4.578': attribute type 10 has an invalid length. [ 140.596573][ T7596] bridge_slave_1: left promiscuous mode [ 140.603787][ T7596] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.620266][ T7596] bridge_slave_0: left allmulticast mode [ 140.626275][ T7596] bridge_slave_0: left promiscuous mode [ 140.632337][ T7596] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.947237][ T7600] loop4: detected capacity change from 0 to 1024 [ 140.997719][ T7600] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.035307][ T7594] loop0: detected capacity change from 0 to 32768 [ 141.044809][ T7594] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.579 (7594) [ 141.069971][ T7594] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 141.080715][ T7594] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 141.089824][ T7594] BTRFS info (device loop0): using free-space-tree [ 141.202721][ T7402] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 141.228650][ T5827] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 141.555493][ T5992] EXT4-fs error (device loop4): ext4_lookup:1817: inode #2: comm syz-executor: deleted inode referenced: 11 [ 141.622490][ T5831] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 141.637564][ T5992] EXT4-fs error (device loop4): ext4_lookup:1817: inode #2: comm syz-executor: deleted inode referenced: 11 [ 141.809504][ T7402] veth0_vlan: entered promiscuous mode [ 141.821833][ T5842] Bluetooth: hci4: command tx timeout [ 141.835824][ T7402] veth1_vlan: entered promiscuous mode [ 141.879189][ T7402] veth0_macvtap: entered promiscuous mode [ 141.902924][ T7402] veth1_macvtap: entered promiscuous mode [ 141.917950][ T7402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.928630][ T7402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.938756][ T7402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.949373][ T7402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.959241][ T7402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.969798][ T7402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.979716][ T7402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.990730][ T7402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.001346][ T7402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.012232][ T7402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.023365][ T7402] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 142.035101][ T7402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.045573][ T7402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.055587][ T7402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.066051][ T7402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.075976][ T7402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.086471][ T7402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.097194][ T7402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.108178][ T7402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.118089][ T7402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.128643][ T7402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.140417][ T7402] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 142.150603][ T7402] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.159377][ T7402] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.168238][ T7402] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.177359][ T7402] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.218415][ T5918] net_ratelimit: 1 callbacks suppressed [ 142.218440][ T5918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.276807][ T7649] loop2: detected capacity change from 0 to 256 [ 142.318099][ T7649] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 142.500637][ T7654] loop3: detected capacity change from 0 to 164 [ 142.569499][ T7654] rock: directory entry would overflow storage [ 142.575980][ T7654] rock: sig=0x66, size=4, remaining=3 [ 142.591994][ T5992] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.643447][ T7654] rock: directory entry would overflow storage [ 142.650526][ T7654] rock: sig=0x66, size=4, remaining=3 [ 142.805341][ T1134] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.032553][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.040492][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.170722][ T1134] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.261499][ T3068] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.427065][ T80] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.436931][ T7664] netlink: 'syz.1.597': attribute type 1 has an invalid length. [ 143.470923][ T80] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.612763][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.697680][ T7651] loop0: detected capacity change from 0 to 32768 [ 143.779152][ T7677] netlink: 8 bytes leftover after parsing attributes in process `syz.1.604'. [ 143.809585][ T5852] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 143.821210][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 143.895289][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.904171][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.912956][ T5846] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 143.926270][ T7651] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 143.927473][ T5846] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 143.945197][ T5846] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 143.953461][ T5846] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 143.960876][ T5846] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 144.058155][ T1134] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.076919][ T7651] XFS (loop0): Ending clean mount [ 144.291453][ T5913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.307764][ T1134] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.333166][ T5831] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 144.724593][ T7706] hsr_slave_0: left promiscuous mode [ 144.772774][ T7706] hsr_slave_1: left promiscuous mode [ 144.972172][ T7665] chnl_net:caif_netlink_parms(): no params data found [ 145.127826][ T5842] Bluetooth: hci5: unexpected cc 0x080e length: 0 < 3 [ 145.316160][ T7729] loop2: detected capacity change from 0 to 1024 [ 145.331953][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.541866][ T7729] syz.2.621: attempt to access beyond end of device [ 145.541866][ T7729] loop2: rw=2049, sector=5778, nr_sectors = 2 limit=1024 [ 145.599905][ T7729] Buffer I/O error on dev loop2, logical block 2889, lost async page write [ 145.773837][ T2902] hfsplus: b-tree write err: -5, ino 8 [ 146.057654][ T5842] Bluetooth: hci1: command tx timeout [ 146.134439][ T7727] loop0: detected capacity change from 0 to 32768 [ 146.151196][ T5895] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 146.251208][ T7727] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 146.323191][ T5895] usb 4-1: config 0 has an invalid interface number: 120 but max is 0 [ 146.325314][ T7727] XFS (loop0): Ending clean mount [ 146.331674][ T5895] usb 4-1: config 0 has no interface number 0 [ 146.350436][ T5895] usb 4-1: config 0 interface 120 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 146.358258][ T7727] XFS (loop0): Quotacheck needed: Please wait. [ 146.363918][ T5895] usb 4-1: config 0 interface 120 altsetting 0 endpoint 0x8A has invalid maxpacket 255, setting to 64 [ 146.382010][ T5913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.383565][ T5895] usb 4-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 146.402256][ T1134] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 146.410942][ T5895] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.422904][ T5895] usb 4-1: config 0 descriptor?? [ 146.434475][ T7739] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 146.446844][ T5895] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.120/input/input9 [ 146.459608][ T1134] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 146.481046][ T7727] XFS (loop0): Quotacheck: Done. [ 146.494869][ T1134] bond0 (unregistering): Released all slaves [ 146.512594][ T29] audit: type=1800 audit(1734765840.693:26): pid=7727 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.619" name="file0" dev="loop0" ino=4420 res=0 errno=0 [ 146.544783][ T5831] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 146.691683][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.850200][ T3068] usb 4-1: USB disconnect, device number 8 [ 146.929459][ T7759] loop1: detected capacity change from 0 to 32768 [ 146.944520][ T7759] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.630 (7759) [ 147.008746][ T7759] BTRFS info (device loop1): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 147.024035][ T7759] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 147.059427][ T7759] BTRFS info (device loop1): using free-space-tree [ 147.293413][ T7786] netlink: 8 bytes leftover after parsing attributes in process `syz.0.634'. [ 147.319205][ T5840] BTRFS info (device loop1): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 147.411641][ T3068] net_ratelimit: 1 callbacks suppressed [ 147.411664][ T3068] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.521558][ T7790] netlink: 4 bytes leftover after parsing attributes in process `syz.0.637'. [ 147.530676][ T7665] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.558212][ T7665] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.581026][ T7665] bridge_slave_0: entered allmulticast mode [ 147.602055][ T7665] bridge_slave_0: entered promiscuous mode [ 147.640567][ T7665] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.702342][ T7665] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.709605][ T7665] bridge_slave_1: entered allmulticast mode [ 147.759813][ T7665] bridge_slave_1: entered promiscuous mode [ 148.016139][ T7788] loop6: detected capacity change from 0 to 32768 [ 148.041447][ T29] audit: type=1800 audit(1734765842.233:27): pid=7788 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.635" name="file1" dev="loop6" ino=4 res=0 errno=0 [ 148.160084][ T5842] Bluetooth: hci1: command tx timeout [ 148.255541][ T7812] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.358955][ T7665] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 148.443554][ T1134] hsr_slave_0: left promiscuous mode [ 148.458923][ T1134] hsr_slave_1: left promiscuous mode [ 148.466518][ T1134] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 148.468618][ T7817] netlink: 12 bytes leftover after parsing attributes in process `syz.2.650'. [ 148.480718][ T1134] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 148.509558][ T1134] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 148.521761][ T7817] netlink: 12 bytes leftover after parsing attributes in process `syz.2.650'. [ 148.541067][ T1134] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 148.645067][ T3068] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.649472][ T1134] veth1_macvtap: left promiscuous mode [ 148.704872][ T1134] veth0_macvtap: left promiscuous mode [ 148.730329][ T1134] veth1_vlan: left promiscuous mode [ 148.770552][ T1134] veth0_vlan: left promiscuous mode [ 148.803535][ T7830] loop2: detected capacity change from 0 to 256 [ 148.821882][ T7830] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x1782a9fb, utbl_chksum : 0xe619d30d) [ 148.902083][ T3068] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 149.083550][ T7839] loop0: detected capacity change from 0 to 1024 [ 149.105124][ T3068] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 149.116818][ T3068] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.151017][ T3068] usb 7-1: config 0 descriptor?? [ 149.161052][ T3068] cp210x 7-1:0.0: cp210x converter detected [ 149.201957][ T7839] hfsplus: catalog searching failed [ 149.305731][ T4369] hfsplus: b-tree write err: -5, ino 3 [ 149.376455][ T7845] loop3: detected capacity change from 0 to 512 [ 149.437775][ T7845] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 149.447016][ T7845] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=2842c018, mo2=0002] [ 149.464619][ T7845] System zones: 0-2, 18-18, 34-35 [ 149.479730][ T7845] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 149.566004][ T5833] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.614640][ T3068] cp210x 7-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 149.634156][ T3068] usb 7-1: cp210x converter now attached to ttyUSB0 [ 149.661785][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.708037][ T7856] loop3: detected capacity change from 0 to 512 [ 149.750463][ T7858] netlink: 8 bytes leftover after parsing attributes in process `syz.0.665'. [ 149.794427][ T7856] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.824438][ T7856] ext4 filesystem being mounted at /133/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 149.890327][ T29] audit: type=1800 audit(1734765844.073:28): pid=7856 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.664" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 149.920732][ T29] audit: type=1800 audit(1734765844.103:29): pid=7856 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.664" name="file2" dev="loop3" ino=16 res=0 errno=0 [ 150.110729][ T9] usb 7-1: USB disconnect, device number 2 [ 150.198854][ T5833] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.211334][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.225875][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 150.235688][ T5895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.244404][ T5842] Bluetooth: hci1: command tx timeout [ 150.251338][ T9] cp210x 7-1:0.0: device disconnected [ 150.266654][ T1134] team0 (unregistering): Port device team_slave_1 removed [ 150.358810][ T7868] loop3: detected capacity change from 0 to 1024 [ 150.366465][ T7868] EXT4-fs: Ignoring removed orlov option [ 150.387700][ T7868] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 150.416566][ T7870] loop0: detected capacity change from 0 to 2048 [ 150.446740][ T7871] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 150.466166][ T1134] team0 (unregistering): Port device team_slave_0 removed [ 150.500089][ T7868] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 150.533960][ T7868] EXT4-fs error (device loop3): ext4_read_inline_dir:1566: inode #12: block 7: comm syz.3.667: path /134/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 150.602887][ T7868] EXT4-fs (loop3): Remounting filesystem read-only [ 150.674069][ T5833] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.701435][ T3068] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.927199][ T7883] loop3: detected capacity change from 0 to 128 [ 151.327170][ T7665] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 151.339471][ T7829] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 151.373433][ T7881] loop0: detected capacity change from 0 to 32768 [ 151.392974][ T7881] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.673 (7881) [ 151.436544][ T7881] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 151.481129][ T7881] BTRFS info (device loop0): using sha256 (sha256-ni) checksum algorithm [ 151.489620][ T7881] BTRFS info (device loop0): using free-space-tree [ 151.519544][ T7888] loop1: detected capacity change from 0 to 1024 [ 151.526720][ T7888] EXT4-fs: inline encryption not supported [ 151.559729][ T7888] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 151.608859][ T7665] team0: Port device team_slave_0 added [ 151.644073][ T7888] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.670580][ T7665] team0: Port device team_slave_1 added [ 151.734998][ T3068] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.769635][ T7881] BTRFS info (device loop0): rebuilding free space tree [ 151.842303][ T5840] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.882193][ T7665] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 151.884489][ T7916] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 151.900900][ T7665] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 151.966787][ T7665] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 151.998502][ T7665] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 152.027871][ T7665] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 152.066670][ T5831] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 152.081171][ T3068] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 152.110931][ T7665] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 152.242554][ T3068] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 152.254570][ T3068] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 152.311297][ T5846] Bluetooth: hci1: command tx timeout [ 152.324785][ T3068] usb 3-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00 [ 152.360967][ T3068] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.401938][ T3068] usb 3-1: config 0 descriptor?? [ 152.415524][ T7665] hsr_slave_0: entered promiscuous mode [ 152.461985][ T7665] hsr_slave_1: entered promiscuous mode [ 152.500477][ T7929] netlink: 180 bytes leftover after parsing attributes in process `syz.1.688'. [ 152.550335][ T7665] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 152.558241][ T7665] Cannot create hsr debugfs directory [ 152.648896][ T7934] netlink: 'syz.6.691': attribute type 1 has an invalid length. [ 152.781868][ T5913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.879339][ T3068] uclogic 0003:2179:0053.0004: interface is invalid, ignoring [ 152.928942][ T7941] loop0: detected capacity change from 0 to 512 [ 153.000461][ T7941] EXT4-fs error (device loop0): ext4_get_branch:178: inode #11: block 4294967295: comm syz.0.692: invalid block [ 153.053779][ T7941] EXT4-fs (loop0): Remounting filesystem read-only [ 153.055610][ T7950] loop6: detected capacity change from 0 to 1024 [ 153.095304][ T5918] usb 3-1: USB disconnect, device number 6 [ 153.111066][ T7941] EXT4-fs (loop0): 2 truncates cleaned up [ 153.112138][ T7950] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.118092][ T7941] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.209804][ T7665] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 153.241184][ T7950] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 153.244590][ T7665] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 153.263030][ T5895] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.313943][ T7950] overlayfs: conflicting lowerdir path [ 153.321481][ T5831] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.345437][ T7665] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 153.389630][ T7665] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 153.413887][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.490587][ T7402] EXT4-fs error (device loop6): ext4_lookup:1817: inode #2: comm syz-executor: deleted inode referenced: 11 [ 153.514075][ T7956] futex_wake_op: syz.1.699 tries to shift op by -1; fix this program [ 153.522061][ T7402] EXT4-fs error (device loop6): ext4_lookup:1817: inode #2: comm syz-executor: deleted inode referenced: 11 [ 153.652535][ T7665] 8021q: adding VLAN 0 to HW filter on device bond0 [ 153.696558][ T7665] 8021q: adding VLAN 0 to HW filter on device team0 [ 153.729890][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.737056][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 153.750886][ T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 153.770445][ T7402] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.811407][ T5918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.914203][ T7964] loop1: detected capacity change from 0 to 512 [ 153.931354][ T7964] EXT4-fs: Ignoring removed nomblk_io_submit option [ 153.955106][ T1134] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.956904][ T7964] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 153.972178][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 153.990907][ T7964] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 154.020187][ T9] usb 1-1: config 0 has an invalid interface number: 26 but max is 0 [ 154.022822][ T7944] loop3: detected capacity change from 0 to 40427 [ 154.041498][ T4369] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.048612][ T4369] bridge0: port 2(bridge_slave_1) entered forwarding state [ 154.049973][ T9] usb 1-1: config 0 has no interface number 0 [ 154.057398][ T7944] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 154.064043][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.080342][ T7944] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 154.092785][ T7964] EXT4-fs (loop1): 1 truncate cleaned up [ 154.099333][ T7964] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.143412][ T9] usb 1-1: New USB device found, idVendor=0130, idProduct=0130, bcdDevice=a7.1c [ 154.169946][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.186406][ T7964] EXT4-fs error (device loop1): ext4_map_blocks:671: inode #2: block 4: comm syz.1.705: lblock 0 mapped to illegal pblock 4 (length 1) [ 154.191573][ T9] usb 1-1: Product: syz [ 154.221055][ T9] usb 1-1: Manufacturer: syz [ 154.230023][ T9] usb 1-1: SerialNumber: syz [ 154.242448][ T7964] EXT4-fs (loop1): Remounting filesystem read-only [ 154.244629][ T7944] F2FS-fs (loop3): Found nat_bits in checkpoint [ 154.276856][ T9] usb 1-1: config 0 descriptor?? [ 154.422117][ T7944] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 154.441007][ T7944] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 154.464336][ T1134] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.486615][ T5840] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.495857][ T7966] loop2: detected capacity change from 0 to 32768 [ 154.513874][ T7966] (syz.2.706,7966,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 154.529628][ T9] gspca_main: spca508-2.14.0 probing 0130:0130 [ 154.547521][ T7966] (syz.2.706,7966,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 154.580947][ T9] gspca_spca508: reg_read err -32 [ 154.595308][ T7966] JBD2: Ignoring recovery information on journal [ 154.612097][ T9] gspca_spca508: reg_read err -32 [ 154.683397][ T7665] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 154.700525][ T7665] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 154.742836][ T1134] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.776834][ T7966] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 154.829066][ T9] gspca_spca508: reg_read err -71 [ 154.834488][ T9] gspca_spca508: reg_read err -71 [ 154.839953][ T9] gspca_spca508: reg write: error -71 [ 154.851435][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.879450][ T9] spca508 1-1:0.26: probe with driver spca508 failed with error -71 [ 154.905697][ T9] usb 1-1: USB disconnect, device number 4 [ 154.993594][ T5842] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 155.041819][ T5842] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 155.050226][ T5842] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 155.076194][ T1134] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.103994][ T5842] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 155.119162][ T5842] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 155.138525][ T5842] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 155.159260][ T5827] ocfs2: Unmounting device (7,2) on (node local) [ 155.322462][ T7665] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 155.655502][ T7980] chnl_net:caif_netlink_parms(): no params data found [ 155.909232][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.973402][ T8014] vlan2: entered promiscuous mode [ 155.978521][ T8014] vlan2: entered allmulticast mode [ 155.984659][ T8014] bridge0: entered allmulticast mode [ 155.990241][ T8014] bridge0: entered promiscuous mode [ 156.026659][ T8014] team0: Port device vlan2 added [ 156.057141][ T7980] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.064442][ T7980] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.071773][ T7980] bridge_slave_0: entered allmulticast mode [ 156.078802][ T7980] bridge_slave_0: entered promiscuous mode [ 156.086682][ T7980] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.093864][ T7980] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.101246][ T7980] bridge_slave_1: entered allmulticast mode [ 156.108161][ T7980] bridge_slave_1: entered promiscuous mode [ 156.201133][ T47] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 156.216865][ T8024] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.226515][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.231276][ T7980] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 156.294810][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.315188][ T7980] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 156.352001][ T47] usb 1-1: Using ep0 maxpacket: 8 [ 156.359525][ T47] usb 1-1: unable to get BOS descriptor or descriptor too short [ 156.373852][ T8028] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input10 [ 156.388565][ T47] usb 1-1: config 4 interface 0 has no altsetting 0 [ 156.421807][ T47] usb 1-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 156.437253][ T47] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.445720][ T47] usb 1-1: Product: syz [ 156.450043][ T47] usb 1-1: Manufacturer: syz [ 156.451733][ T8033] netlink: 8 bytes leftover after parsing attributes in process `syz.2.723'. [ 156.456380][ T47] usb 1-1: SerialNumber: syz [ 156.495398][ T7980] team0: Port device team_slave_0 added [ 156.512131][ T1134] bridge_slave_1: left allmulticast mode [ 156.519220][ T1134] bridge_slave_1: left promiscuous mode [ 156.541762][ T1134] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.563072][ T1134] bridge_slave_0: left allmulticast mode [ 156.568848][ T1134] bridge_slave_0: left promiscuous mode [ 156.593406][ T1134] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.868078][ T8039] input: syz0 as /devices/virtual/input/input11 [ 156.891982][ T47] usb 1-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 156.927314][ T47] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 156.939243][ T47] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 156.946832][ T47] usb 1-1: media controller created [ 156.964694][ T47] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 157.082633][ T47] usb 1-1: DVB: registering adapter 1 frontend 0 (Zarlink ZL10353 DVB-T)... [ 157.106082][ T47] dvbdev: dvb_create_media_entity: media entity 'Zarlink ZL10353 DVB-T' registered. [ 157.159928][ T47] DVB: Unable to find symbol qt1010_attach() [ 157.255911][ T5846] Bluetooth: hci4: command tx timeout [ 157.267454][ T8037] loop3: detected capacity change from 0 to 32768 [ 157.290718][ T5896] usb 1-1: USB disconnect, device number 5 [ 157.354503][ T8037] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 157.424357][ T1134] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 157.437871][ T1134] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 157.460354][ T1134] bond0 (unregistering): Released all slaves [ 157.483769][ T7980] team0: Port device team_slave_1 added [ 157.532976][ T8037] XFS (loop3): Ending clean mount [ 157.823173][ T7980] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 157.848350][ T7980] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.914269][ T7980] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 157.976424][ T8060] loop2: detected capacity change from 0 to 1024 [ 157.999242][ T5833] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 158.004986][ T7665] veth0_vlan: entered promiscuous mode [ 158.016784][ T7980] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 158.024695][ T7980] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 158.063050][ T47] net_ratelimit: 2 callbacks suppressed [ 158.063072][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.069963][ T7980] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 158.262220][ T8060] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.356310][ T7665] veth1_vlan: entered promiscuous mode [ 158.481550][ T5827] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.521709][ T7980] hsr_slave_0: entered promiscuous mode [ 158.545154][ T7980] hsr_slave_1: entered promiscuous mode [ 158.552111][ T7980] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 158.559687][ T7980] Cannot create hsr debugfs directory [ 158.561024][ T8064] loop0: detected capacity change from 0 to 32768 [ 158.581534][ T8064] XFS: attr2 mount option is deprecated. [ 158.702222][ T8075] vxcan1: tx address claim with dlc 3 [ 158.717895][ T1134] hsr_slave_0: left promiscuous mode [ 158.724469][ T1134] hsr_slave_1: left promiscuous mode [ 158.739267][ T8064] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 158.759463][ T1134] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 158.784864][ T1134] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 158.812034][ T1134] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 158.819494][ T1134] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 158.865148][ T1134] veth1_macvtap: left promiscuous mode [ 158.870686][ T1134] veth0_macvtap: left promiscuous mode [ 158.883733][ T8064] XFS (loop0): Ending clean mount [ 158.907033][ T1134] veth1_vlan: left promiscuous mode [ 158.944098][ T1134] veth0_vlan: left promiscuous mode [ 158.976453][ T5831] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 159.163044][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.305265][ T8073] loop1: detected capacity change from 0 to 32768 [ 159.331050][ T5842] Bluetooth: hci4: command tx timeout [ 159.345979][ T8073] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 159.367888][ T8090] loop0: detected capacity change from 0 to 512 [ 159.397545][ T8090] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 159.420019][ T8073] (syz.1.738,8073,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is smaller than minimal - offset=0, inode=3298534883393, rec_len=0, name_len=1 [ 159.485525][ T8090] EXT4-fs (loop0): 1 truncate cleaned up [ 159.497006][ T8090] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.559788][ T5840] ocfs2: Unmounting device (7,1) on (node local) [ 159.579329][ T29] audit: type=1800 audit(1734765853.763:30): pid=8090 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.741" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 159.739887][ T8097] loop3: detected capacity change from 0 to 256 [ 159.816112][ T5831] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.842451][ T29] audit: type=1800 audit(1734765854.033:31): pid=8097 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.744" name="bus" dev="loop3" ino=1048646 res=0 errno=0 [ 159.880947][ T8097] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 202) [ 160.005533][ T8103] loop3: detected capacity change from 0 to 128 [ 160.080059][ T1134] team0 (unregistering): Port device team_slave_1 removed [ 160.235612][ T1134] team0 (unregistering): Port device team_slave_0 removed [ 160.484311][ T8106] loop0: detected capacity change from 0 to 40427 [ 160.492158][ T5913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.502310][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.532051][ T8106] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 160.540093][ T8106] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 160.573229][ T8106] F2FS-fs (loop0): invalid crc value [ 160.622418][ T8106] F2FS-fs (loop0): Found nat_bits in checkpoint [ 160.795677][ T8106] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 160.814399][ T8106] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 160.971021][ T5831] syz-executor: attempt to access beyond end of device [ 160.971021][ T5831] loop0: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 161.003082][ T5831] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 161.203280][ T8120] netlink: 4 bytes leftover after parsing attributes in process `syz.1.752'. [ 161.249001][ T7665] veth0_macvtap: entered promiscuous mode [ 161.369387][ T7665] veth1_macvtap: entered promiscuous mode [ 161.410456][ T8129] netlink: 'syz.1.757': attribute type 1 has an invalid length. [ 161.410990][ T5842] Bluetooth: hci4: command tx timeout [ 161.461140][ T8129] netlink: 16166 bytes leftover after parsing attributes in process `syz.1.757'. [ 161.592695][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.601048][ T9] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 161.629705][ T7665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 161.646093][ T8131] netlink: 47 bytes leftover after parsing attributes in process `syz.0.753'. [ 161.649400][ T7665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.666413][ T7665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 161.676966][ T7665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.686923][ T7665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 161.697846][ T7665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.707728][ T7665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 161.718214][ T7665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.729293][ T7665] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 161.740901][ T7665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.751650][ T7665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.762572][ T7665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.773876][ T7665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.784402][ T7665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.795079][ T7665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.805063][ T7665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.815594][ T7665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.826622][ T7665] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 161.839790][ T7665] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.848614][ T7665] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.858198][ T7665] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.867645][ T7665] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.974515][ T7980] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 162.006049][ T7980] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 162.042644][ T9] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 162.051622][ T9] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 162.090865][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 162.100028][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 162.114641][ T7980] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 162.162067][ T7980] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 162.183558][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 162.207946][ T9] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 162.239388][ T9] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 162.270922][ T9] usb 4-1: Product: syz [ 162.275155][ T9] usb 4-1: Manufacturer: syz [ 162.324614][ T9] cdc_wdm 4-1:1.0: skipping garbage [ 162.329877][ T9] cdc_wdm 4-1:1.0: skipping garbage [ 162.347671][ T4369] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.376288][ T9] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 162.378786][ T4369] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.382288][ T9] cdc_wdm 4-1:1.0: Unknown control protocol [ 162.522664][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.530639][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.589729][ T5896] usb 4-1: USB disconnect, device number 9 [ 162.624925][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.695469][ T7980] 8021q: adding VLAN 0 to HW filter on device bond0 [ 162.772802][ T7980] 8021q: adding VLAN 0 to HW filter on device team0 [ 162.812590][ T8012] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.819774][ T8012] bridge0: port 1(bridge_slave_0) entered forwarding state [ 162.859454][ T8012] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.866630][ T8012] bridge0: port 2(bridge_slave_1) entered forwarding state [ 162.874928][ T8162] program syz.2.770 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 163.094368][ T8151] loop0: detected capacity change from 0 to 40427 [ 163.106894][ T8151] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504) [ 163.114112][ T8151] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 163.132829][ T8151] F2FS-fs (loop0): build fault injection attr: rate: 17008, type: 0x1fffff [ 163.162338][ T7980] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 163.172990][ T7980] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 163.205990][ T8151] F2FS-fs (loop0): invalid crc value [ 163.218588][ T8151] F2FS-fs (loop0): Found nat_bits in checkpoint [ 163.302538][ T8176] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 163.333371][ T8151] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 163.361206][ T8151] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 163.490982][ T5842] Bluetooth: hci4: command tx timeout [ 163.551123][ T7980] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 163.571741][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.652178][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.660972][ T5918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.847784][ T8191] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.091050][ T7980] veth0_vlan: entered promiscuous mode [ 164.110261][ T7980] veth1_vlan: entered promiscuous mode [ 164.195894][ T7980] veth0_macvtap: entered promiscuous mode [ 164.236814][ T7980] veth1_macvtap: entered promiscuous mode [ 164.274938][ T7980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.296213][ T7980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.309713][ T7980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.329563][ T7980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.339541][ T7980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.350467][ T7980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.388069][ T7980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.407741][ T7980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.432127][ T7980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.443230][ T7980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.454644][ T7980] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 164.465252][ T7980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.475882][ T7980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.486031][ T7980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.496513][ T7980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.506404][ T7980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.516919][ T7980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.527262][ T7980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.538402][ T7980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.548305][ T7980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.558877][ T7980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.569944][ T7980] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 164.588171][ T7980] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.597623][ T7980] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.616469][ T7980] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.634405][ T5898] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 164.650286][ T7980] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.699399][ T5913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.708137][ T29] audit: type=1326 audit(1734765858.893:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8196 comm="syz.7.782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1815785d29 code=0x7fc00000 [ 164.741645][ T29] audit: type=1326 audit(1734765858.893:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8196 comm="syz.7.782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1815785d29 code=0x7fc00000 [ 164.766377][ T29] audit: type=1326 audit(1734765858.893:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8196 comm="syz.7.782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1815785d29 code=0x7fc00000 [ 164.788666][ T29] audit: type=1326 audit(1734765858.893:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8196 comm="syz.7.782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1815785d29 code=0x7fc00000 [ 164.810930][ T5898] usb 1-1: Using ep0 maxpacket: 32 [ 164.852236][ T5898] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 164.861101][ T5898] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 164.871993][ T5898] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 164.882884][ T5898] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 164.936959][ T5898] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0001, bcdDevice= 0.00 [ 164.957174][ T5898] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.003705][ T8204] loop1: detected capacity change from 0 to 32768 [ 165.006817][ T5898] usb 1-1: Product: syz [ 165.012623][ T8204] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.783 (8204) [ 165.027347][ T5898] usb 1-1: Manufacturer: syz [ 165.032576][ T5898] usb 1-1: SerialNumber: syz [ 165.043782][ T1134] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 165.067778][ T8206] loop3: detected capacity change from 0 to 32768 [ 165.081089][ T1134] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 165.104424][ T8204] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 165.150967][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 165.158869][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 165.159801][ T8206] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode. [ 165.195645][ T8204] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 165.251937][ T8204] BTRFS info (device loop1): using free-space-tree [ 165.273268][ T29] audit: type=1800 audit(1734765859.463:36): pid=8206 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.785" name="file1" dev="loop3" ino=17058 res=0 errno=0 [ 165.307374][ T5898] usb-storage 1-1:1.2: USB Mass Storage device detected [ 165.426450][ T5898] usb 1-1: USB disconnect, device number 6 [ 165.487940][ T8244] netlink: 'syz.7.792': attribute type 58 has an invalid length. [ 165.509152][ T5833] ocfs2: Unmounting device (7,3) on (node local) [ 165.561716][ T8244] netlink: 20 bytes leftover after parsing attributes in process `syz.7.792'. [ 165.739583][ T5913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.804516][ T5840] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 165.980952][ T9] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 166.142648][ T9] usb 9-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 166.157533][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.196803][ T9] usb 9-1: config 0 descriptor?? [ 166.494892][ T8273] random: crng reseeded on system resumption [ 166.568889][ T8280] fuse: Bad value for 'fd' [ 166.611862][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.790451][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.946035][ T8289] batadv_slave_1: entered promiscuous mode [ 166.953677][ T8289] batadv_slave_1: left promiscuous mode [ 167.027691][ T9] usb 9-1: Cannot set autoneg [ 167.033619][ T9] MOSCHIP usb-ethernet driver 9-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 167.077145][ T9] usb 9-1: USB disconnect, device number 2 [ 167.717110][ T8318] loop8: detected capacity change from 0 to 64 [ 167.819434][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.192137][ T8310] loop7: detected capacity change from 0 to 40427 [ 168.206200][ T8310] F2FS-fs (loop7): build fault injection attr: rate: 690, type: 0x1fffff [ 168.215133][ T8310] F2FS-fs (loop7): Image doesn't support compression [ 168.222393][ T8310] F2FS-fs (loop7): Image doesn't support compression [ 168.266173][ T8334] loop0: detected capacity change from 0 to 512 [ 168.320941][ T8310] F2FS-fs (loop7): invalid crc value [ 168.334292][ T8310] F2FS-fs (loop7): Found nat_bits in checkpoint [ 168.482560][ T8334] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.520466][ T8349] program syz.1.835 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 168.600992][ T8310] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 168.664288][ T8334] ext4 filesystem being mounted at /143/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 168.685692][ T8353] loop3: detected capacity change from 0 to 128 [ 168.709903][ T8353] FAT-fs (loop3): Directory bread(block 32) failed [ 168.723217][ T8353] FAT-fs (loop3): Directory bread(block 33) failed [ 168.731540][ C1] sd 0:0:1:0: [sda] tag#6540 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 168.742038][ C1] sd 0:0:1:0: [sda] tag#6540 CDB: Read(6) 08 05 00 00 00 00 [ 168.764748][ T8342] loop8: detected capacity change from 0 to 40427 [ 168.769209][ T8353] FAT-fs (loop3): Directory bread(block 34) failed [ 168.778471][ T8353] FAT-fs (loop3): Directory bread(block 35) failed [ 168.785198][ T8353] FAT-fs (loop3): Directory bread(block 36) failed [ 168.791949][ T8353] FAT-fs (loop3): Directory bread(block 37) failed [ 168.798616][ T8353] FAT-fs (loop3): Directory bread(block 38) failed [ 168.805280][ T8353] FAT-fs (loop3): Directory bread(block 39) failed [ 168.805459][ T8342] F2FS-fs (loop8): build fault injection attr: rate: 690, type: 0x1fffff [ 168.811964][ T8353] FAT-fs (loop3): Directory bread(block 40) failed [ 168.828047][ T8353] FAT-fs (loop3): Directory bread(block 41) failed [ 168.835598][ T8310] syz.7.819: attempt to access beyond end of device [ 168.835598][ T8310] loop7: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 168.854645][ T8342] F2FS-fs (loop8): Image doesn't support compression [ 168.884830][ T8342] F2FS-fs (loop8): heap/no_heap options were deprecated [ 168.887292][ T5918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.915605][ T8342] F2FS-fs (loop8): Image doesn't support compression [ 168.919379][ T8353] syz.3.837: attempt to access beyond end of device [ 168.919379][ T8353] loop3: rw=0, sector=4108, nr_sectors = 4 limit=128 [ 168.950662][ T8353] FAT-fs (loop3): Filesystem has been set read-only [ 168.957804][ T8353] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 168.972643][ T8342] F2FS-fs (loop8): invalid crc value [ 168.977798][ T8353] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 168.993791][ T8334] EXT4-fs error (device loop0): ext4_ext_check_inode:524: inode #2: comm syz.0.831: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 169.041363][ T7665] syz-executor: attempt to access beyond end of device [ 169.041363][ T7665] loop7: rw=2049, sector=45112, nr_sectors = 8 limit=40427 [ 169.042880][ T8355] EXT4-fs error (device loop0): ext4_ext_check_inode:524: inode #2: comm syz.0.831: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 169.072600][ T7665] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 169.090986][ T8342] F2FS-fs (loop8): Found nat_bits in checkpoint [ 169.181052][ T8342] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 169.326570][ T5831] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.460624][ T7980] syz-executor: attempt to access beyond end of device [ 169.460624][ T7980] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 169.481229][ T7980] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 169.651287][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.794135][ T8382] loop2: detected capacity change from 0 to 512 [ 169.899565][ T5918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.031756][ T8382] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.073271][ T8382] ext4 filesystem being mounted at /154/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 170.214673][ T8376] loop1: detected capacity change from 0 to 32768 [ 170.238719][ T8376] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 170.551057][ T5827] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.776466][ T5840] ocfs2: Unmounting device (7,1) on (node local) [ 170.831169][ T47] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 170.941239][ T5918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.001353][ T47] usb 4-1: Using ep0 maxpacket: 8 [ 171.042960][ T47] usb 4-1: unable to get BOS descriptor or descriptor too short [ 171.053657][ T47] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 171.103102][ T47] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 171.124997][ T47] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 171.160404][ T47] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 171.176156][ T47] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 171.191818][ T47] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 0 [ 171.225014][ T47] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 171.251839][ T47] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 171.308152][ T47] usb 4-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 171.342755][ T47] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.375752][ T47] usb 4-1: Product: syz [ 171.410225][ T47] usb 4-1: Manufacturer: syz [ 171.425510][ T47] usb 4-1: SerialNumber: syz [ 171.519852][ T8408] loop8: detected capacity change from 0 to 32768 [ 171.549828][ T47] usb 4-1: config 0 descriptor?? [ 171.565945][ T47] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 171.831091][ T8408] XFS (loop8): DAX unsupported by block device. Turning off DAX. [ 171.862582][ T5896] usb 4-1: USB disconnect, device number 10 [ 171.932110][ T8450] loop7: detected capacity change from 0 to 8 [ 171.935121][ T8408] XFS (loop8): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 171.990153][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.123195][ T8408] XFS (loop8): Ending clean mount [ 172.164616][ T8408] XFS (loop8): Quotacheck needed: Please wait. [ 172.213103][ T8408] XFS (loop8): Quotacheck: Done. [ 172.215969][ T8465] loop2: detected capacity change from 0 to 2048 [ 172.299543][ T8466] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 172.338310][ T7980] XFS (loop8): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 172.526776][ T8462] loop1: detected capacity change from 0 to 32768 [ 172.541181][ T8462] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.879 (8462) [ 172.568595][ T8462] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 172.588274][ T8462] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 172.608979][ T8462] BTRFS info (device loop1): using free-space-tree [ 172.692249][ T5896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.752874][ T8485] sp0: Synchronizing with TNC [ 172.863386][ T5840] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 173.019276][ T8492] loop3: detected capacity change from 0 to 4096 [ 173.036384][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.106761][ T8492] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 173.159121][ T8492] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 173.253651][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.299746][ T8492] ntfs3(loop3): ino=0, "file0" failed to extend initialized size to 101000. [ 173.313712][ T8499] loop2: detected capacity change from 0 to 4096 [ 173.350950][ T8499] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 173.372147][ T8499] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 4096) [ 173.429093][ T8506] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 173.471012][ T5896] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 173.692673][ T5896] usb 9-1: config index 0 descriptor too short (expected 35577, got 27) [ 173.701528][ T5896] usb 9-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 173.710153][ T5896] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 173.739739][ T5896] usb 9-1: config 1 has no interface number 0 [ 173.749871][ T5896] usb 9-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 173.780868][ T5896] usb 9-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 173.814298][ T5896] usb 9-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 173.850895][ T5896] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.899079][ T5896] snd_usb_pod 9-1:1.1: Line 6 Pocket POD found [ 173.926895][ T8510] loop1: detected capacity change from 0 to 4096 [ 173.988365][ T8514] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 174.019258][ T29] audit: type=1800 audit(1734765868.203:37): pid=8510 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.893" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 174.021434][ T8503] loop0: detected capacity change from 0 to 40427 [ 174.061555][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.066438][ T8503] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 174.079587][ T8503] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 174.123281][ T8503] F2FS-fs (loop0): Found nat_bits in checkpoint [ 174.232607][ T8503] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 174.239875][ T8503] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 174.275860][ T8508] loop3: detected capacity change from 0 to 32768 [ 174.308284][ T8508] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 174.339126][ T8508] (syz.3.892,8508,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len % 4 != 0 - offset=312, inode=13845347915746889, rec_len=25793, name_len=214 [ 174.421620][ T5833] ocfs2: Unmounting device (7,3) on (node local) [ 174.463909][ T5896] snd_usb_pod 9-1:1.1: Line 6 Pocket POD now attached [ 174.519022][ T8525] netlink: 194488 bytes leftover after parsing attributes in process `syz.1.896'. [ 174.699156][ T47] usb 9-1: USB disconnect, device number 3 [ 174.706738][ T47] snd_usb_pod 9-1:1.1: Line 6 Pocket POD now disconnected [ 175.073522][ T8542] syz.7.905 uses obsolete (PF_INET,SOCK_PACKET) [ 175.411669][ T8557] xt_CT: You must specify a L4 protocol and not use inversions on it [ 175.612479][ T8563] loop0: detected capacity change from 0 to 2048 [ 175.720704][ T8563] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 175.738673][ T8563] ext4 filesystem being mounted at /159/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 175.805443][ T8546] loop1: detected capacity change from 0 to 40427 [ 175.851234][ T8546] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 175.899178][ T8546] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 175.916808][ T5831] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.971435][ T8546] F2FS-fs (loop1): invalid crc value [ 176.008341][ T8546] F2FS-fs (loop1): Found nat_bits in checkpoint [ 176.073471][ T8582] loop3: detected capacity change from 0 to 512 [ 176.113791][ T8582] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 176.131026][ T8582] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.921: invalid indirect mapped block 8 (level 2) [ 176.232522][ T8582] EXT4-fs (loop3): Remounting filesystem read-only [ 176.257539][ T8546] F2FS-fs (loop1): Start checkpoint disabled! [ 176.271376][ T8582] EXT4-fs (loop3): 1 truncate cleaned up [ 176.278016][ T8582] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.403451][ T8546] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 176.420591][ T8570] loop2: detected capacity change from 0 to 32768 [ 176.427748][ T8546] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 176.498185][ T8570] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.916 (8570) [ 176.514045][ T5833] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.550087][ T8570] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 176.561030][ T8570] BTRFS info (device loop2): using sha256 (sha256-ni) checksum algorithm [ 176.570503][ T8570] BTRFS info (device loop2): using free-space-tree [ 176.791963][ T8604] loop8: detected capacity change from 0 to 2048 [ 176.858907][ T8604] loop8: p1 < > p3 < > p4 < > [ 176.858950][ T8604] loop8: partition table partially beyond EOD, truncated [ 176.860195][ T8604] loop8: p3 start 4284289 is beyond EOD, truncated [ 176.987944][ T8581] loop0: detected capacity change from 0 to 32768 [ 177.142058][ T8581] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.920 (8581) [ 177.341419][ T8626] loop3: detected capacity change from 0 to 1024 [ 177.371803][ T8622] loop1: detected capacity change from 0 to 32768 [ 177.382605][ T8581] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 177.397131][ T8626] EXT4-fs (loop3): Test dummy encryption mode enabled [ 177.412216][ T8581] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 177.450497][ T8581] BTRFS info (device loop0): using free-space-tree [ 177.469026][ T8622] XFS (loop1): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 177.489973][ T8626] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=f040c01c, mo2=0002] [ 177.509765][ T8626] System zones: 0-1, 3-36 [ 177.520984][ T5896] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 177.546819][ T8626] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.554920][ T8012] BTRFS info (device loop2): qgroup scan completed (inconsistency flag cleared) [ 177.570086][ T8645] loop7: detected capacity change from 0 to 128 [ 177.606826][ T8622] XFS (loop1): Ending clean mount [ 177.615708][ T8622] XFS (loop1): Quotacheck needed: Please wait. [ 177.646163][ T5833] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.648824][ T8645] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 177.682647][ T5896] usb 9-1: Using ep0 maxpacket: 8 [ 177.693259][ T5896] usb 9-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 177.703207][ T5896] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.717778][ T5827] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 177.724206][ T8645] ext4 filesystem being mounted at /27/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 177.749033][ T5896] usb 9-1: Product: syz [ 177.778908][ T5896] usb 9-1: Manufacturer: syz [ 177.778940][ T8622] XFS (loop1): Quotacheck: Done. [ 177.783829][ T5896] usb 9-1: SerialNumber: syz [ 177.842154][ T5896] usb 9-1: config 0 descriptor?? [ 177.854669][ T5896] gspca_main: sq930x-2.14.0 probing 2770:930c [ 177.864206][ T5840] XFS (loop1): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 177.938583][ T7665] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 178.009044][ T5831] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 178.109002][ T8662] loop7: detected capacity change from 0 to 1024 [ 178.135469][ T8662] EXT4-fs (loop7): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 178.147882][ T8662] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 178.158140][ T8662] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 178.253344][ T8662] EXT4-fs error (device loop7): ext4_ext_check_inode:524: inode #3: comm syz.7.940: pblk 82 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 178.279508][ T8662] EXT4-fs (loop7): no journal found [ 178.285339][ T8662] EXT4-fs (loop7): can't get journal size [ 178.332288][ T8662] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 178.482039][ T7665] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.840366][ T8660] loop3: detected capacity change from 0 to 40427 [ 178.849752][ T8660] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x1fffff [ 178.859149][ T8660] F2FS-fs (loop3): Image doesn't support compression [ 178.870026][ T8660] F2FS-fs (loop3): Image doesn't support compression [ 178.882406][ T8660] F2FS-fs (loop3): invalid crc value [ 178.916178][ T8660] F2FS-fs (loop3): Found nat_bits in checkpoint [ 178.982938][ T5896] gspca_sq930x: ucbus_write failed -71 [ 178.993818][ T8686] loop7: detected capacity change from 0 to 16 [ 179.061099][ T8686] MTD: Attempt to mount non-MTD device "/dev/loop7" [ 179.096192][ T8660] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 179.138449][ T8660] F2FS-fs (loop3): inject no more block in inc_valid_node_count of f2fs_new_node_page+0x1f7/0xcf0 [ 179.200992][ T5896] gspca_sq930x: Sensor ov9630 not yet treated [ 179.207158][ T5896] sq930x 9-1:0.0: probe with driver sq930x failed with error -22 [ 179.242401][ T5896] usb 9-1: USB disconnect, device number 4 [ 179.276296][ T5833] syz-executor: attempt to access beyond end of device [ 179.276296][ T5833] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 179.316063][ T5833] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 179.363795][ T8692] loop0: detected capacity change from 0 to 4096 [ 179.417100][ T8692] EXT4-fs: Ignoring removed nomblk_io_submit option [ 179.475479][ T8692] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 179.559469][ T8701] loop2: detected capacity change from 0 to 512 [ 179.677118][ T8701] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 179.751778][ T8692] fscrypt (loop0, inode 18): Mutually exclusive encryption flags (0x17) [ 179.760397][ T8701] ext4 filesystem being mounted at /171/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 179.931450][ T5831] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.088767][ T8711] loop1: detected capacity change from 0 to 4096 [ 180.123171][ T8711] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 180.156516][ T5827] EXT4-fs error (device loop2): ext4_empty_dir:3097: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 180.222032][ T5827] EXT4-fs (loop2): Remounting filesystem read-only [ 180.262299][ T8711] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 180.299835][ T8722] loop0: detected capacity change from 0 to 2048 [ 180.364499][ T8722] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 180.451695][ T8722] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 180.479775][ T8722] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 22 with error 28 [ 180.549026][ T8722] EXT4-fs (loop0): This should not happen!! Data will be lost [ 180.549026][ T8722] [ 180.571165][ T8722] EXT4-fs (loop0): Total free blocks count 0 [ 180.596818][ T8722] EXT4-fs (loop0): Free/Dirty block details [ 180.626646][ T8722] EXT4-fs (loop0): free_blocks=2415919504 [ 180.640321][ T8736] loop3: detected capacity change from 0 to 256 [ 180.649796][ T8722] EXT4-fs (loop0): dirty_blocks=32 [ 180.668727][ T8722] EXT4-fs (loop0): Block reservation details [ 180.695292][ T8722] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 180.721615][ T8730] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 30 with max blocks 1 with error 28 [ 180.796327][ T5827] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.839079][ T1134] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 180.870302][ T1134] Quota error (device loop2): write_blk: dquota write failed [ 180.888663][ T1134] Quota error (device loop2): free_dqentry: Can't write quota data block 5 [ 180.913730][ T1134] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 180.939375][ T1134] Quota error (device loop2): write_blk: dquota write failed [ 180.997579][ T1134] Quota error (device loop2): free_dqentry: Can't write quota data block 5 [ 181.011915][ T8737] loop8: detected capacity change from 0 to 32768 [ 181.019865][ T8737] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.964 (8737) [ 181.028658][ T4369] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.057257][ T8737] BTRFS info (device loop8): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 181.067789][ T8737] BTRFS info (device loop8): using sha256 (sha256-ni) checksum algorithm [ 181.079781][ T8736] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 181.101261][ T8737] BTRFS info (device loop8): using free-space-tree [ 181.143733][ T8747] netlink: 4 bytes leftover after parsing attributes in process `syz.0.970'. [ 181.228830][ T8752] loop7: detected capacity change from 0 to 512 [ 181.267079][ T8752] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm syz.7.972: bg 0: block 5: invalid block bitmap [ 181.293337][ T8752] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 181.318058][ T8752] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.972: invalid indirect mapped block 3 (level 2) [ 181.339587][ T8752] EXT4-fs (loop7): 1 orphan inode deleted [ 181.466214][ T4369] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.520921][ T8752] EXT4-fs (loop7): 1 truncate cleaned up [ 181.528602][ T8752] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.612984][ T7980] BTRFS info (device loop8): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 181.704305][ T8770] loop3: detected capacity change from 0 to 736 [ 181.774436][ T7665] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.809413][ T4369] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.873787][ T5846] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 181.923163][ T5846] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 181.953881][ T5846] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 181.988290][ T5846] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 181.996922][ T5846] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 182.005488][ T5846] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 182.077212][ T8778] loop7: detected capacity change from 0 to 128 [ 182.104284][ T29] audit: type=1800 audit(1734765876.293:38): pid=8778 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.979" name="bus" dev="loop7" ino=1048658 res=0 errno=0 [ 182.212465][ T4369] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.282753][ T8785] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 182.352360][ T8783] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 182.359419][ T8783] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 182.414030][ T8783] vhci_hcd vhci_hcd.0: Device attached [ 182.447608][ T8788] netlink: 8 bytes leftover after parsing attributes in process `syz.0.983'. [ 182.460943][ T8784] vhci_hcd: connection closed [ 182.465531][ T1134] vhci_hcd: stop threads [ 182.499912][ T1134] vhci_hcd: release socket [ 182.511066][ T1134] vhci_hcd: disconnect device [ 182.907717][ T8799] Process accounting resumed [ 182.993056][ T8771] chnl_net:caif_netlink_parms(): no params data found [ 183.016560][ T8799] Process accounting resumed [ 183.061076][ T47] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 183.091914][ T4369] bridge_slave_1: left allmulticast mode [ 183.097598][ T4369] bridge_slave_1: left promiscuous mode [ 183.122383][ T4369] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.171885][ T4369] bridge_slave_0: left allmulticast mode [ 183.177914][ T4369] bridge_slave_0: left promiscuous mode [ 183.201055][ T4369] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.221818][ T47] usb 1-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 183.235183][ T8801] loop8: detected capacity change from 0 to 1024 [ 183.250922][ T47] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 183.263957][ T8801] EXT4-fs: Ignoring removed nobh option [ 183.269543][ T8801] EXT4-fs: Ignoring removed bh option [ 183.291006][ T47] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 183.323002][ T47] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 183.341161][ T47] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.352666][ T8801] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 183.373284][ T8796] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 183.382516][ T8770] autofs: Bad value for 'fd' [ 183.467129][ T8801] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4115: comm syz.8.987: Allocating blocks 385-513 which overlap fs metadata [ 183.584637][ T8807] EXT4-fs (loop8): pa ffff88805392b658: logic 16, phys. 129, len 24 [ 183.593398][ T8807] EXT4-fs error (device loop8): ext4_mb_release_inode_pa:5366: group 0, free 0, pa_free 8 [ 183.712308][ T7980] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.773494][ T8794] loop7: detected capacity change from 0 to 32768 [ 184.285817][ T8821] netlink: 'syz.8.992': attribute type 10 has an invalid length. [ 184.372578][ T8794] bcachefs (loop7): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 184.392395][ T8794] bcachefs (loop7): initializing new filesystem [ 184.418766][ T8794] bcachefs (loop7): going read-write [ 184.430995][ T5842] Bluetooth: hci0: command tx timeout [ 184.528903][ T8794] bcachefs (loop7): marking superblocks [ 184.624812][ T8794] bcachefs (loop7): initializing freespace [ 184.657525][ T8794] bcachefs (loop7): done initializing freespace [ 184.739217][ T8794] bcachefs (loop7): reading snapshots table [ 184.746863][ T8794] bcachefs (loop7): reading snapshots done [ 184.844753][ T47] aiptek 1-1:17.0: Aiptek using 400 ms programming speed [ 184.853053][ T47] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.0/input/input12 [ 184.925473][ T8794] bcachefs (loop7): done starting filesystem [ 184.935943][ T47] usb 1-1: USB disconnect, device number 7 [ 184.941942][ C1] aiptek 1-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 184.981351][ T4369] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 185.047686][ T4369] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 185.068434][ T4369] bond0 (unregistering): Released all slaves [ 185.120920][ T8803] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 185.129131][ T8794] syz.7.984 (8794) used greatest stack depth: 12336 bytes left [ 185.310320][ T8821] team0: Device hsr_slave_0 failed to register rx_handler [ 185.334173][ T7665] bcachefs (loop7): shutting down [ 185.341290][ T7665] bcachefs (loop7): going read-only [ 185.346968][ T7665] bcachefs (loop7): finished waiting for writes to stop [ 185.404156][ T7665] bcachefs (loop7): flushing journal and stopping allocators, journal seq 3 [ 185.417631][ T8833] gretap0: entered promiscuous mode [ 185.478796][ T8833] macsec1: entered allmulticast mode [ 185.543796][ T8833] gretap0: entered allmulticast mode [ 185.593301][ T8833] gretap0: left allmulticast mode [ 185.617480][ T7665] bcachefs (loop7): flushing journal and stopping allocators complete, journal seq 6 [ 185.623401][ T8833] gretap0: left promiscuous mode [ 185.638958][ T7665] bcachefs (loop7): shutdown complete, journal seq 7 [ 185.647599][ T7665] bcachefs (loop7): marking filesystem clean [ 185.690373][ T7665] bcachefs (loop7): shutdown complete [ 185.856984][ T8839] ip6erspan0: entered promiscuous mode [ 185.880743][ T8839] ip6erspan0: entered allmulticast mode [ 186.025735][ T8845] loop1: detected capacity change from 0 to 2048 [ 186.026899][ T8771] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.046799][ T8845] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 186.056854][ T8771] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.071406][ T8771] bridge_slave_0: entered allmulticast mode [ 186.078492][ T8771] bridge_slave_0: entered promiscuous mode [ 186.101944][ T8771] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.109094][ T8771] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.161741][ T8771] bridge_slave_1: entered allmulticast mode [ 186.168860][ T8771] bridge_slave_1: entered promiscuous mode [ 186.289561][ T8851] input: syz1 as /devices/virtual/input/input13 [ 186.450940][ T5846] Bluetooth: hci0: command tx timeout [ 186.538552][ T8859] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1004'. [ 186.574824][ T8771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 186.658539][ T8771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 186.824924][ T4369] hsr_slave_0: left promiscuous mode [ 186.860465][ T8] kernel write not supported for file /sequencer (pid: 8 comm: kworker/0:0) [ 186.882013][ T4369] hsr_slave_1: left promiscuous mode [ 186.888782][ T4369] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 186.912383][ T4369] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 186.929500][ T4369] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 186.937411][ T4369] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 187.018448][ T4369] veth1_macvtap: left promiscuous mode [ 187.024333][ T4369] veth0_macvtap: left promiscuous mode [ 187.031563][ T4369] veth1_vlan: left promiscuous mode [ 187.037089][ T4369] veth0_vlan: left promiscuous mode [ 187.062540][ T8873] block nbd1: shutting down sockets [ 188.425109][ T4369] team0 (unregistering): Port device team_slave_1 removed [ 188.490485][ T4369] team0 (unregistering): Port device team_slave_0 removed [ 188.544110][ T5846] Bluetooth: hci0: command tx timeout [ 189.017426][ T8876] netlink: 176 bytes leftover after parsing attributes in process `syz.0.1014'. [ 189.179137][ T8771] team0: Port device team_slave_0 added [ 189.222535][ T8771] team0: Port device team_slave_1 added [ 189.354949][ T8771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 189.365981][ T8896] loop1: detected capacity change from 0 to 1024 [ 189.380578][ T8771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 189.422112][ T8771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 189.469118][ T8771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 189.484487][ T8771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 189.520551][ T8771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 189.774762][ T8771] hsr_slave_0: entered promiscuous mode [ 189.791314][ T8771] hsr_slave_1: entered promiscuous mode [ 189.822191][ T8771] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 189.844960][ T8771] Cannot create hsr debugfs directory [ 190.240551][ T8918] loop1: detected capacity change from 0 to 128 [ 190.288477][ T8918] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 190.319542][ T8918] ext4 filesystem being mounted at /194/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 190.355408][ T8897] loop7: detected capacity change from 0 to 32768 [ 190.385062][ T8918] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:406: inode #2: comm syz.1.1032: No space for directory leaf checksum. Please run e2fsck -D. [ 190.430288][ T8771] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 190.431384][ T8918] EXT4-fs error (device loop1): htree_dirblock_to_tree:1083: inode #2: comm syz.1.1032: Directory block failed checksum [ 190.449782][ T8897] ERROR: (device loop7): diWrite: ixpxd invalid [ 190.449782][ T8897] [ 190.483877][ T8771] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 190.491558][ T8897] ERROR: (device loop7): remounting filesystem as read-only [ 190.501453][ T8897] ERROR: (device loop7): txCommit: [ 190.501453][ T8897] [ 190.518366][ T8771] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 190.555452][ T8921] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:406: inode #2: comm syz.1.1032: No space for directory leaf checksum. Please run e2fsck -D. [ 190.583997][ T8921] EXT4-fs error (device loop1): __ext4_find_entry:1652: inode #2: comm syz.1.1032: checksumming directory block 0 [ 190.611798][ T8771] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 190.640901][ T5846] Bluetooth: hci0: command tx timeout [ 190.652172][ T113] BUG at fs/jfs/jfs_txnmgr.c:931 assert(mp->nohomeok > 0) [ 190.656047][ T8925] loop3: detected capacity change from 0 to 128 [ 190.659988][ T113] ------------[ cut here ]------------ [ 190.671318][ T113] kernel BUG at fs/jfs/jfs_txnmgr.c:931! [ 190.677165][ T113] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN NOPTI [ 190.684299][ T113] CPU: 0 UID: 0 PID: 113 Comm: jfsCommit Not tainted 6.13.0-rc3-syzkaller-00209-g499551201b5f #0 [ 190.694819][ T113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 190.704925][ T113] RIP: 0010:txUnlock+0xd46/0xdb0 [ 190.709883][ T113] Code: e9 0e fe ff ff e8 1a e4 6a fe 48 c7 c7 00 8a 42 8c 48 c7 c6 f9 85 42 8c ba a3 03 00 00 48 c7 c1 00 97 42 8c e8 cb 76 d2 fd 90 <0f> 0b e8 f3 e3 6a fe 48 c7 c7 00 8a 42 8c 48 c7 c6 f9 85 42 8c ba [ 190.729502][ T113] RSP: 0018:ffffc90002d7fce8 EFLAGS: 00010246 [ 190.735581][ T113] RAX: 0000000000000037 RBX: 1ffff1100512d453 RCX: 1934669e5f115f00 [ 190.743562][ T113] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 190.751536][ T113] RBP: 0000000000000000 R08: ffffffff817f0a4c R09: 1ffffffff2032fae [ 190.759508][ T113] R10: dffffc0000000000 R11: fffffbfff2032faf R12: ffff8880302521d0 [ 190.767484][ T113] R13: ffffc900028f2000 R14: ffff88802896a298 R15: dffffc0000000000 [ 190.775462][ T113] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 190.784399][ T113] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 190.790987][ T113] CR2: 0000001b2e01fffc CR3: 0000000034180000 CR4: 0000000000350ef0 [ 190.798964][ T113] Call Trace: [ 190.802241][ T113] [ 190.805171][ T113] ? __die_body+0x5f/0xb0 [ 190.809515][ T113] ? die+0x9e/0xc0 [ 190.813245][ T113] ? do_trap+0x15a/0x3a0 [ 190.817490][ T113] ? txUnlock+0xd46/0xdb0 [ 190.821852][ T113] ? do_error_trap+0x1dc/0x2c0 [ 190.826615][ T113] ? txUnlock+0xd46/0xdb0 [ 190.830966][ T113] ? __pfx_do_error_trap+0x10/0x10 [ 190.836088][ T113] ? report_bug+0x3e8/0x500 [ 190.840609][ T113] ? srso_alias_return_thunk+0x5/0xfbef5 [ 190.846249][ T113] ? handle_invalid_op+0x34/0x40 [ 190.851190][ T113] ? txUnlock+0xd46/0xdb0 [ 190.855532][ T113] ? exc_invalid_op+0x38/0x50 [ 190.860209][ T113] ? asm_exc_invalid_op+0x1a/0x20 [ 190.865251][ T113] ? __wake_up_klogd+0xcc/0x110 [ 190.870109][ T113] ? txUnlock+0xd46/0xdb0 [ 190.874452][ T113] ? txUnlock+0xd45/0xdb0 [ 190.878800][ T113] ? lockdep_hardirqs_on+0x99/0x150 [ 190.884016][ T113] jfs_lazycommit+0x5f4/0xb80 [ 190.888712][ T113] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 190.894616][ T113] ? srso_alias_return_thunk+0x5/0xfbef5 [ 190.900252][ T113] ? lockdep_hardirqs_on+0x99/0x150 [ 190.905466][ T113] ? __pfx_jfs_lazycommit+0x10/0x10 [ 190.910680][ T113] ? __pfx_default_wake_function+0x10/0x10 [ 190.916502][ T113] ? srso_alias_return_thunk+0x5/0xfbef5 [ 190.922189][ T113] ? __kthread_parkme+0x169/0x1d0 [ 190.927222][ T113] ? __pfx_jfs_lazycommit+0x10/0x10 [ 190.932440][ T113] kthread+0x2f2/0x390 [ 190.936524][ T113] ? __pfx_jfs_lazycommit+0x10/0x10 [ 190.941739][ T113] ? __pfx_kthread+0x10/0x10 [ 190.946339][ T113] ret_from_fork+0x4d/0x80 [ 190.950759][ T113] ? __pfx_kthread+0x10/0x10 [ 190.955363][ T113] ret_from_fork_asm+0x1a/0x30 [ 190.960138][ T113] [ 190.963152][ T113] Modules linked in: [ 190.967792][ T113] ---[ end trace 0000000000000000 ]--- [ 190.994102][ T5840] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 191.036407][ T8925] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 191.052299][ T8925] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 191.071001][ T8910] loop0: detected capacity change from 0 to 32768 [ 191.086119][ T8771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 191.100668][ T8771] 8021q: adding VLAN 0 to HW filter on device team0 [ 191.124944][ T8771] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 191.138475][ T8771] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 191.152771][ T80] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.159859][ T80] bridge0: port 1(bridge_slave_0) entered forwarding state [ 191.162631][ T113] RIP: 0010:txUnlock+0xd46/0xdb0 [ 191.170350][ T80] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.173729][ T113] Code: e9 0e fe ff ff e8 1a e4 6a fe 48 c7 c7 00 8a 42 8c 48 c7 c6 f9 85 42 8c ba a3 03 00 00 48 c7 c1 00 97 42 8c e8 cb 76 d2 fd 90 <0f> 0b e8 f3 e3 6a fe 48 c7 c7 00 8a 42 8c 48 c7 c6 f9 85 42 8c ba [ 191.179062][ T80] bridge0: port 2(bridge_slave_1) entered forwarding state [ 191.199614][ T113] RSP: 0018:ffffc90002d7fce8 EFLAGS: 00010246 [ 191.213130][ T113] RAX: 0000000000000037 RBX: 1ffff1100512d453 RCX: 1934669e5f115f00 [ 191.222673][ T113] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 191.230882][ T8910] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 191.238248][ T113] RBP: 0000000000000000 R08: ffffffff817f0a4c R09: 1ffffffff2032fae [ 191.249252][ T113] R10: dffffc0000000000 R11: fffffbfff2032faf R12: ffff8880302521d0 [ 191.260324][ T113] R13: ffffc900028f2000 R14: ffff88802896a298 R15: dffffc0000000000 [ 191.284203][ T113] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 191.311786][ T113] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 191.315126][ T8910] XFS (loop0): Ending clean mount [ 191.318378][ T113] CR2: 00007f6d8281aba8 CR3: 000000006c842000 CR4: 0000000000350ef0 [ 191.318408][ T113] Kernel panic - not syncing: Fatal exception [ 191.323630][ T113] Kernel Offset: disabled