last executing test programs: 2m38.297663989s ago: executing program 1 (id=389): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f00000002c0)='./file1\x00', 0x2210094, &(0x7f0000000000)=ANY=[@ANYRES16=0x0, @ANYRESOCT, @ANYRES8=0x0], 0x1, 0x713, &(0x7f0000000a40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x18e) unlink(&(0x7f0000000080)='./file1\x00') close(r0) 2m37.983854657s ago: executing program 1 (id=391): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./debug\x00', &(0x7f0000000280)='debugfs\x00', 0x8, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/failslab/cache-filter\x00', 0x1, 0x0) write$binfmt_elf64(r0, 0x0, 0x178) 2m37.768621843s ago: executing program 1 (id=392): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) syz_io_uring_setup(0x6, &(0x7f0000000040)={0x0, 0x800389b, 0x4000, 0x1, 0x184}, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 2m37.296802705s ago: executing program 1 (id=393): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x810, &(0x7f0000000000)={[{@errors_remount}, {@grpquota}]}, 0x8, 0x4fe, &(0x7f0000000a40)="$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") syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f0000000140)) mount$overlay(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) removexattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=@known='system.posix_acl_default\x00') 2m36.147509505s ago: executing program 1 (id=396): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x2a0471a, &(0x7f0000000000)={[{@prjquota}]}, 0x82, 0x4a0, &(0x7f0000000240)="$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") bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d) 2m34.878481378s ago: executing program 1 (id=405): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="81bd2bbd7000fbdbdf251400000018000780080002"], 0x2c}, 0x1, 0x0, 0x0, 0x2004c8c5}, 0x80) 2m34.232364285s ago: executing program 32 (id=405): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="81bd2bbd7000fbdbdf251400000018000780080002"], 0x2c}, 0x1, 0x0, 0x0, 0x2004c8c5}, 0x80) 1m34.360372558s ago: executing program 3 (id=748): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x7, 0x9}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=@base={0xd, 0xb, 0x4, 0x801, 0x1, r0, 0x15b4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)=r0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000a80)={r2, &(0x7f00000001c0), &(0x7f0000000a00)=""/75}, 0x20) 1m34.093783894s ago: executing program 3 (id=751): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) sendmsg$IEEE802154_LLSEC_DEL_DEV(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2c, r2, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x4800) 1m33.834457281s ago: executing program 3 (id=753): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fcdbdf253b00000008000300", @ANYRES32=r2, @ANYBLOB="2e00330020180600080211000000080211000001ffffffffffff64000002080008021100000000060101010101010000080057"], 0x54}, 0x1, 0x0, 0x0, 0x4018010}, 0x804) 1m33.637302546s ago: executing program 3 (id=755): syz_mount_image$udf(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x14444, &(0x7f0000000280)=ANY=[@ANYBLOB="696f636861727365743d6b6f69382d72752c766f6c756d653d3030303030303030303030300000000063686f723d30303030303030303030303030303030303030342c6e6f6164696e6963622c6769643d69676e6f72652c7569643d6967ee6f7200006769643dc7865530221d5cf1ffa33f314577d414dd0f02989f344aa1daf1517b816480770a92f1eaeab3d78957fc83df545faf189820845d1a3ae48728ee6ed8684b4f3acff28b7d51848813c91e8e6278a3cfa72eec120ebbc7baaaf78c062300000000000000", @ANYRESDEC, @ANYRESDEC], 0xfe, 0xc17, &(0x7f0000001180)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x300f401, 0x0, 0x2, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 1m32.587275523s ago: executing program 3 (id=762): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file0\x00', 0x8c0, &(0x7f0000000080)=ANY=[@ANYBLOB='acl,heartbeat=none,dir_resv_level=00003,coherency=full,coherency=full,localflocks,coherency=full,noacl,\x00'/119], 0x5, 0x4467, &(0x7f0000004480)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='A\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000440)='A/B\x00', 0x42, 0x1b6) unlinkat(0xffffffffffffff9c, &(0x7f0000000400)='A\x00', 0x200) 1m29.056524646s ago: executing program 3 (id=771): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x777) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/filehandle\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='de', 0x2) 1m28.282992886s ago: executing program 33 (id=771): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x777) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/filehandle\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='de', 0x2) 26.110275228s ago: executing program 4 (id=1164): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/net/veth0/queues/tx-0/xps_cpus\x00', 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000280)=ANY=[@ANYRESHEX], 0x8) 25.685783859s ago: executing program 4 (id=1167): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fcffffff850000002d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000700850000002d"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) 25.334789748s ago: executing program 4 (id=1170): mkdir(&(0x7f0000000280)='./sys_mount\x00', 0x7c) mount(0x0, &(0x7f00000000c0)='./sys_mount\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys_mount/block/nullb0/queue/rotational\x00', 0x2, 0x0) write$sndseq(r0, &(0x7f0000000200)=[{0x0, 0x4, 0x6, 0x11, @tick=0x7, {0x2, 0xfe}, {0xe, 0x4}, @note={0x2, 0xf0, 0x62, 0x36, 0x7}}], 0x1c) 25.080975245s ago: executing program 4 (id=1174): syz_mount_image$udf(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x2000000, &(0x7f0000000a80)=ANY=[@ANYBLOB="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", @ANYRESHEX, @ANYRESHEX, @ANYRES8=0x0, @ANYRESDEC, @ANYRES16, @ANYRES16=0x0, @ANYRESOCT=0x0], 0xfe, 0xc17, &(0x7f0000001dc0)="$eJzs3UFsHNd9B+D/Gy1FSm4rJk5Uu42LTVukMmO5sqSYilW4q5pmG0CWiVDMLQBX5EpdmCIJkmpkI22ZXnroIUBR9JATgdYokKKB0RRBj2zrAsnFhyKnnogWNoKiB7YIkJPBYGbfikuKsmRTpEj7+2zqNzv73ux7b9YzsqA3LwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAiN97+dKZ59KjbgUAsJ+ujH/1zFn3fwD4RLnq//8BAAAAAAAAAAAAAOCgS1HE45Fi/sp6mqxedwxcbs/euj0xMrpztWOpqnmkKl/+DDx39tz5Lz0/fKGbH1z/YXsyXh2/eqn+0tzN+YXW4mJruj4x256am2498BF2W3+7oWoA6jdfuzV9/fpi/eyz57a8fXvwvf7HTg5eHH769FPdshMjo6PjPWVqfR/50+9yrxkeR6OI05Hime/9JDUjoojdj8V9vjt77VjViaGqExMjo1VHZtrN2aXyzbHuQBQR9Z5Kje4Y7cO52JVGxHLZ/LLBQ2X3xuebC81rM636WHNhqb3UnpsdS53Wlv2pRxEXUsRKRKz13324viiiFim+c2I9XYuII91x+GI1Mfje7Sj2sI8PoGxnvS9ipTgE5+wA648iXokUP327iKlyzPJPfCHilTJ/EPFmmS9GpPKLcT7i3R2+RxxOtSjiL8rzf3E9TVfXg+515fLX6l+ZvT7XU7Z7XTn094f9dMCvTQNRRLO64q+nj/6bHQAAAAAAAAAAAAAAAAAetmNRxJOR4uX/+KNqXnFU89JPXBz+/cFf7J0z/sR9jlOWfTYilosHm5N7NE8hHktjKT3iucSfZANRxB/n+X/fetSNAQAAAAAAAAAAAAAAAAAA+EQr4seR4oV3TqWV6F1TvD17o361eW2msypsd+3f7prpGxsbG/XUyUbOyZzLOVdyruZcyxlFrp+zkXMy53LOlZyrOddyxpFcP2cj52TO5ZwrOVdzruWMWq6fs5FzMudyzpWcqznXcsYBWbsXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODjpIgi3o8U3/7GeooUEY2Iyejkan+3DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwKPWnIr4fKep/0LizrxYRqfq341T5y/loHC3z09EYLvPFaFzK2ayy1vjWI2g/u9OXivhRpOgfeOvOCc/nv6/z6s7XIN785uarX6l18kj3zcH3+h87eeLi8OivPXGv7bRTA4Yut2dv3a5PjIyOjvfsruVP/3TPvsH8ucXD6ToRsfj6G681Z2ZaCzY+GRu1zkYtDkh79msjX6/ioLRn+0bjYDRjc+MRX5jYF+X9/91I8dvv/Gf3ht+9//9C59WdO3z87E827/8vbD/QHt3/H+/Z90L+3UhfLWJg6eZ838mIgcXX3zjdvtm80brRmj1/5syXh4e/fO5M39GIgevtmVbP1q6HCgAAAAAAAAAAAAAAAGB/pSJ+N1I0f7Se6hFxu5qvNXhx+OnTTx2JI9V8qy3ztl4dv3qp/tLczfmF1uJia7o+MduemptuPejHDVTTvSZGRvekM/d1bI/bf2zgpbn51xfaN/5wacf3jw9cura4tNCc2vntOBZFRKN3z1DV4ImR0arRM+3mbFV1bMfJdB9eXyrivyLF1Pl6+nzel+f/bZ/hv2X+//L2A+3R/L9P9ewrPzOlIn4WKX7rL5+Iz1ftPB53jVku97eRYujC53K5OFqW67ah81yBzszAsuz/RYp/fH9r2e58yMc3yz73wAN7SJTn/0Sk+P6ffzd+Pe/b+vyHnc//8e0H2qPz/5mefce3PK9g110nn//TkeLFx9+K38j7Puj5H0VsbGz8acSpXPjO8zn26Px/tmffYHQ+9zcfXvcBAAAAAAAAAAAOrb5UxN9FiqdGa+n5vO9B/v7f9PYD7dHf//rlnn3T+7Re0a4HFQAAAAAOiL5UxI8jxY2lt+7Mod46/7tn/ufvbK69PpK2vVv9Od8vVc8NeJh//tdrMH/u5O67DQAAAAAAAAAAAAAAAAAAAAdKSkU8n9dTn7zPeuqrkeLl/3kml0sny3LddeAHq18HrszNnr40MzM31VxqXptp1cfnm1Otsu5nIsX633wu1y2q9dW768131ngf2Oiuxb4QKUb/vlu2sxZ7d23yznrgnbXYy7KfihT//Q9by3bXsf7sZtmzZdm/jhRf/+edy57cLHuuLPvdSPHDr9e7ZY+XZbvPR+08k3SgFjOtZ6fmZu56FCoAAAAAAAAAAAAAAAAAAAB8WH2piD+LFP97cyWW87T/vP5/dwX+Wrfsm9/sWe9/m9vVOv+D1fr/99r+KOv/Dz60ngIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwOGRoog3IsX8lfW02l++7hi43J69dXtiZHTnasdSVfNIVb78GXju7LnzX3p++EI3P7j+w/ZkvDp+9VL9pbmb8wutxcXWdH1itj01N9164CPstv7m0HUMVQNQv/narenr1xfrZ589t+Xt24Pv9T92cvDi8NOnn+qWnRgZHR3vKVPr+xCf/qEat+loFPFXkeKZ7/0k/Ut/RBG7H4v7fHf22rGqE0NVJyZGRquOzLSbs0vlm2PdgSgi6j2VGt0x2odzsSuNiOWy+WWDh8rujc83F5rXZlr1sebCUnupPTc7ljqtLftTjyIupIiViFjrv/twfVHEa5HiOyfW07/2RxzpjsMXr4x/9czZe7ej2MM+PoCynfW+iJXiEJyzA6w/ivinSPHTt0/Fv/VH1KLzE1+IeKXMH0S8WeaLEan8YpyPeHeH7xGHUy2K+P/y/F9cT2/3l9eD7nXl8tfqX5m9PtdTtntdOfT3h/10wK9NA1HED6sr/nr6d/9dAwAAAAAAAAAAAAAAABwgRfxqpHjhnVOpmh98Z05xe/ZG/Wrz2kxnWl937l93zvTGxsZGPXWykXMy53LOlZyrOddyRpHr52zknMy5nHMl52rOtZxxJNfP2cg5mXM550rO1ZxrOaOW6+ds5JzMuZxzJedqzrWccUDm7gEAAAAAAAAAAAAAAAAAAB8vRfVPim9/Yz1t9HfWl56MTq5aD/Rj7+cBAAD//1vO/Qs=") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x2000008, &(0x7f0000001440)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) 24.095717161s ago: executing program 4 (id=1180): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/fail_page_alloc/min-order\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='0\n', 0x2) 23.255756153s ago: executing program 4 (id=1188): setns(0xc9, 0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @empty}, 0x20) syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60f91e2e00107300fc040000000000000000000000000000ff02000000000000000000000000000100000000ff"], 0x0) 22.372785116s ago: executing program 34 (id=1188): setns(0xc9, 0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @empty}, 0x20) syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60f91e2e00107300fc040000000000000000000000000000ff02000000000000000000000000000100000000ff"], 0x0) 7.955143402s ago: executing program 2 (id=1260): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000180)={0x18, r1, 0x1, 0x0, &(0x7f0000000480)=[{0xfffffffffffffffb, 0xfffffffffffffffd}]}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f00000001c0)={0x48, 0x2, r1}) 7.325874968s ago: executing program 2 (id=1270): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, &(0x7f0000000200), &(0x7f0000000240)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r1, &(0x7f0000000780)}, 0x20) 7.054752236s ago: executing program 2 (id=1264): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x7, 0x9}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=@base={0xd, 0xb, 0x4, 0x801, 0x1, r0, 0x15b4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)=r0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000a80)={r2, &(0x7f00000001c0), &(0x7f0000000a00)=""/75}, 0x20) 6.712911785s ago: executing program 2 (id=1266): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002c00)=ANY=[@ANYBLOB="bf16000000000000b70700000900f0ff4070000000000000500000000000000095000000000000002ba728041598d6fbd30cb599e8c73d24a3aa81d36bb3019c13bd23212fb56fa54f26fb0b71d0e6adfefc41d86bd917487960717142fa9ea4318123741c0a0e168c1886d0d4d94f2f4e345c652ebc1626e3a2a2ad35806150ae0209e62f51ee988e6e0dc8ce974a22a550d6fd70800c86ae3b3e05df3ceb9fc474c2a100c788b277beee1cbf9b0a4def23d410f6296b32a8343881dcc7b1b85f3c3d44aeaccd3641110bec4e90a6341965c39e4b3449abe802f5ab3e89cf6c662ed4048d3b3e22278d00031e5388ee6f867ddd58211d6ececb0cd2b6d357b8580218ce740068725837074e468ee23fd2f73902ebcfcf49822775985bf31b715f5888b2c81f96a810b946855c9fc52ac17cbc97a616811a4c2dc3470009b966abaf41939aeca3e7b00c2e9d5db7a34fe2a29ac88c360a878a2b9ab9440c1961e80477166f3f847e855cdddc941d996d61ea0ce23b37e9d21c849d1e1e53087a3b109012e3a3ecbd219265048bf5c72b7ba2806b73323301b4bc94d0e4afde44867d71049a7c89bc615e215571ac910d80a58b5169576ff9906c34d2342806960b6bcb00000000000000000000000000113ee640b9ed1e04a0bfb125204d30990361bf45ef45277a167cd2c2e6ce9138143aa5ea7ee6f7c6d8b00437e070b004c5aa90766538b4fe45a16f14b270904d36eaa87508ac6d46639b3971ac6a88dc531fcc5ffc6b76b334795d88156336a9a452a9022485bb572dacb7aa25f748bc75918a16d9d5ae21004cd799ac4951beb2c6c9b5baf60081b86cc2e31c49f4ea055fb3639036c95c69b1ae60e685d486dbd1d5e7d0daacd73acfc80b9c9c92"], &(0x7f0000000140)='GPL\x00'}, 0x48) r1 = socket$netlink(0x10, 0x3, 0x9) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000017c0)=r0, 0x4) sendmsg$NFT_BATCH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000fc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x11, 0x1, 0xefff, 0x0, {0x1}}}, 0x28}, 0x1, 0x0, 0x0, 0x6008044}, 0x40840) 5.615715653s ago: executing program 2 (id=1277): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000100)='./file1\x00', 0x101880a, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x1, 0x5505, &(0x7f0000002480)="$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") setrlimit(0x1, &(0x7f0000000040)) r0 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x41) fallocate(r0, 0x0, 0x8000, 0x10000) 4.840347334s ago: executing program 5 (id=1273): r0 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f00000000c0)=0x8, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e24, 0xb, @mcast2, 0x9}, 0x1c) sendto$inet6(r0, &(0x7f0000000040)="800037bbfa9ba1ce", 0xffe9, 0x0, 0x0, 0x0) 4.538678051s ago: executing program 5 (id=1274): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4000, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0xff, 0x5f15, &(0x7f0000000b00)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x1c8) getdents(r0, &(0x7f0000000080)=""/43, 0x2b) getdents(r0, 0xfffffffffffffffd, 0xbb) 2.746757038s ago: executing program 2 (id=1278): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x2200414, &(0x7f00000000c0)=ANY=[@ANYRES16=0x0, @ANYRES8, @ANYRES8], 0x1, 0x122e, &(0x7f0000002580)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) ftruncate(r0, 0x6000000) truncate(&(0x7f00000005c0)='./file0\x00', 0xffff) 2.521045624s ago: executing program 5 (id=1280): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x78, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x4}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xd9, 0x4, 0x1, 0x4000}, 0x7d, 0x0, 0x4, 0x0, 0x4, 0xf, 0x10, 0x0, 0x0, 0x0, {0x6, 0x0, 0x6, 0x0, 0xfffffffd, 0x9}}}}]}, 0x78}}, 0x0) 2.244885611s ago: executing program 0 (id=1281): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x3, 0x2, 0x70, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x83, 0x2, 0x3, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x9, 0x20002, 0x7, 0x5, 0x8, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x20003, 0x10, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7, 0x2000, 0x4, 0x4, 0x5, 0x43e, 0x18e, 0xde05, 0x0, 0x6, 0x6, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x8000, 0x1, 0x40], [0x10000007, 0xa, 0x8000012f, 0x8004, 0x5302, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0xa, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xd, 0x312, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x3, 0x7fff, 0x2, 0x3fc, 0x9, 0x6, 0x1, 0xff, 0xd9ef, 0xfffff57d, 0x5f31, 0xd, 0x9, 0x381, 0x4, 0xb, 0x9, 0x1, 0x8, 0x5, 0x6, 0x1, 0x6, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x13, 0x3, 0x4000009, 0x6, 0x4000000, 0x3, 0xbc45, 0x48c93690, 0x40, 0x3], [0x24, 0x408, 0x10001, 0x5, 0x0, 0x10, 0x2, 0x9, 0x6, 0x8002, 0x0, 0x9, 0xb, 0x4, 0x45, 0x80000000, 0x0, 0x1ef, 0x3, 0x8, 0x20000086, 0x3, 0x303c, 0xfffffffa, 0xb, 0x5, 0x2, 0x2, 0x3fffff, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x1, 0x4, 0x2950bfae, 0x5000, 0xa6, 0x4, 0xa9, 0xff, 0x0, 0x7, 0xbf, 0xe6, 0x80, 0x7ff, 0x12b, 0x1, 0xc921, 0xa, 0xffffffff, 0x4, 0x2, 0x120000, 0x807ff, 0x2006, 0x80a2ee, 0x1, 0x25], [0xc, 0xbb33, 0x7, 0xb, 0x5, 0x1938, 0x6, 0x1, 0x0, 0xb9, 0xce4, 0x1ff, 0xf, 0x57, 0x0, 0x3, 0x2, 0x4, 0x4, 0x77ff, 0x7, 0xa620, 0x1, 0x85, 0x1, 0x2000002, 0x14c, 0x68a7, 0x6, 0x7, 0xffffffff, 0x80000000, 0x10000, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x3, 0x7e, 0x100, 0x961e, 0x7, 0xaf, 0x20000008, 0x3, 0x226, 0x2, 0x70d0, 0x0, 0x30b1d693, 0xa1d, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0xf1, 0x803, 0xd7, 0x200, 0xfffffffa, 0xfff]}, 0x45c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ppoll(&(0x7f00000000c0)=[{}, {0xffffffffffffffff, 0x400}], 0x20000000000000dc, 0x0, 0x0, 0xfffffffffffffcdd) 1.977664878s ago: executing program 0 (id=1282): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x2) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000100)=@v2={0x2, @aes256, 0x4, '\x00', @d}) 1.408139263s ago: executing program 6 (id=1191): mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00') fchdir(r0) mount$bind(&(0x7f0000000180)='./cgroup\x00', &(0x7f0000000140)='./cgroup\x00', 0x0, 0x3a87406, 0x0) 1.203432918s ago: executing program 0 (id=1283): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x2f}}, 0x10, 0x0}, 0x300060c1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000000300)=0xa, 0x4) 1.12640691s ago: executing program 6 (id=1284): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x488, 0x0, 0xfffffffffffffffd}]}) 850.183847ms ago: executing program 5 (id=1285): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000001180)=0x1ffffff) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r0, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 767.91768ms ago: executing program 0 (id=1286): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000007c0)) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), r0) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="070600000000000000002d0000000c0005000201aaaaaaaaaaaa0a0001007770616e3000000008002f000500000005002e001500000005002b"], 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x8090) 630.671044ms ago: executing program 6 (id=1287): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000001800010400000000000000000a400000fe0200010000000014000500fe80000000000000000000000000000208000400", @ANYRES32=0x2, @ANYBLOB="0600150008000000200016"], 0x60}}, 0x0) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="01"], 0x25) 578.579794ms ago: executing program 5 (id=1288): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x2125099, 0x0) 462.795998ms ago: executing program 0 (id=1289): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x0, 0x0) setxattr$incfs_metadata(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0, 0x1) getxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000280)=@known='user.incfs.metadata\x00', 0x0, 0x0) 351.7406ms ago: executing program 6 (id=1290): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv4_newrule={0x30, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801c}, [@FRA_GENERIC_POLICY=@FRA_OIFNAME={0x14, 0x11, 'bond0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000850) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8923, &(0x7f0000000040)={'bond0\x00', 0x1001}) 202.809894ms ago: executing program 5 (id=1291): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0xb3) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:03.0/config\x00', 0x2, 0x0) pwrite64(r0, &(0x7f00000000c0)="02", 0x1, 0x4) 0s ago: executing program 0 (id=1292): r0 = socket(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRESDEC], 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x0) recvmmsg$unix(r0, &(0x7f00000019c0)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000004c0)=""/194, 0xc2}, {&(0x7f00000003c0)=""/215, 0xd7}, {&(0x7f00000005c0)=""/268, 0x10c}, {&(0x7f0000004c00)=""/4096, 0x1000}], 0x4}}], 0x1, 0x0, 0x0) write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) kernel console output (not intermixed with test programs): -42cb-9f91-9cb7200a101d [ 140.716992][ T6884] loop3: detected capacity change from 0 to 512 [ 140.724989][ T5779] EXT4-fs error (device loop1): ext4_empty_dir:3141: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 140.850667][ T5779] EXT4-fs (loop1): Remounting filesystem read-only [ 140.859204][ T6884] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.932076][ T6884] ext4 filesystem being mounted at /96/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 141.365221][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.641581][ T5779] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.999130][ T6903] loop3: detected capacity change from 0 to 4096 [ 142.051091][ T2914] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.352964][ T2914] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.564038][ T2914] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.644361][ T6910] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 142.750746][ T2914] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.818889][ T6907] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 143.075764][ T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 143.123281][ T6919] loop0: detected capacity change from 0 to 1024 [ 143.335910][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 143.417098][ T9] usb 3-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 143.498528][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.561509][ T9] usb 3-1: Product: syz [ 143.581791][ T9] usb 3-1: Manufacturer: syz [ 143.638807][ T9] usb 3-1: SerialNumber: syz [ 143.707941][ T9] keyspan 3-1:1.0: Keyspan 2 port adapter converter detected [ 143.715528][ T9] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 87 [ 143.815777][ T9] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 7 [ 143.886613][ T9] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 81 [ 143.935213][ T5789] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 143.946115][ T5789] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 143.955345][ T5789] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 143.965512][ T5789] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 143.987317][ T5789] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 143.994663][ T5789] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 144.046252][ T9] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 82 [ 144.089626][ T9] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 1 [ 144.137122][ T9] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 2 [ 144.179132][ T9] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 85 [ 144.234996][ T9] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 5 [ 144.287693][ T9] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 144.343946][ T9] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 83 [ 144.372179][ T9] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 84 [ 144.424139][ T9] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 3 [ 144.458389][ T9] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 4 [ 144.508170][ T9] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 86 [ 144.544808][ T9] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 6 [ 144.609652][ T9] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 144.674548][ T9] usb 3-1: USB disconnect, device number 3 [ 144.771276][ T9] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 144.876493][ T9] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 144.936218][ T9] keyspan 3-1:1.0: device disconnected [ 146.068495][ T5789] Bluetooth: hci3: command tx timeout [ 146.325542][ T6957] loop0: detected capacity change from 0 to 32768 [ 146.451740][ T6957] JBD2: Ignoring recovery information on journal [ 146.528852][ T6957] jbd2_journal_bmap: journal block not found at offset 32 on loop0-75 [ 146.598807][ T6957] JBD2: bad block at offset 32 [ 146.661598][ T2914] hsr_slave_0: left promiscuous mode [ 146.706728][ T6957] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 146.776855][ T2914] hsr_slave_1: left promiscuous mode [ 146.835887][ T2914] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 146.890089][ T2914] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 146.936753][ T2914] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 146.973021][ T2914] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 146.994507][ T6970] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 147.056311][ T2914] bridge_slave_1: left allmulticast mode [ 147.062021][ T2914] bridge_slave_1: left promiscuous mode [ 147.114126][ T2914] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.186425][ T5777] ocfs2: Unmounting device (7,0) on (node local) [ 147.387214][ T2914] bridge_slave_0: left allmulticast mode [ 147.429654][ T2914] bridge_slave_0: left promiscuous mode [ 147.435487][ T2914] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.951421][ T2914] veth1_macvtap: left promiscuous mode [ 147.998278][ T2914] veth0_macvtap: left promiscuous mode [ 148.003921][ T2914] veth1_vlan: left promiscuous mode [ 148.032503][ T6993] netlink: 'syz.3.432': attribute type 6 has an invalid length. [ 148.069689][ T2914] veth0_vlan: left promiscuous mode [ 148.115797][ T5787] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 148.148513][ T5789] Bluetooth: hci3: command tx timeout [ 148.316037][ T5787] usb 3-1: Using ep0 maxpacket: 8 [ 148.338482][ T5787] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 148.386533][ T5787] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 148.432639][ T5787] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 148.498538][ T5787] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 148.540689][ T5787] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.604208][ T5787] hub 3-1:1.0: bad descriptor, ignoring hub [ 148.640793][ T5787] hub: probe of 3-1:1.0 failed with error -5 [ 148.676516][ T5787] cdc_wdm 3-1:1.0: skipping garbage [ 148.703427][ T5787] cdc_wdm 3-1:1.0: skipping garbage [ 148.740034][ T5787] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 148.772933][ T5787] cdc_wdm 3-1:1.0: Unknown control protocol [ 149.228095][ T8] usb 3-1: USB disconnect, device number 4 [ 149.982118][ T7006] loop3: detected capacity change from 0 to 131072 [ 150.013891][ T7006] F2FS-fs (loop3): Wrong CP boundary, start(512) end(1536) blocks(0) [ 150.022525][ T7006] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 150.046204][ T7006] F2FS-fs (loop3): invalid crc value [ 150.094523][ T7006] F2FS-fs (loop3): Found nat_bits in checkpoint [ 150.159140][ T7006] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 150.166304][ T7006] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 150.235883][ T5789] Bluetooth: hci3: command tx timeout [ 151.939564][ T2914] team0 (unregistering): Port device team_slave_1 removed [ 152.058822][ T2914] team0 (unregistering): Port device team_slave_0 removed [ 152.171289][ T2914] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 152.278041][ T2914] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 152.308030][ T5789] Bluetooth: hci3: command tx timeout [ 152.748745][ T7037] loop3: detected capacity change from 0 to 512 [ 152.777593][ T7037] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 153.178172][ T2914] bond0 (unregistering): Released all slaves [ 153.420025][ T6930] chnl_net:caif_netlink_parms(): no params data found [ 153.745879][ T174] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 153.864233][ T6930] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.907578][ T6930] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.965871][ T6930] bridge_slave_0: entered allmulticast mode [ 153.975841][ T174] usb 4-1: Using ep0 maxpacket: 16 [ 154.007937][ T6930] bridge_slave_0: entered promiscuous mode [ 154.016208][ T174] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 154.073412][ T6930] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.095958][ T174] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 154.130803][ T6930] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.163532][ T174] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 154.199429][ T6930] bridge_slave_1: entered allmulticast mode [ 154.231092][ T6930] bridge_slave_1: entered promiscuous mode [ 154.237302][ T174] usb 4-1: config 0 interface 0 has no altsetting 0 [ 154.277513][ T174] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 154.337456][ T174] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.409974][ T174] usb 4-1: config 0 descriptor?? [ 154.431501][ T6930] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 154.536209][ T6930] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 154.649575][ T7045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.717667][ T7045] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.783482][ T6930] team0: Port device team_slave_0 added [ 154.826538][ T6930] team0: Port device team_slave_1 added [ 154.963391][ T6930] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 154.999456][ T6930] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 155.025427][ C0] vkms_vblank_simulate: vblank timer overrun [ 155.124248][ T6930] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 155.178548][ T6930] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 155.215000][ T6930] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 155.311672][ T8] usb 4-1: USB disconnect, device number 10 [ 155.364794][ T6930] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 155.595551][ T6930] hsr_slave_0: entered promiscuous mode [ 155.636406][ T6930] hsr_slave_1: entered promiscuous mode [ 155.665486][ T6930] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 155.716021][ T6930] Cannot create hsr debugfs directory [ 156.160055][ T8] IPVS: stopping estimator thread 0... [ 156.365332][ T7092] loop3: detected capacity change from 0 to 1024 [ 156.760735][ T6930] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 156.867160][ T7103] loop2: detected capacity change from 0 to 16 [ 156.899757][ T6930] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 156.914662][ T7103] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 157.011953][ T6930] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 157.093208][ T6930] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 157.209064][ T7109] loop3: detected capacity change from 0 to 512 [ 157.358283][ T7109] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.463250][ T7109] ext4 filesystem being mounted at /123/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 157.621928][ T6930] 8021q: adding VLAN 0 to HW filter on device bond0 [ 157.663790][ T7109] EXT4-fs error (device loop3): ext4_validate_inode_bitmap:106: comm syz.3.470: Corrupt inode bitmap - block_group = 0, inode_bitmap = 20 [ 157.751746][ T6930] 8021q: adding VLAN 0 to HW filter on device team0 [ 157.811737][ T7121] EXT4-fs error (device loop3) in ext4_free_inode:363: Corrupt filesystem [ 157.846899][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.854156][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 157.934258][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.941478][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 158.062540][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.781245][ T7142] netlink: 8 bytes leftover after parsing attributes in process `syz.3.481'. [ 159.145502][ T6930] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 159.699016][ T7135] loop0: detected capacity change from 0 to 32768 [ 159.812550][ T7135] JBD2: Ignoring recovery information on journal [ 160.000575][ T7135] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 160.032216][ T7165] loop3: detected capacity change from 0 to 1024 [ 160.138096][ T7165] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 160.246320][ T7165] ext4 filesystem being mounted at /129/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 160.311887][ T7145] loop2: detected capacity change from 0 to 32768 [ 160.411707][ T7165] EXT4-fs error (device loop3): ext4_map_blocks:720: inode #15: comm syz.3.486: lblock 0 mapped to illegal pblock 0 (length 6) [ 160.502030][ T5777] ocfs2: Unmounting device (7,0) on (node local) [ 160.510186][ T7145] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 160.601650][ T7165] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 160.688736][ T6930] veth0_vlan: entered promiscuous mode [ 160.735307][ T7165] EXT4-fs (loop3): This should not happen!! Data will be lost [ 160.735307][ T7165] [ 160.754942][ T6930] veth1_vlan: entered promiscuous mode [ 160.793995][ T7145] XFS (loop2): Ending clean mount [ 160.841913][ T7180] EXT4-fs error (device loop3): ext4_map_blocks:610: inode #15: comm syz.3.486: lblock 0 mapped to illegal pblock 0 (length 4) [ 160.888950][ T7145] XFS (loop2): Quotacheck needed: Please wait. [ 160.998765][ T6930] veth0_macvtap: entered promiscuous mode [ 161.083628][ T6930] veth1_macvtap: entered promiscuous mode [ 161.146462][ T7145] XFS (loop2): Quotacheck: Done. [ 161.211166][ T6930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 161.253383][ T34] EXT4-fs error (device loop3): ext4_map_blocks:720: inode #15: block 8: comm kworker/u4:2: lblock 8 mapped to illegal pblock 8 (length 8) [ 161.295786][ T6930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.327582][ T7145] XFS (loop2): User initiated shutdown received. [ 161.334662][ T7145] XFS (loop2): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:501). Shutting down filesystem. [ 161.365500][ T6930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 161.389558][ T34] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 161.409737][ T6930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.437114][ T7145] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 161.473854][ T6930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 161.484534][ T34] EXT4-fs (loop3): This should not happen!! Data will be lost [ 161.484534][ T34] [ 161.517909][ T6930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.542669][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 161.567607][ T6930] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 161.670853][ T6930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.722305][ T6930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.766069][ T6930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.805810][ T6930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.843549][ T6930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.868513][ T6930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.898821][ T6930] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 161.907218][ T5778] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 161.984821][ T6930] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.055891][ T6930] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.119748][ T6930] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.170455][ T6930] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.613521][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.678416][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.816864][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.859839][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.013681][ T7235] program syz.4.501 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 164.124199][ T7238] loop0: detected capacity change from 0 to 512 [ 164.200730][ T7238] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 164.317070][ T7238] EXT4-fs error (device loop0): ext4_iget_extra_inode:4752: inode #15: comm syz.0.502: corrupted in-inode xattr: invalid ea_ino [ 164.448854][ T7238] EXT4-fs error (device loop0): ext4_orphan_get:1413: comm syz.0.502: couldn't read orphan inode 15 (err -117) [ 164.519818][ T7238] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.787753][ T7249] hub 1-0:1.0: USB hub found [ 164.813410][ T5777] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.843939][ T7249] hub 1-0:1.0: 1 port detected [ 165.525213][ T7240] loop3: detected capacity change from 0 to 32768 [ 165.610745][ T7240] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 165.653704][ T7244] loop2: detected capacity change from 0 to 32768 [ 165.757700][ T7240] XFS (loop3): Ending clean mount [ 165.791422][ T7244] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 166.058216][ T7244] XFS (loop2): Ending clean mount [ 166.342707][ T5778] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 166.366998][ T5776] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 167.396229][ T7262] loop4: detected capacity change from 0 to 40427 [ 167.473894][ T7301] loop0: detected capacity change from 0 to 256 [ 167.485495][ T7262] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 167.546181][ T7262] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 167.622547][ T7262] F2FS-fs (loop4): invalid crc value [ 167.639879][ T7301] FAT-fs (loop0): Directory bread(block 64) failed [ 167.695816][ T7301] FAT-fs (loop0): Directory bread(block 65) failed [ 167.755818][ T7301] FAT-fs (loop0): Directory bread(block 66) failed [ 167.762373][ T7301] FAT-fs (loop0): Directory bread(block 67) failed [ 167.875846][ T7301] FAT-fs (loop0): Directory bread(block 68) failed [ 167.883117][ T7301] FAT-fs (loop0): Directory bread(block 69) failed [ 167.996243][ T7301] FAT-fs (loop0): Directory bread(block 70) failed [ 168.002807][ T7301] FAT-fs (loop0): Directory bread(block 71) failed [ 168.098594][ T7301] FAT-fs (loop0): Directory bread(block 72) failed [ 168.141505][ T7301] FAT-fs (loop0): Directory bread(block 73) failed [ 168.202289][ T7262] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 168.255465][ T7262] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 168.552836][ T6930] syz-executor: attempt to access beyond end of device [ 168.552836][ T6930] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 168.653667][ T6930] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 169.340490][ T7333] loop0: detected capacity change from 0 to 64 [ 169.641273][ T5777] hfs: node 4:3 still has 1 user(s)! [ 169.860106][ T7339] netlink: 8 bytes leftover after parsing attributes in process `syz.2.527'. [ 169.923526][ T7339] gretap0: entered promiscuous mode [ 169.962651][ T7339] macvlan2: entered allmulticast mode [ 169.983954][ T7339] gretap0: entered allmulticast mode [ 170.102968][ T27] audit: type=1400 audit(2000000049.710:7): apparmor="STATUS" operation="profile_load" profile="unconfined" name="foo" pid=7346 comm="syz.0.528" [ 170.205832][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 170.307710][ T7352] loop2: detected capacity change from 0 to 512 [ 170.397096][ T7352] EXT4-fs (loop2): orphan cleanup on readonly fs [ 170.415876][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 170.453540][ T9] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 170.485123][ T7352] EXT4-fs warning (device loop2): ext4_enable_quotas:7188: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 170.538684][ T9] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 170.648915][ T7352] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 170.674195][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 170.690992][ T7352] EXT4-fs error (device loop2): ext4_ext_check_inode:532: inode #13: comm syz.2.529: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 2048(2048) [ 170.739121][ T9] usb 5-1: New USB device found, idVendor=0b05, idProduct=18c6, bcdDevice= 0.00 [ 170.794062][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.827957][ T7352] EXT4-fs error (device loop2): ext4_orphan_get:1413: comm syz.2.529: couldn't read orphan inode 13 (err -117) [ 170.854266][ T9] usb 5-1: config 0 descriptor?? [ 170.924885][ T7352] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 171.039727][ T7364] netlink: 4 bytes leftover after parsing attributes in process `syz.0.533'. [ 171.092883][ T7352] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 171.178795][ T7352] EXT4-fs warning (device loop2): ext4_enable_quotas:7188: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 171.334857][ T9] hid (null): report_id 0 is invalid [ 171.394397][ T9] asus 0003:0B05:18C6.0007: unknown main item tag 0x3 [ 171.430378][ T9] asus 0003:0B05:18C6.0007: unknown main item tag 0x6 [ 171.439972][ T5778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.471796][ T9] asus 0003:0B05:18C6.0007: unknown main item tag 0x7 [ 171.518447][ T9] asus 0003:0B05:18C6.0007: report_id 0 is invalid [ 171.579066][ T9] asus 0003:0B05:18C6.0007: item 0 0 1 8 parsing failed [ 171.625098][ T9] asus 0003:0B05:18C6.0007: Asus hid parse failed: -22 [ 171.663060][ T9] asus: probe of 0003:0B05:18C6.0007 failed with error -22 [ 171.698180][ T7378] rnbd_client L127: Can't parse path i: -93 [ 171.728006][ T9] usb 5-1: USB disconnect, device number 2 [ 172.572064][ T7397] loop3: detected capacity change from 0 to 128 [ 172.601627][ T27] audit: type=1326 audit(2000000052.200:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7395 comm="syz.0.542" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4247b9e1d9 code=0x7ffc0000 [ 172.813469][ T27] audit: type=1326 audit(2000000052.240:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7395 comm="syz.0.542" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4247b9e1d9 code=0x7ffc0000 [ 173.014025][ T27] audit: type=1326 audit(2000000052.240:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7395 comm="syz.0.542" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4247b9e1d9 code=0x7ffc0000 [ 173.131763][ T7383] loop2: detected capacity change from 0 to 32768 [ 173.168020][ T27] audit: type=1326 audit(2000000052.250:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7395 comm="syz.0.542" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f4247b9e1d9 code=0x7ffc0000 [ 173.212306][ T7383] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 9 [ 173.358332][ T27] audit: type=1326 audit(2000000052.250:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7395 comm="syz.0.542" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4247b9e1d9 code=0x7ffc0000 [ 173.424956][ T7411] loop3: detected capacity change from 0 to 128 [ 173.519869][ T7411] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 173.540670][ T27] audit: type=1326 audit(2000000052.250:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7395 comm="syz.0.542" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f4247b9e1d9 code=0x7ffc0000 [ 173.593452][ T5782] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 9 [ 173.641792][ T7411] ext4 filesystem being mounted at /145/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 173.741927][ T27] audit: type=1326 audit(2000000052.250:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7395 comm="syz.0.542" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f4247b9e1d9 code=0x7ffc0000 [ 173.879321][ T5776] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 174.322586][ T7430] loop2: detected capacity change from 0 to 4096 [ 174.385912][ T5787] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 174.509650][ T7433] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 174.615805][ T5787] usb 4-1: Using ep0 maxpacket: 32 [ 174.639957][ T5787] usb 4-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 174.685954][ T5787] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.740367][ T5787] usb 4-1: Product: syz [ 174.767224][ T5787] usb 4-1: Manufacturer: syz [ 174.771863][ T5787] usb 4-1: SerialNumber: syz [ 174.838913][ T5787] usb 4-1: config 0 descriptor?? [ 175.516655][ T5787] peak_usb 4-1:0.0: PEAK-System PCAN-USB Pro hwrev 0 serial 00000000.00000000 (2 channels) [ 175.527060][ T7450] block2mtd: parameter too long [ 175.559942][ T5787] peak_usb 4-1:0.0 can0: sending command failure: -22 [ 175.603085][ T5787] peak_usb 4-1:0.0 can0: sending command failure: -22 [ 175.716128][ T5787] peak_usb: probe of 4-1:0.0 failed with error -22 [ 175.770936][ T5787] usb 4-1: USB disconnect, device number 11 [ 176.178462][ T7468] loop2: detected capacity change from 0 to 512 [ 176.250879][ T7468] EXT4-fs error (device loop2): ext4_get_branch:178: inode #13: block 33619980: comm syz.2.571: invalid block [ 176.330686][ T7468] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:478: comm syz.2.571: Invalid block bitmap block 0 in block_group 0 [ 176.378565][ T7468] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 176.426378][ T7468] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #13: comm syz.2.571: attempt to clear invalid blocks 983261 len 1 [ 176.478849][ T7468] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.571: invalid indirect mapped block 2683928664 (level 0) [ 176.538096][ T7468] EXT4-fs error (device loop2): __ext4_get_inode_loc:4509: comm syz.2.571: Invalid inode table block 0 in block_group 0 [ 176.612047][ T7468] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 176.675918][ T7468] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 176.714924][ T7468] EXT4-fs error (device loop2): __ext4_get_inode_loc:4509: comm syz.2.571: Invalid inode table block 0 in block_group 0 [ 176.792148][ T7468] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 176.856708][ T7468] EXT4-fs error (device loop2): ext4_truncate:4314: inode #13: comm syz.2.571: mark_inode_dirty error [ 176.911782][ T7468] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 176.966504][ T7468] EXT4-fs error (device loop2): __ext4_get_inode_loc:4509: comm syz.2.571: Invalid inode table block 0 in block_group 0 [ 177.071930][ T7468] EXT4-fs (loop2): 1 truncate cleaned up [ 177.117203][ T7468] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 177.403975][ T5778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.420372][ T7473] loop0: detected capacity change from 0 to 32768 [ 177.590840][ T27] audit: type=1800 audit(2000000057.200:15): pid=7473 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.572" name="file1" dev="loop0" ino=4 res=0 errno=0 [ 177.722838][ T7502] loop2: detected capacity change from 0 to 8 [ 177.775010][ T7502] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 177.834620][ T6241] udevd[6241]: incorrect cramfs checksum on /dev/loop2 [ 177.993098][ T6241] udevd[6241]: incorrect cramfs checksum on /dev/loop2 [ 179.645463][ T7531] syz.3.594 (7531) used greatest stack depth: 17896 bytes left [ 179.830062][ T7544] rnbd_client L602: Mapping device / on session s., (access_mode: rw, nr_poll_queues: 0) [ 179.876609][ T7544] rnbd_client L1255: Session s. not found, and path parameter not given [ 180.046368][ T7548] netlink: 16 bytes leftover after parsing attributes in process `syz.4.602'. [ 180.424887][ T7535] loop0: detected capacity change from 0 to 40427 [ 180.505010][ T7535] F2FS-fs (loop0): invalid crc value [ 180.571214][ T7535] F2FS-fs (loop0): Found nat_bits in checkpoint [ 180.827700][ T7535] F2FS-fs (loop0): Start checkpoint disabled! [ 180.921947][ T7535] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 181.099088][ T7573] loop2: detected capacity change from 0 to 64 [ 181.249465][ T7576] netlink: 4 bytes leftover after parsing attributes in process `syz.3.614'. [ 181.532793][ T7578] loop4: detected capacity change from 0 to 4096 [ 181.609786][ T7583] loop2: detected capacity change from 0 to 1024 [ 181.629226][ T7585] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 181.713915][ T2957] kworker/u4:9: attempt to access beyond end of device [ 181.713915][ T2957] loop0: rw=1, sector=45096, nr_sectors = 16 limit=40427 [ 181.875546][ T2957] kworker/u4:9: attempt to access beyond end of device [ 181.875546][ T2957] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 181.935593][ T12] hfsplus: b-tree write err: -5, ino 25 [ 181.983543][ T12] hfsplus: b-tree write err: -5, ino 4 [ 182.019347][ T12] hfsplus: b-tree write err: -5, ino 2 [ 182.042937][ T2957] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 182.076016][ T12] hfsplus: b-tree write err: -5, ino 17 [ 182.111181][ T2957] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 183.680862][ T7629] ip_tables: iptables: counters copy to user failed while replacing table [ 183.739259][ T7632] ip_tables: iptables: counters copy to user failed while replacing table [ 184.635997][ T5787] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 184.699274][ T9] kernel write not supported for file /input/mice (pid: 9 comm: kworker/0:1) [ 184.815819][ T174] usb 4-1: new low-speed USB device number 12 using dummy_hcd [ 184.854773][ T5787] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 184.880027][ T5787] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 184.933122][ T5787] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 184.978319][ T5787] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 185.044361][ T5787] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 185.063188][ T174] usb 4-1: config 1 has an invalid descriptor of length 53, skipping remainder of the config [ 185.101753][ T174] usb 4-1: config 1 interface 0 altsetting 18 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 185.152171][ T5787] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 185.163439][ T7670] netlink: 248 bytes leftover after parsing attributes in process `syz.4.646'. [ 185.183867][ T174] usb 4-1: config 1 interface 0 has no altsetting 0 [ 185.192958][ T5787] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 185.212734][ T7670] netlink: 7 bytes leftover after parsing attributes in process `syz.4.646'. [ 185.232030][ T5787] usb 1-1: Product: syz [ 185.252346][ T174] usb 4-1: string descriptor 0 read error: -22 [ 185.265804][ T5787] usb 1-1: Manufacturer: syz [ 185.273001][ T174] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 185.311134][ T5787] cdc_wdm 1-1:1.0: skipping garbage [ 185.337710][ T174] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.359292][ T5787] cdc_wdm 1-1:1.0: skipping garbage [ 185.385594][ T5787] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 185.436586][ T174] usb 4-1: bad CDC descriptors [ 185.442027][ T5787] cdc_wdm 1-1:1.0: Unknown control protocol [ 185.647079][ T5787] usb 4-1: USB disconnect, device number 12 [ 185.811659][ T174] usb 1-1: USB disconnect, device number 5 [ 185.963152][ T7683] loop2: detected capacity change from 0 to 8192 [ 186.052099][ T7689] loop4: detected capacity change from 0 to 16 [ 186.142838][ T7689] erofs: (device loop4): mounted with root inode @ nid 36. [ 187.052381][ T7710] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 187.492736][ T7723] kAFS: bad VL server IP address [ 187.626350][ T174] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 187.870006][ T174] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 187.900461][ T174] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 187.960328][ T174] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 188.010807][ T174] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 188.067022][ T174] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 188.148456][ T174] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 188.187423][ T174] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 188.219650][ T174] usb 4-1: Product: syz [ 188.243508][ T174] usb 4-1: Manufacturer: syz [ 188.278675][ T174] cdc_wdm 4-1:1.0: skipping garbage [ 188.312555][ T174] cdc_wdm 4-1:1.0: skipping garbage [ 188.347662][ T174] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 188.369831][ T7712] loop4: detected capacity change from 0 to 40427 [ 188.379863][ T174] cdc_wdm 4-1:1.0: Unknown control protocol [ 188.439722][ T7712] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 188.498909][ T7712] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 188.563398][ T7712] F2FS-fs (loop4): invalid crc value [ 188.796186][ T174] usb 4-1: USB disconnect, device number 13 [ 188.808331][ T7753] program syz.2.672 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 189.068277][ T7712] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 189.075355][ T7712] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 189.275536][ T7712] F2FS-fs (loop4): Stopped filesystem due to reason: 0 [ 189.930655][ T7782] loop7: detected capacity change from 0 to 7 [ 189.996239][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 190.005763][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 190.045733][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 190.054961][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 190.065273][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 190.074458][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 190.088937][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 190.098163][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 190.106474][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 190.115680][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 190.127423][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 190.136640][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 190.145863][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 190.155044][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 190.175971][ T7782] ldm_validate_partition_table(): Disk read failed. [ 190.183195][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 190.192379][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 190.227162][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 190.236361][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 190.256272][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 190.265454][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 190.283882][ T7782] Dev loop7: unable to read RDB block 0 [ 190.320890][ T7782] loop7: unable to read partition table [ 190.348644][ T7782] loop7: partition table beyond EOD, truncated [ 190.369208][ T7787] loop0: detected capacity change from 0 to 2048 [ 190.396173][ T7782] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 190.511826][ T7791] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 190.719558][ T7791] NILFS (loop0): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 190.820176][ T7791] NILFS error (device loop0): nilfs_bmap_propagate: broken bmap (inode number=4) [ 190.918213][ T7791] Remounting filesystem read-only [ 191.105225][ T5777] NILFS (loop0): disposed unprocessed dirty file(s) when stopping log writer [ 191.156277][ T5777] NILFS (loop0): discard dirty page: offset=0, ino=18 [ 191.198095][ T5777] NILFS (loop0): discard dirty block: blocknr=0, size=1024 [ 191.205332][ T5777] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 191.305797][ T5777] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 191.364013][ T5777] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 191.413415][ T5777] NILFS (loop0): discard dirty page: offset=0, ino=2 [ 191.440425][ T7810] ima: policy update failed [ 191.464110][ T5777] NILFS (loop0): discard dirty block: blocknr=18, size=1024 [ 191.482517][ T27] audit: type=1802 audit(2000000071.090:16): pid=7810 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.693" res=0 errno=0 [ 191.520673][ T5777] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 191.607160][ T5777] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 191.649304][ T5777] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 191.688736][ T5777] NILFS (loop0): discard dirty page: offset=0, ino=6 [ 191.739245][ T5777] NILFS (loop0): discard dirty block: blocknr=0, size=1024 [ 191.783261][ T5777] NILFS (loop0): discard dirty block: blocknr=36, size=1024 [ 191.836286][ T5777] NILFS (loop0): discard dirty block: blocknr=37, size=1024 [ 191.843614][ T5777] NILFS (loop0): discard dirty block: blocknr=38, size=1024 [ 191.911907][ T5777] NILFS (loop0): discard dirty page: offset=4096, ino=6 [ 191.962011][ T5777] NILFS (loop0): discard dirty block: blocknr=39, size=1024 [ 192.022757][ T5777] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 192.085712][ T5777] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 192.095113][ T5777] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 192.191566][ T5777] NILFS (loop0): discard dirty page: offset=0, ino=5 [ 192.228820][ T7829] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 192.235843][ T7829] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 192.256087][ T5777] NILFS (loop0): discard dirty block: blocknr=41, size=1024 [ 192.263419][ T5777] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 192.305475][ T7805] loop4: detected capacity change from 0 to 32768 [ 192.342984][ T5777] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 192.370531][ T7829] vhci_hcd vhci_hcd.0: Device attached [ 192.399272][ T5777] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 192.454062][ T7805] JBD2: Ignoring recovery information on journal [ 192.475030][ T5777] NILFS (loop0): discard dirty page: offset=0, ino=4 [ 192.516704][ T5777] NILFS (loop0): discard dirty block: blocknr=40, size=1024 [ 192.561384][ T5777] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 192.605776][ T174] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 192.623996][ T7805] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 192.633152][ T9] usb 3-1: new low-speed USB device number 5 using dummy_hcd [ 192.644862][ T5777] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 192.712797][ T5777] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 192.761493][ T5777] NILFS (loop0): discard dirty page: offset=0, ino=3 [ 192.809186][ T5777] NILFS (loop0): discard dirty block: blocknr=42, size=1024 [ 192.840326][ T7842] loop3: detected capacity change from 0 to 512 [ 192.857220][ T9] usb 3-1: config 0 has no interfaces? [ 192.864857][ T5777] NILFS (loop0): discard dirty block: blocknr=43, size=1024 [ 192.884096][ T9] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 192.926093][ T5777] NILFS (loop0): discard dirty block: blocknr=44, size=1024 [ 192.933425][ T5777] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 192.978414][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.011199][ T7805] UBIFS error (pid: 7805): cannot open "ubi:0", error -19 [ 193.060585][ T9] usb 3-1: config 0 descriptor?? [ 193.110435][ T5777] NILFS (loop0): discard dirty page: offset=65536, ino=3 [ 193.161567][ T5777] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 193.204059][ T6930] (syz-executor,6930,0):ocfs2_inode_is_valid_to_delete:905 ERROR: Skipping delete of system file 66 [ 193.239708][ T5777] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 193.289911][ T5777] NILFS (loop0): discard dirty block: blocknr=0, size=1024 [ 193.330627][ T5777] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 193.364748][ T6930] ocfs2: Unmounting device (7,4) on (node local) [ 193.390008][ T7830] usb 37-1: recv xbuf, 0 [ 193.395768][ T2178] usb 3-1: USB disconnect, device number 5 [ 193.409315][ T5777] NILFS (loop0): discard dirty page: offset=196608, ino=3 [ 193.467066][ T2957] vhci_hcd: stop threads [ 193.472576][ T2957] vhci_hcd: release socket [ 193.497801][ T5777] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 193.568566][ T5777] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 193.577998][ T2957] vhci_hcd: disconnect device [ 193.586020][ T174] usb 37-1: device descriptor read/64, error -71 [ 193.645705][ T5777] NILFS (loop0): discard dirty block: blocknr=49, size=1024 [ 193.653036][ T5777] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 193.785764][ T174] vhci_hcd: vhci_device speed not set [ 194.391062][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.405564][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.436882][ T7870] syz.4.708[7870] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 194.437083][ T7870] syz.4.708[7870] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 194.725892][ T9] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 194.978054][ T9] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 194.997102][ T9] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 195.058452][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 195.098784][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 195.155821][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 195.207740][ T9] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 195.221004][ T7857] loop3: detected capacity change from 0 to 40427 [ 195.248828][ T9] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 195.287364][ T7857] F2FS-fs (loop3): invalid crc value [ 195.303446][ T9] usb 1-1: Product: syz [ 195.326681][ T7857] F2FS-fs (loop3): Found nat_bits in checkpoint [ 195.346855][ T9] usb 1-1: Manufacturer: syz [ 195.386239][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 195.391479][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 195.463125][ T9] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 195.498084][ T9] cdc_wdm 1-1:1.0: Unknown control protocol [ 195.539128][ T7857] F2FS-fs (loop3): Start checkpoint disabled! [ 195.611448][ T5787] usb 1-1: USB disconnect, device number 6 [ 195.661380][ T7857] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 195.743470][ T7874] loop2: detected capacity change from 0 to 40427 [ 195.811617][ T7874] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 195.857581][ T7874] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 195.934789][ T7874] F2FS-fs (loop2): Found nat_bits in checkpoint [ 196.179146][ T7874] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 196.218251][ T7874] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 196.425480][ T7874] syz.2.710: attempt to access beyond end of device [ 196.425480][ T7874] loop2: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 196.458474][ T7899] loop4: detected capacity change from 0 to 512 [ 196.588124][ T7899] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.643433][ T2914] kworker/u4:8: attempt to access beyond end of device [ 196.643433][ T2914] loop3: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 196.697924][ T7899] ext4 filesystem being mounted at /51/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 196.781959][ T2914] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 196.999595][ T6930] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.706777][ T7917] tap0: tun_chr_ioctl cmd 1074025672 [ 197.765771][ T7917] tap0: ignored: set checksum disabled [ 197.776027][ T5787] lg-g15 0003:046D:0A07.0008: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 197.865982][ T5787] input: Logitech Z-10 LCD Menu Keys as /devices/virtual/misc/uhid/0003:046D:0A07.0008/input/input8 [ 199.341434][ T7919] loop4: detected capacity change from 0 to 40427 [ 199.404049][ T7919] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 199.464750][ T7919] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 199.511729][ T7919] F2FS-fs (loop4): Unrecognized mount option "18446744073709551615ÿÿÿÿÿÿÿÿÿÿÿ" or missing value [ 199.602710][ T7927] loop3: detected capacity change from 0 to 32768 [ 199.739238][ T7927] JBD2: Ignoring recovery information on journal [ 199.940513][ T7927] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 199.966972][ T7956] capability: warning: `syz.2.725' uses deprecated v2 capabilities in a way that may be insecure [ 200.236590][ T7927] UBIFS error (pid: 7927): cannot open "ubi:0", error -19 [ 200.356287][ T5776] (syz-executor,5776,0):ocfs2_inode_is_valid_to_delete:905 ERROR: Skipping delete of system file 66 [ 200.522457][ T5776] ocfs2: Unmounting device (7,3) on (node local) [ 200.785864][ T5789] Bluetooth: hci3: command tx timeout [ 201.310881][ T7985] loop2: detected capacity change from 0 to 128 [ 201.600819][ T7987] syz.4.739: attempt to access beyond end of device [ 201.600819][ T7987] loop8: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 201.668361][ T7987] SQUASHFS error: Failed to read block 0x0: -5 [ 201.920500][ T7992] netlink: 8 bytes leftover after parsing attributes in process `syz.4.741'. [ 201.993176][ T27] audit: type=1400 audit(2000000081.600:17): apparmor="STATUS" info="failed to unpack end of profile" error=-71 profile="unconfined" name="//o" pid=7993 comm="syz.3.742" name="//o" offset=81 [ 202.459761][ T8011] loop4: detected capacity change from 0 to 512 [ 202.529298][ T8011] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 202.681528][ T8011] EXT4-fs error (device loop4): ext4_validate_block_bitmap:430: comm syz.4.749: bg 0: block 104: invalid block bitmap [ 202.761947][ T8011] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 202.811375][ T8011] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.749: invalid indirect mapped block 1 (level 1) [ 202.894242][ T8011] EXT4-fs (loop4): 1 truncate cleaned up [ 202.930684][ T8011] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 202.972961][ T8022] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 203.032713][ T8011] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 203.125987][ T8011] overlayfs: failed to look up (fi) for ino (-13) [ 203.198928][ T8024] loop3: detected capacity change from 0 to 2048 [ 203.234995][ T27] audit: type=1326 audit(2000000082.840:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8025 comm="syz.0.756" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4247b9e1d9 code=0x7ffc0000 [ 203.280950][ T8024] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 203.354599][ T6930] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.385360][ T8024] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 203.408198][ T27] audit: type=1326 audit(2000000082.840:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8025 comm="syz.0.756" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4247b9e1d9 code=0x7ffc0000 [ 203.502074][ T8024] overlayfs: upper fs needs to support d_type. [ 203.559930][ T8006] loop2: detected capacity change from 0 to 32768 [ 203.608240][ T8024] overlayfs: cleanup of 'work/#7' failed (-2) [ 203.625761][ T27] audit: type=1326 audit(2000000082.870:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8025 comm="syz.0.756" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f4247b9e1d9 code=0x7ffc0000 [ 203.688229][ T8024] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 203.765303][ T8024] overlayfs: failed to set xattr on upper [ 203.787849][ T8024] overlayfs: ...falling back to redirect_dir=nofollow. [ 203.828785][ T27] audit: type=1326 audit(2000000082.870:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8025 comm="syz.0.756" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4247b9e1d9 code=0x7ffc0000 [ 203.864635][ T8024] overlayfs: ...falling back to index=off. [ 203.892519][ T8024] overlayfs: ...falling back to uuid=null. [ 204.022909][ T27] audit: type=1326 audit(2000000082.870:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8025 comm="syz.0.756" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f4247b9e1d9 code=0x7ffc0000 [ 204.847828][ T8034] loop4: detected capacity change from 0 to 131072 [ 204.891300][ T8034] F2FS-fs (loop4): Invalid log sectorsize (67108873) [ 204.898791][ T8034] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 204.908790][ T8034] F2FS-fs (loop4): invalid crc value [ 204.965386][ T5776] UDF-fs: error (device loop3): udf_read_inode: (ino 1347) failed !bh [ 205.002933][ T8034] F2FS-fs (loop4): Found nat_bits in checkpoint [ 205.051229][ T27] audit: type=1326 audit(2000000082.870:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8025 comm="syz.0.756" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4247b9e1d9 code=0x7ffc0000 [ 205.101605][ T5776] UDF-fs: error (device loop3): udf_read_inode: (ino 1347) failed !bh [ 205.127617][ T8034] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 205.135712][ T8034] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 205.185945][ T174] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 205.240105][ T27] audit: type=1326 audit(2000000082.870:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8025 comm="syz.0.756" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4247b9e1d9 code=0x7ffc0000 [ 205.309558][ T8034] F2FS-fs (loop4): inconsistent node block, nid:8, node_footer[nid:5,ino:5,ofs:0,cpver:1219692001,blkaddr:15361] [ 205.445959][ T9] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 205.457317][ T174] usb 3-1: too many endpoints for config 0 interface 0 altsetting 9: 254, using maximum allowed: 30 [ 205.505839][ T174] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid maxpacket 1056, setting to 64 [ 205.572746][ T174] usb 3-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 205.625773][ T174] usb 3-1: config 0 interface 0 has no altsetting 0 [ 205.642695][ T174] usb 3-1: New USB device found, idVendor=056a, idProduct=00cc, bcdDevice= 0.00 [ 205.681343][ T174] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.705971][ T9] usb 1-1: not running at top speed; connect to a high speed hub [ 205.727603][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 205.749587][ T174] usb 3-1: config 0 descriptor?? [ 205.756103][ T8036] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 205.795984][ T9] usb 1-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 205.825529][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.855796][ T9] usb 1-1: Product: syz [ 205.860027][ T9] usb 1-1: Manufacturer: syz [ 205.864642][ T9] usb 1-1: SerialNumber: syz [ 205.939000][ T9] oti6858 1-1:1.0: oti6858 converter detected [ 205.979696][ T9] usb 1-1: oti6858 converter now attached to ttyUSB0 [ 206.220172][ T174] wacom 0003:056A:00CC.0009: ignoring exceeding usage max [ 206.289223][ T174] wacom 0003:056A:00CC.0009: hidraw0: USB HID v0.0c Device [HID 056a:00cc] on usb-dummy_hcd.2-1/input0 [ 206.417598][ T174] usb 3-1: USB disconnect, device number 6 [ 206.468551][ T5787] usb 1-1: USB disconnect, device number 7 [ 206.507606][ T5787] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 206.561147][ T5787] oti6858 1-1:1.0: device disconnected [ 206.591364][ T8045] fido_id[8045]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 206.956053][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 206.965487][ T5792] Bluetooth: hci1: command 0x0406 tx timeout [ 207.938355][ T49] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.975861][ T174] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 208.185758][ T174] usb 3-1: Using ep0 maxpacket: 32 [ 208.202930][ T174] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 208.250124][ T174] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 208.301681][ T174] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 208.340482][ T49] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.360610][ T174] usb 3-1: config 1 has no interface number 0 [ 208.396643][ T174] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 208.430931][ T8052] loop0: detected capacity change from 0 to 32768 [ 208.457857][ T174] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 208.538562][ T8052] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 208.560655][ T174] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 208.612550][ T174] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.634384][ T49] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.712312][ T174] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 208.767757][ T8052] XFS (loop0): Ending clean mount [ 208.818193][ T8052] XFS (loop0): Quotacheck needed: Please wait. [ 208.961915][ T8058] loop2: detected capacity change from 0 to 512 [ 208.995938][ T8052] XFS (loop0): Quotacheck: Done. [ 209.003296][ T49] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.085111][ T8058] EXT4-fs error (device loop2): ext4_validate_block_bitmap:430: comm syz.2.770: bg 0: block 16: invalid block bitmap [ 209.218818][ T8058] EXT4-fs (loop2): Remounting filesystem read-only [ 209.287588][ T8058] EXT4-fs (loop2): 1 truncate cleaned up [ 209.295548][ T8058] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 209.470756][ T174] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached [ 209.589676][ T5777] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 209.923243][ T5824] usb 3-1: USB disconnect, device number 7 [ 209.968028][ T5824] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 210.074115][ T5789] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 210.086713][ T5789] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 210.096148][ T5789] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 210.103953][ T5789] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 210.111857][ T5789] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 210.119335][ T5789] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 210.248002][ T8085] loop4: detected capacity change from 0 to 164 [ 210.489569][ T5778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.300629][ T8099] netlink: 88 bytes leftover after parsing attributes in process `syz.4.780'. [ 211.679236][ T8110] program syz.0.775 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 212.226171][ T5789] Bluetooth: hci1: command tx timeout [ 212.249230][ T8121] netlink: 8 bytes leftover after parsing attributes in process `syz.2.788'. [ 212.304561][ T8124] loop0: detected capacity change from 0 to 1024 [ 213.078510][ T8139] program syz.2.794 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 213.235489][ T8081] chnl_net:caif_netlink_parms(): no params data found [ 213.863331][ T49] hsr_slave_0: left promiscuous mode [ 213.895305][ T49] hsr_slave_1: left promiscuous mode [ 213.940029][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 213.976555][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 214.019747][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 214.052384][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 214.099103][ T49] bridge_slave_1: left allmulticast mode [ 214.130013][ T49] bridge_slave_1: left promiscuous mode [ 214.161153][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.212558][ T49] bridge_slave_0: left allmulticast mode [ 214.245386][ T49] bridge_slave_0: left promiscuous mode [ 214.273746][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.306492][ T5789] Bluetooth: hci1: command tx timeout [ 214.419929][ T49] veth1_macvtap: left promiscuous mode [ 214.443285][ T49] veth0_macvtap: left promiscuous mode [ 214.462650][ T8177] loop4: detected capacity change from 0 to 2048 [ 214.474772][ T49] veth1_vlan: left promiscuous mode [ 214.499981][ T49] veth0_vlan: left promiscuous mode [ 214.531553][ T8177] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 214.731941][ T6930] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.832952][ T49] team0 (unregistering): Port device team_slave_1 removed [ 215.903017][ T49] team0 (unregistering): Port device team_slave_0 removed [ 215.962390][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 216.035167][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 216.385994][ T5789] Bluetooth: hci1: command tx timeout [ 216.510815][ T49] bond0 (unregistering): Released all slaves [ 216.684370][ T8081] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.806802][ T8081] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.814107][ T8081] bridge_slave_0: entered allmulticast mode [ 216.893128][ T8081] bridge_slave_0: entered promiscuous mode [ 216.943947][ T8081] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.983922][ T8081] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.029385][ T8081] bridge_slave_1: entered allmulticast mode [ 217.055873][ T8081] bridge_slave_1: entered promiscuous mode [ 217.102110][ T8204] loop2: detected capacity change from 0 to 512 [ 217.247480][ T8204] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 217.262968][ T8081] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 217.333867][ T8081] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 217.614584][ T8081] team0: Port device team_slave_0 added [ 217.655174][ T5778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.728886][ T8081] team0: Port device team_slave_1 added [ 217.939059][ T8081] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 217.984536][ T8081] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.139067][ T8081] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 218.214375][ T8081] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 218.259071][ T8081] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.375673][ T8081] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 218.460453][ T8236] loop2: detected capacity change from 0 to 1024 [ 218.467205][ T5789] Bluetooth: hci1: command tx timeout [ 218.657953][ T8081] hsr_slave_0: entered promiscuous mode [ 218.738493][ T5787] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 218.766814][ T8081] hsr_slave_1: entered promiscuous mode [ 218.821213][ T8081] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 218.859351][ T8081] Cannot create hsr debugfs directory [ 218.988714][ T5787] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 219.042496][ T5787] usb 1-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 219.096607][ T5787] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.151370][ T5787] usb 1-1: Product: syz [ 219.176770][ T5787] usb 1-1: Manufacturer: syz [ 219.208842][ T5787] usb 1-1: SerialNumber: syz [ 219.240069][ T5787] keyspan 1-1:1.0: Keyspan 2 port adapter converter detected [ 219.290294][ T5787] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 87 [ 219.349314][ T5787] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 7 [ 219.397559][ T5787] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 81 [ 219.452420][ T5787] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 82 [ 219.503630][ T5787] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 1 [ 219.554100][ T5787] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 2 [ 219.619022][ T5787] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 85 [ 219.659744][ T5787] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 5 [ 219.740463][ T5787] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 219.790442][ T5787] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 83 [ 219.841535][ T8081] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 219.852213][ T5787] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 84 [ 219.880388][ T5787] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 3 [ 219.913279][ T8081] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 219.936807][ T5787] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 4 [ 220.004974][ T5787] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 86 [ 220.028342][ T8081] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 220.059989][ T5787] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 6 [ 220.118486][ T5787] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 220.156298][ T8081] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 220.197477][ T5787] usb 1-1: USB disconnect, device number 8 [ 220.286841][ T5787] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 220.365348][ T5787] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 220.441418][ T5787] keyspan 1-1:1.0: device disconnected [ 220.561410][ T8260] i2c i2c-0: delete_device: Can't parse I2C address [ 220.643050][ T8081] 8021q: adding VLAN 0 to HW filter on device bond0 [ 220.784861][ T8081] 8021q: adding VLAN 0 to HW filter on device team0 [ 220.822462][ T8264] FAULT_INJECTION: forcing a failure. [ 220.822462][ T8264] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 220.882492][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.889668][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.916449][ T8264] CPU: 0 PID: 8264 Comm: syz.0.832 Not tainted syzkaller #0 [ 220.923770][ T8264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 220.933864][ T8264] Call Trace: [ 220.937164][ T8264] [ 220.940102][ T8264] dump_stack_lvl+0x18c/0x250 [ 220.944790][ T8264] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 220.950952][ T8264] ? show_regs_print_info+0x20/0x20 [ 220.956157][ T8264] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 220.962329][ T8264] should_fail_ex+0x394/0x4c0 [ 220.967040][ T8264] _copy_from_user+0x2f/0xe0 [ 220.971645][ T8264] kstrtouint_from_user+0xde/0x170 [ 220.976771][ T8264] ? kstrtol_from_user+0x190/0x190 [ 220.981899][ T8264] ? get_pid_task+0x20/0x1e0 [ 220.986508][ T8264] proc_fail_nth_write+0x8f/0x250 [ 220.991550][ T8264] ? proc_fail_nth_read+0x260/0x260 [ 220.996759][ T8264] ? iov_iter_iovec_advance+0x1ef/0x290 [ 221.002323][ T8264] do_iter_write+0x4e5/0xc50 [ 221.006940][ T8264] ? proc_fail_nth_read+0x260/0x260 [ 221.012152][ T8264] ? vfs_iter_write+0xa0/0xa0 [ 221.016839][ T8264] ? rcu_read_lock_any_held+0xb4/0x140 [ 221.022324][ T8264] ? rcu_read_lock_bh_held+0x100/0x100 [ 221.027806][ T8264] do_writev+0x27f/0x480 [ 221.032071][ T8264] ? do_readv+0x460/0x460 [ 221.036435][ T8264] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 221.042442][ T8264] ? lock_chain_count+0x20/0x20 [ 221.047308][ T8264] ? lockdep_hardirqs_on+0x98/0x150 [ 221.052516][ T8264] do_syscall_64+0x55/0xb0 [ 221.056938][ T8264] ? clear_bhb_loop+0x40/0x90 [ 221.061620][ T8264] ? clear_bhb_loop+0x40/0x90 [ 221.066302][ T8264] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 221.072255][ T8264] RIP: 0033:0x7f4247b9e1d9 [ 221.076684][ T8264] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 221.096296][ T8264] RSP: 002b:00007f4248aa7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 221.104814][ T8264] RAX: ffffffffffffffda RBX: 00007f4247e25fa0 RCX: 00007f4247b9e1d9 [ 221.112790][ T8264] RDX: 0000000000000003 RSI: 00002000000003c0 RDI: 0000000000000003 [ 221.120791][ T8264] RBP: 00007f4247c35888 R08: 0000000000000000 R09: 0000000000000000 [ 221.128768][ T8264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 221.136746][ T8264] R13: 00007f4247e26038 R14: 00007f4247e25fa0 R15: 00007ffc85a3abb8 [ 221.144738][ T8264] [ 221.276259][ T8253] loop2: detected capacity change from 0 to 40427 [ 221.283945][ T3492] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.291113][ T3492] bridge0: port 2(bridge_slave_1) entered forwarding state [ 221.311511][ T8253] F2FS-fs (loop2): Fix alignment : internally, start(4096) end(16896) block(12288) [ 221.412148][ T8253] F2FS-fs (loop2): invalid crc value [ 221.506167][ T8253] F2FS-fs (loop2): Found nat_bits in checkpoint [ 221.726375][ T8253] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 221.938243][ T8253] F2FS-fs (loop2): Try to recover all the superblocks, ret: 0 [ 222.049738][ T8284] f2fs_ckpt-7:2: attempt to access beyond end of device [ 222.049738][ T8284] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 222.160257][ T8284] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 222.380906][ T8081] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 222.475048][ T8294] loop4: detected capacity change from 0 to 1024 [ 223.186847][ T5787] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 223.417583][ T5787] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 223.460354][ T5787] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 223.535228][ T5787] usb 1-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 223.585146][ T5787] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.605967][ T8314] loop4: detected capacity change from 0 to 512 [ 223.637933][ T5787] usb 1-1: Product: syz [ 223.642138][ T5787] usb 1-1: Manufacturer: syz [ 223.716125][ T5787] usb 1-1: SerialNumber: syz [ 223.753138][ T8314] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.840045][ T8314] ext4 filesystem being mounted at /96/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 223.858438][ T8081] veth0_vlan: entered promiscuous mode [ 223.931589][ T8081] veth1_vlan: entered promiscuous mode [ 223.999742][ T5787] usblp 1-1:1.0: usblp0: USB Bidirectional printer dev 9 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 224.079300][ T8081] veth0_macvtap: entered promiscuous mode [ 224.104893][ T6930] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.132501][ T8081] veth1_macvtap: entered promiscuous mode [ 224.225988][ T5824] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 224.250091][ T8081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.292784][ C0] usblp0: nonzero read bulk status received: -71 [ 224.299594][ T174] usb 1-1: USB disconnect, device number 9 [ 224.331369][ T174] usblp0: removed [ 224.338837][ T8081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.390369][ T8081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.418976][ T8081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.445061][ T8081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.462866][ T5824] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 224.483632][ T8081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.500566][ T5824] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 224.549184][ T8081] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 224.566456][ T5824] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 224.592132][ T8081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.613910][ T5824] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 224.660963][ T8081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.683992][ T5824] usb 3-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 224.709193][ T8081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.730050][ T5824] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.758861][ T8081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.790127][ T8321] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 224.831126][ T8081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.841918][ T8321] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 224.893945][ T5824] keyspan 3-1:1.0: Keyspan 2 port adapter converter detected [ 224.925748][ T8081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.953212][ T5824] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 84 [ 224.977723][ T8081] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 225.008654][ T5824] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 2 [ 225.044739][ T8081] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.074430][ T5824] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 225.138444][ T8336] netlink: 8 bytes leftover after parsing attributes in process `syz.0.847'. [ 225.155999][ T8081] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.166987][ T5824] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 88 [ 225.174703][ T5824] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 6 [ 225.211299][ T8081] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.259436][ T8081] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.275134][ T5824] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 225.334099][ T8338] netlink: 'syz.4.848': attribute type 1 has an invalid length. [ 225.625028][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.680651][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.835177][ T3492] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.852375][ T5787] usb 3-1: USB disconnect, device number 8 [ 225.889040][ T3492] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.917326][ T5787] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 226.026218][ T5787] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 226.100819][ T5787] keyspan 3-1:1.0: device disconnected [ 226.281996][ T8352] netlink: 27 bytes leftover after parsing attributes in process `syz.4.853'. [ 226.576742][ T5842] cp2112 0003:10C4:EA90.000A: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 226.644606][ T5842] cp2112 0003:10C4:EA90.000A: error requesting version [ 226.737008][ T5842] cp2112: probe of 0003:10C4:EA90.000A failed with error -5 [ 226.931104][ T8363] fido_id[8363]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 227.071147][ T8376] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 227.454671][ T8389] loop2: detected capacity change from 0 to 256 [ 227.582439][ T8389] FAT-fs (loop2): Directory bread(block 64) failed [ 227.615964][ T5824] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 227.644692][ T8389] FAT-fs (loop2): Directory bread(block 65) failed [ 227.683525][ T8394] loop5: detected capacity change from 0 to 256 [ 227.700684][ T8389] FAT-fs (loop2): Directory bread(block 66) failed [ 227.730858][ T8389] FAT-fs (loop2): Directory bread(block 67) failed [ 227.781502][ T8389] FAT-fs (loop2): Directory bread(block 68) failed [ 227.834155][ T8389] FAT-fs (loop2): Directory bread(block 69) failed [ 227.843761][ T5824] usb 5-1: Using ep0 maxpacket: 32 [ 227.867988][ T5824] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 227.885945][ T8389] FAT-fs (loop2): Directory bread(block 70) failed [ 227.913948][ T8389] FAT-fs (loop2): Directory bread(block 71) failed [ 227.920875][ T5824] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.973120][ T8389] FAT-fs (loop2): Directory bread(block 72) failed [ 227.990712][ T5824] usb 5-1: config 0 descriptor?? [ 228.027226][ T8389] FAT-fs (loop2): Directory bread(block 73) failed [ 228.057109][ T5824] gspca_main: sunplus-2.14.0 probing 041e:400b [ 228.481427][ T8405] bond0: invalid ARP target specified [ 228.862363][ T5824] gspca_sunplus: reg_r err -71 [ 228.885805][ T5824] sunplus: probe of 5-1:0.0 failed with error -71 [ 228.943251][ T5824] usb 5-1: USB disconnect, device number 3 [ 229.331755][ T8425] TCP: tcp_parse_options: Illegal window scaling value 215 > 14 received [ 229.678648][ T8435] tap0: tun_chr_ioctl cmd 1074025677 [ 229.684116][ T8435] tap0: linktype set to 6 [ 229.934893][ T8410] loop0: detected capacity change from 0 to 32768 [ 230.013157][ T8442] loop2: detected capacity change from 0 to 8 [ 230.097363][ T8410] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 230.144893][ T6241] blk_print_req_error: 10 callbacks suppressed [ 230.144908][ T6241] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 230.315845][ T8410] XFS (loop0): Ending clean mount [ 230.459033][ T5824] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 230.592149][ T5777] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 230.688969][ T5824] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 230.751671][ T5824] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 230.829241][ T5824] usb 3-1: config 220 has an invalid descriptor of length 117, skipping remainder of the config [ 230.927759][ T5824] usb 3-1: config 220 has no interface number 2 [ 230.973923][ T5824] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 231.092001][ T5824] usb 3-1: config 220 interface 0 has no altsetting 0 [ 231.147510][ T5824] usb 3-1: config 220 interface 76 has no altsetting 0 [ 231.215295][ T5824] usb 3-1: config 220 interface 1 has no altsetting 0 [ 231.290319][ T5824] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 231.320868][ T5824] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.378193][ T8474] bond0: (slave dummy0): Error: Device can not be enslaved while up [ 231.408772][ T5824] usb 3-1: Product: syz [ 231.413002][ T5824] usb 3-1: Manufacturer: syz [ 231.467682][ T5824] usb 3-1: SerialNumber: syz [ 231.750151][ T5824] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 231.796163][ T5824] usb 3-1: No valid video chain found. [ 231.835796][ T5824] usb 3-1: selecting invalid altsetting 0 [ 231.903834][ T5824] usb 3-1: selecting invalid altsetting 0 [ 231.913046][ T8487] loop0: detected capacity change from 0 to 128 [ 231.941783][ T5824] usbtest: probe of 3-1:220.1 failed with error -22 [ 232.000465][ T8487] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 232.040739][ T5824] usb 3-1: USB disconnect, device number 9 [ 232.157224][ T8487] ext4 filesystem being mounted at /235/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 232.188852][ C0] vkms_vblank_simulate: vblank timer overrun [ 232.497708][ T5777] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 232.958430][ T8508] loop2: detected capacity change from 0 to 4096 [ 233.093979][ T8514] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 233.122842][ T8513] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 233.220868][ T27] audit: type=1800 audit(2000000112.820:25): pid=8508 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.903" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 233.563796][ T8522] netlink: 76 bytes leftover after parsing attributes in process `syz.5.908'. [ 233.675881][ T8526] netlink: 76 bytes leftover after parsing attributes in process `syz.5.908'. [ 234.864809][ T8525] loop0: detected capacity change from 0 to 32768 [ 234.921512][ T8552] bonding: no command found in bonding_masters - use +ifname or -ifname [ 234.981928][ T8525] JBD2: Ignoring recovery information on journal [ 235.087444][ T8556] netlink: 8 bytes leftover after parsing attributes in process `syz.5.920'. [ 235.172378][ T8525] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 235.365700][ T27] audit: type=1400 audit(2000000114.970:26): apparmor="STATUS" info="invalid profile format" error=-93 profile="unconfined" pid=8560 comm="syz.2.921" [ 235.566031][ T27] audit: type=1400 audit(2000000115.170:27): apparmor="STATUS" info="invalid profile format" error=-93 profile="unconfined" pid=8564 comm="syz.5.922" [ 235.655065][ T5777] ocfs2: Unmounting device (7,0) on (node local) [ 235.798587][ T27] audit: type=1800 audit(2000000115.400:28): pid=8567 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.924" name="dummy_udc" dev="gadgetfs" ino=6470 res=0 errno=0 [ 236.195314][ T8580] loop5: detected capacity change from 0 to 2048 [ 236.222134][ T8583] program syz.4.929 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 236.331860][ T8580] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 236.364248][ T8584] loop2: detected capacity change from 0 to 2048 [ 236.400321][ T8580] ext4 filesystem being mounted at /29/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 236.452591][ T8589] loop0: detected capacity change from 0 to 512 [ 236.547365][ T8584] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 236.686696][ T27] audit: type=1800 audit(2000000116.300:29): pid=8584 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.930" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 236.732136][ T8584] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 236.790027][ T8580] fs-verity: sha512 using implementation "sha512-avx2" [ 236.903112][ T8584] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 237.028298][ T8598] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 237.073325][ T8081] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.103891][ T8584] EXT4-fs (loop2): This should not happen!! Data will be lost [ 237.103891][ T8584] [ 237.139172][ T8602] loop4: detected capacity change from 0 to 1024 [ 237.149021][ T8598] EXT4-fs (loop2): This should not happen!! Data will be lost [ 237.149021][ T8598] [ 237.237366][ T8598] EXT4-fs (loop2): Total free blocks count 0 [ 237.243411][ T8598] EXT4-fs (loop2): Free/Dirty block details [ 237.336233][ T8584] EXT4-fs (loop2): Total free blocks count 0 [ 237.342356][ T8584] EXT4-fs (loop2): Free/Dirty block details [ 237.406353][ T8598] EXT4-fs (loop2): free_blocks=2415919104 [ 237.798522][ T8615] loop0: detected capacity change from 0 to 8 [ 237.918603][ T8615] SQUASHFS error: lzo decompression failed, data probably corrupt [ 237.965295][ T8615] SQUASHFS error: Failed to read block 0x144: -5 [ 238.003444][ T8615] SQUASHFS error: Unable to read metadata cache entry [142] [ 238.028138][ T8615] SQUASHFS error: Unable to read inode 0x11f [ 238.453664][ T8635] netlink: 8 bytes leftover after parsing attributes in process `syz.0.948'. [ 238.507626][ T8637] loop2: detected capacity change from 0 to 512 [ 238.533918][ T8637] EXT4-fs: inline encryption not supported [ 238.596005][ T8637] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 238.640784][ T8637] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 238.756677][ T8637] Quota error (device loop2): do_insert_tree: Free block already used in tree: block 1 [ 238.796412][ T8637] Quota error (device loop2): qtree_write_dquot: Error -5 occurred while creating quota [ 238.830743][ T8646] binder: BINDER_SET_CONTEXT_MGR already set [ 238.837778][ T8637] EXT4-fs error (device loop2): ext4_acquire_dquot:6953: comm syz.2.949: Failed to acquire dquot type 1 [ 238.853399][ T8646] binder: 8645:8646 ioctl 4018620d 200000004a80 returned -16 [ 238.884051][ T8637] EXT4-fs (loop2): Remounting filesystem read-only [ 238.912564][ T8637] EXT4-fs (loop2): 1 truncate cleaned up [ 238.937653][ T8637] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 238.985757][ T5787] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 239.195771][ T5787] usb 1-1: Using ep0 maxpacket: 16 [ 239.212809][ T5787] usb 1-1: config 1 has an invalid interface number: 193 but max is 0 [ 239.228427][ T5787] usb 1-1: config 1 has no interface number 0 [ 239.259037][ T5787] usb 1-1: config 1 interface 193 has no altsetting 0 [ 239.288013][ T5787] usb 1-1: New USB device found, idVendor=0a5c, idProduct=2033, bcdDevice= 3.b3 [ 239.315955][ T5787] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.354498][ T5787] usb 1-1: Product: syz [ 239.359831][ T5787] usb 1-1: Manufacturer: syz [ 239.384986][ T5787] usb 1-1: SerialNumber: syz [ 239.591303][ T5778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.670261][ T5787] usb 1-1: USB disconnect, device number 10 [ 239.806277][ T8650] loop4: detected capacity change from 0 to 32768 [ 239.842839][ T8650] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 9 [ 240.069586][ T5782] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 9 [ 240.220243][ T8660] loop5: detected capacity change from 0 to 512 [ 240.282375][ T8660] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 240.416316][ T8660] EXT4-fs (loop5): 1 truncate cleaned up [ 240.465363][ T8660] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 240.496653][ T8670] loop0: detected capacity change from 0 to 16 [ 240.555169][ T8670] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 240.799659][ T8081] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.746516][ T8696] program syz.0.968 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 241.892090][ T27] audit: type=1807 audit(2000000121.500:30): action=appraise func=FIRMWARE_CHECK res=1 [ 241.906879][ T8700] ima: policy update completed [ 241.958606][ T27] audit: type=1802 audit(2000000121.520:31): pid=8700 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=completed comm="syz.2.972" res=1 errno=0 [ 242.233139][ T8677] loop5: detected capacity change from 0 to 32768 [ 242.345454][ T8677] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 242.460426][ T8677] XFS (loop5): Ending clean mount [ 242.500510][ T8677] XFS (loop5): Quotacheck needed: Please wait. [ 242.634583][ T8677] XFS (loop5): Quotacheck: Done. [ 242.648904][ T8726] loop2: detected capacity change from 0 to 256 [ 242.757555][ T8677] XFS (loop5): User initiated shutdown received. [ 242.784473][ T8677] XFS (loop5): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:501). Shutting down filesystem. [ 242.863041][ T8677] XFS (loop5): Please unmount the filesystem and rectify the problem(s) [ 243.016242][ T8081] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 243.678487][ T8737] loop2: detected capacity change from 0 to 4096 [ 243.752071][ T8737] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 243.891634][ T8728] loop4: detected capacity change from 0 to 32768 [ 243.957291][ T8737] ntfs: volume version 3.1. [ 243.982127][ T8728] XFS (loop4): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 244.112477][ T8728] XFS (loop4): Ending clean mount [ 244.480965][ T6930] XFS (loop4): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 244.761598][ T8759] loop2: detected capacity change from 0 to 128 [ 244.835857][ T8759] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 244.935897][ T8759] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 245.808262][ T8774] loop0: detected capacity change from 0 to 8192 [ 245.834661][ T8781] loop2: detected capacity change from 0 to 1024 [ 245.876485][ T8774] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 245.894252][ T8781] EXT4-fs: inline encryption not supported [ 245.961833][ T8781] EXT4-fs: Ignoring removed nomblk_io_submit option [ 246.011443][ T8774] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 246.043827][ T8781] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 246.085861][ T8774] REISERFS (device loop0): using ordered data mode [ 246.133120][ T8774] reiserfs: using flush barriers [ 246.183580][ T8781] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 246.205775][ T8774] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 246.291108][ T8781] ext4 filesystem being mounted at /267/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 246.328906][ T8761] loop5: detected capacity change from 0 to 32768 [ 246.340030][ T8774] REISERFS (device loop0): checking transaction log (loop0) [ 246.441789][ T8781] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz.2.998: bg 0: block 112: padding at end of block bitmap is not set [ 246.493831][ T8761] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 246.590348][ T8781] EXT4-fs (loop2): Remounting filesystem read-only [ 246.658328][ T8761] XFS (loop5): Ending clean mount [ 246.755037][ T8774] REISERFS (device loop0): Using tea hash to sort names [ 246.800370][ T5778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 246.817241][ T8774] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 247.214188][ T8081] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 247.356685][ T8814] loop4: detected capacity change from 0 to 4096 [ 247.394946][ T8814] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 247.435809][ T5787] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 247.543885][ T8814] ntfs3: loop4: ino=19, mi_enum_attr [ 247.626903][ T8814] ntfs3: loop4: failed to convert "c46c" to cp850 [ 247.659420][ T5787] usb 3-1: Using ep0 maxpacket: 8 [ 247.686854][ T8814] ntfs3: loop4: ino=20, mi_enum_attr [ 247.696914][ T5787] usb 3-1: config index 0 descriptor too short (expected 74, got 45) [ 247.728523][ T5787] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 247.773544][ T5787] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 247.829179][ T5787] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 247.897393][ T5787] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 247.945237][ T5787] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 247.955811][ T174] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 247.995770][ T5787] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.167971][ T174] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 64 [ 248.192492][ T8827] loop4: detected capacity change from 0 to 256 [ 248.205969][ T174] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x81 has invalid maxpacket 64 [ 248.242748][ T5787] usb 3-1: GET_CAPABILITIES returned 0 [ 248.254899][ T174] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 248.293461][ T5787] usbtmc 3-1:16.0: can't read capabilities [ 248.359975][ T174] usb 1-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice= 1.00 [ 248.451058][ T174] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 248.482926][ T5787] usb 3-1: USB disconnect, device number 10 [ 248.534311][ T174] usb 1-1: Product: syz [ 248.575669][ T174] usb 1-1: Manufacturer: syz [ 248.783912][ T8831] sctp: [Deprecated]: syz.4.1009 (pid 8831) Use of struct sctp_assoc_value in delayed_ack socket option. [ 248.783912][ T8831] Use struct sctp_sack_info instead [ 248.885071][ T8818] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 248.918941][ T8818] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 249.007361][ T174] dvb_ttusb_budget: ttusb_init_controller: error [ 249.071832][ T174] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 249.429031][ T174] DVB: Unable to find symbol cx22700_attach() [ 249.603419][ T174] DVB: Unable to find symbol tda10046_attach() [ 249.644401][ T174] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 249.755832][ T174] usb 1-1: USB disconnect, device number 11 [ 250.161897][ T8859] loop2: detected capacity change from 0 to 8192 [ 250.257528][ T8866] loop4: detected capacity change from 0 to 1024 [ 250.275421][ T8859] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 251.332925][ T8885] loop4: detected capacity change from 0 to 2048 [ 251.492607][ T8885] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 251.606062][ T8885] EXT4-fs (loop4): shut down requested (1) [ 251.737172][ T6930] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 251.785708][ T2178] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 251.980328][ T8908] loop5: detected capacity change from 0 to 512 [ 252.009734][ T2178] usb 1-1: Using ep0 maxpacket: 8 [ 252.046077][ T174] IPVS: starting estimator thread 0... [ 252.053875][ T2178] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 252.090243][ T8908] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 252.118941][ T2178] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 252.146578][ T8908] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802c01c, mo2=0002] [ 252.196462][ T8913] IPVS: using max 26 ests per chain, 62400 per kthread [ 252.215949][ T2178] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 252.230333][ T8908] EXT4-fs (loop5): orphan cleanup on readonly fs [ 252.294105][ T2178] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 252.319561][ T8908] EXT4-fs error (device loop5): ext4_orphan_get:1408: inode #13: comm syz.5.1033: iget: bad i_size value: 12154761577498 [ 252.374351][ T8908] EXT4-fs error (device loop5): ext4_orphan_get:1413: comm syz.5.1033: couldn't read orphan inode 13 (err -117) [ 252.388967][ T2178] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 252.440317][ T2178] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.486741][ T8908] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 252.638907][ T8908] EXT4-fs (loop5): shut down requested (0) [ 252.716946][ T2178] usb 1-1: GET_CAPABILITIES returned 0 [ 252.750934][ T2178] usbtmc 1-1:16.0: can't read capabilities [ 252.780549][ T8081] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.934019][ T2178] usb 1-1: USB disconnect, device number 12 [ 254.170861][ T8949] program syz.5.1042 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 255.248028][ T8976] loop4: detected capacity change from 0 to 512 [ 255.318560][ T8976] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 255.638414][ T8952] loop2: detected capacity change from 0 to 32768 [ 255.741346][ T8983] loop5: detected capacity change from 0 to 4096 [ 255.836260][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.836354][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.868553][ T8990] binder: 8987:8990 ioctl 40046205 0 returned -22 [ 256.000682][ T8992] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 256.457920][ T8999] loop5: detected capacity change from 0 to 512 [ 257.678529][ T9033] loop2: detected capacity change from 0 to 1024 [ 257.745096][ T9033] EXT4-fs: Ignoring removed bh option [ 257.810239][ T9033] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 257.896853][ T9033] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 258.016853][ T9048] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 258.047477][ T9033] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 258.416196][ T5778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.042232][ T9076] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 259.155552][ T9076] infiniband s`z1: RDMA CMA: cma_listen_on_dev, error -98 [ 260.081282][ T9100] binder: 9099:9100 ioctl 4018620d 0 returned -22 [ 260.194521][ T9069] loop2: detected capacity change from 0 to 40427 [ 260.269140][ T9069] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 260.336976][ T9069] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 260.404932][ T9069] F2FS-fs (loop2): invalid crc value [ 260.489510][ T9069] F2FS-fs (loop2): Found nat_bits in checkpoint [ 260.784864][ T9069] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 260.835676][ T9069] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 261.322527][ T9128] loop0: detected capacity change from 0 to 64 [ 261.455799][ T9130] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1103'. [ 262.546559][ T9152] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.652053][ T9156] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1110'. [ 262.892065][ T9134] loop4: detected capacity change from 0 to 32768 [ 262.994507][ T9134] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 9 [ 263.032260][ T5789] Bluetooth: hci0: command 0x0406 tx timeout [ 263.347178][ T5782] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 9 [ 263.948079][ T9184] loop5: detected capacity change from 0 to 4096 [ 264.036698][ T9184] ntfs3: loop5: Different NTFS sector size (4096) and media sector size (512). [ 264.200147][ T9184] ntfs3: loop5: ino=19, mi_enum_attr [ 264.205489][ T9184] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 264.308600][ T9194] loop2: detected capacity change from 0 to 256 [ 264.321079][ T9184] ntfs3: loop5: ino=1a, mi_enum_attr [ 264.370569][ T9194] exfat: Bad value for 'uid' [ 264.381719][ T9184] ntfs3: loop5: ino=1a, mi_enum_attr [ 264.429350][ T9184] ntfs3: loop5: Failed to initialize $Extend/$Reparse. [ 264.448130][ T5782] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 264.592720][ T9184] ntfs3: loop5: ino=5, "/" directory corrupted [ 265.329151][ T9208] loop4: detected capacity change from 0 to 8192 [ 265.384271][ T9181] loop0: detected capacity change from 0 to 32768 [ 266.723994][ T2178] kernel write not supported for file /input/mice (pid: 2178 comm: kworker/0:3) [ 266.856130][ T5787] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 266.925783][ T5824] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 267.059955][ T5787] usb 6-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 267.069472][ T5787] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.080671][ T5787] usb 6-1: Product: syz [ 267.084855][ T5787] usb 6-1: Manufacturer: syz [ 267.093704][ T5787] usb 6-1: SerialNumber: syz [ 267.106319][ T2178] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 267.121970][ T5824] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 267.137822][ T5824] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 267.150479][ T5824] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 267.164625][ T5824] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 267.177516][ T5824] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.198234][ T5824] usb 3-1: config 0 descriptor?? [ 267.324719][ T2178] usb 5-1: Using ep0 maxpacket: 32 [ 267.341862][ T2178] usb 5-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 267.353829][ T2178] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.365370][ T2178] usb 5-1: Product: syz [ 267.370954][ T2178] usb 5-1: Manufacturer: syz [ 267.378492][ T2178] usb 5-1: SerialNumber: syz [ 267.385232][ T2178] usb 5-1: config 0 descriptor?? [ 267.623252][ T5824] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving [ 267.661011][ T5824] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 267.776826][ T5787] rtl8150 6-1:1.0: eth9: rtl8150 is detected [ 267.823965][ T5787] usb 3-1: USB disconnect, device number 11 [ 268.002069][ T174] usb 6-1: USB disconnect, device number 2 [ 268.012155][ T2178] peak_usb 5-1:0.0: PEAK-System PCAN-USB Pro hwrev 0 serial 00000000.00000000 (2 channels) [ 268.057461][ T2178] peak_usb 5-1:0.0 can0: sending command failure: -22 [ 268.085187][ T2178] peak_usb 5-1:0.0 can0: sending command failure: -22 [ 268.147905][ T5786] Bluetooth: hci3: command 0x0406 tx timeout [ 268.166577][ T2178] peak_usb: probe of 5-1:0.0 failed with error -22 [ 268.282090][ T2178] usb 5-1: USB disconnect, device number 4 [ 268.805242][ T9277] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1146'. [ 269.178924][ T9287] loop4: detected capacity change from 0 to 16 [ 269.213359][ T9287] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 270.152584][ T9312] netlink: 'syz.0.1159': attribute type 29 has an invalid length. [ 270.217717][ T9312] netlink: 'syz.0.1159': attribute type 29 has an invalid length. [ 270.227395][ T9313] loop4: detected capacity change from 0 to 2048 [ 270.273962][ T9316] netlink: 'syz.0.1159': attribute type 29 has an invalid length. [ 270.337366][ T9313] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 270.359037][ T9323] netlink: 'syz.0.1159': attribute type 29 has an invalid length. [ 270.579701][ T6930] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.635977][ T5787] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 270.836213][ T9334] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1165'. [ 270.860548][ T5787] usb 3-1: Using ep0 maxpacket: 32 [ 270.908934][ T5787] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 270.952908][ T5787] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.985899][ T9334] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1165'. [ 271.013345][ T5787] usb 3-1: Product: syz [ 271.036033][ T5787] usb 3-1: Manufacturer: syz [ 271.065759][ T5787] usb 3-1: SerialNumber: syz [ 271.099450][ T5787] usb 3-1: config 0 descriptor?? [ 271.540448][ T5787] airspy 3-1:0.0: Board ID: 00 [ 271.565556][ T5787] airspy 3-1:0.0: Firmware version: [ 271.744572][ T5787] airspy 3-1:0.0: usb_control_msg() failed -71 request 11 [ 271.819297][ T5787] airspy 3-1:0.0: Registered as swradio24 [ 271.827409][ T9355] loop4: detected capacity change from 0 to 2048 [ 271.852330][ T5787] airspy 3-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 271.888028][ T9355] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 271.941016][ T9355] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 271.956849][ T5787] usb 3-1: USB disconnect, device number 12 [ 272.057137][ T9355] overlayfs: upper fs needs to support d_type. [ 272.111158][ T9355] overlayfs: cleanup of 'work/#b' failed (-2) [ 272.154059][ T9355] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 272.204396][ T9355] overlayfs: failed to set xattr on upper [ 272.240742][ T9355] overlayfs: ...falling back to redirect_dir=nofollow. [ 272.298766][ T9355] overlayfs: ...falling back to metacopy=off. [ 272.365884][ T9355] overlayfs: ...falling back to index=off. [ 272.420481][ T9355] overlayfs: ...falling back to uuid=null. [ 272.597740][ T6930] UDF-fs: error (device loop4): udf_read_inode: (ino 1347) failed !bh [ 272.642811][ T6930] UDF-fs: error (device loop4): udf_read_inode: (ino 1347) failed !bh [ 273.372631][ T9383] loop7: detected capacity change from 0 to 7 [ 273.430496][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 273.439712][ C0] buffer_io_error: 10 callbacks suppressed [ 273.439722][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 273.464362][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 273.473634][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 273.506431][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 273.515656][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 273.526820][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 273.536016][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 273.544610][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 273.553831][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 273.565654][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 273.574841][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 273.585896][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 273.595067][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 273.610929][ T9383] ldm_validate_partition_table(): Disk read failed. [ 273.658439][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 273.667687][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 273.681849][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 273.691059][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 273.712215][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 273.721421][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 273.738568][ T49] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.750498][ T9383] Dev loop7: unable to read RDB block 0 [ 273.778927][ T9383] loop7: unable to read partition table [ 273.784826][ T9383] loop7: partition table beyond EOD, truncated [ 273.821302][ T174] kernel write not supported for file /input/mice (pid: 174 comm: kworker/0:2) [ 273.840761][ T9383] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 274.012381][ T5143] ldm_validate_partition_table(): Disk read failed. [ 274.044194][ T5143] Dev loop7: unable to read RDB block 0 [ 274.054336][ T5143] loop7: unable to read partition table [ 274.074181][ T5143] loop7: partition table beyond EOD, truncated [ 274.087750][ T49] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.251264][ T49] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.421440][ T49] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.761055][ T9401] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 274.886073][ T5787] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 275.126466][ T5787] usb 1-1: Using ep0 maxpacket: 8 [ 275.142099][ T5787] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 275.191756][ T5787] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 275.232934][ T5787] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 275.305666][ T5787] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 275.378444][ T5787] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 275.456992][ T5787] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 275.538197][ T5787] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.553459][ T5786] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 275.565504][ T5786] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 275.575029][ T5786] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 275.582901][ T5786] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 275.590778][ T5786] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 275.598134][ T5786] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 275.886811][ T5787] usb 1-1: GET_CAPABILITIES returned 0 [ 275.929821][ T5787] usbtmc 1-1:16.0: can't read capabilities [ 276.086689][ T5842] usb 1-1: USB disconnect, device number 13 [ 276.752017][ T27] audit: type=1400 audit(2000000157.355:32): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="foo" pid=9429 comm="syz.2.1204" name="foo" offset=60 [ 277.371841][ T9445] vxcan0: tx address claim with dest, not broadcast [ 277.452974][ T9409] chnl_net:caif_netlink_parms(): no params data found [ 277.624974][ T9446] loop0: detected capacity change from 0 to 8192 [ 277.669356][ T5786] Bluetooth: hci3: command tx timeout [ 277.718850][ T49] hsr_slave_0: left promiscuous mode [ 277.821176][ T49] hsr_slave_1: left promiscuous mode [ 277.899055][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 277.962765][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 278.056350][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 278.106878][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 278.172959][ T49] bridge_slave_1: left allmulticast mode [ 278.205487][ T49] bridge_slave_1: left promiscuous mode [ 278.244961][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.309364][ T49] bridge_slave_0: left allmulticast mode [ 278.343895][ T49] bridge_slave_0: left promiscuous mode [ 278.379586][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.600247][ T49] veth1_macvtap: left promiscuous mode [ 278.631682][ T49] veth0_macvtap: left promiscuous mode [ 278.662988][ T49] veth1_vlan: left promiscuous mode [ 278.692749][ T49] veth0_vlan: left promiscuous mode [ 279.690522][ T9480] loop5: detected capacity change from 0 to 256 [ 279.745899][ T5786] Bluetooth: hci3: command tx timeout [ 279.824006][ T9480] FAT-fs (loop5): Directory bread(block 64) failed [ 279.849708][ T9480] FAT-fs (loop5): Directory bread(block 65) failed [ 279.894938][ T9480] FAT-fs (loop5): Directory bread(block 66) failed [ 279.932085][ T9480] FAT-fs (loop5): Directory bread(block 67) failed [ 279.972879][ T9480] FAT-fs (loop5): Directory bread(block 68) failed [ 280.001644][ T9480] FAT-fs (loop5): Directory bread(block 69) failed [ 280.034892][ T9480] FAT-fs (loop5): Directory bread(block 70) failed [ 280.059924][ T9480] FAT-fs (loop5): Directory bread(block 71) failed [ 280.077882][ T9480] FAT-fs (loop5): Directory bread(block 72) failed [ 280.084459][ T9480] FAT-fs (loop5): Directory bread(block 73) failed [ 280.194149][ T9475] loop0: detected capacity change from 0 to 32768 [ 280.287537][ T9475] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 280.450763][ T9475] XFS (loop0): Ending clean mount [ 280.572875][ T5777] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 281.728522][ T49] team0 (unregistering): Port device team_slave_1 removed [ 281.835684][ T5786] Bluetooth: hci3: command tx timeout [ 281.895048][ T49] team0 (unregistering): Port device team_slave_0 removed [ 282.039878][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 282.180276][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 282.290478][ T9506] loop0: detected capacity change from 0 to 64 [ 282.377671][ T9506] hfs: request for non-existent node 131072 in B*Tree [ 282.408802][ T9506] hfs: request for non-existent node 131072 in B*Tree [ 283.123950][ T49] bond0 (unregistering): Released all slaves [ 283.294921][ T9504] tap0: tun_chr_ioctl cmd 1074025672 [ 283.339481][ T9504] tap0: ignored: set checksum disabled [ 283.673889][ T9409] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.736267][ T9409] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.790081][ T9409] bridge_slave_0: entered allmulticast mode [ 283.844656][ T9409] bridge_slave_0: entered promiscuous mode [ 283.892164][ T9409] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.905991][ T5786] Bluetooth: hci3: command tx timeout [ 283.959696][ T9409] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.994178][ T9409] bridge_slave_1: entered allmulticast mode [ 284.037374][ T9409] bridge_slave_1: entered promiscuous mode [ 284.224294][ T9409] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 284.340552][ T9409] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 284.451372][ T49] IPVS: stop unused estimator thread 0... [ 284.611112][ T9409] team0: Port device team_slave_0 added [ 284.691022][ T9409] team0: Port device team_slave_1 added [ 284.934079][ T9409] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 284.961735][ T9409] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 285.059855][ T9409] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 285.133930][ T9409] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 285.188838][ T9409] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 285.338727][ T9409] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 285.691082][ T9409] hsr_slave_0: entered promiscuous mode [ 285.725053][ T9409] hsr_slave_1: entered promiscuous mode [ 285.731841][ T9409] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 285.731893][ T9409] Cannot create hsr debugfs directory [ 286.563475][ T9585] program syz.5.1253 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 286.891361][ T9409] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 286.964338][ T9409] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 287.729665][ T9594] loop0: detected capacity change from 0 to 131072 [ 287.789428][ T9594] F2FS-fs (loop0): Wrong secs_per_zone / total_sections (512, 24) [ 287.797793][ T9594] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 287.806662][ T9594] F2FS-fs (loop0): Test dummy encryption mode enabled [ 287.815104][ T9594] F2FS-fs (loop0): invalid crc value [ 287.871209][ T9594] F2FS-fs (loop0): Found nat_bits in checkpoint [ 287.907437][ T9594] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix. [ 287.928272][ T9594] F2FS-fs (loop0): Start checkpoint disabled! [ 287.946801][ T9594] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 287.953897][ T9594] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 288.062062][ T9409] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 288.145044][ T9409] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 288.770371][ T9409] 8021q: adding VLAN 0 to HW filter on device bond0 [ 288.913735][ T9618] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 288.925015][ T9409] 8021q: adding VLAN 0 to HW filter on device team0 [ 289.068531][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.075758][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state [ 289.139361][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.146598][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state [ 290.260391][ T9644] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1267'. [ 290.894989][ T9409] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 291.530484][ T5842] input: syz0 as /devices/virtual/misc/uhid/0005:0576:0306.000C/input/input15 [ 291.648471][ T5842] hid-generic 0005:0576:0306.000C: input,hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 291.825918][ T174] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 292.065760][ T174] usb 1-1: Using ep0 maxpacket: 8 [ 292.092280][ T174] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000c, bcdDevice= 0.40 [ 292.146541][ T174] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.203643][ T174] usb 1-1: Product: syz [ 292.230026][ T174] usb 1-1: Manufacturer: syz [ 292.234660][ T174] usb 1-1: SerialNumber: syz [ 292.262013][ T9409] veth0_vlan: entered promiscuous mode [ 292.362888][ T9409] veth1_vlan: entered promiscuous mode [ 292.563921][ T9409] veth0_macvtap: entered promiscuous mode [ 292.571475][ T174] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 292.625291][ T174] usb 1-1: MIDIStreaming interface descriptor not found [ 292.641768][ T9409] veth1_macvtap: entered promiscuous mode [ 292.758778][ T9409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 292.822487][ T174] usb 1-1: USB disconnect, device number 14 [ 292.846705][ T9409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.902325][ T9657] loop2: detected capacity change from 0 to 40427 [ 292.970761][ T9409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 292.994698][ T6240] udevd[6240]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 293.060591][ T9657] F2FS-fs (loop2): build fault injection attr: rate: 18446, type: 0x7ffff [ 293.082350][ T9409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.149926][ T9409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 293.166835][ T9657] F2FS-fs (loop2): invalid crc value [ 293.217017][ T9657] F2FS-fs (loop2): Found nat_bits in checkpoint [ 293.247862][ T9409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.301960][ T9409] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 293.460656][ T9409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 293.517091][ T9657] F2FS-fs (loop2): Start checkpoint disabled! [ 293.530015][ T9409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.617907][ T9409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 293.652590][ T9657] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 293.708437][ T9409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.775649][ T9409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 293.830221][ T9679] loop5: detected capacity change from 0 to 32768 [ 293.855714][ T9409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.927003][ T9409] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 294.020138][ T9409] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.124534][ T9409] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.189406][ T9409] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.245671][ T9409] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.299098][ T1090] kworker/u4:5: attempt to access beyond end of device [ 294.299098][ T1090] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 294.377091][ T1090] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 294.384465][ T1090] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 294.705227][ T2957] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.769067][ T2957] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 294.814403][ T2969] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.829540][ T9704] loop0: detected capacity change from 0 to 128 [ 294.889198][ T2969] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 294.970891][ T9704] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 295.084145][ T9704] ext4 filesystem being mounted at /339/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 295.253854][ T9704] fscrypt (loop0, inode 12): Direct key flag not allowed with different contents and filenames modes [ 295.448409][ T5777] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 296.059908][ T9720] loop2: detected capacity change from 0 to 8192 [ 296.177962][ T9720] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 296.372503][ T9735] FAT-fs (loop2): error, clusters badly computed (1 != 0) [ 296.383819][ T9736] jffs2: notice: (9736) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 296.444398][ T9735] FAT-fs (loop2): Filesystem has been set read-only [ 296.489213][ T9735] FAT-fs (loop2): error, clusters badly computed (2 != 1) [ 296.544326][ T9735] FAT-fs (loop2): error, clusters badly computed (3 != 2) [ 296.595253][ T9742] : renamed from bond0 (while UP) [ 296.630926][ T9735] FAT-fs (loop2): error, clusters badly computed (4 != 3) [ 296.685533][ T9735] FAT-fs (loop2): error, clusters badly computed (5 != 4) [ 296.719081][ T5777] ------------[ cut here ]------------ [ 296.725067][ T5777] kernel BUG at fs/jffs2/nodelist.c:462! [ 296.756284][ T9735] FAT-fs (loop2): error, clusters badly computed (6 != 5) [ 296.804085][ T5777] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 296.810219][ T5777] CPU: 0 PID: 5777 Comm: syz-executor Not tainted syzkaller #0 [ 296.817774][ T5777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 296.827837][ T5777] RIP: 0010:jffs2_del_ino_cache+0x2b8/0x2c0 [ 296.833752][ T5777] Code: 07 ff e9 51 ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c 4f fe ff ff 4c 89 e7 e8 32 99 07 ff e9 42 fe ff ff e8 18 b8 ae fe <0f> 0b 66 0f 1f 44 00 00 66 0f 1f 00 55 41 57 41 56 41 55 41 54 53 [ 296.853389][ T5777] RSP: 0018:ffffc9000444fa98 EFLAGS: 00010293 [ 296.859473][ T5777] RAX: ffffffff82d8d898 RBX: ffff888027d52000 RCX: ffff88802cf0da00 [ 296.867447][ T5777] RDX: 0000000000000000 RSI: ffff888027d52000 RDI: ffff88802b024000 [ 296.875420][ T5777] RBP: 0000000000000006 R08: ffff88802b02436b R09: 1ffff1100560486d [ 296.883396][ T5777] R10: dffffc0000000000 R11: ffffed100560486e R12: ffff888027d52000 [ 296.891372][ T5777] R13: dffffc0000000000 R14: ffff888027d52020 R15: ffff88802b024000 [ 296.899353][ T5777] FS: 0000555582f25500(0000) GS:ffff8880b8c00000(0000) knlGS:0000000000000000 [ 296.908286][ T5777] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 296.914872][ T5777] CR2: 00007f265c4a7440 CR3: 000000007666f000 CR4: 00000000003506f0 [ 296.922866][ T5777] Call Trace: [ 296.926158][ T5777] [ 296.929108][ T5777] ? jffs2_do_clear_inode+0x314/0x390 [ 296.934494][ T5777] jffs2_do_clear_inode+0x31f/0x390 [ 296.939718][ T5777] ? jffs2_statfs+0x370/0x370 [ 296.944399][ T5777] evict+0x4b7/0x8a0 [ 296.948309][ T5777] ? xa_load+0x64/0x2e0 [ 296.952649][ T5777] ? proc_nr_inodes+0x230/0x230 [ 296.957506][ T5777] ? do_raw_spin_unlock+0x121/0x230 [ 296.962718][ T5777] ? do_raw_spin_unlock+0x121/0x230 [ 296.967925][ T5777] evict_inodes+0x64a/0x6e0 [ 296.972443][ T5777] ? clear_inode+0x150/0x150 [ 296.977038][ T5777] ? jffs2_sync_fs+0x97/0xa0 [ 296.981642][ T5777] generic_shutdown_super+0x97/0x2b0 [ 296.986934][ T5777] kill_mtd_super+0x23/0x70 [ 296.991449][ T5777] jffs2_kill_sb+0x96/0xb0 [ 296.995888][ T5777] deactivate_locked_super+0x97/0x100 [ 297.001441][ T5777] cleanup_mnt+0x3d7/0x460 [ 297.005869][ T5777] task_work_run+0x1d4/0x260 [ 297.010559][ T5777] ? task_work_cancel+0x220/0x220 [ 297.015596][ T5777] ? exit_to_user_mode_loop+0x3b/0x110 [ 297.021090][ T5777] exit_to_user_mode_loop+0xe6/0x110 [ 297.026400][ T5777] exit_to_user_mode_prepare+0xee/0x180 [ 297.032059][ T5777] syscall_exit_to_user_mode+0x1a/0x50 [ 297.037530][ T5777] do_syscall_64+0x61/0xb0 [ 297.041946][ T5777] ? clear_bhb_loop+0x40/0x90 [ 297.046626][ T5777] ? clear_bhb_loop+0x40/0x90 [ 297.051303][ T5777] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 297.057226][ T5777] RIP: 0033:0x7f4247b9f417 [ 297.061656][ T5777] Code: a2 c7 05 dc 62 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 297.081263][ T5777] RSP: 002b:00007ffc85a39e28 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 297.089681][ T5777] RAX: 0000000000000000 RBX: 00007f4247c34ccb RCX: 00007f4247b9f417 [ 297.097656][ T5777] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc85a39ee0 [ 297.105627][ T5777] RBP: 00007ffc85a39ee0 R08: 00007ffc85a3aee0 R09: 00000000ffffffff [ 297.113604][ T5777] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc85a3af70 [ 297.121764][ T5777] R13: 00007f4247c34ccb R14: 0000000000048647 R15: 00007ffc85a3afb0 [ 297.129743][ T5777] [ 297.132770][ T5777] Modules linked in: [ 297.180284][ T9735] FAT-fs (loop2): error, clusters badly computed (7 != 6) [ 297.235940][ T9735] FAT-fs (loop2): error, clusters badly computed (8 != 7) [ 297.359100][ T5777] ---[ end trace 0000000000000000 ]--- [ 297.386007][ T5777] RIP: 0010:jffs2_del_ino_cache+0x2b8/0x2c0 [ 297.399711][ T5777] Code: 07 ff e9 51 ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c 4f fe ff ff 4c 89 e7 e8 32 99 07 ff e9 42 fe ff ff e8 18 b8 ae fe <0f> 0b 66 0f 1f 44 00 00 66 0f 1f 00 55 41 57 41 56 41 55 41 54 53 [ 297.445025][ T5777] RSP: 0018:ffffc9000444fa98 EFLAGS: 00010293 [ 297.460454][ T5777] RAX: ffffffff82d8d898 RBX: ffff888027d52000 RCX: ffff88802cf0da00 [ 297.482615][ T5777] RDX: 0000000000000000 RSI: ffff888027d52000 RDI: ffff88802b024000 [ 297.508851][ T5777] RBP: 0000000000000006 R08: ffff88802b02436b R09: 1ffff1100560486d [ 297.527955][ T5777] R10: dffffc0000000000 R11: ffffed100560486e R12: ffff888027d52000 [ 297.545395][ T5777] R13: dffffc0000000000 R14: ffff888027d52020 R15: ffff88802b024000 [ 297.565017][ T5777] FS: 0000555582f25500(0000) GS:ffff8880b8c00000(0000) knlGS:0000000000000000 [ 297.585245][ T5777] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 297.606994][ T5777] CR2: 00007f7d14d0ea10 CR3: 000000007666f000 CR4: 00000000003506f0 [ 297.625038][ T5777] Kernel panic - not syncing: Fatal exception [ 297.631208][ T5777] Kernel Offset: disabled [ 297.635555][ T5777] Rebooting in 86400 seconds..