last executing test programs: 34.424544857s ago: executing program 0 (id=2046): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x8, &(0x7f0000005a40)=ANY=[@ANYBLOB='nodiscard,nocheckpoint_merge,alloc_mode=default,active_logs=6,background_gc=on,fault_injection=00000000000000000016,discard,noacl,noinline_dentry,alloc_mode=default,noextent_cache,active_logs=2,fault_type=00000000000000003444,smackfsdef=fault_injection,audit,fsuuid=f362c\x0047-7ce8-eaab-0ae6-21\x0015a33,uid<', @ANYRESDEC=0x0, @ANYBLOB="2c7375626a5f726f6c653d5e617461647630002c6f626a5f747970653d6e6f643be1d2491fb1d1f0696e6c696e655f64656e7472792c7063723d3030303030307f003030303030303030303032392c00"], 0x1, 0x5505, &(0x7f0000000340)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x40441, 0x106) r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000540)='.log\x00', 0x1c10c1, 0x9c37611dc13d0db7) fchown(r0, 0x0, 0xee01) 32.494743806s ago: executing program 0 (id=2061): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r0, 0x0, 0x0}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="14000000040000000400000002"], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r1, &(0x7f0000000100)}, 0x20) 31.608197668s ago: executing program 0 (id=2066): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./sys/bus/usb/devices/usb5/bConfigurationValue\x00', 0x1, 0x0) write$khugepaged_scan(r0, &(0x7f0000000040), 0x8) 31.226118678s ago: executing program 0 (id=2070): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000280)='./file1\x00', 0x0, &(0x7f0000000500)=ANY=[], 0xd, 0x20e, &(0x7f0000000dc0)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x80) getdents64(r0, &(0x7f0000000180)=""/42, 0x2a) 30.935425055s ago: executing program 3 (id=2073): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x7, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2d3f}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffc5fa}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000070085"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 30.660441622s ago: executing program 0 (id=2076): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010080fffbff000000000105000008000200030000001c00048005000c000000000005000300800000000500030006000000080001"], 0x40}}, 0x4080) 30.603370424s ago: executing program 3 (id=2078): r0 = syz_open_dev$usbmon(&(0x7f00000000c0), 0xa, 0xa2000) r1 = epoll_create(0xe) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x7}) syz_open_dev$usbfs(&(0x7f0000000240), 0x77, 0x100580) 30.400596809s ago: executing program 3 (id=2081): r0 = gettid() setns(0xc9, 0x0) r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/tcp\x00') pread64(r1, &(0x7f0000001340)=""/102390, 0x18ff6, 0x96) 30.182222064s ago: executing program 0 (id=2083): syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f00000000c0)='.\x02\x00', 0x8488, &(0x7f0000000780), 0xfe, 0x10fd, &(0x7f0000001140)="$eJzs2T9rFEEYBvBnds8/3cqmXwQtLCQknF8ghcK1ttqIpDJVrlL8OH4cTWUf0msRsF9Zb/dO5UTwTm1+PzjmvYd9Z2fKmQ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMZsmnkhxUSTtlVZKSdN3F4ipJN+V33tdVSp6eLpaPz+dPlknqb4+XZ0kZuoa2tMf3brfzdt4et48OTu5/WL5+8+rF2dnp+ThNSZfL6/1vpYzrAQAAAH7U76z5z+8HAAAAfmdvFwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAf6hvNnU7FVWSknTdxeIqSbel78Y/Wh8AAACwu5Iqz5tt+eoaYONhPjZlnQ/jlzLUR3m3pR8AAAD4pf7WWHz/fb3c3JzHH2S2PpcP2d3Mcni4+j8O+XyS1EmOfpr88vrty+lX+vpv7wUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgK/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAAAAAPYKAAD///F61s8=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x88040, 0x0) fcntl$setlease(r0, 0x400, 0x0) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) 30.181966255s ago: executing program 3 (id=2084): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x1, 0x54f4, &(0x7f000000ab00)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 29.698603306s ago: executing program 32 (id=2083): syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f00000000c0)='.\x02\x00', 0x8488, &(0x7f0000000780), 0xfe, 0x10fd, &(0x7f0000001140)="$eJzs2T9rFEEYBvBnds8/3cqmXwQtLCQknF8ghcK1ttqIpDJVrlL8OH4cTWUf0msRsF9Zb/dO5UTwTm1+PzjmvYd9Z2fKmQ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMZsmnkhxUSTtlVZKSdN3F4ipJN+V33tdVSp6eLpaPz+dPlknqb4+XZ0kZuoa2tMf3brfzdt4et48OTu5/WL5+8+rF2dnp+ThNSZfL6/1vpYzrAQAAAH7U76z5z+8HAAAAfmdvFwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAf6hvNnU7FVWSknTdxeIqSbel78Y/Wh8AAACwu5Iqz5tt+eoaYONhPjZlnQ/jlzLUR3m3pR8AAAD4pf7WWHz/fb3c3JzHH2S2PpcP2d3Mcni4+j8O+XyS1EmOfpr88vrty+lX+vpv7wUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgK/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAAAAAPYKAAD///F61s8=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x88040, 0x0) fcntl$setlease(r0, 0x400, 0x0) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) 27.908032032s ago: executing program 3 (id=2097): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) write(r0, &(0x7f0000000380)='\x00x', 0x2) 26.626146465s ago: executing program 3 (id=2102): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x3d, 0x800000, 0x8, 0x7, 0x2, 0x81}) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x6) 26.278531243s ago: executing program 33 (id=2102): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x3d, 0x800000, 0x8, 0x7, 0x2, 0x81}) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x6) 3.966395679s ago: executing program 4 (id=2250): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nvmet/ports/1\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/nvmet/ports/1/addr_trtype\x00', 0x2800, 0x106) 3.754333314s ago: executing program 4 (id=2254): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e23, @multicast2}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000480)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x2, 0xb0, 0x0, 0x0, 0x5, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x0, {0x25, 0x4, 0x0, 0x39, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@cipso={0x86, 0x71, 0x0, [{0x0, 0xc, "00fcba8c599d2a81fb52"}, {0x0, 0x9, "789607671442eb"}, {0x5, 0xe, "7434954373561de584b703c8"}, {0x2, 0x9, "e706d30bd224f8"}, {0x0, 0x7, "cf01400080"}, {0x2, 0x10, "8475be675de6a70a05a0dc91e5c6"}, {0x1, 0xa, "6580a9e97612fe86"}, {0x0, 0x12, "240011000300"/16}, {0x0, 0xc, "c8f4696706000000a95e"}]}, @cipso={0x86, 0xc, 0x1, [{0x0, 0x6, "7f36c525"}]}]}}}}}}}, 0x0) 3.612553778s ago: executing program 4 (id=2256): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x6, 0x8000}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r0, 0x5, 0x22, 0x0, &(0x7f0000000100)="257b53f271a76d2608004c6588a80a3888ca0215bc11ca4a6a14aba7af6c6bf18392", 0x0, 0xd15, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x40}, 0x50) 3.032613263s ago: executing program 4 (id=2262): r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x7fee}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 2.804799449s ago: executing program 4 (id=2266): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000600)={0x34, &(0x7f0000000240)={0x40, 0xc, 0x1, '!'}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f00000001c0)=ANY=[@ANYBLOB="201104060000000101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.082114287s ago: executing program 1 (id=2273): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newtfilter={0x54, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x5, 0xfff1}, {0x0, 0xfff3}, {0x9, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8035}, @TCA_FLOWER_KEY_ARP_TIP={0x8, 0x3b, @loopback}, @TCA_FLOWER_KEY_ARP_TIP_MASK={0x8, 0x3c, 0xff000000}, @TCA_FLOWER_KEY_ENC_IP_TOS={0x5, 0x50, 0xaa}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20041891}, 0x0) 1.903187492s ago: executing program 1 (id=2275): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000000c0)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f0000000180)=0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r1, 0x84, 0x18, &(0x7f00000002c0)="8a00000000000000", 0x8) 1.475631583s ago: executing program 5 (id=2280): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x5000004, 0x13012, r0, 0x0) mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xf) 1.339796636s ago: executing program 5 (id=2281): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)=@ipv6_newroute={0x40, 0x18, 0x1, 0x70bd2c, 0x0, {0xa, 0x80, 0x0, 0x0, 0xff, 0x2, 0xff, 0x0, 0x400}, [@RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x3}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, @LWTUNNEL_IP_OPT_ERSPAN_VER={0x5, 0x1, 0x2}}}}]}, 0x40}}, 0x0) 1.222952909s ago: executing program 5 (id=2283): socket(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560aff820fffff5bab003a0000002058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100040c100000000100224e0000", 0x58}], 0x1) 1.113416032s ago: executing program 5 (id=2284): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000000, 0x39071, 0xffffffffffffffff, 0x65969000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0xd9, @dev={0xfe, 0x80, '\x00', 0x35}, 0x5}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000a80)={r1, 0x0, "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"}, &(0x7f0000000180)=0xfebd) 1.021409834s ago: executing program 4 (id=2285): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcf"], 0x0) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001a00)={0xf, {"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", 0x1000}}, 0x1006) 904.502707ms ago: executing program 1 (id=2289): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001200000008000300", @ANYRES32=r2, @ANYBLOB="0a00060008021100000000000c00430002"], 0x34}}, 0x0) 754.290951ms ago: executing program 1 (id=2290): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0xfffffffffffffe01, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)={0x2c, 0x7, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0x0) 729.916811ms ago: executing program 1 (id=2291): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x5000004, 0x13012, r0, 0x0) mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xf) 666.945263ms ago: executing program 1 (id=2293): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f00000000c0), 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000540)={r1, @in={{0x2, 0x4e24, @private=0xa010101}}, 0x9, 0x2}, 0x90) 538.412696ms ago: executing program 2 (id=2294): syz_mount_image$udf(&(0x7f0000000000), &(0x7f00000094c0)='./file1\x00', 0x0, &(0x7f0000001940)=ANY=[], 0x1, 0xc25, &(0x7f0000002580)="$eJzs3V9oXNl9B/DfmStZY22aaLOJN2mz6UBKYpTa+F9sBZcgZxW1AccbIit0n6LRHzvDyiMjyY03bYPakhb6ErovpS9FNF1ayEPpQ7ePVZotJJRCCXlIHwqCJss+9EEPgdKWjcK9c0Ya2fJau15ZsvfzMePvnTu/OzrnntGdO6AzNwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAiM9+7tKp0+mgWwEAPExXJr506myKgYNuBwDw8Fz1+R8AAAAAAAAAAAAAAA67FEUcixSDr2ykqep+R/1yq33r9uTY+O6bHU2RohZFVV/e6qfPnD33qfMXRrr55tu/0z4cz01cvdR4duHGzcW5paW52cZkuzWzMDu352d40O3vNFztgMaNF27NXru21Dhz8uyOh28PvTbwxLGhixdOnB/p1k6OjY9P9NT09b/tn36Xe83wOBJFNCPFG0Ovp2ZE1OLB98V9Xjv77WjVieGqE5Nj41VH5lvN9nL5YKrlqlpEo2ej0e4+eghj8UBGI1bK5pcNHi67N3Gzudicnp9rfLG5uNxabi20U63T2rI/jajFSIpYjYj1XSb59kcRH40UL53aSNMRUXT3wyericH3b09tH/q4B2U7G/0Rq7VHYMwOsYEo4kqk+Nmrx2Om3Gf5Fh+P+EKZr0S8XOZnIlL5wjgX8VOTxR8bfVHEv0WKhbSRZqvjQfe4cvnLjc+3ry301HaPK4/8+8PDdMiPTfUoYro64m+kt3+yAwAAAAAAAAAAAAAAAMA77WgU8e1I8UfP/E41rziqeenvuzjynud/s3fO+NP3eZ6y9mRErNT2Nie3P08dTrXy3z50jD2pRxHfyPP//uCgGwMAAAAAAAAAAAAAAAAAAPCuVsTzkeIrJ46n1aiu/XskqmuKt9rXG1eb0/Odq8J2r/3bvWb65ubmZiN1cjTnVM6VnKs513Ku54xa3j7naM6pnCs5V3Ou5VzPGUXePudozqmcKzlXc67lXM8ZfXn7nKM5p3Ku5FzNuZZzPWcckmv3AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8TmpRxM8jxbe+tpEiRcRoxFR0cm3goFsHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJTqqYiTkWLt+Xp1f7UWcTUifr65udm9RcRGmQ/qoPsKAAAAAAAAAAAAAAAAAAAAh1Yq4mOR4qn/20iNiLg99NrAE8eGLl44cX6kiCJSWdJb/9zE1UuNZxdu3FycW1qam21MtlszC7Nze/1x9cut9q3bk2Pj+9KZ+zq6z+0/Wn924eaLi63rX13e9fHB+qXppeXF5szuD8fRqEVM9a4Zrho8OTZeNXq+1WxXm6baPRpYixjda2cAAAAAAAAAAAAAAAAAAAA4NAZTEZ+LFD/5z3OpO2+8rzPn/5c694qt2pd/b/u7AObvyK7e7w/Yy3Laa0OHq4n3jcmx8fGJntV9/XeXlm1KqYinI8UnXvpQNR8+xeCuc+PLuveWdTfO5bqhXynrVnZU1Ycnx8YbVxbaJy7Nzy/MNJeb0/NzjYmbzZn8xQEre+0GAAAAAAAAAAAAAAAAAAAA7GYwFfGjSPHff/vvqXvd+Tz/v69zr2f+/29UU+gr9bQzt1Rz+99bze3vLL/v4sjgR5+51/r9mP9ftimlIr4ZKc7+6EPV9fS78/+n7qgt6/4kUrz+zEdyXe1IWdfsdqfzjNda83Onytq/jBS/+ka3Nqra67n2qe3a02Xt0Ujx5xs7a7+aaz+wXXumrD0eKb73X7vXfnC79mxZ+5NI8Y9/0+jWDpa1v5trj23XnpxZmJ+9324tx/87keKvr/xW6vb5nuPf8/0PK3fklrvG/M2X36nxH+pZt5LH9Y/z+DfvM/7nI8V36h/JdZ19P50ff7L6f3v8PxEp/uNfd9Zey7Xv3649vdduHbRy/L8dKb77Fz/e6nMe//74+/+N7RHfOf6/3Lczt14lBzT+T/asG8rtmnnru+NdZ+nFr7/QnJ+fW7RgwYKFrYWDPjLxMJTv/38aKf7/WJG65zH5/f89nXvb53//843t9/+Ld+SWA3r/f3/Puov5rKW/L6K+fONm/9MR9aUXv36idaN5fe76XPvM6VOf/vT506dOn+8/0j25217a8757HJTj/4NI8cO/++HW55it87/K7uf/g3fklgMa/6d6+7TjvGbPu+JdqRz/v4oUT372x1ufN3eO/87z/+7n/+Mf25lbv38HNP4f6Fk3lNvVeov7AgAAAAAAAAAA4FEymIr4s0jx23/466k7h2gvf/83e0duOaC//zrWs272Ic1r2PNOBgA4RMrzvw9Gin/a/P7WXO6d53/xa93a3vO/ezkM1/8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBHXYoifj9SDL6ykdYGyvsd9cut9q3bk2Pju292NEWKWhRVfXmrnz5z9tynzl8Y6eabb/9O+3A8N3H1UuPZhRs3F+eWluZmG5Pt1szC7Nyen+FBt7/TcLUDGjdeuDV77dpS48zJszsevj302sATx4YuXjhxfqRTO9CYHBsfn+ip6et/2z/9Luke649EEd+PFG8MvZ6+OxBRiwffF/d57ey3o1UnhqtOTI6NVx2ZbzXby+WDqZarahGNno1Gu/soj9t+jsUDGY1YKZtfNni47N7EzeZic3p+rvHF5uJya7m10E61TmvL/jSiFiMpYjUi1gfufrr+KOKbkeKlUxvpnwciiu5++OSViS+dOnv/9tT2oY97ULaz0R+xWnsExuwQG4gi/iFS/OzV4/G9gYi+6Nzi4xFfKPOViJfL/ExEKl8Y5yJ+usvriEdTXxRxLlIspI306kB5POgeVy5/ufH59rWFntruceWRf394mA75sakeRfygOuJvpH/xew0AAAAAAAAAAAAAAABwiBSxGim+cuJ4quYHb80pbrWvN642p+c70/q6c/+6c6Y3Nzc3G6mTozmncq7kXM25lnM9Z9Ty9jlHc07lXMm5mnMt53rOKPL2OUdzTuVcybmacy3nes7oy9vnHM05lXMl52rOtZzrOeOQzN0DAAAAAAAAAAAAAAAAAAAeL7Uoqqu4f+trG2lzoHN96ano5JrrgT72fhEAAP//gMd2Mw==") fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)=':::\n-&\xf5\xcc\xd7\x06f\xcdY\xb9\xc7\x9d\xb2a\r\xd7\xef\xc5\x112i\x88\n\x13.\xd6\xfa\xd5?\xc7\xfd&\x8d*\xbb\xa7&,\xe9\xa3\'\x91>C\x1b\x15\x87\xeb\xfe\x1c\x9d\\C\xfeI\'\xae\x8fKHq\x89\x83\xbb\x9dC\xd6Hy\x04\xa4\xb6\x88\xdb\xa1b\xae\xa7\x87\xcc\xc7\xa4\xdc\n:///\x00\x00\x00\x85^\x00\x0f\bu\x01\xab\x8c\x95?\x90\x8d_r\xe7\r\'-06,\xff\x84x\'\x8f\x18#][e\x19\xa3\\J\xe9\x8a\xb9\xe4r\x93\xb3\xd3J \x06\x03\xae', 0xfeffffff00000000) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') 510.425567ms ago: executing program 2 (id=2295): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000080), 0x1, 0x4cf, &(0x7f0000000500)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0\x00', 0x10b442, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x42, 0x6) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r0, 0x7000000, 0x0, 0xfffffffe, 0x1000000000000}) 459.001908ms ago: executing program 2 (id=2296): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0xd1, 0x0, 0x0, @loopback, @multicast1}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f5, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000001580)={'erspan0\x00', r1, 0x40, 0x7807, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x1, 0x0, 0x0, @empty, @multicast2}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000240)={'tunl0\x00', r1, 0x700, 0x7800, 0xffff, 0x8001, {{0x5, 0x4, 0x0, 0x28, 0x14, 0x68, 0x0, 0x10, 0x4, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) 271.493563ms ago: executing program 2 (id=2297): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r0 = io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1a1}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 191.881355ms ago: executing program 2 (id=2298): r0 = syz_open_dev$radio(&(0x7f0000002100), 0x2, 0x2) readv(r0, &(0x7f0000000280)=[{&(0x7f0000000000)=""/183, 0xb7}], 0x1) r1 = syz_open_dev$radio(&(0x7f00000003c0), 0x2, 0x2) read(r1, &(0x7f0000001e80)=""/96, 0x60) 134.410236ms ago: executing program 5 (id=2299): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=@newlink={0x4c, 0x10, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x40010, 0x1040}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_VLAN_TUNNEL={0x5}, @IFLA_BRPORT_NEIGH_SUPPRESS={0x5}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20044000}, 0x0) 22.269729ms ago: executing program 2 (id=2300): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='blkio.bfq.sectors\x00', 0x0, 0x0) preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/140, 0x8c}], 0x1, 0x0, 0x0) 0s ago: executing program 5 (id=2301): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/kvm/parameters/nx_huge_pages_recovery_period_ms\x00', 0x2, 0x0) read$FUSE(r0, &(0x7f0000000200)={0x2020}, 0x2020) kernel console output (not intermixed with test programs): 746044][ T9481] EXT4-fs (loop3): orphan cleanup on readonly fs [ 267.753301][ T9481] EXT4-fs error (device loop3): ext4_orphan_get:1430: comm syz.3.1337: bad orphan inode 3 [ 267.804943][ T9481] EXT4-fs (loop3): Remounting filesystem read-only [ 267.895908][ T9481] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 267.960847][ T9481] EXT4-fs warning (device loop3): dx_probe:893: inode #2: comm syz.3.1337: dx entry: limit 0 != root limit 125 [ 267.976280][ T49] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 267.987401][ T9481] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.1337: Corrupt directory, running e2fsck is recommended [ 268.101303][ T6053] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 268.473786][ T9494] loop1: detected capacity change from 0 to 2048 [ 268.500823][ T9486] loop2: detected capacity change from 0 to 32768 [ 268.555419][ T9494] EXT4-fs error (device loop1): ext4_ext_check_inode:532: inode #2: comm syz.1.1343: pblk 0 bad header/extent: eh_entries is 0 but eh_depth is > 0 - magic f30a, entries 0, max 4(4), depth 5(5) [ 268.696737][ T9494] EXT4-fs (loop1): get root inode failed [ 268.714918][ T9494] EXT4-fs (loop1): mount failed [ 268.793743][ T5902] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 269.141294][ T9515] loop0: detected capacity change from 0 to 1024 [ 269.210393][ T9519] program syz.3.1354 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 269.264200][ T9515] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 269.277019][ T9515] ext4 filesystem being mounted at /355/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 269.345671][ T9515] EXT4-fs error (device loop0): ext4_map_blocks:720: inode #15: comm syz.0.1352: lblock 0 mapped to illegal pblock 0 (length 1) [ 269.570714][ T5781] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 270.279969][ T9513] loop2: detected capacity change from 0 to 32768 [ 270.368146][ T9513] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 270.522743][ T9513] XFS (loop2): Ending clean mount [ 270.742400][ T5786] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 271.100755][ T9539] loop0: detected capacity change from 0 to 32768 [ 271.142995][ T9539] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.1360 (9539) [ 271.212502][ T9539] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 271.252164][ T9539] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 271.274698][ T9539] BTRFS warning (device loop0): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 271.314583][ T9539] BTRFS info (device loop0): trying to use backup root at mount time [ 271.323325][ T9539] BTRFS info (device loop0): using free space tree [ 271.398236][ T9552] loop3: detected capacity change from 0 to 40427 [ 271.444749][ T9552] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 271.451170][ T9552] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 271.475586][ T59] BTRFS warning (device loop0): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0xb6f08ecb level 0 [ 271.505428][ T9539] BTRFS warning (device loop0): couldn't read tree root [ 271.512457][ T9539] BTRFS warning (device loop0): try to load backup roots slot 1 [ 271.519128][ T9552] F2FS-fs (loop3): invalid crc value [ 271.579752][ T9539] BTRFS info (device loop0): enabling ssd optimizations [ 271.604672][ T9539] BTRFS info (device loop0): auto enabling async discard [ 271.645327][ T9539] BTRFS info (device loop0): rebuilding free space tree [ 271.980919][ T9539] BTRFS info (device loop0): balance: start -d -m [ 272.002345][ T9552] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 272.020223][ T9539] BTRFS info (device loop0): relocating block group 6881280 flags data|metadata [ 272.039708][ T9552] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 272.280060][ T9539] BTRFS info (device loop0): relocating block group 5242880 flags data|metadata [ 272.384519][ T9539] BTRFS info (device loop0): balance: canceled [ 272.408620][ T6053] syz-executor: attempt to access beyond end of device [ 272.408620][ T6053] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 272.467403][ T6053] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 272.546895][ T5781] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 272.620402][ T9560] loop2: detected capacity change from 0 to 32768 [ 272.696086][ T9560] JBD2: Ignoring recovery information on journal [ 272.810968][ T9560] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 273.066511][ T9560] OCFS2: ERROR (device loop2): int ocfs2_xattr_find_entry(struct inode *, int, const char *, struct ocfs2_xattr_search *): corrupted xattr entries [ 273.066550][ T9560] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 273.144771][ T9560] OCFS2: Returning error to the calling process. [ 273.151184][ T9560] (syz.2.1365,9560,0):ocfs2_calc_xattr_init:638 ERROR: status = -117 [ 273.209028][ T9560] (syz.2.1365,9560,0):ocfs2_mknod:334 ERROR: status = -117 [ 273.253962][ T9560] (syz.2.1365,9560,0):ocfs2_mknod:502 ERROR: status = -117 [ 273.282086][ T9560] (syz.2.1365,9560,0):ocfs2_mkdir:659 ERROR: status = -117 [ 273.570663][ T5786] ocfs2: Unmounting device (7,2) on (node local) [ 274.006068][ T9600] loop2: detected capacity change from 0 to 64 [ 274.040763][ T9600] MINIX-fs: mounting file system with errors, running fsck is recommended [ 274.205636][ T9600] MINIX-fs warning: remounting fs with errors, running fsck is recommended [ 274.440347][ T9604] loop2: detected capacity change from 0 to 1024 [ 274.533454][ T9594] loop3: detected capacity change from 0 to 40427 [ 274.540505][ T9604] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 274.591648][ T9604] ext4 filesystem being mounted at /332/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 274.610085][ T9594] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 274.627684][ T9598] loop1: detected capacity change from 0 to 32768 [ 274.636150][ T9598] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.1374 (9598) [ 274.664763][ T9594] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 274.679460][ T9598] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 274.702852][ T9594] F2FS-fs (loop3): Found nat_bits in checkpoint [ 274.707563][ T9598] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 274.724470][ T9598] BTRFS info (device loop1): using free space tree [ 274.872533][ T9594] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 274.904489][ T9598] BTRFS info (device loop1): enabling ssd optimizations [ 274.911956][ T9594] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 274.947825][ T9598] BTRFS info (device loop1): auto enabling async discard [ 274.980737][ T9604] EXT4-fs error (device loop2): ext4_map_blocks:720: inode #15: comm syz.2.1375: lblock 0 mapped to illegal pblock 0 (length 1) [ 275.161678][ T5786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 275.174340][ T5771] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 276.554563][ T9661] loop1: detected capacity change from 0 to 1024 [ 276.602119][ T9661] EXT4-fs (loop1): bad geometry: bigalloc file system with non-zero first_data_block [ 276.602119][ T9661] [ 276.942158][ T9670] loop0: detected capacity change from 0 to 1024 [ 277.030440][ T9670] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: none. [ 277.121477][ T5781] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 277.967425][ T9674] loop1: detected capacity change from 0 to 32768 [ 278.011551][ T9674] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.1393 (9674) [ 278.050987][ T9686] loop0: detected capacity change from 0 to 8192 [ 278.076529][ T9686] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 278.095970][ T9674] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 278.129774][ T9686] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 278.141868][ T9674] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 278.157170][ T9686] REISERFS (device loop0): using ordered data mode [ 278.170031][ T9674] BTRFS warning (device loop1): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 278.182885][ T9686] reiserfs: using flush barriers [ 278.190985][ T9674] BTRFS info (device loop1): trying to use backup root at mount time [ 278.200415][ T9686] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 278.220174][ T9674] BTRFS info (device loop1): using free space tree [ 278.243061][ T9686] REISERFS (device loop0): checking transaction log (loop0) [ 278.315121][ T9686] REISERFS (device loop0): Using rupasov hash to sort names [ 278.346217][ T9686] REISERFS (device loop0): using 3.5.x disk format [ 278.371117][ T12] BTRFS warning (device loop1): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0xb6f08ecb level 0 [ 278.379328][ T9707] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1400'. [ 278.396046][ T9686] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 278.397590][ T9674] BTRFS warning (device loop1): couldn't read tree root [ 278.417475][ T9674] BTRFS warning (device loop1): try to load backup roots slot 1 [ 278.441616][ T9707] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1400'. [ 278.450700][ T9707] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1400'. [ 278.461292][ T9707] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1400'. [ 278.470381][ T9707] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1400'. [ 278.479522][ T9707] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1400'. [ 278.488763][ T9686] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 278.489347][ T9707] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1400'. [ 278.524833][ T9674] BTRFS info (device loop1): enabling ssd optimizations [ 278.525003][ T9707] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1400'. [ 278.539065][ T9686] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 278.552886][ T9707] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1400'. [ 278.565111][ T9674] BTRFS info (device loop1): auto enabling async discard [ 278.579365][ T9707] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1400'. [ 278.599059][ T9674] BTRFS info (device loop1): rebuilding free space tree [ 278.606475][ T9686] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 UNKNOWN] (nlink == 1) not found (pos 2) [ 278.665167][ T9686] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 278.802719][ T9686] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 278.865490][ T9686] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 278.885259][ T9674] BTRFS info (device loop1): balance: start -d -m [ 278.898361][ T9686] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 278.923364][ T9674] BTRFS info (device loop1): relocating block group 6881280 flags data|metadata [ 278.975302][ T9686] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 279.009956][ T9686] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 279.045101][ T9686] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 UNKNOWN] (nlink == 1) not found (pos 2) [ 279.101691][ T9718] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 UNKNOWN] (nlink == 1) not found (pos 2) [ 279.131154][ T9718] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 279.154490][ T9674] BTRFS info (device loop1): relocating block group 5242880 flags data|metadata [ 279.262084][ T9674] BTRFS info (device loop1): balance: canceled [ 279.367486][ T5771] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 280.424828][ T5813] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 280.572233][ T9729] loop0: detected capacity change from 0 to 40427 [ 280.593110][ T9729] F2FS-fs (loop0): build fault injection attr: rate: 771, type: 0x7ffff [ 280.629143][ T9729] F2FS-fs (loop0): invalid crc value [ 280.636160][ T5813] usb 3-1: Using ep0 maxpacket: 32 [ 280.656488][ T5813] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 280.663767][ T9729] F2FS-fs (loop0): Found nat_bits in checkpoint [ 280.674752][ T5813] usb 3-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 280.694712][ T5813] usb 3-1: config 0 interface 0 has no altsetting 0 [ 280.714693][ T5813] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 280.734196][ T5813] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.774692][ T5813] usb 3-1: Product: syz [ 280.779121][ T5813] usb 3-1: Manufacturer: syz [ 280.783752][ T5813] usb 3-1: SerialNumber: syz [ 280.824697][ T5813] usb 3-1: config 0 descriptor?? [ 280.833416][ T9729] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 280.917249][ T9757] netlink: 'syz.1.1421': attribute type 2 has an invalid length. [ 280.985455][ T9748] loop3: detected capacity change from 0 to 32768 [ 281.031949][ T5781] syz-executor: attempt to access beyond end of device [ 281.031949][ T5781] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 281.049254][ T9748] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.1418 (9748) [ 281.072317][ T5781] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 281.084281][ T9748] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 281.095510][ T9748] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 281.106563][ T9748] BTRFS warning (device loop3): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 281.135195][ T9748] BTRFS info (device loop3): trying to use backup root at mount time [ 281.154013][ T9748] BTRFS info (device loop3): using free space tree [ 281.236066][ T11] BTRFS warning (device loop3): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0xb6f08ecb level 0 [ 281.285032][ T9748] BTRFS warning (device loop3): couldn't read tree root [ 281.302623][ T9748] BTRFS warning (device loop3): try to load backup roots slot 1 [ 281.331232][ T5813] gs_usb 3-1:0.0: Configuring for 1 interfaces [ 281.350008][ T9748] BTRFS info (device loop3): enabling ssd optimizations [ 281.364892][ T9748] BTRFS info (device loop3): auto enabling async discard [ 281.402427][ T9748] BTRFS info (device loop3): rebuilding free space tree [ 281.679398][ T9748] BTRFS info (device loop3): balance: start -d -m [ 281.696088][ T9748] BTRFS info (device loop3): relocating block group 6881280 flags data|metadata [ 281.768478][ T5813] usb 3-1: USB disconnect, device number 16 [ 281.935855][ T9748] BTRFS info (device loop3): relocating block group 5242880 flags data|metadata [ 281.988324][ T9748] BTRFS info (device loop3): balance: canceled [ 282.001620][ T9759] loop1: detected capacity change from 0 to 32768 [ 282.103533][ T9759] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 282.104208][ T6053] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 282.330506][ T5771] ocfs2: Unmounting device (7,1) on (node local) [ 283.056169][ T9794] loop3: detected capacity change from 0 to 64 [ 284.221963][ T9829] __nla_validate_parse: 44 callbacks suppressed [ 284.222008][ T9829] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1446'. [ 284.697891][ T9835] loop1: detected capacity change from 0 to 8192 [ 284.714398][ T9835] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 284.733516][ T9835] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 284.743387][ T9835] REISERFS (device loop1): using ordered data mode [ 284.757942][ T9835] reiserfs: using flush barriers [ 284.768521][ T9835] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 284.785726][ T9835] REISERFS (device loop1): checking transaction log (loop1) [ 284.800716][ T9835] REISERFS (device loop1): Using rupasov hash to sort names [ 284.827746][ T9835] REISERFS (device loop1): using 3.5.x disk format [ 284.834715][ T9835] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 284.846545][ T9835] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 284.858577][ T9835] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 284.870481][ T9835] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 UNKNOWN] (nlink == 1) not found (pos 2) [ 284.887013][ T9835] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 284.918272][ T9835] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 284.929610][ T9835] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 284.962688][ T9835] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 285.015088][ T9835] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 285.044945][ T9835] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 285.080182][ T9835] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 UNKNOWN] (nlink == 1) not found (pos 2) [ 285.137883][ T9845] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 UNKNOWN] (nlink == 1) not found (pos 2) [ 285.189600][ T9845] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 285.243950][ T9831] loop3: detected capacity change from 0 to 32768 [ 285.290368][ T9831] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.1447 (9831) [ 285.453756][ T9831] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 285.478871][ T9831] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 285.526017][ T9831] BTRFS info (device loop3): using free space tree [ 285.687269][ T9831] BTRFS info (device loop3): enabling ssd optimizations [ 285.717130][ T9831] BTRFS info (device loop3): auto enabling async discard [ 285.953251][ T9870] netlink: 'syz.2.1453': attribute type 2 has an invalid length. [ 285.992361][ T6053] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 286.354746][ T9] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 286.427647][ T7698] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop3 scanned by udevd (7698) [ 286.598150][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 286.617894][ T9] usb 2-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 286.633482][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.664858][ T9] usb 2-1: Product: syz [ 286.669094][ T9] usb 2-1: Manufacturer: syz [ 286.685595][ T9] usb 2-1: SerialNumber: syz [ 286.739672][ T9] usb 2-1: config 0 descriptor?? [ 286.757929][ T9] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 286.806423][ T9850] loop0: detected capacity change from 0 to 40427 [ 286.842479][ T9850] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 286.858734][ T9850] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 286.889229][ T9850] F2FS-fs (loop0): invalid crc value [ 286.938453][ T9850] F2FS-fs (loop0): Found nat_bits in checkpoint [ 287.157299][ T9850] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 287.164471][ T9850] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 287.253742][ T9850] syz.0.1452: attempt to access beyond end of device [ 287.253742][ T9850] loop0: rw=34817, sector=77824, nr_sectors = 16 limit=40427 [ 287.552158][ T9883] loop2: detected capacity change from 0 to 32768 [ 287.581851][ T9] gspca_pac7302: reg_w() failed i: 78 v: 40 error -71 [ 287.610695][ T9] gspca_pac7302: probe of 2-1:0.0 failed with error -71 [ 287.644833][ T9883] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.1461 (9883) [ 287.658345][ T9] usb 2-1: USB disconnect, device number 14 [ 287.733015][ T9883] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 287.763852][ T9883] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 287.775868][ T9883] BTRFS warning (device loop2): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 287.799009][ T9883] BTRFS info (device loop2): trying to use backup root at mount time [ 287.830509][ T9883] BTRFS info (device loop2): using free space tree [ 287.946748][ T1146] BTRFS warning (device loop2): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0xb6f08ecb level 0 [ 287.982673][ T9883] BTRFS warning (device loop2): couldn't read tree root [ 288.004830][ T9883] BTRFS warning (device loop2): try to load backup roots slot 1 [ 288.086518][ T9883] BTRFS info (device loop2): enabling ssd optimizations [ 288.093559][ T9883] BTRFS info (device loop2): auto enabling async discard [ 288.145218][ T9883] BTRFS info (device loop2): rebuilding free space tree [ 288.493094][ T9883] BTRFS info (device loop2): balance: start -d -m [ 288.517769][ T9883] BTRFS info (device loop2): relocating block group 6881280 flags data|metadata [ 288.711869][ T9883] BTRFS info (device loop2): relocating block group 5242880 flags data|metadata [ 288.794898][ T9883] BTRFS info (device loop2): balance: canceled [ 288.877223][ T5786] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 289.421123][ T9922] loop0: detected capacity change from 0 to 32768 [ 289.464242][ T9922] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 9 [ 289.797019][ T7698] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 9 [ 290.060225][ T9942] loop2: detected capacity change from 0 to 8192 [ 290.115030][ T9942] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 290.154805][ T9942] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 290.215390][ T9942] REISERFS (device loop2): using ordered data mode [ 290.221944][ T9942] reiserfs: using flush barriers [ 290.244408][ T9942] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 290.262795][ T9942] REISERFS (device loop2): checking transaction log (loop2) [ 290.275447][ T9942] REISERFS (device loop2): Using rupasov hash to sort names [ 290.283843][ T9942] REISERFS (device loop2): using 3.5.x disk format [ 290.292421][ T9942] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 290.303950][ T9942] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 290.329423][ T9942] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 290.410203][ T9942] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 UNKNOWN] (nlink == 1) not found (pos 2) [ 290.477294][ T9942] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 290.690629][ T9942] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 290.721712][ T9942] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 290.816031][ T9942] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 290.889935][ T9942] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 290.921091][ T9942] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 290.939857][ T9942] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 UNKNOWN] (nlink == 1) not found (pos 2) [ 290.972300][ T9964] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 UNKNOWN] (nlink == 1) not found (pos 2) [ 290.992545][ T9964] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 291.154878][ T173] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 291.376813][ T173] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 291.405692][ T173] usb 2-1: New USB device found, idVendor=172f, idProduct=0032, bcdDevice= 0.00 [ 291.434688][ T173] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.467098][ T173] usb 2-1: config 0 descriptor?? [ 291.892213][ T173] waltop 0003:172F:0032.000C: unknown main item tag 0x0 [ 291.905002][ T173] waltop 0003:172F:0032.000C: item fetching failed at offset 6/41 [ 291.942632][ T173] waltop: probe of 0003:172F:0032.000C failed with error -22 [ 292.107217][ T173] usb 2-1: USB disconnect, device number 15 [ 292.883538][ T9995] loop0: detected capacity change from 0 to 512 [ 293.328574][ T9999] netlink: 552 bytes leftover after parsing attributes in process `syz.0.1502'. [ 293.622440][T10001] loop0: detected capacity change from 0 to 1024 [ 293.708544][T10001] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 293.972928][ T5781] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.111430][ T9997] loop3: detected capacity change from 0 to 32768 [ 294.215317][ T9997] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 294.329898][ T9997] XFS (loop3): Ending clean mount [ 294.443722][T10027] loop2: detected capacity change from 0 to 512 [ 294.580916][ T6053] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 296.086812][T10061] loop0: detected capacity change from 0 to 512 [ 296.468571][T10069] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 296.515320][T10069] CPU: 0 PID: 10069 Comm: syz.3.1530 Not tainted syzkaller #0 [ 296.522873][T10069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 296.533404][T10069] Call Trace: [ 296.536801][T10069] [ 296.539841][T10069] dump_stack_lvl+0x18c/0x250 [ 296.544737][T10069] ? show_regs_print_info+0x20/0x20 [ 296.550042][T10069] ? load_image+0x420/0x420 [ 296.554735][T10069] sysfs_create_dir_ns+0x26e/0x2a0 [ 296.559930][T10069] ? __lock_acquire+0x7d80/0x7d80 [ 296.565001][T10069] ? sysfs_warn_dup+0xa0/0xa0 [ 296.569695][T10069] ? rcu_is_watching+0x15/0xb0 [ 296.574485][T10069] ? do_raw_spin_unlock+0x121/0x230 [ 296.579705][T10069] kobject_add_internal+0x617/0xc90 [ 296.584980][T10069] kobject_add+0x164/0x240 [ 296.589419][T10069] ? kobject_init+0x1d0/0x1d0 [ 296.594127][T10069] ? get_device_parent+0x366/0x390 [ 296.599298][T10069] device_add+0x3fa/0xc40 [ 296.603649][T10069] tty_register_device_attr+0x425/0x950 [ 296.609249][T10069] ? tty_register_device+0x30/0x30 [ 296.614384][T10069] ? tty_port_init+0x132/0x1a0 [ 296.619163][T10069] ? gsm_dlci_alloc+0x32a/0x630 [ 296.624052][T10069] ? __might_fault+0xaa/0x120 [ 296.628857][T10069] gsm_activate_mux+0x110/0x2a0 [ 296.633731][T10069] gsmld_ioctl+0x12ca/0x1900 [ 296.638353][T10069] ? gsmld_write+0x120/0x120 [ 296.642971][T10069] ? __init_ldsem+0x150/0x150 [ 296.647686][T10069] ? __fget_files+0x28/0x460 [ 296.652326][T10069] ? gsmld_write+0x120/0x120 [ 296.656948][T10069] tty_ioctl+0x9b5/0xdc0 [ 296.661213][T10069] ? tty_get_icount+0xb0/0xb0 [ 296.665990][T10069] __se_sys_ioctl+0xfd/0x170 [ 296.670688][T10069] do_syscall_64+0x55/0xb0 [ 296.675116][T10069] ? clear_bhb_loop+0x40/0x90 [ 296.679892][T10069] ? clear_bhb_loop+0x40/0x90 [ 296.684580][T10069] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 296.690500][T10069] RIP: 0033:0x7f0000f9e0d9 [ 296.695049][T10069] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 296.714716][T10069] RSP: 002b:00007f0001eff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 296.723220][T10069] RAX: ffffffffffffffda RBX: 00007f0001226090 RCX: 00007f0000f9e0d9 [ 296.731213][T10069] RDX: 00002000000001c0 RSI: 00000000404c4701 RDI: 0000000000000003 [ 296.739204][T10069] RBP: 00007f0001035024 R08: 0000000000000000 R09: 0000000000000000 [ 296.747804][T10069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 296.755792][T10069] R13: 00007f0001226128 R14: 00007f0001226090 R15: 00007fff66bfab88 [ 296.763792][T10069] [ 296.776943][ T51] Bluetooth: hci4: command 0x1003 tx timeout [ 296.784492][T10069] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 296.786199][ T5784] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 296.983553][T10075] loop0: detected capacity change from 0 to 128 [ 297.048910][T10075] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 297.069475][T10075] hpfs: filesystem error: improperly stopped [ 297.088227][T10075] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 297.118733][T10075] hpfs: You really don't want any checks? You are crazy... [ 297.143295][T10075] hpfs: Code page index out of array [ 297.151954][T10075] hpfs: code page support is disabled [ 297.161276][T10075] hpfs: hpfs_map_4sectors(): unaligned read [ 297.182172][T10075] hpfs: hpfs_map_4sectors(): unaligned read [ 297.195255][T10075] hpfs: filesystem error: unable to find root dir [ 297.440074][T10084] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1537'. [ 297.490287][T10084] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1537'. [ 297.544002][T10085] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1537'. [ 297.569252][T10089] loop1: detected capacity change from 0 to 256 [ 297.575513][T10085] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1537'. [ 297.930197][ T2921] Bluetooth: hci4: Frame reassembly failed (-84) [ 298.294901][T10109] loop0: detected capacity change from 0 to 256 [ 298.382098][T10109] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d) [ 298.412550][T10111] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1550'. [ 298.429590][T10111] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1550'. [ 298.441670][T10111] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1550'. [ 298.456303][T10111] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1550'. [ 298.569709][T10113] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1552'. [ 298.616283][T10116] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 298.633633][T10116] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 299.089921][T10127] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 299.123872][T10127] CPU: 1 PID: 10127 Comm: syz.1.1557 Not tainted syzkaller #0 [ 299.131424][T10127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 299.141526][T10127] Call Trace: [ 299.144816][T10127] [ 299.147748][T10127] dump_stack_lvl+0x18c/0x250 [ 299.152431][T10127] ? show_regs_print_info+0x20/0x20 [ 299.157632][T10127] ? load_image+0x420/0x420 [ 299.162164][T10127] sysfs_create_dir_ns+0x26e/0x2a0 [ 299.167279][T10127] ? __lock_acquire+0x7d80/0x7d80 [ 299.172307][T10127] ? sysfs_warn_dup+0xa0/0xa0 [ 299.177090][T10127] ? rcu_is_watching+0x15/0xb0 [ 299.182087][T10127] ? do_raw_spin_unlock+0x121/0x230 [ 299.187344][T10127] kobject_add_internal+0x617/0xc90 [ 299.192617][T10127] kobject_add+0x164/0x240 [ 299.197189][T10127] ? kobject_init+0x1d0/0x1d0 [ 299.201925][T10127] ? get_device_parent+0x366/0x390 [ 299.207091][T10127] device_add+0x3fa/0xc40 [ 299.211480][T10127] tty_register_device_attr+0x425/0x950 [ 299.217092][T10127] ? tty_register_device+0x30/0x30 [ 299.222268][T10127] ? tty_port_init+0x132/0x1a0 [ 299.227084][T10127] ? gsm_dlci_alloc+0x32a/0x630 [ 299.231979][T10127] ? __might_fault+0xaa/0x120 [ 299.236708][T10127] gsm_activate_mux+0x110/0x2a0 [ 299.241638][T10127] gsmld_ioctl+0x12ca/0x1900 [ 299.246365][T10127] ? gsmld_write+0x120/0x120 [ 299.250994][T10127] ? __init_ldsem+0x150/0x150 [ 299.255728][T10127] ? __fget_files+0x28/0x460 [ 299.260369][T10127] ? gsmld_write+0x120/0x120 [ 299.264981][T10127] tty_ioctl+0x9b5/0xdc0 [ 299.269245][T10127] ? tty_get_icount+0xb0/0xb0 [ 299.273940][T10127] __se_sys_ioctl+0xfd/0x170 [ 299.278635][T10127] do_syscall_64+0x55/0xb0 [ 299.283064][T10127] ? clear_bhb_loop+0x40/0x90 [ 299.287763][T10127] ? clear_bhb_loop+0x40/0x90 [ 299.292456][T10127] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 299.298369][T10127] RIP: 0033:0x7f7ac999e0d9 [ 299.302796][T10127] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 299.322508][T10127] RSP: 002b:00007f7aca7bb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 299.330939][T10127] RAX: ffffffffffffffda RBX: 00007f7ac9c26090 RCX: 00007f7ac999e0d9 [ 299.338921][T10127] RDX: 00002000000001c0 RSI: 00000000404c4701 RDI: 0000000000000003 [ 299.346907][T10127] RBP: 00007f7ac9a35024 R08: 0000000000000000 R09: 0000000000000000 [ 299.354986][T10127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 299.362997][T10127] R13: 00007f7ac9c26128 R14: 00007f7ac9c26090 R15: 00007ffc56347dd8 [ 299.371028][T10127] [ 299.385177][T10127] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 299.852829][T10135] loop3: detected capacity change from 0 to 128 [ 299.887607][T10135] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 299.917854][T10135] hpfs: filesystem error: improperly stopped [ 299.934333][T10135] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 299.960383][T10135] hpfs: You really don't want any checks? You are crazy... [ 299.982973][T10135] hpfs: Code page index out of array [ 299.989409][ T51] Bluetooth: hci4: command 0x1003 tx timeout [ 299.999646][ T5784] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 300.011432][T10135] hpfs: code page support is disabled [ 300.017206][T10135] hpfs: hpfs_map_4sectors(): unaligned read [ 300.023327][T10135] hpfs: hpfs_map_4sectors(): unaligned read [ 300.031976][T10135] hpfs: filesystem error: unable to find root dir [ 300.330869][T10142] loop3: detected capacity change from 0 to 256 [ 300.344365][T10143] loop0: detected capacity change from 0 to 64 [ 300.400401][T10143] BFS-fs: bfs_fill_super(): loop0 is unclean, continuing [ 300.430525][T10145] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1563'. [ 300.948250][T10156] loop0: detected capacity change from 0 to 4096 [ 300.986576][T10156] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [ 301.139541][T10156] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 301.149848][T10156] ntfs3: loop0: Failed to load $Extend (-22). [ 301.158893][T10156] ntfs3: loop0: Failed to initialize $Extend. [ 301.516182][T10171] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 301.574849][T10171] CPU: 0 PID: 10171 Comm: syz.2.1575 Not tainted syzkaller #0 [ 301.582493][T10171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 301.592599][T10171] Call Trace: [ 301.595923][T10171] [ 301.598892][T10171] dump_stack_lvl+0x18c/0x250 [ 301.603623][T10171] ? show_regs_print_info+0x20/0x20 [ 301.608866][T10171] ? load_image+0x420/0x420 [ 301.613524][T10171] sysfs_create_dir_ns+0x26e/0x2a0 [ 301.618682][T10171] ? __lock_acquire+0x7d80/0x7d80 [ 301.623816][T10171] ? sysfs_warn_dup+0xa0/0xa0 [ 301.628625][T10171] ? rcu_is_watching+0x15/0xb0 [ 301.633448][T10171] ? do_raw_spin_unlock+0x121/0x230 [ 301.638712][T10171] kobject_add_internal+0x617/0xc90 [ 301.643986][T10171] kobject_add+0x164/0x240 [ 301.648467][T10171] ? kobject_init+0x1d0/0x1d0 [ 301.653212][T10171] ? get_device_parent+0x366/0x390 [ 301.658380][T10171] device_add+0x3fa/0xc40 [ 301.662761][T10171] tty_register_device_attr+0x425/0x950 [ 301.668369][T10171] ? tty_register_device+0x30/0x30 [ 301.673537][T10171] ? tty_port_init+0x132/0x1a0 [ 301.678351][T10171] ? gsm_dlci_alloc+0x32a/0x630 [ 301.683253][T10171] ? __might_fault+0xaa/0x120 [ 301.687981][T10171] gsm_activate_mux+0x110/0x2a0 [ 301.692888][T10171] gsmld_ioctl+0x12ca/0x1900 [ 301.697542][T10171] ? gsmld_write+0x120/0x120 [ 301.702376][T10171] ? __init_ldsem+0x150/0x150 [ 301.707106][T10171] ? __fget_files+0x28/0x460 [ 301.711759][T10171] ? gsmld_write+0x120/0x120 [ 301.716398][T10171] tty_ioctl+0x9b5/0xdc0 [ 301.720684][T10171] ? tty_get_icount+0xb0/0xb0 [ 301.725406][T10171] __se_sys_ioctl+0xfd/0x170 [ 301.730045][T10171] do_syscall_64+0x55/0xb0 [ 301.734509][T10171] ? clear_bhb_loop+0x40/0x90 [ 301.739230][T10171] ? clear_bhb_loop+0x40/0x90 [ 301.743959][T10171] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 301.749895][T10171] RIP: 0033:0x7fd75399e0d9 [ 301.754369][T10171] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 301.774384][T10171] RSP: 002b:00007fd75487c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 301.782857][T10171] RAX: ffffffffffffffda RBX: 00007fd753c26090 RCX: 00007fd75399e0d9 [ 301.790881][T10171] RDX: 00002000000001c0 RSI: 00000000404c4701 RDI: 0000000000000003 [ 301.798996][T10171] RBP: 00007fd753a35024 R08: 0000000000000000 R09: 0000000000000000 [ 301.807104][T10171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 301.815129][T10171] R13: 00007fd753c26128 R14: 00007fd753c26090 R15: 00007ffc6d07b4b8 [ 301.823162][T10171] [ 301.826274][ C0] vkms_vblank_simulate: vblank timer overrun [ 302.078256][T10157] loop1: detected capacity change from 0 to 40427 [ 302.092732][T10171] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 302.168609][T10157] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 302.196149][T10157] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 302.260724][T10157] F2FS-fs (loop1): invalid crc value [ 302.344761][T10157] F2FS-fs (loop1): Found nat_bits in checkpoint [ 302.361690][T10184] program syz.0.1589 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 302.544245][T10157] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 302.570263][T10157] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 302.806323][T10157] syz.1.1567: attempt to access beyond end of device [ 302.806323][T10157] loop1: rw=34817, sector=77824, nr_sectors = 16 limit=40427 [ 303.206238][T10200] netlink: 284 bytes leftover after parsing attributes in process `syz.2.1588'. [ 303.627701][T10204] loop2: detected capacity change from 0 to 4096 [ 304.062099][T10216] loop1: detected capacity change from 0 to 64 [ 304.090918][T10216] BFS-fs: bfs_fill_super(): loop1 is unclean, continuing [ 304.985051][T10247] netlink: 'syz.1.1609': attribute type 1 has an invalid length. [ 305.013919][T10247] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1609'. [ 305.761266][T10266] loop3: detected capacity change from 0 to 256 [ 306.765052][T10282] loop0: detected capacity change from 0 to 32768 [ 306.786985][T10282] (syz.0.1623,10282,0):ocfs2_journal_addressable:1991 ERROR: The journal cannot address the entire volume. Enable the 'block64' journal option with tunefs.ocfs2 [ 306.787091][T10282] (syz.0.1623,10282,0):ocfs2_check_volume:2486 ERROR: status = -27 [ 306.812023][T10282] (syz.0.1623,10282,1):ocfs2_mount_volume:1820 ERROR: status = -27 [ 306.835253][T10282] (syz.0.1623,10282,1):ocfs2_fill_super:1178 ERROR: status = -27 [ 307.350091][T10293] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 307.393474][T10293] CPU: 1 PID: 10293 Comm: syz.0.1624 Not tainted syzkaller #0 [ 307.401032][T10293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 307.411144][T10293] Call Trace: [ 307.414463][T10293] [ 307.417432][T10293] dump_stack_lvl+0x18c/0x250 [ 307.422170][T10293] ? show_regs_print_info+0x20/0x20 [ 307.427419][T10293] ? load_image+0x420/0x420 [ 307.431992][T10293] sysfs_create_dir_ns+0x26e/0x2a0 [ 307.437150][T10293] ? __lock_acquire+0x7d80/0x7d80 [ 307.442223][T10293] ? sysfs_warn_dup+0xa0/0xa0 [ 307.446941][T10293] ? rcu_is_watching+0x15/0xb0 [ 307.451758][T10293] ? do_raw_spin_unlock+0x121/0x230 [ 307.457017][T10293] kobject_add_internal+0x617/0xc90 [ 307.462276][T10293] kobject_add+0x164/0x240 [ 307.466748][T10293] ? kobject_init+0x1d0/0x1d0 [ 307.471484][T10293] ? get_device_parent+0x366/0x390 [ 307.476672][T10293] device_add+0x3fa/0xc40 [ 307.481055][T10293] tty_register_device_attr+0x425/0x950 [ 307.486859][T10293] ? tty_register_device+0x30/0x30 [ 307.492031][T10293] ? tty_port_init+0x132/0x1a0 [ 307.496924][T10293] ? gsm_dlci_alloc+0x32a/0x630 [ 307.501821][T10293] ? __might_fault+0xaa/0x120 [ 307.506555][T10293] gsm_activate_mux+0x110/0x2a0 [ 307.511459][T10293] gsmld_ioctl+0x12ca/0x1900 [ 307.516122][T10293] ? gsmld_write+0x120/0x120 [ 307.520778][T10293] ? __init_ldsem+0x150/0x150 [ 307.525507][T10293] ? __fget_files+0x28/0x460 [ 307.530162][T10293] ? gsmld_write+0x120/0x120 [ 307.534804][T10293] tty_ioctl+0x9b5/0xdc0 [ 307.539097][T10293] ? tty_get_icount+0xb0/0xb0 [ 307.543828][T10293] __se_sys_ioctl+0xfd/0x170 [ 307.548571][T10293] do_syscall_64+0x55/0xb0 [ 307.553052][T10293] ? clear_bhb_loop+0x40/0x90 [ 307.557776][T10293] ? clear_bhb_loop+0x40/0x90 [ 307.562500][T10293] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 307.568445][T10293] RIP: 0033:0x7fa12719e0d9 [ 307.572990][T10293] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 307.592644][T10293] RSP: 002b:00007fa128128028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 307.601121][T10293] RAX: ffffffffffffffda RBX: 00007fa127426090 RCX: 00007fa12719e0d9 [ 307.609145][T10293] RDX: 00002000000001c0 RSI: 00000000404c4701 RDI: 0000000000000003 [ 307.617254][T10293] RBP: 00007fa127235024 R08: 0000000000000000 R09: 0000000000000000 [ 307.625277][T10293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 307.633400][T10293] R13: 00007fa127426128 R14: 00007fa127426090 R15: 00007ffc90c8b898 [ 307.641529][T10293] [ 307.661353][T10293] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 308.376021][T10301] loop2: detected capacity change from 0 to 512 [ 308.440471][T10301] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 308.456618][T10305] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 308.475557][T10305] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 308.484484][T10301] ext4 filesystem being mounted at /400/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 308.682375][ T5786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 308.961290][T10297] loop3: detected capacity change from 0 to 32768 [ 309.001804][T10297] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 309.020208][T10297] JBD2: Ignoring recovery information on journal [ 309.137267][T10297] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 309.222218][T10318] loop0: detected capacity change from 0 to 256 [ 309.269809][ T7698] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 309.556463][T10323] syz.0.1637[10323] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 309.562527][T10323] syz.0.1637[10323] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 309.736127][ T6053] ocfs2: Unmounting device (7,3) on (node local) [ 309.806788][T10329] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1641'. [ 309.967726][T10332] loop1: detected capacity change from 0 to 136 [ 310.116524][T10332] rock: directory entry would overflow storage [ 310.126911][T10332] rock: sig=0x4f50, size=4, remaining=3 [ 310.132582][T10332] iso9660: Corrupted directory entry in block 2 of inode 1472 [ 310.351128][T10342] loop1: detected capacity change from 0 to 256 [ 310.505929][T10344] loop3: detected capacity change from 0 to 2048 [ 310.633794][T10349] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 310.794367][T10349] NILFS (loop3): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 310.839718][T10349] NILFS error (device loop3): nilfs_bmap_propagate: broken bmap (inode number=4) [ 310.869531][T10349] Remounting filesystem read-only [ 310.879061][ T11] NILFS (loop3): discard dirty page: offset=4096, ino=6 [ 310.904786][ T11] NILFS (loop3): discard dirty block: blocknr=39, size=1024 [ 310.930456][ T11] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 310.936394][T10334] loop0: detected capacity change from 0 to 32768 [ 310.959096][ T11] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 310.972934][ T11] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 310.991237][ T11] NILFS (loop3): discard dirty page: offset=0, ino=3 [ 310.998945][ T11] NILFS (loop3): discard dirty block: blocknr=42, size=1024 [ 311.009424][ T11] NILFS (loop3): discard dirty block: blocknr=43, size=1024 [ 311.019185][ T28] audit: type=1800 audit(1786106097.783:17): pid=10334 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1643" name="bus" dev="loop0" ino=7 res=0 errno=0 [ 311.050104][ T11] NILFS (loop3): discard dirty block: blocknr=44, size=1024 [ 311.059186][ T11] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 311.068918][ T11] NILFS (loop3): discard dirty page: offset=65536, ino=3 [ 311.086164][ T11] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 311.125005][ T11] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 311.164841][ T11] NILFS (loop3): discard dirty block: blocknr=0, size=1024 [ 311.172142][ T11] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 311.189823][ T11] NILFS (loop3): discard dirty page: offset=196608, ino=3 [ 311.216526][ T11] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 311.226300][ T11] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 311.235599][ T11] NILFS (loop3): discard dirty block: blocknr=49, size=1024 [ 311.243122][ T11] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 311.252674][ T11] NILFS (loop3): discard dirty page: offset=0, ino=18 [ 311.273419][ T11] NILFS (loop3): discard dirty block: blocknr=0, size=1024 [ 311.302281][ T11] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 311.324888][ T11] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 311.356478][ T11] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 311.380586][ T11] NILFS (loop3): discard dirty page: offset=0, ino=2 [ 311.393215][ T11] NILFS (loop3): discard dirty block: blocknr=18, size=1024 [ 311.402117][T10359] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1651'. [ 311.421555][ T11] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 311.442943][ T11] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 311.475016][ T11] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 311.484193][ T11] NILFS (loop3): discard dirty page: offset=0, ino=5 [ 311.514796][ T11] NILFS (loop3): discard dirty block: blocknr=41, size=1024 [ 311.522175][ T11] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 311.564725][ T11] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 311.583105][T10352] loop2: detected capacity change from 0 to 32768 [ 311.594120][ T11] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 311.604668][T10362] loop1: detected capacity change from 0 to 256 [ 311.619698][T10360] loop0: detected capacity change from 0 to 4096 [ 311.623836][T10352] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 311.626332][ T11] NILFS (loop3): discard dirty page: offset=0, ino=4 [ 311.662254][T10352] JBD2: Ignoring recovery information on journal [ 311.692511][ T11] NILFS (loop3): discard dirty block: blocknr=40, size=1024 [ 311.701577][ T11] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 311.710914][ T11] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 311.717635][T10352] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 311.720371][ T11] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 311.738060][T10344] NILFS (loop3): mounting fs with errors [ 311.789627][T10344] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=2) [ 311.829021][T10344] Remounting filesystem read-only [ 311.908660][T10365] ntfs3: loop0: ino=0, "file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" failed to parse mft record [ 312.032045][ T6053] NILFS (loop3): disposed unprocessed dirty file(s) when stopping log writer [ 312.055292][ T6053] NILFS (loop3): discard dirty page: offset=0, ino=6 [ 312.062155][ T6053] NILFS (loop3): discard dirty block: blocknr=35, size=1024 [ 312.099881][ T6053] NILFS (loop3): discard dirty block: blocknr=36, size=1024 [ 312.120829][ T6053] NILFS (loop3): discard dirty block: blocknr=37, size=1024 [ 312.143584][ T6053] NILFS (loop3): discard dirty block: blocknr=38, size=1024 [ 312.306702][ T5786] ocfs2: Unmounting device (7,2) on (node local) [ 312.318898][T10373] loop3: detected capacity change from 0 to 136 [ 312.422070][T10373] rock: directory entry would overflow storage [ 312.445402][T10373] rock: sig=0x4f50, size=4, remaining=3 [ 312.451129][T10373] iso9660: Corrupted directory entry in block 2 of inode 1472 [ 312.558494][T10375] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 312.640623][T10375] ext4 filesystem being mounted at /429/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 312.858114][ T5781] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 312.955343][T10382] block nbd0: server does not support multiple connections per device. [ 312.995887][T10382] block nbd0: shutting down sockets [ 313.216893][T10390] MINIX-fs: mounting file system with errors, running fsck is recommended [ 313.269668][T10390] MINIX-fs warning: remounting fs with errors, running fsck is recommended [ 313.289382][T10390] MINIX-fs warning: remounting unchecked fs, running fsck is recommended [ 313.457888][T10399] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 313.826010][ T5781] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 313.947365][T10408] tipc: Started in network mode [ 313.952327][T10408] tipc: Node identity 7f000001, cluster identity 4711 [ 313.973069][T10408] tipc: New replicast peer: 127.0.0.1 [ 313.983973][T10408] tipc: Enabled bearer , priority 10 [ 314.001129][T10409] tipc: Disabling bearer [ 314.370871][T10397] set_capacity_and_notify: 4 callbacks suppressed [ 314.370913][T10397] loop3: detected capacity change from 0 to 32768 [ 314.373256][T10406] loop1: detected capacity change from 0 to 32768 [ 314.468091][T10397] (syz.3.1665,10397,0):ocfs2_journal_addressable:1991 ERROR: The journal cannot address the entire volume. Enable the 'block64' journal option with tunefs.ocfs2 [ 314.468135][T10397] (syz.3.1665,10397,0):ocfs2_check_volume:2486 ERROR: status = -27 [ 314.534808][T10397] (syz.3.1665,10397,0):ocfs2_mount_volume:1820 ERROR: status = -27 [ 314.615414][T10397] (syz.3.1665,10397,0):ocfs2_fill_super:1178 ERROR: status = -27 [ 314.753240][T10418] loop1: detected capacity change from 0 to 512 [ 314.874399][T10418] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 314.882035][T10417] loop0: detected capacity change from 0 to 4096 [ 314.914933][T10418] ext4 filesystem being mounted at /472/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 315.150131][ T5771] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.925423][T10414] loop2: detected capacity change from 0 to 32768 [ 316.707969][T10428] loop1: detected capacity change from 0 to 32768 [ 316.732380][T10438] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 316.740464][T10438] IPv6: NLM_F_CREATE should be set when creating new route [ 316.747883][T10438] IPv6: NLM_F_CREATE should be set when creating new route [ 316.757607][T10438] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 316.796114][T10428] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 316.888775][T10430] loop0: detected capacity change from 0 to 40427 [ 316.906706][T10430] F2FS-fs (loop0): Invalid log_blocksize (64), supports only 12 [ 316.951680][T10428] XFS (loop1): Ending clean mount [ 316.961807][T10430] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 316.983630][T10430] F2FS-fs (loop0): invalid crc value [ 316.989820][T10428] XFS (loop1): Quotacheck needed: Please wait. [ 317.142323][T10428] XFS (loop1): Quotacheck: Done. [ 317.295674][T10430] F2FS-fs (loop0): Start checkpoint disabled! [ 317.386567][T10430] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 317.393792][T10430] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 317.409946][T10432] loop2: detected capacity change from 0 to 32768 [ 317.455750][T10432] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.1688 (10432) [ 317.466801][ T5771] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 317.522471][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.529244][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.568651][T10430] syz.0.1677: attempt to access beyond end of device [ 317.568651][T10430] loop0: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 317.580839][T10432] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 317.591195][T10430] syz.0.1677: attempt to access beyond end of device [ 317.591195][T10430] loop0: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 317.636167][T10432] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 317.643255][T10430] syz.0.1677: attempt to access beyond end of device [ 317.643255][T10430] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 317.674701][T10432] BTRFS info (device loop2): force zlib compression, level 3 [ 317.682295][T10432] BTRFS info (device loop2): disabling free space tree [ 317.727632][T10432] BTRFS info (device loop2): enabling ssd optimizations [ 317.760522][T10432] BTRFS info (device loop2): allowing degraded mounts [ 317.775275][T10432] BTRFS info (device loop2): trying to use backup root at mount time [ 317.804231][T10432] BTRFS info (device loop2): enabling free space tree [ 317.834774][T10432] BTRFS info (device loop2): using free space tree [ 317.895400][ T59] kworker/u4:4: attempt to access beyond end of device [ 317.895400][ T59] loop0: rw=2049, sector=45112, nr_sectors = 8 limit=40427 [ 317.984779][ T59] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 318.058816][T10448] loop3: detected capacity change from 0 to 32768 [ 318.067582][T10432] BTRFS info (device loop2): auto enabling async discard [ 318.106747][T10432] BTRFS info (device loop2): checking UUID tree [ 318.121514][T10448] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 318.215111][ T28] audit: type=1800 audit(1786106104.973:18): pid=10432 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1688" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 318.269323][T10478] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.315234][T10448] XFS (loop3): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x50. [ 318.324094][ T5786] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 318.446198][T10448] XFS (loop3): Tail block (0x29) overwrite detected. Updated to 0x30 [ 318.567112][T10448] XFS (loop3): Ending clean mount [ 318.825994][ T6053] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 319.069171][T10487] loop2: detected capacity change from 0 to 256 [ 320.295039][ T9] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 320.361758][T10509] vivid-000: disconnect [ 320.369001][T10508] vivid-000: reconnect [ 320.398362][T10494] loop3: detected capacity change from 0 to 40427 [ 320.421314][T10494] F2FS-fs (loop3): invalid crc value [ 320.493140][T10494] F2FS-fs (loop3): Found nat_bits in checkpoint [ 320.493631][T10514] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1700'. [ 320.520341][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 320.548582][ T9] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 320.568446][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.600162][ T9] usb 3-1: config 0 descriptor?? [ 320.620249][T10503] loop1: detected capacity change from 0 to 32768 [ 320.634226][T10494] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 320.671404][T10503] JBD2: Ignoring recovery information on journal [ 320.838598][T10503] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 320.869090][ T6053] syz-executor: attempt to access beyond end of device [ 320.869090][ T6053] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 320.887266][T10519] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1701'. [ 320.916382][T10519] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1701'. [ 320.925666][ T6053] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 320.978343][T10519] erspan0: entered promiscuous mode [ 321.012706][T10519] gretap0: entered promiscuous mode [ 321.112963][ T9] keytouch 0003:0926:3333.000D: fixing up Keytouch IEC report descriptor [ 321.156043][ T9] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.000D/input/input18 [ 321.251131][ T5771] ocfs2: Unmounting device (7,1) on (node local) [ 321.447009][ T9] keytouch 0003:0926:3333.000D: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 321.743784][ T9] usb 3-1: USB disconnect, device number 17 [ 323.753977][T10569] loop3: detected capacity change from 0 to 512 [ 323.794893][T10569] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 323.890160][ T6053] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.917373][ T789] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 324.094442][T10580] netlink: 'syz.1.1727': attribute type 11 has an invalid length. [ 324.108103][ T789] usb 3-1: Using ep0 maxpacket: 8 [ 324.128946][ T789] usb 3-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 324.170359][ T789] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.210665][ T789] usb 3-1: Product: syz [ 324.230919][ T789] usb 3-1: Manufacturer: syz [ 324.241060][ T789] usb 3-1: SerialNumber: syz [ 324.253811][ T789] usb 3-1: config 0 descriptor?? [ 324.282390][ T789] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 325.131336][ T789] gspca_sonixj: reg_r err -71 [ 325.141168][ T789] sonixj: probe of 3-1:0.0 failed with error -71 [ 325.162960][ T789] usb 3-1: USB disconnect, device number 18 [ 325.576550][T10604] loop1: detected capacity change from 0 to 32768 [ 325.586974][T10612] program syz.3.1742 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 325.634402][T10604] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 325.815033][T10604] XFS (loop1): Ending clean mount [ 325.866198][T10604] XFS (loop1): EXPERIMENTAL online scrub feature in use. Use at your own risk! [ 326.000964][T10608] loop0: detected capacity change from 0 to 32768 [ 326.012356][ T5771] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 326.080012][T10608] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 326.332341][T10608] XFS (loop0): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x50. [ 326.389146][T10608] XFS (loop0): Tail block (0x29) overwrite detected. Updated to 0x30 [ 326.448340][T10608] XFS (loop0): Ending clean mount [ 326.610306][T10642] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1750'. [ 326.650172][ T5781] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 327.054857][ T9] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 327.244790][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 327.252505][ T9] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 327.269532][ T9] usb 2-1: config 0 has no interface number 0 [ 327.280450][ T9] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 327.311915][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.323067][ T9] usb 2-1: Product: syz [ 327.331774][ T9] usb 2-1: Manufacturer: syz [ 327.337663][ T9] usb 2-1: SerialNumber: syz [ 327.352967][ T9] usb 2-1: config 0 descriptor?? [ 327.383950][ T9] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 327.593814][ T9] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 327.629019][ T9] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 327.686838][T10668] loop0: detected capacity change from 0 to 4096 [ 327.790969][T10671] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 327.863210][T10648] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 327.887260][T10648] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 328.099910][T10657] loop3: detected capacity change from 0 to 32768 [ 328.113899][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 328.123831][ T5776] usb 2-1: USB disconnect, device number 16 [ 328.150710][ T5776] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 328.206334][ T5776] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 328.227410][ T5776] quatech2 2-1:0.51: device disconnected [ 328.235993][T10657] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 328.303786][T10686] netlink: 'syz.0.1766': attribute type 11 has an invalid length. [ 328.423579][T10657] XFS (loop3): Ending clean mount [ 328.449410][T10657] XFS (loop3): Quotacheck needed: Please wait. [ 328.594567][T10657] XFS (loop3): Quotacheck: Done. [ 328.780404][ T6053] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 329.145212][T10698] kvm: kvm [10697]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0xeb7 [ 329.413056][T10705] program syz.3.1773 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 329.772580][T10695] loop1: detected capacity change from 0 to 40427 [ 329.804883][T10695] F2FS-fs (loop1): Invalid log_blocksize (64), supports only 12 [ 329.823864][T10695] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 329.852696][T10695] F2FS-fs (loop1): invalid crc value [ 329.941684][T10722] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1778'. [ 330.137994][T10695] F2FS-fs (loop1): Start checkpoint disabled! [ 330.190720][T10695] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 330.217662][T10695] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 330.321442][T10695] syz.1.1769: attempt to access beyond end of device [ 330.321442][T10695] loop1: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 330.346113][T10695] syz.1.1769: attempt to access beyond end of device [ 330.346113][T10695] loop1: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 330.370553][T10695] syz.1.1769: attempt to access beyond end of device [ 330.370553][T10695] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 330.454269][ T34] kworker/u4:2: attempt to access beyond end of device [ 330.454269][ T34] loop1: rw=2049, sector=45112, nr_sectors = 8 limit=40427 [ 330.468735][ T34] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 331.084855][ T23] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 331.284875][ T23] usb 4-1: Using ep0 maxpacket: 8 [ 331.306828][ T23] usb 4-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 331.337207][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.354744][ T23] usb 4-1: Product: syz [ 331.359123][ T23] usb 4-1: Manufacturer: syz [ 331.363767][ T23] usb 4-1: SerialNumber: syz [ 331.386488][ T23] usb 4-1: config 0 descriptor?? [ 331.402148][ T23] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 331.519014][T10760] syzkaller1: tun_chr_ioctl cmd 2147767520 [ 331.741696][T10769] loop2: detected capacity change from 0 to 1024 [ 331.754109][T10769] EXT4-fs: Ignoring removed nomblk_io_submit option [ 331.763039][T10769] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 331.797317][T10769] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 331.883064][ T5786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 332.241281][ T23] gspca_sonixj: reg_r err -71 [ 332.249860][ T23] sonixj: probe of 4-1:0.0 failed with error -71 [ 332.258604][ T23] usb 4-1: USB disconnect, device number 15 [ 333.128126][T10785] loop3: detected capacity change from 0 to 4096 [ 333.202390][T10774] loop2: detected capacity change from 0 to 32768 [ 333.215908][T10788] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 333.317182][T10774] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 333.599855][T10774] XFS (loop2): Ending clean mount [ 333.914923][T10774] XFS (loop2): EXPERIMENTAL online scrub feature in use. Use at your own risk! [ 334.114566][ T5786] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 334.322247][T10811] loop3: detected capacity change from 0 to 512 [ 334.837656][T10814] 9p: Unknown uid 00000000004294967295 [ 334.943135][T10819] program syz.2.1813 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 335.243099][T10829] program syz.2.1821 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 335.472541][T10836] loop1: detected capacity change from 0 to 256 [ 335.738762][T10837] loop0: detected capacity change from 0 to 8192 [ 335.896344][T10851] program syz.3.1832 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 336.124755][ T5776] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 336.153164][T10855] pim6reg: entered allmulticast mode [ 336.198802][T10854] pim6reg: left allmulticast mode [ 336.312480][ T5776] usb 2-1: Using ep0 maxpacket: 32 [ 336.327374][ T5776] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 336.346900][ T5776] usb 2-1: config 0 has no interface number 0 [ 336.353108][ T5776] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 336.379965][T10864] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1838'. [ 336.404677][ T5776] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 336.427374][ T5776] usb 2-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 336.444348][T10864] team0: entered promiscuous mode [ 336.457049][ T5776] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.469820][T10864] team_slave_0: entered promiscuous mode [ 336.483952][T10864] team_slave_1: entered promiscuous mode [ 336.491176][ T5776] usb 2-1: config 0 descriptor?? [ 336.500037][T10864] team0: left promiscuous mode [ 336.511413][T10864] team_slave_0: left promiscuous mode [ 336.519318][T10864] team_slave_1: left promiscuous mode [ 336.734710][ T9] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 336.782965][T10872] loop2: detected capacity change from 0 to 8192 [ 336.925235][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 336.933400][ T9] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 336.947033][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.998911][ T9] pvrusb2: Hardware description: Terratec Grabster AV400 [ 337.014874][ T9] pvrusb2: ********** [ 337.025554][ T9] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 337.065109][ T9] pvrusb2: Important functionality might not be entirely working. [ 337.086897][T10876] program syz.2.1844 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 337.094261][ T9] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 337.126351][ T9] pvrusb2: ********** [ 337.152949][ T5776] uclogic 0003:28BD:0094.000E: pen parameters not found [ 337.166467][ T5776] uclogic 0003:28BD:0094.000E: interface is invalid, ignoring [ 337.188488][ T2322] pvrusb2: Invalid write control endpoint [ 337.196897][ T5776] usb 2-1: USB disconnect, device number 17 [ 337.377589][ T2322] pvrusb2: Invalid write control endpoint [ 337.383934][ T2322] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 337.426230][ T2322] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 337.437392][ T2322] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 337.457602][T10885] loop2: detected capacity change from 0 to 16 [ 337.459570][ T2322] pvrusb2: Device being rendered inoperable [ 337.478729][T10868] pvrusb2: Attempted to execute control transfer when device not ok [ 337.495982][T10885] erofs: (device loop2): mounted with root inode @ nid 36. [ 337.508154][ T9] usb 4-1: USB disconnect, device number 16 [ 337.518690][ T2322] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 337.548233][ T2322] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 337.581547][ T2322] pvrusb2: Attached sub-driver cx25840 [ 337.588827][ T2322] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 337.602662][ T2322] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 337.709330][T10889] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 337.732785][T10889] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 338.354816][T10911] can0: slcan on ptm0. [ 338.385215][ T5776] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 338.465573][T10914] Failed to get privilege flags for destination (handle=0x2:0x0) [ 338.476648][T10910] can0 (unregistered): slcan off ptm0. [ 338.617708][ T5776] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 338.664804][ T5776] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 338.674110][ T5776] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.707388][ T5776] usb 2-1: config 0 descriptor?? [ 339.179519][T10945] loop0: detected capacity change from 0 to 8 [ 339.271629][T10945] SQUASHFS error: Unable to read inode 0xe3 [ 339.341863][ T5776] ath6kl: Failed to read usb control message: -71 [ 339.362093][ T5776] ath6kl: Unable to read the bmi data from the device: -71 [ 339.385368][ T5776] ath6kl: unable to read target info byte count: -71 [ 339.411724][ T5776] ath6kl: Failed to init ath6kl core: -71 [ 339.427003][ T5776] ath6kl_usb: probe of 2-1:0.0 failed with error -71 [ 339.467629][ T5776] usb 2-1: USB disconnect, device number 18 [ 339.842927][T10964] i2c i2c-0: new_device: Can't parse I2C address [ 339.943646][T10970] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 339.985583][T10970] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 340.304337][T10969] zswap: compressor d not available [ 341.141562][T11002] loop2: detected capacity change from 0 to 8192 [ 341.329091][T10991] loop1: detected capacity change from 0 to 32768 [ 341.439847][T10991] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 341.533620][T10991] XFS (loop1): Ending clean mount [ 341.589205][T10991] XFS (loop1): User initiated shutdown received. [ 341.607477][T10991] XFS (loop1): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:501). Shutting down filesystem. [ 341.648832][T10991] XFS (loop1): Please unmount the filesystem and rectify the problem(s) [ 341.749499][T11027] Bluetooth: MGMT ver 1.22 [ 341.758441][ T5771] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 341.775034][ T173] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 342.003789][T11031] loop0: detected capacity change from 0 to 256 [ 342.012547][ T173] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 342.030174][T11031] exfat: Deprecated parameter 'utf8' [ 342.036339][ T173] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 342.046785][T11031] exfat: Deprecated parameter 'utf8' [ 342.060243][T11031] exfat: Deprecated parameter 'utf8' [ 342.066410][ T173] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 342.085286][ T173] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 342.101830][ T173] usb 3-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 342.112548][T11031] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xc70f51ff, utbl_chksum : 0xe619d30d) [ 342.129932][ T173] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.527836][T11040] loop1: detected capacity change from 0 to 4096 [ 342.577088][T11040] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 342.588147][T11042] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 342.601892][ T173] gud: probe of 3-1:1.0 failed with error -121 [ 342.622496][T11042] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 342.812128][ T23] usb 3-1: USB disconnect, device number 19 [ 342.868642][T11046] loop3: detected capacity change from 0 to 2048 [ 342.935894][T11046] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 342.994813][T11046] ext4 filesystem being mounted at /388/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 343.190193][ T6053] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 343.916490][T11084] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 343.963861][T11088] loop2: detected capacity change from 0 to 512 [ 343.997768][T11088] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 344.124746][T11088] EXT4-fs (loop2): 1 truncate cleaned up [ 344.131990][T11088] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 344.423965][ T5786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 344.961308][T11123] loop0: detected capacity change from 0 to 512 [ 345.601554][T11148] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 345.645202][T11148] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 346.206782][ T5812] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 346.310958][T11152] loop3: detected capacity change from 0 to 32768 [ 346.351999][T11152] XFS (loop3): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 346.416151][ T5812] usb 3-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 346.469159][ T5812] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.515621][ T5812] usb 3-1: Product: syz [ 346.520748][T11152] XFS (loop3): Ending clean mount [ 346.527540][ T5812] usb 3-1: Manufacturer: syz [ 346.544775][ T5812] usb 3-1: SerialNumber: syz [ 346.584102][ T5812] usb 3-1: config 0 descriptor?? [ 346.603525][ T5812] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 346.746628][ T6053] XFS (loop3): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 347.468615][ T5812] gspca_sunplus: reg_w_riv err -71 [ 347.481790][ T5812] sunplus: probe of 3-1:0.0 failed with error -71 [ 347.497594][ T5812] usb 3-1: USB disconnect, device number 20 [ 347.660897][T11182] loop0: detected capacity change from 0 to 32768 [ 347.709303][T11182] read_mapping_page failed! [ 347.714490][T11182] ERROR: (device loop0): txCommit: [ 347.714490][T11182] [ 347.772590][T11197] tmpfs: Bad value for 'nr_inodes' [ 347.976287][T11199] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 348.496532][T11195] loop3: detected capacity change from 0 to 32768 [ 348.568830][T11195] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 348.827694][T11214] loop0: detected capacity change from 0 to 512 [ 348.872569][T11214] EXT4-fs error (device loop0): ext4_validate_block_bitmap:430: comm syz.0.1973: bg 0: block 5: invalid block bitmap [ 348.945706][T11214] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 348.988894][ T6053] ocfs2: Unmounting device (7,3) on (node local) [ 349.006234][T11214] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.1973: invalid indirect mapped block 64000 (level 1) [ 349.075384][T11214] EXT4-fs (loop0): 1 orphan inode deleted [ 349.081200][T11214] EXT4-fs (loop0): 1 truncate cleaned up [ 349.119997][T11218] loop2: detected capacity change from 0 to 512 [ 349.127616][T11214] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 349.155851][T11218] EXT4-fs: inline encryption not supported [ 349.193692][T11218] EXT4-fs error (device loop2): ext4_orphan_get:1430: comm syz.2.1975: bad orphan inode 15 [ 349.201652][T11214] EXT4-fs warning (device loop0): ext4_empty_dir:3147: inode #2: comm syz.0.1973: directory missing '.' [ 349.267716][T11218] ext4_test_bit(bit=14, block=5) = 0 [ 349.274436][T11218] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 349.388455][ T5786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 349.443903][ T5781] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 349.964804][ T9] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 350.186299][ T9] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 350.210963][ T9] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 350.226093][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 350.244708][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 350.256218][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 350.276635][ T9] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 350.286183][ T9] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 350.304990][ T9] usb 3-1: Product: syz [ 350.309244][ T9] usb 3-1: Manufacturer: syz [ 350.336630][ T9] cdc_wdm 3-1:1.0: skipping garbage [ 350.341919][ T9] cdc_wdm 3-1:1.0: skipping garbage [ 350.364292][ T9] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 350.371140][ T9] cdc_wdm 3-1:1.0: Unknown control protocol [ 350.628037][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 350.635160][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 350.641827][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 350.648563][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 350.664697][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 350.671455][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 350.678166][ T5776] usb 3-1: USB disconnect, device number 21 [ 350.684786][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 350.691428][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 350.697538][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 351.095996][T11260] MTRR 1 not used [ 351.272309][T11264] netem: change failed [ 351.304885][T11266] block2mtd: error: cannot open device #! [ 351.304885][T11266] A;rB~ox+þ? `'3¦|¿Ò¦ÖÙŸÔȨ*£]òô!öŽÈ%.'¤ÁÜo [ 352.052835][T11288] loop0: detected capacity change from 0 to 256 [ 352.105929][T11288] FAT-fs (loop0): Unrecognized mount option "uid=0x000000000000ee00ÿÿ" or missing value [ 352.195646][T11288] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2008'. [ 352.234811][T11288] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2008'. [ 352.472549][T11278] loop2: detected capacity change from 0 to 32768 [ 352.539066][T11278] JBD2: Ignoring recovery information on journal [ 352.677571][T11278] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 352.805145][T11278] (syz.2.2003,11278,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #4097: rec_len % 4 != 0 - offset=0, inode=18446673704965378049, rec_len=255, name_len=1 [ 352.839289][T11278] (syz.2.2003,11278,1):ocfs2_prepare_dir_for_insert:4312 ERROR: status = -2 [ 352.851526][T11278] (syz.2.2003,11278,1):ocfs2_mknod:298 ERROR: status = -2 [ 352.886292][T11278] (syz.2.2003,11278,1):ocfs2_mknod:502 ERROR: status = -2 [ 352.913970][T11278] (syz.2.2003,11278,1):ocfs2_create:676 ERROR: status = -2 [ 353.088045][ T5786] ocfs2: Unmounting device (7,2) on (node local) [ 353.493828][T11297] loop3: detected capacity change from 0 to 32768 [ 353.556240][T11297] XFS (loop3): DAX unsupported by block device. Turning off DAX. [ 353.572636][T11297] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 353.770440][T11297] XFS (loop3): Ending clean mount [ 353.788644][T11284] loop1: detected capacity change from 0 to 40427 [ 353.801268][T11297] XFS (loop3): Quotacheck needed: Please wait. [ 353.824331][T11284] F2FS-fs (loop1): build fault injection attr: rate: 684, type: 0x7ffff [ 353.848763][T11284] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x35f7 [ 353.871381][T11284] F2FS-fs (loop1): Image doesn't support compression [ 353.915963][T11284] F2FS-fs (loop1): invalid crc value [ 353.918320][T11320] loop0: detected capacity change from 0 to 1024 [ 353.922083][T11297] XFS (loop3): Quotacheck: Done. [ 353.942092][T11320] EXT4-fs: Ignoring removed orlov option [ 353.956170][T11320] EXT4-fs: Ignoring removed oldalloc option [ 353.966632][T11284] F2FS-fs (loop1): Found nat_bits in checkpoint [ 353.992838][T11320] EXT4-fs: Ignoring removed orlov option [ 354.128568][T11320] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c018, mo2=0002] [ 354.183649][T11320] System zones: 0-1, 3-12 [ 354.193332][T11284] F2FS-fs (loop1): Start checkpoint disabled! [ 354.223829][T11320] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 354.277389][T11284] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 354.314098][ T6053] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 354.397058][T11320] EXT4-fs error (device loop0): __ext4_new_inode:1290: comm syz.0.2018: failed to insert inode 12: doubly allocated? [ 354.530469][ T5781] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 354.543163][ T34] kworker/u4:2: attempt to access beyond end of device [ 354.543163][ T34] loop1: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 354.565046][ T34] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 354.596153][ T34] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 354.603117][ T34] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 356.223026][T11371] overlayfs: statfs failed on './file0' [ 356.617003][T11382] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2043'. [ 356.656730][T11380] loop1: detected capacity change from 0 to 4096 [ 356.683957][T11380] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 357.384010][T11384] loop1: detected capacity change from 0 to 4096 [ 357.398094][T11377] loop3: detected capacity change from 0 to 32768 [ 357.478527][T11377] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 357.661229][T11377] XFS (loop3): Ending clean mount [ 357.854814][T11377] XFS (loop3): EXPERIMENTAL online scrub feature in use. Use at your own risk! [ 357.999563][ T6053] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 358.331854][T11402] loop2: detected capacity change from 0 to 1024 [ 358.489019][T11402] syz.2.2051: attempt to access beyond end of device [ 358.489019][T11402] loop2: rw=0, sector=393222, nr_sectors = 2 limit=1024 [ 358.533255][T11402] syz.2.2051: attempt to access beyond end of device [ 358.533255][T11402] loop2: rw=2049, sector=5778, nr_sectors = 2 limit=1024 [ 358.576560][T11402] Buffer I/O error on dev loop2, logical block 2889, lost async page write [ 358.595098][T11402] syz.2.2051: attempt to access beyond end of device [ 358.595098][T11402] loop2: rw=2049, sector=393216, nr_sectors = 2 limit=1024 [ 358.598706][T11406] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 358.616416][T11406] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 358.629566][T11402] Buffer I/O error on dev loop2, logical block 196608, lost async page write [ 358.663553][T11402] syz.2.2051: attempt to access beyond end of device [ 358.663553][T11402] loop2: rw=2049, sector=393218, nr_sectors = 2 limit=1024 [ 358.694770][T11402] Buffer I/O error on dev loop2, logical block 196609, lost async page write [ 358.723842][T11396] loop0: detected capacity change from 0 to 40427 [ 358.724767][T11402] syz.2.2051: attempt to access beyond end of device [ 358.724767][T11402] loop2: rw=2049, sector=393220, nr_sectors = 2 limit=1024 [ 358.736726][T11396] F2FS-fs (loop0): build fault injection attr: rate: 14, type: 0x7ffff [ 358.767027][T11402] Buffer I/O error on dev loop2, logical block 196610, lost async page write [ 358.789617][T11396] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0xe4 [ 358.834351][T11411] program syz.1.2054 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 358.843835][T11407] syz.2.2051: attempt to access beyond end of device [ 358.843835][T11407] loop2: rw=2049, sector=5778, nr_sectors = 2 limit=1024 [ 358.860720][T11396] F2FS-fs (loop0): invalid crc value [ 358.873380][T11407] Buffer I/O error on dev loop2, logical block 2889, lost async page write [ 358.893995][T11396] F2FS-fs (loop0): Found nat_bits in checkpoint [ 359.001226][T11396] F2FS-fs (loop0): inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x665/0x970 [ 359.124785][T11396] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 359.201728][T11420] loop2: detected capacity change from 0 to 128 [ 359.261150][T11396] F2FS-fs (loop0): inject alloc nid in f2fs_alloc_nid of f2fs_get_dnode_of_data+0x885/0x1a80 [ 359.396989][ T5781] syz-executor: attempt to access beyond end of device [ 359.396989][ T5781] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 359.439594][T11424] loop1: detected capacity change from 0 to 128 [ 359.451210][ T5781] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 359.792636][T11430] loop2: detected capacity change from 0 to 2048 [ 359.897622][T11413] loop3: detected capacity change from 0 to 32768 [ 359.900587][T11430] loop2: p1 p2 p3 [ 359.900587][T11430] p1: [ 359.959164][T11430] loop2: p2 size 458752 extends beyond EOD, truncated [ 359.973264][T11430] loop2: p3 start 65280 is beyond EOD, truncated [ 359.991442][T11413] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 360.206742][T11413] XFS (loop3): Ending clean mount [ 360.418148][ T6053] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 360.770144][ T7698] udevd[7698]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 360.796276][T10174] udevd[10174]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 360.965145][T11455] loop0: detected capacity change from 0 to 8 [ 361.227195][ T5781] SQUASHFS error: Unable to read directory block [631:72] [ 361.242014][ T5781] SQUASHFS error: Unable to read inode 0x0 [ 361.253083][ T5781] SQUASHFS error: Unable to read inode 0x0 [ 362.399208][T11474] loop1: detected capacity change from 0 to 32768 [ 362.501478][T11474] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 362.607603][T11474] XFS (loop1): Ending clean mount [ 362.630847][T11474] XFS (loop1): Quotacheck needed: Please wait. [ 362.798586][T11474] XFS (loop1): Quotacheck: Done. [ 362.962698][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 362.970778][ T5771] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 362.980016][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 362.990137][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 363.001302][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 363.030868][ T51] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 363.038758][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 363.050954][T11479] loop3: detected capacity change from 0 to 40427 [ 363.201040][T11479] F2FS-fs (loop3): invalid crc value [ 363.299173][T11479] F2FS-fs (loop3): Found nat_bits in checkpoint [ 363.497907][T11479] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 363.859090][T11494] chnl_net:caif_netlink_parms(): no params data found [ 363.904763][ T5837] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 363.976998][ T6053] syz-executor: attempt to access beyond end of device [ 363.976998][ T6053] loop3: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 363.997573][ T6053] syz-executor: attempt to access beyond end of device [ 363.997573][ T6053] loop3: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 364.086671][T11494] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.094109][T11494] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.108799][T11494] bridge_slave_0: entered allmulticast mode [ 364.126582][T11494] bridge_slave_0: entered promiscuous mode [ 364.152059][T11494] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.165725][ T5837] usb 2-1: unable to get BOS descriptor or descriptor too short [ 364.172574][T11494] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.181820][ T2921] kworker/u4:7: attempt to access beyond end of device [ 364.181820][ T2921] loop3: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 364.194926][T11494] bridge_slave_1: entered allmulticast mode [ 364.196523][ T5837] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 364.205333][T11494] bridge_slave_1: entered promiscuous mode [ 364.212017][ T2921] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 364.225854][ T5837] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 364.235248][ T2921] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 364.244758][ T5837] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 364.255438][ T5837] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.268403][ T5837] usb 2-1: Product: syz [ 364.272817][ T5837] usb 2-1: Manufacturer: syz [ 364.299464][ T5837] usb 2-1: SerialNumber: syz [ 364.321347][T11494] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 364.373075][ T5837] usb 2-1: selecting invalid altsetting 1 [ 364.382655][ T5837] usb 2-1: unit 6 not found! [ 364.491747][T11494] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 364.558744][T11494] team0: Port device team_slave_0 added [ 364.568804][T11494] team0: Port device team_slave_1 added [ 364.602954][T11494] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 364.610843][T11494] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 364.653183][T11494] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 364.705835][T11494] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 364.723180][T11494] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 364.774685][T11494] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 364.971465][ T5837] usb 2-1: 2:0: failed to get current value for ch 0 (-71) [ 364.973979][ T49] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.061661][ T5837] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 365.115167][ T5837] usb 2-1: USB disconnect, device number 19 [ 365.165200][T10128] udevd[10128]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 365.201189][ T51] Bluetooth: hci2: command tx timeout [ 365.278671][ T49] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.397457][T11494] hsr_slave_0: entered promiscuous mode [ 365.410319][T11494] hsr_slave_1: entered promiscuous mode [ 365.420621][T11494] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 365.435990][T11494] Cannot create hsr debugfs directory [ 365.468594][ T49] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.581865][ T49] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.149341][T11494] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 366.206823][T11494] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 366.258465][T11494] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 366.457510][T11494] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 366.530693][ T5784] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 366.559087][ T5784] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 366.573107][ T5784] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 366.582813][ T5784] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 366.595167][ T5784] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 366.605840][ T5784] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 367.281375][ T5784] Bluetooth: hci2: command tx timeout [ 367.661157][T11494] 8021q: adding VLAN 0 to HW filter on device bond0 [ 367.677900][T11569] loop1: detected capacity change from 0 to 32768 [ 367.694345][T11569] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 scanned by syz.1.2113 (11569) [ 367.735775][T11569] BTRFS info (device loop1): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 367.764902][T11569] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 367.783990][T11569] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 367.793784][T11569] BTRFS info (device loop1): use lzo compression, level 0 [ 367.805100][T11569] BTRFS info (device loop1): force clearing of disk cache [ 367.813577][T11569] BTRFS warning (device loop1): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 367.831836][T11569] BTRFS info (device loop1): trying to use backup root at mount time [ 367.847563][T11494] 8021q: adding VLAN 0 to HW filter on device team0 [ 367.871954][T11569] BTRFS info (device loop1): using free space tree [ 367.891547][T11553] chnl_net:caif_netlink_parms(): no params data found [ 368.037104][ T2921] bridge0: port 1(bridge_slave_0) entered blocking state [ 368.044362][ T2921] bridge0: port 1(bridge_slave_0) entered forwarding state [ 368.107191][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 368.114464][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 368.154858][T11569] BTRFS info (device loop1): enabling ssd optimizations [ 368.164854][T11569] BTRFS info (device loop1): auto enabling async discard [ 368.222891][T11569] BTRFS info (device loop1): rebuilding free space tree [ 368.566760][ T5771] BTRFS info (device loop1): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 368.616629][ T49] hsr_slave_0: left promiscuous mode [ 368.647121][ T49] hsr_slave_1: left promiscuous mode [ 368.666309][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 368.694667][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 368.708780][ T5784] Bluetooth: hci1: command tx timeout [ 368.721834][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 368.750145][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 368.758699][ T49] bridge_slave_1: left allmulticast mode [ 368.764446][ T49] bridge_slave_1: left promiscuous mode [ 368.774841][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.792920][ T49] bridge_slave_0: left allmulticast mode [ 368.804762][ T49] bridge_slave_0: left promiscuous mode [ 368.810658][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.942066][ T49] veth1_macvtap: left promiscuous mode [ 368.948714][ T49] veth0_macvtap: left promiscuous mode [ 368.955161][ T49] veth1_vlan: left promiscuous mode [ 368.960728][ T49] veth0_vlan: left promiscuous mode [ 369.067203][T11626] loop1: detected capacity change from 0 to 64 [ 369.298876][T11628] loop1: detected capacity change from 0 to 512 [ 369.346129][ T5784] Bluetooth: hci2: command tx timeout [ 369.458165][T11628] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 369.481180][T11628] ext4 filesystem being mounted at /591/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 369.838734][ T5771] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 370.673816][ T49] team0 (unregistering): Port device team_slave_1 removed [ 370.747485][ T49] team0 (unregistering): Port device team_slave_0 removed [ 370.795009][ T5784] Bluetooth: hci1: command tx timeout [ 370.807974][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 370.872338][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 371.373725][ T49] bond0 (unregistering): Released all slaves [ 371.434779][ T5784] Bluetooth: hci2: command tx timeout [ 371.575885][T11553] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.583261][T11553] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.600683][T11553] bridge_slave_0: entered allmulticast mode [ 371.615878][T11553] bridge_slave_0: entered promiscuous mode [ 371.692998][T11553] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.729629][T11553] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.741952][T11553] bridge_slave_1: entered allmulticast mode [ 371.748686][T11661] vicodec vicodec.0: Removing vicodec [ 371.760779][T11553] bridge_slave_1: entered promiscuous mode [ 371.963274][T11553] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 372.000992][T11553] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 372.163566][T11553] team0: Port device team_slave_0 added [ 372.198162][T11553] team0: Port device team_slave_1 added [ 372.283432][T11553] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 372.311269][T11553] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 372.363143][T11553] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 372.388831][T11553] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 372.405980][T11553] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 372.460439][T11553] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 372.630091][T11553] hsr_slave_0: entered promiscuous mode [ 372.662667][T11553] hsr_slave_1: entered promiscuous mode [ 372.670272][T11553] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 372.684474][T11553] Cannot create hsr debugfs directory [ 372.759169][T11494] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 372.874651][ T5784] Bluetooth: hci1: command tx timeout [ 372.918659][ T28] audit: type=1326 audit(1786106159.683:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11685 comm="syz.1.2141" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ac999e0d9 code=0x7ffc0000 [ 373.036687][ T28] audit: type=1326 audit(1786106159.683:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11685 comm="syz.1.2141" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f7ac999e0d9 code=0x7ffc0000 [ 373.087854][ T28] audit: type=1326 audit(1786106159.683:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11685 comm="syz.1.2141" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ac999e0d9 code=0x7ffc0000 [ 373.163559][ T28] audit: type=1326 audit(1786106159.683:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11685 comm="syz.1.2141" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ac999e0d9 code=0x7ffc0000 [ 373.262197][ T28] audit: type=1326 audit(1786106159.683:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11685 comm="syz.1.2141" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7f7ac999e0d9 code=0x7ffc0000 [ 373.354657][ T28] audit: type=1326 audit(1786106159.683:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11685 comm="syz.1.2141" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ac999e0d9 code=0x7ffc0000 [ 373.435494][ T28] audit: type=1326 audit(1786106159.683:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11685 comm="syz.1.2141" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ac999e0d9 code=0x7ffc0000 [ 373.474467][T11553] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 373.510143][T11553] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 373.588968][T11553] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 373.652745][T11699] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2143'. [ 373.675140][T11699] netlink: 'syz.2.2143': attribute type 21 has an invalid length. [ 373.698547][T11553] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 373.968013][T11494] veth0_vlan: entered promiscuous mode [ 374.027754][T11494] veth1_vlan: entered promiscuous mode [ 374.071222][T11553] 8021q: adding VLAN 0 to HW filter on device bond0 [ 374.101240][T11691] loop1: detected capacity change from 0 to 32768 [ 374.135181][T11691] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop1 scanned by syz.1.2142 (11691) [ 374.180395][T11691] BTRFS info (device loop1): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 374.203243][T11494] veth0_macvtap: entered promiscuous mode [ 374.210754][T11691] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 374.249381][T11553] 8021q: adding VLAN 0 to HW filter on device team0 [ 374.262826][T11691] BTRFS info (device loop1): setting nodatacow, compression disabled [ 374.279728][T11691] BTRFS info (device loop1): turning on flush-on-commit [ 374.288957][T11494] veth1_macvtap: entered promiscuous mode [ 374.314907][T11691] BTRFS info (device loop1): using free space tree [ 374.344087][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.351384][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 374.420328][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.427587][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 374.452564][T11691] BTRFS info (device loop1): enabling ssd optimizations [ 374.475380][T11691] BTRFS info (device loop1): auto enabling async discard [ 374.584827][T11494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 374.612705][T11494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.641257][T11494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 374.666001][T11494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.694243][T11494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 374.731903][T11494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.765485][T11494] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 374.805452][T11494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 374.824653][T11494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.837653][T11494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 374.842329][ T5771] BTRFS info (device loop1): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 374.848798][T11494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.870051][T11494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 374.881105][T11494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 374.898743][T11494] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 374.949741][T11494] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.959185][ T5784] Bluetooth: hci1: command tx timeout [ 374.974099][T11494] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.983535][T11494] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.012282][T11494] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.257135][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 375.301251][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 375.340200][ T2921] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 375.365572][ T2921] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 375.827198][T11747] loop1: detected capacity change from 0 to 4096 [ 375.876691][T11747] ntfs: (device loop1): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 375.889358][T11553] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 375.895364][T11747] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 375.929717][T11747] ntfs: (device loop1): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 375.986747][T11747] ntfs: volume version 3.1. [ 376.567521][T11764] loop4: detected capacity change from 0 to 4096 [ 376.671315][T11775] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 376.910514][T11553] veth0_vlan: entered promiscuous mode [ 376.981974][T11553] veth1_vlan: entered promiscuous mode [ 377.157584][T11553] veth0_macvtap: entered promiscuous mode [ 377.209233][T11553] veth1_macvtap: entered promiscuous mode [ 377.328651][T11553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 377.364633][T11553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.404992][T11553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 377.440162][T11553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.461241][T11796] loop4: detected capacity change from 0 to 256 [ 377.470615][T11553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 377.510567][T11553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.551433][T11553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 377.586347][T11553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.626591][T11553] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 377.720759][T11553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 377.769099][T11553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.792845][T11553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 377.812074][T11553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.822905][T11553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 377.834062][T11553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.844130][T11553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 377.855034][T11553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.866896][T11553] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 377.903741][T11553] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.943429][T11553] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.962746][T11553] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.997579][T11553] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.260863][ T3481] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 378.305209][ T3481] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 378.420807][ T3481] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 378.441942][T11819] netlink: 508 bytes leftover after parsing attributes in process `syz.4.2171'. [ 378.455947][ T3481] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 378.960711][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.970299][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.146682][ T9] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 379.347896][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 379.394418][ T9] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 379.408285][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.447314][ T9] usb 2-1: config 0 descriptor?? [ 379.710774][T11865] Cannot find add_set index 4 as target [ 379.723679][ T9] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 379.768093][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 379.789296][ T9] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 379.814352][ T9] usb 2-1: media controller created [ 379.865167][ T5813] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 379.902536][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 379.975247][ T9] az6027: usb out operation failed. (-71) [ 380.007221][ T9] az6027: usb out operation failed. (-71) [ 380.014212][ T9] stb0899_attach: Driver disabled by Kconfig [ 380.031781][ T9] az6027: no front-end attached [ 380.031781][ T9] [ 380.072059][ T9] az6027: usb out operation failed. (-71) [ 380.079177][ T9] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 380.105223][ T5813] usb 6-1: Using ep0 maxpacket: 8 [ 380.134813][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input20 [ 380.154718][ T5813] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 380.174743][ T5813] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 380.196226][ T9] dvb-usb: schedule remote query interval to 400 msecs. [ 380.203257][ T9] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 380.215987][ T5813] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 380.254980][ T5813] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 380.265810][ T9] usb 2-1: USB disconnect, device number 20 [ 380.289258][ T5813] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 380.322202][ T5813] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 380.381482][ T5813] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.436252][ T9] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 380.654885][ T5813] usb 6-1: GET_CAPABILITIES returned 0 [ 380.677863][ T5813] usbtmc 6-1:16.0: can't read capabilities [ 380.900287][ T5813] usb 6-1: USB disconnect, device number 2 [ 381.591285][T11904] loop1: detected capacity change from 0 to 2048 [ 381.659489][T11889] loop4: detected capacity change from 0 to 40427 [ 381.701514][T11889] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 381.734821][T11889] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 381.744784][T11904] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 381.765673][T11889] F2FS-fs (loop4): invalid crc value [ 381.873724][T11904] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 381.953189][T11904] EXT4-fs (loop1): Remounting filesystem read-only [ 382.127227][ T5771] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.136631][T11889] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 382.143742][T11889] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 382.507646][T11494] syz-executor: attempt to access beyond end of device [ 382.507646][T11494] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 382.584330][T11494] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 382.819913][T11947] 9pnet_fd: Insufficient options for proto=fd [ 383.114830][ T9] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 383.347024][ T9] usb 6-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 383.375718][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.384160][ T9] usb 6-1: Product: syz [ 383.407912][ T9] usb 6-1: Manufacturer: syz [ 383.414840][ T9] usb 6-1: SerialNumber: syz [ 383.422945][ T9] usb 6-1: config 0 descriptor?? [ 383.433065][ T9] ch341 6-1:0.0: ch341-uart converter detected [ 383.459015][T11934] loop1: detected capacity change from 0 to 32768 [ 383.919304][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 383.919352][ T28] audit: type=1326 audit(1786106170.683:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11969 comm="syz.2.2214" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd75399e0d9 code=0x7ffc0000 [ 384.020598][ T28] audit: type=1326 audit(1786106170.683:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11969 comm="syz.2.2214" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd75399e0d9 code=0x7ffc0000 [ 384.088197][ T28] audit: type=1326 audit(1786106170.713:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11969 comm="syz.2.2214" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd75399e0d9 code=0x7ffc0000 [ 384.120748][ T28] audit: type=1326 audit(1786106170.713:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11969 comm="syz.2.2214" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd75399e0d9 code=0x7ffc0000 [ 384.184690][ T28] audit: type=1326 audit(1786106170.723:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11969 comm="syz.2.2214" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fd75399e0d9 code=0x7ffc0000 [ 384.258088][ T9] usb 6-1: failed to send control message: -71 [ 384.264382][ T9] ch341-uart: probe of ttyUSB0 failed with error -71 [ 384.269801][ T28] audit: type=1326 audit(1786106170.723:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11969 comm="syz.2.2214" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd75399e0d9 code=0x7ffc0000 [ 384.303192][ T9] usb 6-1: USB disconnect, device number 3 [ 384.334165][ T28] audit: type=1326 audit(1786106170.723:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11969 comm="syz.2.2214" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd75399e0d9 code=0x7ffc0000 [ 384.345783][ T9] ch341 6-1:0.0: device disconnected [ 384.415051][ T28] audit: type=1326 audit(1786106170.723:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11969 comm="syz.2.2214" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd75399e0d9 code=0x7ffc0000 [ 384.463799][ T28] audit: type=1326 audit(1786106170.723:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11969 comm="syz.2.2214" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd75399e0d9 code=0x7ffc0000 [ 384.494997][ T28] audit: type=1326 audit(1786106170.723:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11969 comm="syz.2.2214" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd75399e0d9 code=0x7ffc0000 [ 385.909017][T12020] jffs2: notice: (12020) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 385.956569][T12007] loop1: detected capacity change from 0 to 40427 [ 386.004262][T12007] F2FS-fs (loop1): Found nat_bits in checkpoint [ 386.186408][T12007] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 386.295107][T12007] F2FS-fs (loop1): Stopped filesystem due to reason: 0 [ 386.435918][T12031] netlink: 'syz.4.2236': attribute type 11 has an invalid length. [ 386.454786][T12031] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2236'. [ 386.636738][T12036] loop4: detected capacity change from 0 to 128 [ 386.718572][T12036] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 386.745191][T12036] ext4 filesystem being mounted at /20/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 386.962418][T11494] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 387.312268][T12016] loop5: detected capacity change from 0 to 65536 [ 387.334186][T12050] loop1: detected capacity change from 0 to 512 [ 387.346314][T12050] EXT4-fs: Ignoring removed oldalloc option [ 387.387840][T12054] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2245'. [ 387.420969][T12050] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.2244: invalid indirect mapped block 4294967295 (level 1) [ 387.443776][T12016] XFS (loop5): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 387.449152][T12050] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.2244: invalid indirect mapped block 4294967295 (level 1) [ 387.470325][T12050] EXT4-fs (loop1): 2 truncates cleaned up [ 387.477689][T12050] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 387.658821][ T5771] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 387.667348][T12016] XFS (loop5): Ending clean mount [ 387.676044][T12065] loop4: detected capacity change from 0 to 512 [ 387.998147][T11553] XFS (loop5): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 389.444956][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 389.646865][ T9] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 389.661790][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.682037][ T9] usb 5-1: config 0 descriptor?? [ 389.695326][ T9] cp210x 5-1:0.0: cp210x converter detected [ 390.073210][T12134] dummy0: entered promiscuous mode [ 390.086598][T12134] gretap0: entered promiscuous mode [ 390.101063][T12134] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 390.109113][ T9] cp210x 5-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 390.119971][T12134] Cannot create hsr debugfs directory [ 390.131684][ T9] usb 5-1: cp210x converter now attached to ttyUSB0 [ 390.149882][T12134] hsr1: entered allmulticast mode [ 390.161503][T12134] dummy0: entered allmulticast mode [ 390.169580][T12134] gretap0: entered allmulticast mode [ 390.329329][ T9] usb 5-1: USB disconnect, device number 2 [ 390.385401][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 390.473387][ T9] cp210x 5-1:0.0: device disconnected [ 390.609392][T12152] netlink: 209832 bytes leftover after parsing attributes in process `syz.2.2282'. [ 390.623734][T12154] netlink: 'syz.5.2281': attribute type 8 has an invalid length. [ 390.730086][T12157] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2292'. [ 390.739533][T12157] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2292'. [ 391.244798][ T5815] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 391.454965][ T5815] usb 5-1: Using ep0 maxpacket: 16 [ 391.466496][ T5815] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 391.477146][ T5815] usb 5-1: config 0 has no interface number 0 [ 391.486350][ T5815] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 391.503410][ T5815] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 391.516884][ T5815] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 391.526420][ T5815] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 391.537118][ T5815] usb 5-1: Product: syz [ 391.554707][ T5815] usb 5-1: SerialNumber: syz [ 391.573032][ T5815] usb 5-1: config 0 descriptor?? [ 391.585998][ T5815] cm109 5-1:0.8: invalid payload size 0, expected 4 [ 391.601877][ T5815] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input21 [ 391.965602][ T789] ================================================================== [ 391.965618][ T789] BUG: KASAN: vmalloc-out-of-bounds in drm_fbdev_generic_helper_fb_dirty+0x57e/0xab0 [ 391.965757][ T789] Write of size 32 at addr ffffc900040128a0 by task kworker/1:2/789 [ 391.965775][ T789] [ 391.965806][ T789] CPU: 1 PID: 789 Comm: kworker/1:2 Not tainted syzkaller #0 [ 391.965825][ T789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 391.965837][ T789] Workqueue: events drm_fb_helper_damage_work [ 391.965863][ T789] Call Trace: [ 391.965871][ T789] [ 391.965880][ T789] dump_stack_lvl+0x18c/0x250 [ 391.965906][ T789] ? drm_fbdev_generic_helper_fb_dirty+0x57e/0xab0 [ 391.965932][ T789] ? show_regs_print_info+0x20/0x20 [ 391.965952][ T789] ? load_image+0x420/0x420 [ 391.965986][ T789] print_report+0xa8/0x210 [ 391.966005][ T789] ? drm_fbdev_generic_helper_fb_dirty+0x57e/0xab0 [ 391.966037][ T789] kasan_report+0x117/0x150 [ 391.966072][ T789] ? drm_fbdev_generic_helper_fb_dirty+0x57e/0xab0 [ 391.966104][ T789] kasan_check_range+0x241/0x290 [ 391.966125][ T789] ? drm_fbdev_generic_helper_fb_dirty+0x57e/0xab0 [ 391.966149][ T789] __asan_memcpy+0x40/0x70 [ 391.966175][ T789] drm_fbdev_generic_helper_fb_dirty+0x57e/0xab0 [ 391.966205][ T789] ? drm_fbdev_generic_helper_fb_probe+0x510/0x510 [ 391.966233][ T789] drm_fb_helper_damage_work+0x22f/0x6f0 [ 391.966259][ T789] ? __lock_acquire+0x7d80/0x7d80 [ 391.966285][ T789] ? drm_fb_helper_resume_worker+0x50/0x50 [ 391.966309][ T789] ? _raw_spin_unlock_irq+0x23/0x50 [ 391.966374][ T789] ? process_scheduled_works+0x975/0x1600 [ 391.966416][ T789] ? process_scheduled_works+0x975/0x1600 [ 391.966439][ T789] process_scheduled_works+0xa60/0x1600 [ 391.966474][ T789] ? worker_attach_to_pool+0x370/0x370 [ 391.966499][ T789] ? assign_work+0x3cc/0x5d0 [ 391.966524][ T789] worker_thread+0xa5e/0xfe0 [ 391.966559][ T789] kthread+0x2fa/0x390 [ 391.966578][ T789] ? pr_cont_work+0x550/0x550 [ 391.966601][ T789] ? kthread_blkcg+0xd0/0xd0 [ 391.966620][ T789] ret_from_fork+0x48/0x80 [ 391.966652][ T789] ? kthread_blkcg+0xd0/0xd0 [ 391.966672][ T789] ret_from_fork_asm+0x11/0x20 [ 391.966715][ T789] [ 391.966723][ T789] [ 391.966727][ T789] The buggy address belongs to a vmalloc virtual mapping [ 391.966743][ T789] Memory state around the buggy address: [ 391.966753][ T789] ffffc90004012780: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 391.966765][ T789] ffffc90004012800: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 391.966774][ T789] >ffffc90004012880: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 391.966782][ T789] ^ [ 391.966790][ T789] ffffc90004012900: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 391.966800][ T789] ffffc90004012980: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 391.966809][ T789] ================================================================== [ 391.976057][ T789] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 391.976072][ T789] CPU: 1 PID: 789 Comm: kworker/1:2 Not tainted syzkaller #0 [ 391.976091][ T789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 391.976103][ T789] Workqueue: events drm_fb_helper_damage_work [ 391.976132][ T789] Call Trace: [ 391.976140][ T789] [ 391.976147][ T789] dump_stack_lvl+0x18c/0x250 [ 391.976170][ T789] ? show_regs_print_info+0x20/0x20 [ 391.976189][ T789] ? load_image+0x420/0x420 [ 391.976219][ T789] panic+0x2ca/0x720 [ 391.976246][ T789] ? bpf_jit_dump+0xd0/0xd0 [ 391.976272][ T789] ? _raw_spin_unlock_irqrestore+0x111/0x120 [ 391.976300][ T789] ? _raw_spin_unlock+0x40/0x40 [ 391.976325][ T789] ? print_memory_metadata+0x314/0x400 [ 391.976344][ T789] ? drm_fbdev_generic_helper_fb_dirty+0x57e/0xab0 [ 391.976366][ T789] check_panic_on_warn+0x84/0xa0 [ 391.976390][ T789] ? drm_fbdev_generic_helper_fb_dirty+0x57e/0xab0 [ 391.976412][ T789] end_report+0x6f/0x130 [ 391.976434][ T789] kasan_report+0x128/0x150 [ 391.976457][ T789] ? drm_fbdev_generic_helper_fb_dirty+0x57e/0xab0 [ 391.976482][ T789] kasan_check_range+0x241/0x290 [ 391.976504][ T789] ? drm_fbdev_generic_helper_fb_dirty+0x57e/0xab0 [ 391.976526][ T789] __asan_memcpy+0x40/0x70 [ 391.976552][ T789] drm_fbdev_generic_helper_fb_dirty+0x57e/0xab0 [ 391.976582][ T789] ? drm_fbdev_generic_helper_fb_probe+0x510/0x510 [ 391.976610][ T789] drm_fb_helper_damage_work+0x22f/0x6f0 [ 391.976632][ T789] ? __lock_acquire+0x7d80/0x7d80 [ 391.976655][ T789] ? drm_fb_helper_resume_worker+0x50/0x50 [ 391.976680][ T789] ? _raw_spin_unlock_irq+0x23/0x50 [ 391.976705][ T789] ? process_scheduled_works+0x975/0x1600 [ 391.976729][ T789] ? process_scheduled_works+0x975/0x1600 [ 391.976754][ T789] process_scheduled_works+0xa60/0x1600 [ 391.976787][ T789] ? worker_attach_to_pool+0x370/0x370 [ 391.976813][ T789] ? assign_work+0x3cc/0x5d0 [ 391.976839][ T789] worker_thread+0xa5e/0xfe0 [ 391.976873][ T789] kthread+0x2fa/0x390 [ 391.976891][ T789] ? pr_cont_work+0x550/0x550 [ 391.976912][ T789] ? kthread_blkcg+0xd0/0xd0 [ 391.976929][ T789] ret_from_fork+0x48/0x80 [ 391.976951][ T789] ? kthread_blkcg+0xd0/0xd0 [ 391.976969][ T789] ret_from_fork_asm+0x11/0x20 [ 391.977000][ T789] [ 391.977146][ T789] Kernel Offset: disabled