last executing test programs: 1m45.820734804s ago: executing program 1 (id=586): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000180)={[{@noflush_merge}, {@adaptive_mode}, {@block_mode}, {@alloc_mode_reuse}, {@inline_xattr}, {@disable_roll_forward}, {@discard}, {@nouser_xattr}, {@jqfmt_vfsv1}, {@errors_remount}, {@fsync_mode_strict}, {@age_extent_cache}, {@nocheckpoint_merge}, {@resuid}]}, 0x1, 0x552b, &(0x7f0000005a40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x129042, 0x15) pwrite64(r0, &(0x7f0000000200)='\x00', 0x1, 0x2e7a) truncate(&(0x7f00000001c0)='./file1\x00', 0x5) truncate(&(0x7f0000000100)='./file1\x00', 0x401) 1m43.655072007s ago: executing program 1 (id=592): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x8fb8}]}, 0x10) sendmsg$inet(r0, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000140)="be38", 0xffe7}], 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaac14140000000b001400000000000000000000000700000007038b0100000000"], 0x38}, 0x0) 1m42.178432383s ago: executing program 1 (id=595): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000100)={@local}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r0, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x5, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63e, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0xd5, 0x0, 0x7, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xc5a, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4000000, 0x0, 0x0, 0x8000000, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x100003, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x934a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, 0xfffffffd], 0x1, 0x400}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r0, 0x7b1, &(0x7f0000000080)={0x0, 0x1}) 1m41.755487814s ago: executing program 1 (id=598): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) chdir(&(0x7f0000000200)='./file0/file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000000)='sysfs\x00', 0x1214040, 0x0) 1m41.49574377s ago: executing program 1 (id=599): syz_mount_image$udf(&(0x7f0000000c40), &(0x7f0000000c80)='./file0\x00', 0x800000, &(0x7f0000000280)=ANY=[@ANYBLOB='lastblock=00000000000000000226,adinicb,gid=forget,nostrict,unhide,uid=', @ANYRESDEC=0x0, @ANYBLOB="2c73686f727461642c7569643d69676e6f72652c73686f727461642c766f6c756d653d30303030303030303030303030303030303030362c001829935912ddb19b617db523a6bb7c0d782285ef952b9282ba93ba5ef9353deee866199e1a1a16f9b8980aa11304cc9667f126de9a575a9cb3c29169cb6e8bd4820f0d3882914f9f4dd2ac97c7c5181676dc89c5fd4f9c455fcdbd2eef48adb33cdc1f9e9a7f3a2bcb07fb13cffd272aa79076e8039f7ab310e76e7400"/192, @ANYRESHEX], 0x4, 0xc24, &(0x7f0000000d00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="ba", 0xfdef}], 0x1, 0xe7b, 0x0, 0x1) r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) sendfile(r1, r1, 0x0, 0x800000009) 1m40.942858294s ago: executing program 1 (id=601): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010040000000000002034400000008000300", @ANYRES32=r3, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140002"], 0x4c}}, 0x0) 1m40.025091485s ago: executing program 32 (id=601): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010040000000000002034400000008000300", @ANYRES32=r3, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140002"], 0x4c}}, 0x0) 4.790344412s ago: executing program 0 (id=1108): ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0xfffffffffffffffe, 0x6, 0xfffffffffffffffd, 0x80000000000000, 0x2, 0xfffffffffffffffd, 0x4002004c4, 0xffc, 0x0, 0x1, 0x51, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff], 0xeeef0000, 0x2011c0}) r0 = syz_open_dev$loop(&(0x7f0000000000), 0xffff, 0x14f600) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600010000000000000000000000000000000000000000000000000400", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00040000170000000400", "f4bd00000080190000002c88f16b00", [0x100000000, 0x7ffffffffffffffe]}}) 4.652478086s ago: executing program 3 (id=1110): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000b00)={0x20, r1, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [{{0x8, 0x1, r3}, {0x4}}]}, 0x20}}, 0x110) 4.519218149s ago: executing program 3 (id=1111): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='cdg', 0x3) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois', 0x8) 4.518472389s ago: executing program 0 (id=1119): r0 = socket(0x1d, 0x80802, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r1, 0x1, {0x0, 0xf0, 0x3}, 0xfe}, 0x18) writev(r0, &(0x7f0000000580)=[{&(0x7f0000000300)="907de63595391fd0", 0x8}], 0x1) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) 4.368127183s ago: executing program 0 (id=1112): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x20000406, &(0x7f0000000800)={[{@oldalloc}, {@noblock_validity}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}, {@jqfmt_vfsold}, {@nolazytime}, {@grpjquota, 0x2e}, {@dax}, {@resuid}, {@lazytime}, {@grpid}], [], 0x2c}, 0x84, 0x4f7, &(0x7f0000001340)="$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") symlink(&(0x7f00000001c0)='./mnt\x00', &(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_mount_image$exfat(0x0, &(0x7f0000000200)='./bus\x00', 0xe1c00, 0x0, 0x0, 0x0, &(0x7f0000000280)) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x90001, 0x1c6) 4.367890313s ago: executing program 3 (id=1113): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x23}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffffffff}, {0x85, 0x0, 0x0, 0x17}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xe, 0x0, &(0x7f0000000300)="0101000071a78326c799dbe888a8", 0x0, 0x1, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x50) 4.268211665s ago: executing program 3 (id=1114): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000dc0)=@filter={'filter\x00', 0xe, 0x4, 0x2a0, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0xffffffff, 0x0, 0x98, 0x208, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x1], 0x1, 0x1}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x300) sendto$inet(r1, &(0x7f0000000100)='ping', 0x4, 0x0, &(0x7f0000000200)={0x2, 0x1234, @loopback}, 0x10) 4.08690201s ago: executing program 3 (id=1115): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000009c0)={0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="40000f000000012721dcfe14c639a500ba17162716"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000280)={0x20, 0xe, 0x3, "bd3bf7"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b15, 0x0) 3.846276386s ago: executing program 0 (id=1117): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1, 0x200000005c832, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xa, 0x204031, 0xffffffffffffffff, 0xc9751000) r0 = syz_io_uring_setup(0x4b5, &(0x7f0000000180)={0x0, 0xb56d, 0x40, 0x8, 0x3d6}, &(0x7f0000010080), &(0x7f0000000000), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000140)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) 3.220246611s ago: executing program 0 (id=1129): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000001c0)=ANY=[], 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000bc0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000780)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.999946056s ago: executing program 4 (id=1122): prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000004000/0x3000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00') read$FUSE(r0, &(0x7f0000012300)={0x2020}, 0x203c) 2.708955473s ago: executing program 2 (id=1123): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1b, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000004, 0x0, 0x29, 0x10, &(0x7f0000002e00), &(0x7f00000002c0), 0x8, 0x6c, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r1, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 2.46048628s ago: executing program 2 (id=1124): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) 1.264215839s ago: executing program 2 (id=1125): syz_read_part_table(0x5c2, &(0x7f0000000000)="$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") r0 = socket$inet6(0xa, 0x5, 0x0) listen(r0, 0x50) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001400050124bd70007bdbdf250a84"], 0x48}, 0x1, 0x0, 0x0, 0x4004081}, 0x2005c840) 1.263485829s ago: executing program 4 (id=1134): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f0000000240)={0x1, 0x0, @pic={0x0, 0x3, 0x1, 0x10, 0x9, 0xb, 0x9c, 0xb1, 0x0, 0x1, 0x5, 0xbf, 0x8, 0x8, 0x8, 0x3}}) 905.606298ms ago: executing program 3 (id=1126): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000400)=0x8) 876.009558ms ago: executing program 4 (id=1127): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000002000)={0x1, 0x0, [{0x400000b1, 0x0, 0xfffffffffffffffd}]}) 875.864648ms ago: executing program 2 (id=1128): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x1032}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', 0x1}) write(r0, &(0x7f0000000500)="ffffffffffff00112233445508004500002c00024000400670c56401010264010101", 0x22) 531.731937ms ago: executing program 4 (id=1130): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1, 0x200000005c832, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xa, 0x204031, 0xffffffffffffffff, 0xc9751000) r0 = syz_io_uring_setup(0x4b5, &(0x7f0000000180)={0x0, 0xb56d, 0x40, 0x8, 0x3d6}, &(0x7f0000010080), &(0x7f0000000000), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000140)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) 388.52547ms ago: executing program 2 (id=1131): setns(0xc9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fddbdf252600000008000300", @ANYRES32=r2, @ANYBLOB="0a00060090cc450cd6630000040093000a003400010101010101000010009d000000070082630101050006001000b000"], 0x58}}, 0x480) 164.551326ms ago: executing program 4 (id=1132): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000002c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x8a, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd600a843500540600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 156.271696ms ago: executing program 2 (id=1133): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0xc, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8}, [@jmp={0x5, 0x0, 0x3, 0xa, 0x5, 0x80, 0xfffffffffffffffc}, @jmp={0x5, 0x1, 0x0, 0x12, 0x8, 0x80}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @generic={0x37, 0xa, 0xb, 0x76, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @func={0x85, 0x0, 0x1, 0x0, 0x3}]}, 0x0, 0x8, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100)={0x5, 0xe, 0x3, 0x8}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x100, 0x100, 0x9, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0x8, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r0}, 0x38) 8.339169ms ago: executing program 4 (id=1135): r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x40015b0b, 0x0) 0s ago: executing program 0 (id=1136): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a0101000000dd000000000a0000070900010073797a31000000000900030073597a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000020000380100000800c00018006000100d10300000c000080080003400000000214000000110001"], 0xb0}, 0x1, 0x0, 0x0, 0x14}, 0x40) close(0x4) kernel console output (not intermixed with test programs): [ 102.560339][ T56] cfg80211: failed to load regulatory.db Warning: Permanently added '10.128.1.26' (ED25519) to the list of known hosts. [ 110.866039][ T5765] cgroup: Unknown subsys name 'net' [ 110.991282][ T5765] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 113.346457][ T5765] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 115.473748][ T5783] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 115.490833][ T5793] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 115.499922][ T5793] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 115.518243][ T5793] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 115.520143][ T5788] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 115.532388][ T5793] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 115.547854][ T5788] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 115.562502][ T5788] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 115.564389][ T5793] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 115.577467][ T5788] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 115.594667][ T5788] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 115.594677][ T5793] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 115.595381][ T5793] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 115.623377][ T5793] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 115.632315][ T5793] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 115.641495][ T5788] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 115.643554][ T5793] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 115.660727][ T5788] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 115.664159][ T5793] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 115.680862][ T5793] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 115.690000][ T5793] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 115.706091][ T5793] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 115.716533][ T5793] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 115.747414][ T5794] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 116.546981][ T5781] chnl_net:caif_netlink_parms(): no params data found [ 116.628988][ T5777] chnl_net:caif_netlink_parms(): no params data found [ 116.668151][ T5779] chnl_net:caif_netlink_parms(): no params data found [ 116.823679][ T5780] chnl_net:caif_netlink_parms(): no params data found [ 117.064963][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.074391][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.084928][ T5777] bridge_slave_0: entered allmulticast mode [ 117.094990][ T5777] bridge_slave_0: entered promiscuous mode [ 117.109480][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.121951][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.131218][ T5777] bridge_slave_1: entered allmulticast mode [ 117.140820][ T5777] bridge_slave_1: entered promiscuous mode [ 117.164086][ T5781] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.175186][ T5781] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.184654][ T5781] bridge_slave_0: entered allmulticast mode [ 117.193965][ T5781] bridge_slave_0: entered promiscuous mode [ 117.209206][ T5781] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.220759][ T5781] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.230797][ T5781] bridge_slave_1: entered allmulticast mode [ 117.241518][ T5781] bridge_slave_1: entered promiscuous mode [ 117.251639][ T5779] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.261305][ T5779] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.274112][ T5779] bridge_slave_0: entered allmulticast mode [ 117.284570][ T5779] bridge_slave_0: entered promiscuous mode [ 117.352334][ T5779] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.361519][ T5779] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.371587][ T5779] bridge_slave_1: entered allmulticast mode [ 117.379906][ T5779] bridge_slave_1: entered promiscuous mode [ 117.424250][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 117.466699][ T5780] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.475611][ T5780] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.484604][ T5780] bridge_slave_0: entered allmulticast mode [ 117.496008][ T5780] bridge_slave_0: entered promiscuous mode [ 117.524013][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 117.544940][ T5781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 117.556719][ T5780] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.565908][ T5780] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.574396][ T5780] bridge_slave_1: entered allmulticast mode [ 117.583884][ T5780] bridge_slave_1: entered promiscuous mode [ 117.596120][ T5779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 117.626012][ T5781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 117.672566][ T5779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 117.735741][ T5781] team0: Port device team_slave_0 added [ 117.773874][ T5779] team0: Port device team_slave_0 added [ 117.793833][ T5777] team0: Port device team_slave_0 added [ 117.807111][ T5781] team0: Port device team_slave_1 added [ 117.832952][ T5780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 117.850346][ T5786] Bluetooth: hci2: command tx timeout [ 117.856673][ T5786] Bluetooth: hci1: command tx timeout [ 117.859427][ T5794] Bluetooth: hci0: command tx timeout [ 117.871029][ T5794] Bluetooth: hci3: command tx timeout [ 117.882410][ T5779] team0: Port device team_slave_1 added [ 117.894555][ T5777] team0: Port device team_slave_1 added [ 117.929464][ T5780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 117.996608][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 118.005932][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.048030][ T5781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 118.065793][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 118.074475][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.110813][ T5781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 118.141291][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 118.149525][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.186238][ T5779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 118.205375][ T5780] team0: Port device team_slave_0 added [ 118.214974][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 118.223425][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.256192][ T5779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 118.271988][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 118.280008][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.312249][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 118.339140][ T5780] team0: Port device team_slave_1 added [ 118.385999][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 118.397559][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.429333][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 118.465462][ T5781] hsr_slave_0: entered promiscuous mode [ 118.472700][ T5781] hsr_slave_1: entered promiscuous mode [ 118.533058][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 118.543393][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.580134][ T5780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 118.634807][ T5777] hsr_slave_0: entered promiscuous mode [ 118.641673][ T5777] hsr_slave_1: entered promiscuous mode [ 118.648996][ T5777] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 118.657709][ T5777] Cannot create hsr debugfs directory [ 118.696513][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 118.703975][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.733347][ T5780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 118.779637][ T5779] hsr_slave_0: entered promiscuous mode [ 118.789235][ T5779] hsr_slave_1: entered promiscuous mode [ 118.796039][ T5779] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 118.806190][ T5779] Cannot create hsr debugfs directory [ 118.975219][ T5780] hsr_slave_0: entered promiscuous mode [ 118.986145][ T5780] hsr_slave_1: entered promiscuous mode [ 118.992833][ T5780] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 119.001338][ T5780] Cannot create hsr debugfs directory [ 119.473484][ T5781] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 119.494689][ T5781] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 119.513649][ T5781] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 119.535416][ T5781] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 119.643340][ T5777] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 119.667298][ T5777] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 119.709175][ T5777] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 119.722851][ T5777] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 119.827295][ T5780] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 119.855715][ T5780] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 119.871151][ T5780] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 119.896339][ T5780] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 119.917738][ T51] Bluetooth: hci0: command tx timeout [ 119.919619][ T5794] Bluetooth: hci2: command tx timeout [ 119.924167][ T5795] Bluetooth: hci1: command tx timeout [ 119.936772][ T5786] Bluetooth: hci3: command tx timeout [ 120.043644][ T5779] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 120.084226][ T5779] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 120.123782][ T5779] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 120.143398][ T5779] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 120.213215][ T5781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 120.298108][ T5781] 8021q: adding VLAN 0 to HW filter on device team0 [ 120.357178][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 120.388403][ T2963] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.396479][ T2963] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.427112][ T988] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.435176][ T988] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.506908][ T5777] 8021q: adding VLAN 0 to HW filter on device team0 [ 120.550158][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.559478][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.574108][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.584705][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.733942][ T5780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 120.763852][ T5779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 120.824185][ T5777] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 120.863001][ T5779] 8021q: adding VLAN 0 to HW filter on device team0 [ 120.880992][ T5780] 8021q: adding VLAN 0 to HW filter on device team0 [ 120.910743][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.918971][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.945176][ T2943] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.954422][ T2943] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.040661][ T2943] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.049279][ T2943] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.099250][ T2943] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.109071][ T2943] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.613339][ T5781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 121.804486][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 121.972707][ T5781] veth0_vlan: entered promiscuous mode [ 121.998255][ T5786] Bluetooth: hci2: command tx timeout [ 122.011880][ T5795] Bluetooth: hci3: command tx timeout [ 122.017994][ T5795] Bluetooth: hci1: command tx timeout [ 122.019465][ T51] Bluetooth: hci0: command tx timeout [ 122.128913][ T5781] veth1_vlan: entered promiscuous mode [ 122.149383][ T5777] veth0_vlan: entered promiscuous mode [ 122.182467][ T5780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 122.209516][ T5777] veth1_vlan: entered promiscuous mode [ 122.278904][ T5781] veth0_macvtap: entered promiscuous mode [ 122.309365][ T5779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 122.345467][ T5781] veth1_macvtap: entered promiscuous mode [ 122.432150][ T5777] veth0_macvtap: entered promiscuous mode [ 122.473512][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 122.515387][ T5777] veth1_macvtap: entered promiscuous mode [ 122.547392][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 122.592941][ T5781] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.606368][ T5781] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.625503][ T5781] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.643516][ T5781] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.687248][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.702007][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.720523][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 122.736762][ T5780] veth0_vlan: entered promiscuous mode [ 122.773854][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.788726][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.806881][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 122.833570][ T5777] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.845884][ T5777] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.865145][ T5777] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.882001][ T5777] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.913022][ T5780] veth1_vlan: entered promiscuous mode [ 122.978888][ T5779] veth0_vlan: entered promiscuous mode [ 123.083976][ T5779] veth1_vlan: entered promiscuous mode [ 123.215760][ T2963] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.226336][ T2963] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.294861][ T5780] veth0_macvtap: entered promiscuous mode [ 123.314386][ T5780] veth1_macvtap: entered promiscuous mode [ 123.389644][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.410341][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.495431][ T5779] veth0_macvtap: entered promiscuous mode [ 123.509324][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.537250][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.557186][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.576726][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.606092][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 123.623362][ T988] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.639327][ T988] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.673071][ T5779] veth1_macvtap: entered promiscuous mode [ 123.677002][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.692967][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.736612][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.780923][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.795508][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.809275][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.832308][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 123.895365][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.921962][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.939815][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.955314][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.972908][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.988158][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.011161][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 124.044389][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.058534][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.076842][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.092395][ T51] Bluetooth: hci0: command tx timeout [ 124.099898][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.113316][ T51] Bluetooth: hci2: command tx timeout [ 124.121401][ T5794] Bluetooth: hci1: command tx timeout [ 124.121414][ T5786] Bluetooth: hci3: command tx timeout [ 124.141616][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.183802][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.198341][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 124.209603][ T5780] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.222881][ T5780] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.236004][ T5780] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.250393][ T5780] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.285474][ T5779] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.303438][ T5779] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.325810][ T5779] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.336053][ T5779] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.654235][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.675201][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.821932][ T2943] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.848207][ T2943] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.887664][ T5853] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5'. [ 124.911211][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.953137][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.161940][ T2943] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.254469][ T2943] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.364879][ T5861] syz.2.3[5861]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 125.741254][ T5863] loop3: detected capacity change from 0 to 4096 [ 126.005103][ T5868] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 126.956128][ T5861] loop2: detected capacity change from 0 to 40427 [ 127.048495][ T5861] F2FS-fs (loop2): Corrupted extension count (64 + 1 > 64) [ 127.092187][ T5861] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 127.150045][ T5861] F2FS-fs (loop2): Image doesn't support compression [ 127.175172][ T5861] F2FS-fs (loop2): Image doesn't support compression [ 127.215293][ T5861] F2FS-fs (loop2): invalid crc value [ 127.565433][ T5890] Zero length message leads to an empty skb [ 127.609987][ T5861] F2FS-fs (loop2): Start checkpoint disabled! [ 127.723144][ T5861] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 127.743302][ T5861] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 127.872510][ T5861] F2FS-fs (loop2): Inconsistent segment (8) type [1, 0] in SIT and SSA [ 127.891032][ T5861] F2FS-fs (loop2): Stopped filesystem due to reason: 4 [ 127.978384][ T56] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 128.189881][ T56] usb 2-1: Using ep0 maxpacket: 32 [ 128.219282][ T56] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.248227][ T56] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.293519][ T56] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 128.327680][ T56] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 128.347563][ T56] usb 2-1: Product: syz [ 128.353172][ T56] usb 2-1: Manufacturer: syz [ 128.419494][ T56] hub 2-1:4.0: USB hub found [ 128.670646][ T56] hub 2-1:4.0: config failed, can't read hub descriptor (err -22) [ 128.775196][ T56] usb 2-1: USB disconnect, device number 2 [ 129.368446][ T56] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 129.581800][ T56] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 129.616916][ T56] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.669027][ T56] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 129.688275][ T56] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 129.717756][ T56] usb 2-1: Product: syz [ 129.727617][ T56] usb 2-1: Manufacturer: syz [ 129.763051][ T56] hub 2-1:4.0: USB hub found [ 129.987804][ T56] hub 2-1:4.0: 1 port detected [ 130.316135][ T5935] loop0: detected capacity change from 0 to 512 [ 130.339478][ T5935] ======================================================= [ 130.339478][ T5935] WARNING: The mand mount option has been deprecated and [ 130.339478][ T5935] and is ignored by this kernel. Remove the mand [ 130.339478][ T5935] option from the mount to silence this warning. [ 130.339478][ T5935] ======================================================= [ 130.395663][ T56] hub 2-1:4.0: set hub depth failed [ 130.480452][ T5935] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 130.507078][ T56] usb 2-1: USB disconnect, device number 3 [ 130.673179][ T5935] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4059: comm syz.0.39: Allocating blocks 41-42 which overlap fs metadata [ 130.726082][ T5935] EXT4-fs (loop0): Remounting filesystem read-only [ 130.741862][ T5935] Quota error (device loop0): write_blk: dquota write failed [ 130.755187][ T5935] Quota error (device loop0): find_free_dqentry: Can't write quota data block 5 [ 130.771624][ T5935] Quota error (device loop0): write_blk: dquota write failed [ 130.786037][ T5935] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 130.810145][ T5935] EXT4-fs (loop0): 1 truncate cleaned up [ 130.831495][ T5935] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.939135][ T5935] gfs2: gfs2 mount does not exist [ 131.004882][ T5781] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.196633][ T5950] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 131.258806][ T5948] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input5 [ 131.372374][ T5953] bonding: no command found in bonding_masters - use +ifname or -ifname [ 132.040053][ T5968] syz.0.53 uses obsolete (PF_INET,SOCK_PACKET) [ 132.089369][ T5968] syzkaller1: entered promiscuous mode [ 132.117619][ T5968] syzkaller1: entered allmulticast mode [ 132.406243][ T5981] loop0: detected capacity change from 0 to 1756 [ 132.415380][ T5827] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 132.494501][ T5981] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 132.530502][ T5981] UDF-fs: Scanning with blocksize 512 failed [ 132.596812][ T5983] loop2: detected capacity change from 0 to 256 [ 132.610082][ T5981] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 132.622012][ T5981] UDF-fs: Scanning with blocksize 1024 failed [ 132.648565][ T5827] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 132.690115][ T5827] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 132.769857][ T5981] UDF-fs: INFO Mounting volume 'CDROM', timestamp 2022/11/22 15:59 (1000) [ 132.781788][ T5827] usb 4-1: New USB device found, idVendor=15a4, idProduct=9035, bcdDevice= 2.00 [ 132.810712][ T5827] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.309179][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.316946][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.407350][ T5991] loop0: detected capacity change from 0 to 512 [ 133.429931][ T5991] EXT4-fs: Ignoring removed i_version option [ 133.451569][ T5991] EXT4-fs: Ignoring removed oldalloc option [ 133.471772][ T5991] EXT4-fs (loop0): Test dummy encryption mode enabled [ 133.527443][ T5991] EXT4-fs (loop0): 1 truncate cleaned up [ 133.558849][ T5991] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.631834][ T28] audit: type=1800 audit(1791209378.543:2): pid=5991 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.64" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 133.866523][ T5827] dvb_usb_af9035 4-1:1.0: command=00 checksum mismatch (0102 != feff) [ 133.889608][ T5827] dvb_usb_af9035: probe of 4-1:1.0 failed with error -5 [ 133.928172][ T6003] FAULT_INJECTION: forcing a failure. [ 133.928172][ T6003] name failslab, interval 1, probability 0, space 0, times 1 [ 133.965959][ T6003] CPU: 0 PID: 6003 Comm: syz.1.68 Not tainted syzkaller #0 [ 133.975843][ T6003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 133.988876][ T6003] Call Trace: [ 133.992451][ T6003] [ 133.995589][ T6003] dump_stack_lvl+0x18c/0x250 [ 134.002239][ T6003] ? show_regs_print_info+0x20/0x20 [ 134.010071][ T6003] ? load_image+0x420/0x420 [ 134.016793][ T6003] ? __might_sleep+0xe0/0xe0 [ 134.022998][ T6003] ? __lock_acquire+0x7eb0/0x7eb0 [ 134.030238][ T6003] ? do_futex+0x2ff/0x3e0 [ 134.036195][ T6003] should_fail_ex+0x394/0x4c0 [ 134.041868][ T6003] should_failslab+0x9/0x20 [ 134.047274][ T6003] slab_pre_alloc_hook+0x59/0x300 [ 134.054663][ T6003] kmem_cache_alloc+0x5a/0x2c0 [ 134.061314][ T6003] ? prepare_creds+0x30/0x5d0 [ 134.069067][ T6003] prepare_creds+0x30/0x5d0 [ 134.074356][ T6003] __sys_setfsuid+0xcd/0x370 [ 134.081749][ T6003] ? lockdep_hardirqs_on+0x98/0x150 [ 134.088542][ T6003] do_syscall_64+0x55/0xb0 [ 134.095510][ T6003] ? clear_bhb_loop+0x40/0x90 [ 134.100546][ T6003] ? clear_bhb_loop+0x40/0x90 [ 134.106217][ T6003] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 134.113449][ T6003] RIP: 0033:0x7ff95fd9e199 [ 134.119919][ T6003] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 134.145260][ T6003] RSP: 002b:00007ff960b96028 EFLAGS: 00000246 ORIG_RAX: 000000000000007a [ 134.158203][ T6003] RAX: ffffffffffffffda RBX: 00007ff960025fa0 RCX: 00007ff95fd9e199 [ 134.169675][ T6003] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000ee01 [ 134.179502][ T5827] usb 4-1: USB disconnect, device number 2 [ 134.180478][ T6003] RBP: 00007ff95fe350b8 R08: 0000000000000000 R09: 0000000000000000 [ 134.197091][ T6003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 134.207923][ T6003] R13: 00007ff960026038 R14: 00007ff960025fa0 R15: 00007ffe4b5c63c8 [ 134.218281][ T6003] [ 134.331519][ T5781] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.930995][ T6018] trusted_key: syz.0.74 sent an empty control message without MSG_MORE. [ 134.976911][ T6016] loop3: detected capacity change from 0 to 2048 [ 135.098450][ T6016] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 135.591128][ T6031] device-mapper: ioctl: Invalid ioctl structure: name t, dev f800 [ 135.730731][ T6037] loop2: detected capacity change from 0 to 1024 [ 135.900250][ T6037] hfsplus: xattr exists yet [ 136.021442][ T28] audit: type=1326 audit(1791209380.933:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6040 comm="syz.0.85" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f103239e199 code=0x7ffc0000 [ 136.034787][ T49] hfsplus: b-tree write err: -5, ino 8 [ 136.108193][ T28] audit: type=1326 audit(1791209380.973:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6040 comm="syz.0.85" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f103239e199 code=0x7ffc0000 [ 136.229264][ T28] audit: type=1326 audit(1791209380.973:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6040 comm="syz.0.85" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f103239e199 code=0x7ffc0000 [ 136.338626][ T28] audit: type=1326 audit(1791209380.973:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6040 comm="syz.0.85" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f103239e199 code=0x7ffc0000 [ 136.393753][ T28] audit: type=1326 audit(1791209380.983:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6040 comm="syz.0.85" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f103239e199 code=0x7ffc0000 [ 136.467349][ T28] audit: type=1326 audit(1791209380.983:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6040 comm="syz.0.85" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f103239e199 code=0x7ffc0000 [ 136.551467][ T28] audit: type=1326 audit(1791209380.983:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6040 comm="syz.0.85" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f103239e199 code=0x7ffc0000 [ 136.635479][ T28] audit: type=1326 audit(1791209380.983:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6040 comm="syz.0.85" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f103239e199 code=0x7ffc0000 [ 136.667835][ T5847] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 136.706197][ T6052] capability: warning: `syz.0.90' uses deprecated v2 capabilities in a way that may be insecure [ 136.767003][ T28] audit: type=1326 audit(1791209380.983:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6040 comm="syz.0.85" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f103239e199 code=0x7ffc0000 [ 136.827808][ T28] audit: type=1326 audit(1791209380.983:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6040 comm="syz.0.85" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f103239e199 code=0x7ffc0000 [ 136.913997][ T5847] usb 3-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 136.947719][ T5847] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.977995][ T5847] usb 3-1: Product: syz [ 136.984310][ T5847] usb 3-1: Manufacturer: syz [ 137.017870][ T5847] usb 3-1: SerialNumber: syz [ 137.049129][ T5847] usb 3-1: config 0 descriptor?? [ 137.086988][ T5847] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 137.383158][ T6060] loop3: detected capacity change from 0 to 512 [ 137.530377][ T6060] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.601930][ T6065] netlink: 8 bytes leftover after parsing attributes in process `syz.0.95'. [ 137.612083][ T6060] ext4 filesystem being mounted at /23/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 137.615465][ T6065] netlink: 28 bytes leftover after parsing attributes in process `syz.0.95'. [ 137.650245][ T6065] geneve2: entered promiscuous mode [ 137.660917][ T6065] geneve2: entered allmulticast mode [ 137.713215][ T6060] EXT4-fs error (device loop3): ext4_do_update_inode:5268: inode #2: comm syz.3.93: corrupted inode contents [ 137.756151][ T6060] EXT4-fs error (device loop3): ext4_dirty_inode:6166: inode #2: comm syz.3.93: mark_inode_dirty error [ 137.827068][ T6060] EXT4-fs error (device loop3): ext4_do_update_inode:5268: inode #2: comm syz.3.93: corrupted inode contents [ 137.874166][ T6060] EXT4-fs error (device loop3): __ext4_ext_dirty:208: inode #2: comm syz.3.93: mark_inode_dirty error [ 137.943325][ T6066] EXT4-fs error (device loop3): ext4_do_update_inode:5268: inode #2: comm syz.3.93: corrupted inode contents [ 138.093585][ T5847] gspca_sunplus: reg_w_riv err -71 [ 138.103483][ T5847] sunplus: probe of 3-1:0.0 failed with error -71 [ 138.130539][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.169622][ T5847] usb 3-1: USB disconnect, device number 2 [ 138.436398][ T6070] ecryptfs_mount: kern_path() failed [ 138.466768][ T6070] Reading sb failed; rc = [-2] [ 138.692594][ T6081] netlink: 'syz.0.101': attribute type 4 has an invalid length. [ 138.757759][ T6081] netlink: 'syz.0.101': attribute type 4 has an invalid length. [ 138.787763][ T6081] netlink: 203268 bytes leftover after parsing attributes in process `syz.0.101'. [ 139.267614][ T5845] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 139.415737][ T6105] db_root: cannot open: /dev/net/tun [ 139.433876][ T6105] db_root: not a directory: /dev/net/tun [ 139.477672][ T5845] usb 4-1: Using ep0 maxpacket: 8 [ 139.508961][ T5845] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 139.534097][ T5845] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 139.547987][ T5845] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 139.567344][ T5845] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 139.584251][ T5845] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 139.633050][ T5845] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 139.674221][ T5845] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.926086][ T6117] netlink: 4 bytes leftover after parsing attributes in process `syz.1.119'. [ 139.965507][ T5845] usb 4-1: usb_control_msg returned -32 [ 139.984729][ T5845] usbtmc 4-1:16.0: can't read capabilities [ 140.261473][ T6123] loop2: detected capacity change from 0 to 64 [ 140.367049][ T6123] hfs: request for non-existent node 237 in B*Tree [ 140.388363][ T6123] hfs: request for non-existent node 237 in B*Tree [ 140.406781][ T6123] hfs: request for non-existent node 237 in B*Tree [ 140.425269][ T6123] hfs: request for non-existent node 237 in B*Tree [ 140.429145][ T5827] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 140.445766][ T6125] hfs: request for non-existent node 237 in B*Tree [ 140.466222][ T6125] hfs: request for non-existent node 237 in B*Tree [ 140.483054][ T6123] hfs: request for non-existent node 237 in B*Tree [ 140.497159][ T6123] hfs: request for non-existent node 237 in B*Tree [ 140.531410][ T6127] loop1: detected capacity change from 0 to 512 [ 140.541994][ T6127] EXT4-fs: Ignoring removed oldalloc option [ 140.555608][ T5845] usb 4-1: USB disconnect, device number 3 [ 140.604524][ T6127] EXT4-fs (loop1): orphan cleanup on readonly fs [ 140.617899][ T6127] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 140.652174][ T6127] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #13: comm syz.1.123: attempt to clear invalid blocks 2 len 1 [ 140.658126][ T5827] usb 1-1: Using ep0 maxpacket: 8 [ 140.687167][ T5827] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 140.707682][ T5827] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 140.725211][ T5827] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 140.739059][ T5827] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 140.750885][ T5827] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 140.772382][ T5827] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 140.792320][ T5827] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.814994][ T6127] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 140.867244][ T6127] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.123: invalid indirect mapped block 1819239214 (level 0) [ 140.928537][ T6127] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.123: invalid indirect mapped block 1819239214 (level 1) [ 140.976157][ T6127] EXT4-fs (loop1): 1 truncate cleaned up [ 141.001748][ T6127] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 141.067675][ T5827] usb 1-1: usb_control_msg returned -32 [ 141.075032][ T5827] usbtmc 1-1:16.0: can't read capabilities [ 141.151651][ T5779] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.164948][ T6130] FAULT_INJECTION: forcing a failure. [ 141.164948][ T6130] name failslab, interval 1, probability 0, space 0, times 0 [ 141.202632][ T6130] CPU: 0 PID: 6130 Comm: syz.2.124 Not tainted syzkaller #0 [ 141.211491][ T6130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 141.225130][ T6130] Call Trace: [ 141.229279][ T6130] [ 141.233000][ T6130] dump_stack_lvl+0x18c/0x250 [ 141.238901][ T6130] ? show_regs_print_info+0x20/0x20 [ 141.245113][ T6130] ? load_image+0x420/0x420 [ 141.250865][ T6130] ? __lock_acquire+0x7eb0/0x7eb0 [ 141.257766][ T6130] should_fail_ex+0x394/0x4c0 [ 141.263702][ T6130] should_failslab+0x9/0x20 [ 141.269713][ T6130] slab_pre_alloc_hook+0x59/0x300 [ 141.275207][ T6130] ? __se_sys_timerfd_create+0x101/0x270 [ 141.282078][ T6130] __kmem_cache_alloc_node+0x53/0x250 [ 141.288487][ T6130] ? __se_sys_timerfd_create+0x101/0x270 [ 141.295347][ T6130] kmalloc_trace+0x2a/0xe0 [ 141.300996][ T6130] __se_sys_timerfd_create+0x101/0x270 [ 141.307462][ T6130] do_syscall_64+0x55/0xb0 [ 141.313511][ T6130] ? clear_bhb_loop+0x40/0x90 [ 141.319490][ T6130] ? clear_bhb_loop+0x40/0x90 [ 141.325548][ T6130] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 141.332748][ T6130] RIP: 0033:0x7f99c619e199 [ 141.337990][ T6130] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 141.361465][ T6130] RSP: 002b:00007f99c6f80028 EFLAGS: 00000246 ORIG_RAX: 000000000000011b [ 141.373168][ T6130] RAX: ffffffffffffffda RBX: 00007f99c6425fa0 RCX: 00007f99c619e199 [ 141.382915][ T6130] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 141.393063][ T6130] RBP: 00007f99c62350b8 R08: 0000000000000000 R09: 0000000000000000 [ 141.403339][ T6130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 141.413861][ T6130] R13: 00007f99c6426038 R14: 00007f99c6425fa0 R15: 00007ffed0ea58c8 [ 141.424788][ T6130] [ 141.458329][ T6131] usbtmc 1-1:16.0: INITIATE_CLEAR returned 0 [ 141.633261][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 141.633278][ T28] audit: type=1326 audit(1791209386.543:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6136 comm="syz.2.127" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f99c619e199 code=0x0 [ 141.682922][ T5827] usb 1-1: USB disconnect, device number 3 [ 141.827689][ T6144] loop1: detected capacity change from 0 to 164 [ 141.877069][ T6144] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 141.923853][ T6144] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 141.968709][ T6144] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 142.356105][ T6151] loop1: detected capacity change from 0 to 8192 [ 142.669413][ T6163] Bluetooth: MGMT ver 1.22 [ 142.739322][ T6166] syz_tun: entered allmulticast mode [ 142.800218][ T6169] netlink: 4 bytes leftover after parsing attributes in process `syz.0.141'. [ 142.966952][ T6169] bond1: Invalid ad_actor_system MAC address. [ 142.989891][ T6169] bond1: option ad_actor_system: invalid value (1) [ 143.062918][ T6169] bond1 (unregistering): Released all slaves [ 143.183972][ T5827] IPVS: starting estimator thread 0... [ 143.191835][ T6179] IPVS: fo: FWM 3 0x00000003 - no destination available [ 143.319700][ T6181] IPVS: using max 14 ests per chain, 33600 per kthread [ 143.352506][ T6185] FAULT_INJECTION: forcing a failure. [ 143.352506][ T6185] name failslab, interval 1, probability 0, space 0, times 0 [ 143.383524][ T6185] CPU: 0 PID: 6185 Comm: syz.2.146 Not tainted syzkaller #0 [ 143.394940][ T6185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 143.407092][ T6185] Call Trace: [ 143.411322][ T6185] [ 143.414966][ T6185] dump_stack_lvl+0x18c/0x250 [ 143.420687][ T6185] ? show_regs_print_info+0x20/0x20 [ 143.427812][ T6185] ? load_image+0x420/0x420 [ 143.434089][ T6185] ? __might_sleep+0xe0/0xe0 [ 143.440608][ T6185] ? __lock_acquire+0x7eb0/0x7eb0 [ 143.448034][ T6185] should_fail_ex+0x394/0x4c0 [ 143.456333][ T6185] should_failslab+0x9/0x20 [ 143.463094][ T6185] slab_pre_alloc_hook+0x59/0x300 [ 143.473538][ T6185] ? pedit_init_net+0x65/0x190 [ 143.480280][ T6185] __kmem_cache_alloc_node+0x53/0x250 [ 143.487094][ T6185] ? pedit_init_net+0x65/0x190 [ 143.492530][ T6185] kmalloc_trace+0x2a/0xe0 [ 143.498870][ T6185] pedit_init_net+0x65/0x190 [ 143.506166][ T6185] ops_init+0x391/0x640 [ 143.511670][ T6185] setup_net+0x3b6/0xa20 [ 143.517051][ T6185] ? copy_net_ns+0x530/0x530 [ 143.523968][ T6185] ? copy_net_ns+0x347/0x530 [ 143.529331][ T6185] ? down_read_killable+0x1d0/0x340 [ 143.535206][ T6185] copy_net_ns+0x361/0x530 [ 143.540246][ T6185] create_new_namespaces+0x3ce/0x700 [ 143.546855][ T6185] unshare_nsproxy_namespaces+0x11a/0x160 [ 143.553163][ T6185] ksys_unshare+0x4fa/0x8f0 [ 143.558580][ T6185] ? sighand_ctor+0x50/0x50 [ 143.569000][ T6185] ? lock_chain_count+0x20/0x20 [ 143.574013][ T6185] ? syscall_enter_from_user_mode+0x25/0x80 [ 143.581449][ T6185] __x64_sys_unshare+0x38/0x40 [ 143.586929][ T6185] do_syscall_64+0x55/0xb0 [ 143.593815][ T6185] ? clear_bhb_loop+0x40/0x90 [ 143.599848][ T6185] ? clear_bhb_loop+0x40/0x90 [ 143.606833][ T6185] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 143.614167][ T6185] RIP: 0033:0x7f99c619e199 [ 143.620979][ T6185] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 143.647567][ T6185] RSP: 002b:00007f99c6f80028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 143.658164][ T6185] RAX: ffffffffffffffda RBX: 00007f99c6425fa0 RCX: 00007f99c619e199 [ 143.671206][ T6185] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 143.682735][ T6185] RBP: 00007f99c62350b8 R08: 0000000000000000 R09: 0000000000000000 [ 143.695152][ T6185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 143.707172][ T6185] R13: 00007f99c6426038 R14: 00007f99c6425fa0 R15: 00007ffed0ea58c8 [ 143.717335][ T6185] [ 143.769579][ T6187] input: syz1 as /devices/virtual/input/input6 [ 144.092017][ T6198] loop0: detected capacity change from 0 to 128 [ 144.149992][ T6198] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 144.334993][ T988] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 144.718254][ T5794] Bluetooth: hci0: command 0x0c1a tx timeout [ 144.718630][ T5786] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 145.027778][ T6219] netlink: 4 bytes leftover after parsing attributes in process `syz.1.161'. [ 145.062689][ T6219] veth0_macvtap: left promiscuous mode [ 145.279192][ T6203] loop3: detected capacity change from 0 to 32768 [ 145.324697][ T6203] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.153 (6203) [ 145.458139][ T6203] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 145.492536][ T6203] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 145.527232][ T6203] BTRFS info (device loop3): setting nodatacow, compression disabled [ 145.564090][ T6203] BTRFS info (device loop3): disabling tree log [ 145.581855][ T6203] BTRFS info (device loop3): max_inline at 0 [ 145.593616][ T6203] BTRFS info (device loop3): using free space tree [ 145.689646][ T6240] process 'syz.0.164' launched './file0' with NULL argv: empty string added [ 145.742272][ T6240] Invalid argument reading file caps for ./file0 [ 145.769138][ T6203] BTRFS info (device loop3): auto enabling async discard [ 145.906934][ T6203] BTRFS error (device loop3: state M): unrecognized mount option '0x0000000000000000184467440737095516150xffffffffffffffff00000000000000000000003-[[E~xidqc?fgr&ҳY?&!_.}Afx}7_Rq)a5D֏as' [ 146.030081][ T5777] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 146.069005][ T6217] loop2: detected capacity change from 0 to 40427 [ 146.116783][ T6245] loop0: detected capacity change from 0 to 2048 [ 146.129562][ T6217] F2FS-fs (loop2): Corrupted extension count (327717 + 1 > 64) [ 146.158678][ T6245] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 146.172285][ T6217] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 146.208015][ T6217] F2FS-fs (loop2): build fault injection attr: rate: 771, type: 0x7ffff [ 146.237237][ T6217] F2FS-fs (loop2): invalid crc value [ 146.291429][ T6217] F2FS-fs (loop2): Found nat_bits in checkpoint [ 146.688016][ T6217] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 146.738885][ T6217] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 146.918925][ T6217] F2FS-fs (loop2): Stopped filesystem due to reason: 0 [ 147.406749][ T6264] dummy0: entered promiscuous mode [ 147.470552][ T6264] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 147.506296][ T6264] hsr1: entered allmulticast mode [ 147.537697][ T6264] dummy0: entered allmulticast mode [ 147.564766][ T6264] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 148.273088][ T6258] loop0: detected capacity change from 0 to 40427 [ 148.312928][ T6258] F2FS-fs (loop0): invalid crc value [ 148.358501][ T6258] F2FS-fs (loop0): Found nat_bits in checkpoint [ 148.368386][ T6274] loop3: detected capacity change from 0 to 1024 [ 148.411759][ T6274] ext4: Unknown parameter 'rootcontext' [ 148.469060][ T6274] mtrr: base(0x2becfee7ffe61d43000) is not aligned on a size(0x96c076bb000) boundary [ 148.704221][ T6258] F2FS-fs (loop0): Start checkpoint disabled! [ 148.768353][ T6276] syz.2.171 (6276) used greatest stack depth: 17896 bytes left [ 148.922166][ T6258] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 149.445293][ T6291] Illegal XDP return value 64 on prog (id 11) dev syz_tun, expect packet loss! [ 149.627373][ T12] kworker/u4:1: attempt to access beyond end of device [ 149.627373][ T12] loop0: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 149.651521][ T6293] loop2: detected capacity change from 0 to 4096 [ 149.680434][ T12] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 149.776380][ T6294] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 151.365417][ T6321] loop2: detected capacity change from 0 to 2048 [ 151.390056][ T6321] EXT4-fs: Ignoring removed nobh option [ 151.483426][ T6321] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 151.519751][ T6321] ext4 filesystem being mounted at /43/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 151.705448][ T28] audit: type=1800 audit(1791209396.613:23): pid=6321 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.189" name="file0" dev="loop2" ino=13 res=0 errno=0 [ 151.743549][ T6321] fs-verity: sha512 using implementation "sha512-avx2" [ 151.963289][ T5780] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.365862][ T6346] loop3: detected capacity change from 0 to 8 [ 152.493858][ T6346] SQUASHFS error: Unable to read inode 0xa7 [ 152.503165][ T5845] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 152.564535][ T6351] capability: warning: `syz.0.202' uses 32-bit capabilities (legacy support in use) [ 152.718424][ T5845] usb 3-1: Using ep0 maxpacket: 32 [ 152.735639][ T5845] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 152.783007][ T5845] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 152.796953][ T5845] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 152.811137][ T5845] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.829930][ T5845] usb 3-1: config 0 descriptor?? [ 152.851333][ T5845] hub 3-1:0.0: USB hub found [ 153.077172][ T5845] hub 3-1:0.0: 1 port detected [ 153.387925][ T5787] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 153.603824][ T5787] usb 4-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00 [ 153.620618][ T5787] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.662908][ T5787] usb 4-1: config 0 descriptor?? [ 153.684207][ T5845] hub 3-1:0.0: activate --> -90 [ 153.892650][ T5845] hub 3-1:0.0: hub_ext_port_status failed (err = -71) [ 153.944525][ T173] usb 3-1: USB disconnect, device number 3 [ 154.115692][ T6381] loop0: detected capacity change from 0 to 1024 [ 154.146159][ T5787] microsoft 0003:045E:009D.0001: unknown main item tag 0x2 [ 154.150158][ T6381] EXT4-fs: Ignoring removed bh option [ 154.177259][ T5787] microsoft 0003:045E:009D.0001: unknown main item tag 0x1 [ 154.208140][ T5787] microsoft 0003:045E:009D.0001: unknown main item tag 0x0 [ 154.249008][ T6381] EXT4-fs: Ignoring removed bh option [ 154.264914][ T5787] microsoft 0003:045E:009D.0001: unknown main item tag 0x0 [ 154.298248][ T5787] microsoft 0003:045E:009D.0001: unknown main item tag 0x0 [ 154.305887][ T6381] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 154.320530][ T6367] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.338233][ T5787] microsoft 0003:045E:009D.0001: ignoring exceeding usage max [ 154.353080][ T6367] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.369784][ T5787] microsoft 0003:045E:009D.0001: unknown main item tag 0x5 [ 154.416634][ T5787] microsoft 0003:045E:009D.0001: unknown main item tag 0x6 [ 154.432715][ T6381] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 154.517909][ T5787] microsoft 0003:045E:009D.0001: hidraw0: USB HID v0.c4 Device [HID 045e:009d] on usb-dummy_hcd.3-1/input0 [ 154.556076][ T6381] EXT4-fs error (device loop0): ext4_read_inline_dir:1600: inode #12: block 7: comm syz.0.212: path /64/control/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 154.582398][ C0] vkms_vblank_simulate: vblank timer overrun [ 154.612522][ T5787] microsoft 0003:045E:009D.0001: no inputs found [ 154.628088][ T5787] microsoft 0003:045E:009D.0001: could not initialize ff, continuing anyway [ 154.649527][ T6381] EXT4-fs (loop0): Remounting filesystem read-only [ 154.677872][ T5787] usb 4-1: USB disconnect, device number 4 [ 154.894206][ T5781] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.946324][ T6395] loop1: detected capacity change from 0 to 256 [ 154.971529][ T6391] fido_id[6391]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 155.129017][ T6395] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d) [ 155.223705][ T6397] loop2: detected capacity change from 0 to 128 [ 155.355429][ T5845] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 155.444879][ T5845] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 156.909094][ T6431] block nbd2: shutting down sockets [ 157.320902][ T6449] loop0: detected capacity change from 0 to 256 [ 157.367001][ T6449] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d) [ 157.576194][ T6452] netlink: 104 bytes leftover after parsing attributes in process `syz.2.240'. [ 158.247742][ T5847] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 158.450653][ T5847] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 158.472380][ T5847] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 158.522622][ T5847] usb 3-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00 [ 158.549808][ T5847] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.586655][ T5847] usb 3-1: Product: syz [ 158.593212][ T5847] usb 3-1: Manufacturer: syz [ 158.608106][ T5847] usb 3-1: SerialNumber: syz [ 158.653356][ T5847] ums-sddr09 3-1:1.0: USB Mass Storage device detected [ 158.699338][ T5847] ums-sddr09 3-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 158.699338][ T5847] Please send a copy of this message to and [ 159.037366][ T6470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.077620][ T6470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.110545][ T6470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.143699][ T6470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.187827][ T6470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.227737][ T6470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.278448][ T6470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.331592][ T5847] ums-sddr09: probe of 3-1:1.0 failed with error -5 [ 159.347922][ T6470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.370021][ T6470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.419373][ T6470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.446537][ T6470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.488502][ T6470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.515610][ T5787] usb 3-1: USB disconnect, device number 4 [ 159.868571][ T6467] loop0: detected capacity change from 0 to 32768 [ 159.930994][ T6473] FAULT_INJECTION: forcing a failure. [ 159.930994][ T6473] name failslab, interval 1, probability 0, space 0, times 0 [ 159.955872][ T6473] CPU: 0 PID: 6473 Comm: syz.1.248 Not tainted syzkaller #0 [ 159.965417][ T6473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 159.976811][ T6473] Call Trace: [ 159.982427][ T6473] [ 159.985939][ T6473] dump_stack_lvl+0x18c/0x250 [ 159.992464][ T6473] ? show_regs_print_info+0x20/0x20 [ 159.999251][ T6473] ? load_image+0x420/0x420 [ 160.004978][ T6473] ? __might_sleep+0xe0/0xe0 [ 160.011325][ T6473] ? __lock_acquire+0x7eb0/0x7eb0 [ 160.018587][ T6473] should_fail_ex+0x394/0x4c0 [ 160.028141][ T6473] should_failslab+0x9/0x20 [ 160.035347][ T6473] slab_pre_alloc_hook+0x59/0x300 [ 160.041918][ T6473] ? nfs_alloc_fhandle+0x4a/0x90 [ 160.049350][ T6473] __kmem_cache_alloc_node+0x53/0x250 [ 160.057622][ T6473] ? nfs_alloc_fhandle+0x4a/0x90 [ 160.065879][ T6473] kmalloc_trace+0x2a/0xe0 [ 160.071009][ T6473] nfs_alloc_fhandle+0x4a/0x90 [ 160.077713][ T6473] nfs_init_fs_context+0x69/0xf60 [ 160.086499][ T6473] alloc_fs_context+0x618/0x7a0 [ 160.094517][ T6473] __se_sys_fsopen+0xa0/0x2c0 [ 160.101568][ T6473] do_syscall_64+0x55/0xb0 [ 160.108422][ T6473] ? clear_bhb_loop+0x40/0x90 [ 160.116482][ T6473] ? clear_bhb_loop+0x40/0x90 [ 160.125863][ T6473] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 160.134196][ T6473] RIP: 0033:0x7ff95fd9e199 [ 160.141913][ T6473] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 160.171203][ T6473] RSP: 002b:00007ff960b96028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 160.182217][ T6473] RAX: ffffffffffffffda RBX: 00007ff960025fa0 RCX: 00007ff95fd9e199 [ 160.192308][ T6473] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000080 [ 160.206932][ T6473] RBP: 00007ff95fe350b8 R08: 0000000000000000 R09: 0000000000000000 [ 160.217194][ T6473] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 160.226373][ T6473] R13: 00007ff960026038 R14: 00007ff960025fa0 R15: 00007ffe4b5c63c8 [ 160.235231][ T6473] [ 160.446691][ T6467] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 160.603089][ T6467] XFS (loop0): Ending clean mount [ 160.752477][ T6486] FAULT_INJECTION: forcing a failure. [ 160.752477][ T6486] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 160.781817][ T6486] CPU: 1 PID: 6486 Comm: syz.1.250 Not tainted syzkaller #0 [ 160.792871][ T6486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 160.807562][ T6486] Call Trace: [ 160.812937][ T6486] [ 160.820219][ T6486] dump_stack_lvl+0x18c/0x250 [ 160.827226][ T6486] ? show_regs_print_info+0x20/0x20 [ 160.835203][ T6486] ? load_image+0x420/0x420 [ 160.842129][ T6486] ? __might_fault+0xaa/0x120 [ 160.847767][ T6486] ? __lock_acquire+0x7eb0/0x7eb0 [ 160.857012][ T6486] should_fail_ex+0x394/0x4c0 [ 160.865107][ T6486] _copy_from_iter+0x1cd/0x1290 [ 160.872383][ T6486] ? rcu_is_watching+0x15/0xb0 [ 160.878337][ T6486] ? copyout_mc+0x70/0x70 [ 160.884297][ T6486] ? tun_get_user+0x667/0x3d30 [ 160.891931][ T6486] ? page_copy_sane+0x4e/0x270 [ 160.901153][ T6486] copy_page_from_iter+0x7b/0x100 [ 160.908097][ T6486] tun_get_user+0x1c33/0x3d30 [ 160.916246][ T6486] ? tun_get_user+0x667/0x3d30 [ 160.924420][ T6486] ? rcu_read_unlock+0xa0/0xa0 [ 160.932253][ T6486] ? tun_get+0x1c/0x2e0 [ 160.937766][ T6486] ? __lock_acquire+0x7eb0/0x7eb0 [ 160.945038][ T6486] ? tun_get+0x1c/0x2e0 [ 160.950447][ T6486] tun_chr_write_iter+0x119/0x200 [ 160.956727][ T6486] vfs_write+0x474/0x9a0 [ 160.961797][ T6486] ? file_end_write+0x250/0x250 [ 160.967820][ T6486] ? __fget_files+0x3fc/0x460 [ 160.976285][ T6486] ? __fdget_pos+0x1d8/0x330 [ 160.982101][ T6486] ? ksys_write+0x74/0x260 [ 160.989248][ T6486] ksys_write+0x151/0x260 [ 160.997393][ T6486] ? __ia32_sys_read+0x90/0x90 [ 161.005015][ T6486] ? lockdep_hardirqs_on+0x98/0x150 [ 161.014500][ T6486] do_syscall_64+0x55/0xb0 [ 161.023469][ T6486] ? clear_bhb_loop+0x40/0x90 [ 161.028687][ T6486] ? clear_bhb_loop+0x40/0x90 [ 161.036543][ T6486] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 161.043482][ T6486] RIP: 0033:0x7ff95fd5e9ce [ 161.049579][ T6486] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 161.077372][ T6486] RSP: 002b:00007ff960b95fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 161.088946][ T6486] RAX: ffffffffffffffda RBX: 00007ff960b966c0 RCX: 00007ff95fd5e9ce [ 161.101258][ T6486] RDX: 0000000000000151 RSI: 0000200000000340 RDI: 00000000000000c8 [ 161.113466][ T6486] RBP: 00007ff95fe350b8 R08: 0000000000000000 R09: 0000000000000000 [ 161.127915][ T6486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 161.140694][ T6486] R13: 00007ff960026038 R14: 00007ff960025fa0 R15: 00007ffe4b5c63c8 [ 161.151884][ T6486] [ 161.407914][ T5781] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 161.449829][ T6491] loop1: detected capacity change from 0 to 64 [ 161.521519][ T28] audit: type=1800 audit(1791209406.433:24): pid=6491 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.252" name="file1" dev="loop1" ino=21 res=0 errno=0 [ 161.669695][ T6491] syz.1.252: attempt to access beyond end of device [ 161.669695][ T6491] loop1: rw=34817, sector=57, nr_sectors = 8 limit=64 [ 162.024556][ T6502] netlink: 'syz.2.257': attribute type 6 has an invalid length. [ 162.090674][ T6501] tipc: Started in network mode [ 162.117654][ T6501] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 162.172794][ T6501] tipc: Enabled bearer , priority 10 [ 162.835092][ T6525] loop2: detected capacity change from 0 to 8 [ 162.867134][ T6525] SQUASHFS error: lzo decompression failed, data probably corrupt [ 162.893432][ T6525] SQUASHFS error: Failed to read block 0x144: -5 [ 162.902942][ T6525] SQUASHFS error: Unable to read metadata cache entry [142] [ 162.912900][ T6525] SQUASHFS error: Unable to read inode 0x11f [ 162.926469][ T49] tipc: Subscription rejected, illegal request [ 162.991025][ T5792] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 163.004428][ T6498] loop3: detected capacity change from 0 to 40427 [ 163.029734][ T6498] F2FS-fs (loop3): invalid crc value [ 163.063040][ T6498] F2FS-fs (loop3): Found nat_bits in checkpoint [ 163.302424][ T6498] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 163.309484][ T5845] tipc: Node number set to 4269801488 [ 163.396231][ T6498] F2FS-fs (loop3): Stopped filesystem due to reason: 0 [ 164.161101][ T6549] loop0: detected capacity change from 0 to 512 [ 164.579639][ T28] audit: type=1326 audit(1791209409.483:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6561 comm="syz.0.280" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f103239e199 code=0x7ffc0000 [ 164.632749][ T28] audit: type=1326 audit(1791209409.483:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6561 comm="syz.0.280" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f103239e199 code=0x7ffc0000 [ 164.749170][ T28] audit: type=1326 audit(1791209409.483:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6561 comm="syz.0.280" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f103239e199 code=0x7ffc0000 [ 164.868171][ T28] audit: type=1326 audit(1791209409.483:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6561 comm="syz.0.280" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f103235e9ce code=0x7ffc0000 [ 164.966482][ T28] audit: type=1326 audit(1791209409.503:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6561 comm="syz.0.280" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f103239e199 code=0x7ffc0000 [ 165.015489][ T28] audit: type=1326 audit(1791209409.503:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6561 comm="syz.0.280" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f103239e199 code=0x7ffc0000 [ 165.053124][ T28] audit: type=1326 audit(1791209409.503:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6561 comm="syz.0.280" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f103239e199 code=0x7ffc0000 [ 165.090505][ T28] audit: type=1326 audit(1791209409.513:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6561 comm="syz.0.280" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f103239e199 code=0x7ffc0000 [ 165.135178][ T6573] netlink: 24 bytes leftover after parsing attributes in process `syz.1.284'. [ 165.162386][ T28] audit: type=1326 audit(1791209409.523:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6561 comm="syz.0.280" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f103239e199 code=0x7ffc0000 [ 166.276610][ T6609] netlink: 104 bytes leftover after parsing attributes in process `syz.2.298'. [ 166.501635][ T6612] input: syz0 as /devices/virtual/input/input8 [ 167.063029][ T6618] loop3: detected capacity change from 0 to 2048 [ 167.188617][ T6618] Alternate GPT is invalid, using primary GPT. [ 167.218191][ T6618] loop3: p1 p2 p3 [ 167.227287][ T6618] loop3: partition table partially beyond EOD, truncated [ 167.456393][ T6633] FAULT_INJECTION: forcing a failure. [ 167.456393][ T6633] name failslab, interval 1, probability 0, space 0, times 0 [ 167.501267][ T6633] CPU: 0 PID: 6633 Comm: syz.1.308 Not tainted syzkaller #0 [ 167.509477][ T6633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 167.522806][ T6633] Call Trace: [ 167.527316][ T6633] [ 167.530706][ T6633] dump_stack_lvl+0x18c/0x250 [ 167.538629][ T6633] ? show_regs_print_info+0x20/0x20 [ 167.546050][ T6633] ? load_image+0x420/0x420 [ 167.554104][ T6633] ? __lock_acquire+0x7eb0/0x7eb0 [ 167.561193][ T6633] should_fail_ex+0x394/0x4c0 [ 167.566430][ T6633] should_failslab+0x9/0x20 [ 167.571935][ T6633] slab_pre_alloc_hook+0x59/0x300 [ 167.578117][ T6633] kmem_cache_alloc_lru+0x4d/0x2b0 [ 167.584408][ T6633] ? sock_alloc_inode+0x28/0xc0 [ 167.591232][ T6633] sock_alloc_inode+0x28/0xc0 [ 167.597692][ T6633] ? sockfs_init_fs_context+0xb0/0xb0 [ 167.606269][ T6633] new_inode_pseudo+0x63/0x1d0 [ 167.614903][ T6633] __sock_create+0x12d/0x940 [ 167.621656][ T6633] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 167.628187][ T6633] __sys_socket+0xd7/0x1b0 [ 167.633168][ T6633] __x64_sys_socket+0x7a/0x90 [ 167.640314][ T6633] do_syscall_64+0x55/0xb0 [ 167.647140][ T6633] ? clear_bhb_loop+0x40/0x90 [ 167.652928][ T6633] ? clear_bhb_loop+0x40/0x90 [ 167.659640][ T6633] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 167.671068][ T6633] RIP: 0033:0x7ff95fd9e199 [ 167.676575][ T6633] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 167.703120][ T6633] RSP: 002b:00007ff960b96028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 167.712944][ T6633] RAX: ffffffffffffffda RBX: 00007ff960025fa0 RCX: 00007ff95fd9e199 [ 167.723915][ T6633] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000010 [ 167.735383][ T6633] RBP: 00007ff95fe350b8 R08: 0000000000000000 R09: 0000000000000000 [ 167.745668][ T6633] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 167.755928][ T6633] R13: 00007ff960026038 R14: 00007ff960025fa0 R15: 00007ffe4b5c63c8 [ 167.767499][ T6633] [ 167.818102][ T6633] socket: no more sockets [ 167.870015][ T6625] sctp: failed to load transform for md5: -2 [ 168.372041][ T6646] Cannot find set identified by id 0 to match [ 168.488825][ T5827] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 168.682607][ T5827] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 168.726930][ T5827] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 168.769694][ T5827] usb 4-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 168.792448][ T5827] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.807591][ T5827] usb 4-1: Product: syz [ 168.812919][ T5827] usb 4-1: Manufacturer: syz [ 168.830125][ T5827] usb 4-1: SerialNumber: syz [ 168.853215][ T6640] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 168.883640][ T6640] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 168.915639][ T5827] usbserial_generic 4-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 168.950236][ T5827] usbserial_generic 4-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 168.968345][ T5827] usbserial_generic 4-1:1.0: generic converter detected [ 169.001319][ T5827] usb 4-1: generic converter now attached to ttyUSB0 [ 169.235433][ C1] generic ttyUSB0: usb_serial_generic_write_bulk_callback - nonzero urb status: -71 [ 169.299083][ T173] usb 4-1: USB disconnect, device number 5 [ 169.352139][ T173] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 169.390471][ T173] usbserial_generic 4-1:1.0: device disconnected [ 169.698695][ T6667] warning: `syz.1.320' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 169.756062][ T6655] loop0: detected capacity change from 0 to 32768 [ 169.781539][ T6655] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop0 scanned by syz.0.315 (6655) [ 169.826246][ T6655] BTRFS info (device loop0): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 169.875597][ T6655] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 169.914416][ T6655] BTRFS info (device loop0): setting nodatacow, compression disabled [ 169.945554][ T6655] BTRFS info (device loop0): turning on flush-on-commit [ 169.969722][ T6655] BTRFS info (device loop0): using free space tree [ 170.017981][ T5827] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 170.147316][ T6655] BTRFS info (device loop0): enabling ssd optimizations [ 170.161149][ T6655] BTRFS info (device loop0): auto enabling async discard [ 170.217770][ T5827] usb 3-1: device descriptor read/64, error -71 [ 170.487643][ T5827] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 170.569879][ T5781] BTRFS info (device loop0): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 170.688306][ T5827] usb 3-1: device descriptor read/64, error -71 [ 170.836171][ T5827] usb usb3-port1: attempt power cycle [ 170.911587][ T5792] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 10 /dev/loop0 scanned by udevd (5792) [ 171.217922][ T173] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 171.289898][ T5827] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 171.296784][ T6671] loop1: detected capacity change from 0 to 32768 [ 171.368863][ T5827] usb 3-1: device descriptor read/8, error -71 [ 171.408449][ T6671] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 171.454554][ T173] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 171.469902][ T173] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 171.488358][ T173] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 171.501822][ T173] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.625089][ T6671] XFS (loop1): Ending clean mount [ 171.678386][ T5827] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 171.741349][ T5827] usb 3-1: device descriptor read/8, error -71 [ 171.769910][ T173] usb 1-1: usb_control_msg returned -32 [ 171.801178][ T173] usbtmc 1-1:16.0: can't read capabilities [ 171.872755][ T5827] usb usb3-port1: unable to enumerate USB device [ 172.278561][ T5779] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 172.743207][ T6719] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 173.022599][ T6728] input: syz1 as /devices/virtual/input/input9 [ 173.169809][ T6730] loop2: detected capacity change from 0 to 128 [ 173.204246][ T6730] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 173.227530][ T6730] ext4 filesystem being mounted at /83/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 173.429534][ T5780] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 173.757679][ T23] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 173.954935][ T5827] usb 1-1: USB disconnect, device number 4 [ 173.965836][ T23] usb 4-1: Using ep0 maxpacket: 8 [ 173.984196][ T6745] loop2: detected capacity change from 0 to 4096 [ 174.030212][ T23] usb 4-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 174.054044][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.073112][ T23] usb 4-1: Product: syz [ 174.089209][ T23] usb 4-1: Manufacturer: syz [ 174.094369][ T23] usb 4-1: SerialNumber: syz [ 174.145772][ T23] usb 4-1: config 0 descriptor?? [ 174.175006][ T23] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 174.186978][ T6749] loop0: detected capacity change from 0 to 256 [ 174.228738][ T6749] exfat: Deprecated parameter 'utf8' [ 174.234620][ T6749] exfat: Deprecated parameter 'utf8' [ 174.279631][ T6749] exfat: Deprecated parameter 'namecase' [ 174.377804][ T6749] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 174.546979][ T6745] ntfs3: loop2: failed to convert "0080" to koi8-ru [ 174.586120][ T6745] ntfs3: loop2: failed to convert name for inode 1e. [ 174.644368][ T6745] ntfs3: loop2: ino=1f, mi_enum_attr [ 174.669095][ T6745] ntfs3: loop2: failed to convert "256c" to koi8-ru [ 174.704162][ T6752] ntfs3: loop2: failed to convert "256c" to koi8-ru [ 175.212010][ T23] gspca_sonixj: reg_w1 err -71 [ 175.277862][ T23] sonixj: probe of 4-1:0.0 failed with error -71 [ 175.294685][ T23] usb 4-1: USB disconnect, device number 6 [ 176.020527][ T6770] loop0: detected capacity change from 0 to 32768 [ 176.199266][ T6770] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 176.335181][ T6770] XFS (loop0): Ending clean mount [ 176.513132][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 176.513150][ T28] audit: type=1326 audit(1791209421.423:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6794 comm="syz.1.362" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff95fd9e199 code=0x0 [ 176.606461][ T6798] macvtap1: entered promiscuous mode [ 176.631178][ T6798] vlan0: entered promiscuous mode [ 176.632072][ T5781] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 176.663680][ T6798] team0: Device macvtap1 failed to register rx_handler [ 176.705353][ T6798] vlan0: left promiscuous mode [ 177.162970][ T6805] loop2: detected capacity change from 0 to 512 [ 177.176031][ T6805] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 177.194038][ T6805] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 177.261230][ T6805] EXT4-fs (loop2): 1 truncate cleaned up [ 177.276205][ T6805] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 177.380001][ T5780] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.873134][ T6827] netlink: 12 bytes leftover after parsing attributes in process `syz.1.375'. [ 177.945601][ T6827] ipvlan2: entered allmulticast mode [ 177.957792][ T6827] syz_tun: entered allmulticast mode [ 178.234446][ T6839] FAULT_INJECTION: forcing a failure. [ 178.234446][ T6839] name failslab, interval 1, probability 0, space 0, times 0 [ 178.267715][ T6839] CPU: 0 PID: 6839 Comm: syz.1.380 Not tainted syzkaller #0 [ 178.276847][ T6839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 178.287646][ T6839] Call Trace: [ 178.291474][ T6839] [ 178.296978][ T6839] dump_stack_lvl+0x18c/0x250 [ 178.302212][ T6839] ? show_regs_print_info+0x20/0x20 [ 178.309426][ T6839] ? load_image+0x420/0x420 [ 178.315503][ T6839] ? __might_sleep+0xe0/0xe0 [ 178.322586][ T6839] ? __lock_acquire+0x7eb0/0x7eb0 [ 178.328177][ T6839] should_fail_ex+0x394/0x4c0 [ 178.333057][ T6839] should_failslab+0x9/0x20 [ 178.338697][ T6839] slab_pre_alloc_hook+0x59/0x300 [ 178.344196][ T6839] kmem_cache_alloc+0x5a/0x2c0 [ 178.349700][ T6839] ? getname_flags+0xbb/0x500 [ 178.354862][ T6839] getname_flags+0xbb/0x500 [ 178.360331][ T6839] __x64_sys_mkdirat+0x7c/0xa0 [ 178.366816][ T6839] do_syscall_64+0x55/0xb0 [ 178.372265][ T6839] ? clear_bhb_loop+0x40/0x90 [ 178.377463][ T6839] ? clear_bhb_loop+0x40/0x90 [ 178.383113][ T6839] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 178.390153][ T6839] RIP: 0033:0x7ff95fd9e199 [ 178.395021][ T6839] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 178.418186][ T6839] RSP: 002b:00007ff960b96028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 178.428152][ T6839] RAX: ffffffffffffffda RBX: 00007ff960025fa0 RCX: 00007ff95fd9e199 [ 178.437870][ T6839] RDX: 00000000000001ff RSI: 0000000000000000 RDI: ffffffffffffff9c [ 178.447838][ T6839] RBP: 00007ff95fe350b8 R08: 0000000000000000 R09: 0000000000000000 [ 178.460653][ T6839] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 178.471814][ T6839] R13: 00007ff960026038 R14: 00007ff960025fa0 R15: 00007ffe4b5c63c8 [ 178.483064][ T6839] [ 178.675863][ T6845] loop1: detected capacity change from 0 to 512 [ 178.763374][ T6845] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.804686][ T6845] ext4 filesystem being mounted at /93/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 179.058492][ T5779] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.149767][ T6856] sd 0:0:1:0: PR command failed: 1026 [ 179.208731][ T6856] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 179.242950][ T6856] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 179.502771][ T6865] FAULT_INJECTION: forcing a failure. [ 179.502771][ T6865] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 179.523838][ T6865] CPU: 0 PID: 6865 Comm: syz.0.389 Not tainted syzkaller #0 [ 179.535003][ T6865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 179.548822][ T6865] Call Trace: [ 179.553196][ T6865] [ 179.557575][ T6865] dump_stack_lvl+0x18c/0x250 [ 179.567661][ T6865] ? show_regs_print_info+0x20/0x20 [ 179.573922][ T6865] ? load_image+0x420/0x420 [ 179.579393][ T6865] ? __lock_acquire+0x7eb0/0x7eb0 [ 179.585132][ T6865] should_fail_ex+0x394/0x4c0 [ 179.590903][ T6865] prepare_alloc_pages+0x1e1/0x5b0 [ 179.597866][ T6865] __alloc_pages+0x134/0x460 [ 179.603473][ T6865] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 179.611597][ T6865] ? zone_statistics+0x170/0x170 [ 179.617913][ T6865] ? alloc_pages+0x4e1/0x740 [ 179.624623][ T6865] kimage_alloc_pages+0xc5/0x330 [ 179.631742][ T6865] kimage_alloc_control_pages+0x483/0xb30 [ 179.639001][ T6865] ? kimage_free_pages+0x1d0/0x1d0 [ 179.647425][ T6865] do_kexec_load+0x398/0x6d0 [ 179.653206][ T6865] __se_sys_kexec_load+0x134/0x160 [ 179.661046][ T6865] do_syscall_64+0x55/0xb0 [ 179.668049][ T6865] ? clear_bhb_loop+0x40/0x90 [ 179.675154][ T6865] ? clear_bhb_loop+0x40/0x90 [ 179.680710][ T6865] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 179.689638][ T6865] RIP: 0033:0x7f103239e199 [ 179.696626][ T6865] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 179.721171][ T6865] RSP: 002b:00007f103325a028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6 [ 179.731138][ T6865] RAX: ffffffffffffffda RBX: 00007f1032625fa0 RCX: 00007f103239e199 [ 179.741587][ T6865] RDX: 0000200000000580 RSI: 0000000000000001 RDI: 0000000000000000 [ 179.752049][ T6865] RBP: 00007f10324350b8 R08: 0000000000000000 R09: 0000000000000000 [ 179.761600][ T6865] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 179.771955][ T6865] R13: 00007f1032626038 R14: 00007f1032625fa0 R15: 00007fffee8288f8 [ 179.781103][ T6865] [ 179.786982][ T56] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 179.853821][ T6865] kexec: Could not allocate swap buffer [ 179.896810][ T6868] binder: 6866:6868 ioctl c0306201 0 returned -14 [ 179.981648][ T56] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 180.016357][ T56] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 180.094938][ T56] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 180.136281][ T56] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 180.171709][ T56] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 180.211516][ T56] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 180.236786][ T56] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 180.252857][ T56] usb 2-1: Product: syz [ 180.258542][ T56] usb 2-1: Manufacturer: syz [ 180.311363][ T56] cdc_wdm 2-1:1.0: skipping garbage [ 180.333944][ T56] cdc_wdm 2-1:1.0: skipping garbage [ 180.365370][ T56] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 180.380731][ T56] cdc_wdm 2-1:1.0: Unknown control protocol [ 180.761960][ T6886] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 180.795957][ T6886] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 180.816390][ C0] cdc_wdm 2-1:1.0: Unexpected error -71 [ 180.819585][ T23] usb 2-1: USB disconnect, device number 4 [ 180.833682][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 180.842517][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 180.855106][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 181.282339][ T6879] loop0: detected capacity change from 0 to 32768 [ 181.296257][ T6879] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.393 (6879) [ 181.373345][ T6879] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 181.411426][ T6879] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 181.454031][ T6879] BTRFS info (device loop0): setting nodatacow, compression disabled [ 181.489010][ T6879] BTRFS info (device loop0): disabling tree log [ 181.507336][ T6879] BTRFS info (device loop0): max_inline at 0 [ 181.524271][ T6879] BTRFS info (device loop0): using free space tree [ 181.676309][ T6879] BTRFS info (device loop0): auto enabling async discard [ 181.888932][ T6911] loop8: detected capacity change from 0 to 8 [ 181.913034][ T5781] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 181.949970][ T6911] loop8: [CUMANA/ADFS] p1 [ADFS] p1 [ 181.957037][ T6911] loop8: partition table partially beyond EOD, truncated [ 182.043114][ T6911] loop8: p1 size 3004527350 extends beyond EOD, truncated [ 182.348737][ T5778] udevd[5778]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 182.517407][ T6923] loop1: detected capacity change from 0 to 128 [ 182.594258][ T6923] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 182.746417][ T6923] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 183.076879][ T6933] loop0: detected capacity change from 0 to 1024 [ 183.131714][ T6937] loop1: detected capacity change from 0 to 1024 [ 183.368226][ T6937] syz.1.415: attempt to access beyond end of device [ 183.368226][ T6937] loop1: rw=0, sector=1024, nr_sectors = 4 limit=1024 [ 183.431951][ T6937] Buffer I/O error on dev loop1, logical block 256, async page read [ 183.458829][ T6933] hfsplus: catalog searching failed [ 183.473265][ T6937] syz.1.415: attempt to access beyond end of device [ 183.473265][ T6937] loop1: rw=0, sector=1028, nr_sectors = 4 limit=1024 [ 183.528927][ T6937] Buffer I/O error on dev loop1, logical block 257, async page read [ 183.590443][ T2963] hfsplus: b-tree write err: -5, ino 3 [ 183.631978][ T5781] hfsplus: node 4:3 still has 1 user(s)! [ 183.722169][ T6945] netlink: 8 bytes leftover after parsing attributes in process `syz.2.419'. [ 183.756479][ T6945] netlink: 8 bytes leftover after parsing attributes in process `syz.2.419'. [ 184.939694][ T6979] bridge: RTM_NEWNEIGH with invalid ether address [ 184.950326][ T6979] bridge: RTM_NEWNEIGH with invalid ether address [ 185.175446][ T6985] loop2: detected capacity change from 0 to 1024 [ 185.263147][ T6985] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 185.313609][ T6985] ext4 filesystem being mounted at /113/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 185.422133][ T6985] EXT4-fs error (device loop2): ext4_map_blocks:720: inode #15: block 3: comm syz.2.437: lblock 3 mapped to illegal pblock 3 (length 3) [ 185.457680][ T6985] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 185.485066][ T6985] EXT4-fs (loop2): This should not happen!! Data will be lost [ 185.485066][ T6985] [ 185.523288][ T6993] EXT4-fs error (device loop2): ext4_map_blocks:720: inode #15: comm syz.2.437: lblock 0 mapped to illegal pblock 0 (length 1) [ 185.564302][ T6993] EXT4-fs error (device loop2): ext4_ext_remove_space:2957: inode #15: comm syz.2.437: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 185.672314][ T2963] EXT4-fs error (device loop2): ext4_map_blocks:720: inode #15: block 8: comm kworker/u4:9: lblock 8 mapped to illegal pblock 8 (length 8) [ 185.715608][ T2963] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 185.740499][ T2963] EXT4-fs (loop2): This should not happen!! Data will be lost [ 185.740499][ T2963] [ 185.792549][ T5780] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 185.869550][ T7001] bond0: option mode: unable to set because the bond device is up [ 186.057685][ T23] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 186.283092][ T23] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 186.307602][ T23] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 186.350030][ T23] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 186.366992][ T7011] loop0: detected capacity change from 0 to 1024 [ 186.368096][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 186.396825][ T23] usb 2-1: SerialNumber: syz [ 186.432713][ T23] usb 2-1: bad CDC descriptors [ 186.486497][ T7011] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 186.592665][ T7011] ext4 filesystem being mounted at /123/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 186.639552][ T23] usb 2-1: USB disconnect, device number 5 [ 186.687882][ T7011] EXT4-fs (loop0): shut down requested (1) [ 186.698579][ T28] audit: type=1804 audit(1791209431.583:50): pid=7011 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.448" name="/newroot/123/file1/file1" dev="loop0" ino=15 res=1 errno=0 [ 186.798459][ T5786] Bluetooth: hci0: command 0x0c1a tx timeout [ 186.843966][ T7004] loop2: detected capacity change from 0 to 32768 [ 186.892941][ T5781] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 186.956578][ T7004] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 186.981636][ T7005] netlink: 12 bytes leftover after parsing attributes in process `syz.3.445'. [ 187.124337][ T7004] XFS (loop2): Ending clean mount [ 187.384129][ T5780] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 187.787851][ T23] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 187.982201][ T23] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 188.007862][ T23] usb 2-1: config 0 has no interface number 0 [ 188.017123][ T23] usb 2-1: config 0 interface 41 has no altsetting 0 [ 188.054042][ T23] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 188.065922][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.107749][ T23] usb 2-1: Product: syz [ 188.112928][ T23] usb 2-1: Manufacturer: syz [ 188.122795][ T23] usb 2-1: SerialNumber: syz [ 188.141264][ T23] usb 2-1: config 0 descriptor?? [ 188.665642][ T7061] netlink: 104 bytes leftover after parsing attributes in process `syz.2.460'. [ 188.687743][ T173] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 188.888731][ T173] usb 1-1: Using ep0 maxpacket: 8 [ 188.914098][ T173] usb 1-1: config index 0 descriptor too short (expected 74, got 45) [ 188.952297][ T173] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 188.998012][ T173] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 189.029039][ T173] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 189.067188][ T173] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 189.103657][ T173] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 189.154118][ T173] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 189.186181][ T173] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.215115][ T23] CoreChips: probe of 2-1:0.41 failed with error -71 [ 189.276091][ T23] usb 2-1: USB disconnect, device number 6 [ 189.413157][ T7069] loop2: detected capacity change from 0 to 4096 [ 189.441154][ T173] usb 1-1: GET_CAPABILITIES returned 0 [ 189.453334][ T7069] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [ 189.478533][ T173] usbtmc 1-1:16.0: can't read capabilities [ 189.647754][ T23] usb 1-1: USB disconnect, device number 5 [ 189.675550][ T7069] ntfs3: loop2: Failed to initialize $Extend/$ObjId. [ 190.484638][ T7090] loop0: detected capacity change from 0 to 128 [ 191.400878][ T7118] futex_wake_op: syz.2.479 tries to shift op by -1; fix this program [ 191.980917][ T7125] netlink: 104 bytes leftover after parsing attributes in process `syz.0.482'. [ 192.121143][ T7115] loop3: detected capacity change from 0 to 40427 [ 192.197427][ T7115] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 192.227046][ T7115] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 192.303129][ T7115] F2FS-fs (loop3): Found nat_bits in checkpoint [ 192.436753][ T7136] ptp ptp0: new virtual clock ptp1 [ 192.464715][ T7142] loop0: detected capacity change from 0 to 128 [ 192.490145][ T7115] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 192.502318][ T7115] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 192.532142][ T7136] ptp ptp0: new virtual clock ptp2 [ 192.578315][ T7142] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 192.609972][ T7136] ptp ptp0: new virtual clock ptp3 [ 192.635810][ T7142] ext4 filesystem being mounted at /133/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 192.680862][ T7136] ptp ptp0: new virtual clock ptp4 [ 192.729756][ T7136] ptp ptp0: new virtual clock ptp5 [ 192.735774][ T7136] ptp ptp0: guarantee physical clock free running [ 192.910632][ T5781] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 193.178898][ T7156] loop8: detected capacity change from 0 to 8 [ 193.228253][ T7156] Dev loop8: unable to read RDB block 8 [ 193.244820][ T7156] loop8: unable to read partition table [ 193.263839][ T7156] loop8: partition table beyond EOD, truncated [ 193.295832][ T7156] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 193.864057][ T7171] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 194.280570][ T7178] netlink: 8 bytes leftover after parsing attributes in process `syz.3.492'. [ 194.726086][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.734238][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.796344][ T7193] loop1: detected capacity change from 0 to 128 [ 194.887115][ T7193] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 194.934773][ T7193] ext4 filesystem being mounted at /119/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 195.299305][ T5779] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 195.462527][ T7205] loop5: detected capacity change from 0 to 7 [ 195.484762][ T7205] Dev loop5: unable to read RDB block 7 [ 195.497864][ T7205] loop5: AHDI p1 p4 [ 195.502122][ T7205] loop5: partition table partially beyond EOD, truncated [ 195.521200][ T7205] loop5: p1 size 100663296 extends beyond EOD, truncated [ 195.555656][ T5845] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 195.610674][ T5792] udevd[5792]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 195.754222][ T7210] FAULT_INJECTION: forcing a failure. [ 195.754222][ T7210] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 195.777640][ T5845] usb 3-1: Using ep0 maxpacket: 32 [ 195.794990][ T7210] CPU: 0 PID: 7210 Comm: syz.1.515 Not tainted syzkaller #0 [ 195.804196][ T7210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 195.815922][ T7210] Call Trace: [ 195.822644][ T7210] [ 195.826335][ T7210] dump_stack_lvl+0x18c/0x250 [ 195.831668][ T7210] ? show_regs_print_info+0x20/0x20 [ 195.837205][ T7210] ? load_image+0x420/0x420 [ 195.841803][ T7210] ? __lock_acquire+0x7eb0/0x7eb0 [ 195.847291][ T7210] ? finish_task_switch+0x262/0x8f0 [ 195.854173][ T7210] should_fail_ex+0x394/0x4c0 [ 195.859549][ T7210] prepare_alloc_pages+0x1e1/0x5b0 [ 195.866254][ T7210] __alloc_pages+0x134/0x460 [ 195.872116][ T7210] ? zone_statistics+0x170/0x170 [ 195.879098][ T7210] ? asan.module_dtor+0x20/0x20 [ 195.884655][ T7210] ? futex_wait_queue+0x9d/0x1b0 [ 195.891721][ T7210] __kmalloc_large_node+0x8c/0x1f0 [ 195.897772][ T7210] ? iovec_from_user+0x87/0x240 [ 195.903698][ T7210] __kmalloc+0x114/0x240 [ 195.909742][ T7210] iovec_from_user+0x87/0x240 [ 195.915512][ T7210] process_vm_rw+0x26f/0xbe0 [ 195.920970][ T7210] ? futex_setup_timer+0xc0/0xc0 [ 195.926901][ T7210] ? futex_wait_setup+0x270/0x270 [ 195.933200][ T7210] ? __ia32_sys_process_vm_writev+0xf0/0xf0 [ 195.940940][ T7210] ? lock_chain_count+0x20/0x20 [ 195.947164][ T7210] __x64_sys_process_vm_readv+0xe0/0xf0 [ 195.956361][ T7210] do_syscall_64+0x55/0xb0 [ 195.963315][ T7210] ? clear_bhb_loop+0x40/0x90 [ 195.968652][ T7210] ? clear_bhb_loop+0x40/0x90 [ 195.975592][ T7210] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 195.983498][ T7210] RIP: 0033:0x7ff95fd9e199 [ 195.988624][ T7210] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 196.013687][ T7210] RSP: 002b:00007ff960b96028 EFLAGS: 00000246 ORIG_RAX: 0000000000000136 [ 196.024018][ T7210] RAX: ffffffffffffffda RBX: 00007ff960025fa0 RCX: 00007ff95fd9e199 [ 196.036804][ T7210] RDX: 0000000000000002 RSI: 0000200000008400 RDI: 0000000000000000 [ 196.045736][ T7210] RBP: 00007ff95fe350b8 R08: 0000000000000286 R09: 0000000000000000 [ 196.054934][ T7210] R10: 0000200000008640 R11: 0000000000000246 R12: 0000000000000000 [ 196.065802][ T7210] R13: 00007ff960026038 R14: 00007ff960025fa0 R15: 00007ffe4b5c63c8 [ 196.079530][ T7210] [ 196.106725][ T5845] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 196.125592][ T5845] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 196.143264][ T5845] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 196.156744][ T5845] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.178263][ T5845] usb 3-1: config 0 descriptor?? [ 196.190842][ T5845] hub 3-1:0.0: USB hub found [ 196.359045][ T7216] loop3: detected capacity change from 0 to 2048 [ 196.392734][ T7220] loop1: detected capacity change from 0 to 256 [ 196.458539][ T5845] hub 3-1:0.0: config failed, can't read hub descriptor (err -90) [ 196.500026][ T7216] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 196.736654][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.874750][ T5845] usbhid 3-1:0.0: can't add hid device: -71 [ 196.887792][ T5845] usbhid: probe of 3-1:0.0 failed with error -71 [ 196.941332][ T5845] usb 3-1: USB disconnect, device number 9 [ 197.072176][ T7234] loop3: detected capacity change from 0 to 256 [ 197.087066][ T7234] exfat: Deprecated parameter 'utf8' [ 197.163167][ T7234] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xffade8b4, utbl_chksum : 0xe619d30d) [ 197.257947][ T23] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 197.340330][ T7237] loop3: detected capacity change from 0 to 2048 [ 197.404612][ T7239] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 197.477127][ T23] usb 1-1: config 0 has an invalid interface number: 117 but max is 0 [ 197.507683][ T23] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 197.535357][ T23] usb 1-1: config 0 has no interface number 0 [ 197.544610][ T23] usb 1-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 197.575262][ T23] usb 1-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 197.619923][ T23] usb 1-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 197.637544][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.649352][ T7226] loop1: detected capacity change from 0 to 32768 [ 197.657606][ T23] usb 1-1: Product: syz [ 197.666341][ T23] usb 1-1: Manufacturer: syz [ 197.690983][ T23] usb 1-1: SerialNumber: syz [ 197.710644][ T28] audit: type=1800 audit(1791209442.613:51): pid=7237 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.527" name="bus" dev="loop3" ino=2097152 res=0 errno=0 [ 197.750663][ T23] usb 1-1: config 0 descriptor?? [ 197.780410][ T7226] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 197.875892][ T7226] XFS (loop1): Ending clean mount [ 197.904307][ T28] audit: type=1800 audit(1791209442.813:52): pid=7226 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.522" name="file1" dev="loop1" ino=4422 res=0 errno=0 [ 198.022912][ T7231] loop0: detected capacity change from 0 to 1024 [ 198.088244][ T7231] EXT4-fs: Ignoring removed orlov option [ 198.118342][ T7231] EXT4-fs: Ignoring removed nobh option [ 198.195351][ T7231] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 198.279526][ T5779] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 198.292113][ T23] usbtouchscreen: probe of 1-1:0.117 failed with error -71 [ 198.366952][ T23] usb 1-1: USB disconnect, device number 6 [ 198.618431][ T7261] loop3: detected capacity change from 0 to 512 [ 198.637126][ T7261] EXT4-fs: Ignoring removed oldalloc option [ 198.659810][ T7261] EXT4-fs warning (device loop3): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 198.687921][ T7261] EXT4-fs warning (device loop3): dx_probe:881: Enable large directory feature to access it [ 198.747642][ T7261] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.532: Corrupt directory, running e2fsck is recommended [ 198.830822][ T7261] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 198.863944][ T5781] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.871904][ T7261] EXT4-fs error (device loop3): ext4_iget_extra_inode:4752: inode #15: comm syz.3.532: corrupted in-inode xattr: e_name out of bounds [ 198.941932][ T7261] EXT4-fs error (device loop3): ext4_orphan_get:1413: comm syz.3.532: couldn't read orphan inode 15 (err -117) [ 199.006273][ T7261] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.105100][ T7261] EXT4-fs warning (device loop3): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 199.130926][ T7261] EXT4-fs warning (device loop3): dx_probe:881: Enable large directory feature to access it [ 199.154059][ T7261] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.532: Corrupt directory, running e2fsck is recommended [ 199.180694][ T7274] EXT4-fs warning (device loop3): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 199.213752][ T7274] EXT4-fs warning (device loop3): dx_probe:881: Enable large directory feature to access it [ 199.248431][ T7274] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.532: Corrupt directory, running e2fsck is recommended [ 199.277414][ T7261] EXT4-fs warning (device loop3): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 199.299687][ T7261] EXT4-fs warning (device loop3): dx_probe:881: Enable large directory feature to access it [ 199.321080][ T7261] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.532: Corrupt directory, running e2fsck is recommended [ 199.374090][ T7274] EXT4-fs warning (device loop3): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 199.507914][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.063847][ T7295] loop0: detected capacity change from 0 to 64 [ 200.443151][ T7308] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 202.077500][ C0] sched: RT throttling activated [ 202.169852][ T7312] loop1: detected capacity change from 0 to 32768 [ 202.330680][ T7332] lo: entered allmulticast mode [ 202.429091][ T7331] lo: left allmulticast mode [ 202.565180][ T7324] loop3: detected capacity change from 0 to 131072 [ 202.575601][ T7324] XFS: ikeep mount option is deprecated. [ 202.665090][ T7324] XFS (loop3): Mounting V5 Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846 [ 203.172440][ T7324] XFS (loop3): Starting recovery (logdev: internal) [ 203.244752][ T7324] XFS (loop3): Ending recovery (logdev: internal) [ 203.395324][ T7356] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 203.680195][ T5787] kernel write not supported for file /input/mice (pid: 5787 comm: kworker/0:3) [ 203.700029][ T5777] XFS (loop3): Unmounting Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846 [ 203.796486][ T7367] loop0: detected capacity change from 0 to 1024 [ 203.872228][ T5759] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 203.906010][ T7367] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 204.083273][ T5759] usb 2-1: unable to get BOS descriptor or descriptor too short [ 204.099425][ T5759] usb 2-1: not running at top speed; connect to a high speed hub [ 204.123760][ T5759] usb 2-1: New USB device found, idVendor=0763, idProduct=2003, bcdDevice= 0.40 [ 204.137546][ T5759] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.147827][ T5759] usb 2-1: Product: syz [ 204.152317][ T5759] usb 2-1: Manufacturer: syz [ 204.159780][ T5759] usb 2-1: SerialNumber: syz [ 204.159780][ T7367] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 204.234357][ T7367] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #11: comm syz.0.571: missing EA_INODE flag [ 204.272979][ T7367] EXT4-fs (loop0): Remounting filesystem read-only [ 204.283538][ T7367] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 204.452206][ T5781] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.511628][ T5759] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 204.567736][ T5759] usb 2-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 204.577032][ T5759] usb 2-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 204.747971][ T5759] usb 2-1: USB disconnect, device number 7 [ 205.501228][ T7378] loop2: detected capacity change from 0 to 32768 [ 205.609196][ T7378] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 205.789538][ T7378] XFS (loop2): Ending clean mount [ 206.028221][ T5780] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 206.779447][ T7419] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 206.779447][ T7419] The task syz.0.585 (7419) triggered the difference, watch for misbehavior. [ 207.391060][ T7415] loop2: detected capacity change from 0 to 32768 [ 207.563259][ T7415] JBD2: Ignoring recovery information on journal [ 207.687335][ T7411] loop3: detected capacity change from 0 to 32768 [ 207.795394][ T7415] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 207.829438][ T7411] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 208.106922][ T7421] loop1: detected capacity change from 0 to 40427 [ 208.171923][ T7421] F2FS-fs (loop1): Wrong segment_count / block_count (31 > 0) [ 208.181148][ T7411] XFS (loop3): Ending clean mount [ 208.187650][ T7415] OCFS2: ERROR (device loop2): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #17056 has bit count 2061 but max bitmap bits of 2048 [ 208.210514][ T7421] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 208.246561][ T7415] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 208.265941][ T7421] F2FS-fs (loop1): invalid crc value [ 208.280172][ T7415] OCFS2: Returning error to the calling process. [ 208.286706][ T7415] (syz.2.582,7415,0):ocfs2_search_chain:1783 ERROR: status = -5 [ 208.308431][ T7411] XFS (loop3): User initiated shutdown received. [ 208.315929][ T7411] XFS (loop3): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:501). Shutting down filesystem. [ 208.331587][ T7415] (syz.2.582,7415,0):ocfs2_search_chain:1893 ERROR: status = -5 [ 208.347548][ T7415] (syz.2.582,7415,0):ocfs2_claim_suballoc_bits:1972 ERROR: status = -5 [ 208.358813][ T7421] F2FS-fs (loop1): Found nat_bits in checkpoint [ 208.389154][ T7415] (syz.2.582,7415,0):ocfs2_claim_suballoc_bits:2015 ERROR: status = -5 [ 208.410308][ T7411] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [ 208.427654][ T7415] (syz.2.582,7415,0):ocfs2_claim_new_inode:2248 ERROR: status = -5 [ 208.465988][ T7415] (syz.2.582,7415,0):ocfs2_claim_new_inode:2263 ERROR: status = -5 [ 208.487586][ T7415] (syz.2.582,7415,0):ocfs2_mknod_locked:641 ERROR: status = -5 [ 208.511947][ T7415] (syz.2.582,7415,0):ocfs2_mknod:385 ERROR: status = -5 [ 208.551129][ T7421] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 208.567262][ T7415] (syz.2.582,7415,0):ocfs2_mknod:504 ERROR: status = -5 [ 208.598067][ T7421] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 208.606749][ T7415] (syz.2.582,7415,0):ocfs2_mkdir:661 ERROR: status = -5 [ 208.618141][ T5777] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 208.696259][ T7421] syz.1.586: attempt to access beyond end of device [ 208.696259][ T7421] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 208.799224][ T5847] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 208.809911][ T7421] syz.1.586: attempt to access beyond end of device [ 208.809911][ T7421] loop1: rw=2049, sector=45112, nr_sectors = 8 limit=40427 [ 208.934931][ T5779] syz-executor: attempt to access beyond end of device [ 208.934931][ T5779] loop1: rw=2049, sector=45120, nr_sectors = 8 limit=40427 [ 208.985995][ T5779] F2FS-fs (loop1): Remounting filesystem read-only [ 209.015618][ T5847] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 209.037754][ T5847] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 209.057630][ T5847] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 209.073103][ T5780] ocfs2: Unmounting device (7,2) on (node local) [ 209.104459][ T5847] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 209.125417][ T5847] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 209.156159][ T5847] usb 1-1: Product: syz [ 209.166332][ T5847] usb 1-1: Manufacturer: syz [ 209.193906][ T7439] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 209.225574][ T5847] garmin_gps 1-1:1.0: Garmin GPS usb/tty converter detected [ 209.315751][ T5847] usb 1-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 209.460386][ T173] usb 1-1: USB disconnect, device number 7 [ 209.485658][ T173] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 209.522211][ T173] garmin_gps 1-1:1.0: device disconnected [ 209.663363][ T7442] ip_tables: iptables: counters copy to user failed while replacing table [ 209.946191][ T7446] loop2: detected capacity change from 0 to 4096 [ 210.007594][ T7446] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [ 210.154038][ T7446] ntfs3: loop2: Failed to initialize $Extend/$ObjId. [ 210.343798][ T7446] overlayfs: upper fs does not support tmpfile. [ 210.372066][ T7450] loop0: detected capacity change from 0 to 4096 [ 210.414427][ T7446] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 210.518648][ T7450] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 210.762612][ T5781] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.459090][ T7463] hub 8-0:1.0: USB hub found [ 211.496053][ T7463] hub 8-0:1.0: 1 port detected [ 211.858390][ T2943] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.939459][ T7461] loop2: detected capacity change from 0 to 32768 [ 211.973907][ T7461] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.596 (7461) [ 212.026834][ T7461] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 212.052291][ T7445] loop3: detected capacity change from 0 to 32768 [ 212.064189][ T7461] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 212.073768][ T7461] BTRFS info (device loop2): setting nodatacow, compression disabled [ 212.105802][ T7461] BTRFS info (device loop2): setting datasum, datacow enabled [ 212.142905][ T7445] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 212.153673][ T7461] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 212.213963][ T7461] BTRFS info (device loop2): force zstd compression, level 3 [ 212.264344][ T2943] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.279534][ T7461] BTRFS info (device loop2): turning on sync discard [ 212.332623][ T7461] BTRFS warning (device loop2): excessive commit interval 43283 [ 212.361490][ T7445] XFS (loop3): Ending clean mount [ 212.371264][ T7461] BTRFS info (device loop2): enabling ssd optimizations [ 212.395468][ T7461] BTRFS info (device loop2): using spread ssd allocation scheme [ 212.452465][ T7461] BTRFS info (device loop2): not using ssd optimizations [ 212.472319][ T2943] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.474265][ T7461] BTRFS info (device loop2): not using spread ssd allocation scheme [ 212.531317][ T7461] BTRFS info (device loop2): using free space tree [ 212.540678][ T7445] XFS (loop3): User initiated shutdown received. [ 212.568398][ T7445] XFS (loop3): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:501). Shutting down filesystem. [ 212.683709][ T7445] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [ 212.725539][ T2943] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.838041][ T5777] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 213.390406][ T5780] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 213.579624][ T2943] tipc: Disabling bearer [ 213.628496][ T2943] tipc: Left network mode [ 213.825341][ T5794] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 213.847732][ T5794] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 213.859620][ T5794] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 213.870549][ T5794] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 213.880847][ T5794] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 213.892765][ T5794] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 214.687886][ T8] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 214.869549][ T7526] loop0: detected capacity change from 0 to 128 [ 214.920145][ T8] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 154, changing to 7 [ 214.967804][ T8] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9861, setting to 1024 [ 215.041198][ T8] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 215.068037][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.076236][ T8] usb 4-1: Product: syz [ 215.125238][ T8] usb 4-1: Manufacturer: syz [ 215.138587][ T8] usb 4-1: SerialNumber: syz [ 215.887785][ T5827] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 215.998426][ T5794] Bluetooth: hci1: command tx timeout [ 216.087780][ T5827] usb 1-1: Using ep0 maxpacket: 8 [ 216.100581][ T5827] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 216.113885][ T5827] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 216.136838][ T5827] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 216.175825][ T5827] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 216.206459][ T5827] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 216.234018][ T8] cdc_ncm 4-1:1.0: bind() failure [ 216.257555][ T5827] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 216.288531][ T5827] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.302216][ T8] cdc_ncm: probe of 4-1:1.1 failed with error -71 [ 216.326330][ T8] cdc_mbim: probe of 4-1:1.1 failed with error -71 [ 216.362128][ T8] usbtest: probe of 4-1:1.1 failed with error -71 [ 216.389815][ T8] usb 4-1: USB disconnect, device number 7 [ 216.549734][ T7555] loop2: detected capacity change from 0 to 1024 [ 216.621594][ T7555] hfsplus: invalid length 32517 has been corrected to 255 [ 216.838901][ T2963] hfsplus: b-tree write err: -5, ino 20 [ 217.054454][ T7507] chnl_net:caif_netlink_parms(): no params data found [ 217.154708][ T7562] usbtmc 1-1:16.0: simple control status returned bd [ 217.376312][ T5847] usb 1-1: USB disconnect, device number 8 [ 217.869469][ T7567] loop2: detected capacity change from 0 to 32768 [ 218.077699][ T5794] Bluetooth: hci1: command tx timeout [ 218.085291][ T2943] hsr_slave_0: left promiscuous mode [ 218.126575][ T2943] hsr_slave_1: left promiscuous mode [ 218.133241][ T2943] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 218.144735][ T2943] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 218.153422][ T7567] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 218.204535][ T2943] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 218.212265][ T2943] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 218.252966][ T2943] bridge_slave_1: left allmulticast mode [ 218.283014][ T2943] bridge_slave_1: left promiscuous mode [ 218.292704][ T2943] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.366315][ T2943] bridge_slave_0: left allmulticast mode [ 218.377660][ T2943] bridge_slave_0: left promiscuous mode [ 218.385012][ T2943] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.598414][ T2943] veth1_macvtap: left promiscuous mode [ 218.605055][ T2943] veth1_vlan: left promiscuous mode [ 218.623041][ T2943] veth0_vlan: left promiscuous mode [ 218.703131][ T5780] ocfs2: Unmounting device (7,2) on (node local) [ 218.822905][ T7598] loop0: detected capacity change from 0 to 128 [ 218.937567][ T7598] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 218.980487][ T7598] hpfs: filesystem error: improperly stopped [ 218.998466][ T7598] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 219.006329][ T7598] hpfs: You really don't want any checks? You are crazy... [ 219.060093][ T7598] hpfs: hpfs_map_sector(): read error [ 219.065577][ T7598] hpfs: code page support is disabled [ 219.105165][ T7598] hpfs: hpfs_map_4sectors(): unaligned read [ 219.128213][ T7598] hpfs: hpfs_map_4sectors(): unaligned read [ 219.134400][ T7598] hpfs: filesystem error: unable to find root dir [ 219.188960][ T7598] hpfs: hpfs_map_4sectors(): unaligned read [ 219.220411][ T7598] hpfs: hpfs_map_sector(): read error [ 219.260858][ T5787] kernel write not supported for file /vbi5 (pid: 5787 comm: kworker/0:3) [ 220.161787][ T5794] Bluetooth: hci1: command tx timeout [ 220.716409][ T2943] team0 (unregistering): Port device team_slave_1 removed [ 220.846126][ T2943] team0 (unregistering): Port device team_slave_0 removed [ 220.990023][ T2943] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 221.082800][ T2943] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 221.767068][ T2943] bond0 (unregistering): Released all slaves [ 221.874471][ T7507] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.882548][ T7507] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.897917][ T7507] bridge_slave_0: entered allmulticast mode [ 221.905663][ T7507] bridge_slave_0: entered promiscuous mode [ 221.983881][ T7623] netlink: 83 bytes leftover after parsing attributes in process `syz.3.635'. [ 222.017610][ T7641] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.641'. [ 222.027984][ T7507] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.035301][ T7507] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.053257][ T7507] bridge_slave_1: entered allmulticast mode [ 222.069115][ T7507] bridge_slave_1: entered promiscuous mode [ 222.189352][ T7507] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 222.248147][ T5794] Bluetooth: hci1: command tx timeout [ 222.262614][ T7507] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 222.405938][ T7507] team0: Port device team_slave_0 added [ 222.440748][ T7507] team0: Port device team_slave_1 added [ 222.478145][ T5787] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 222.529495][ T7507] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 222.567936][ T7507] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 222.637587][ T7507] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 222.722727][ T5787] usb 3-1: Using ep0 maxpacket: 32 [ 222.738405][ T7507] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 222.745451][ T7507] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 222.808288][ T5787] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 222.817648][ T5787] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.838429][ T5787] usb 3-1: config 0 descriptor?? [ 222.875374][ T5787] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 222.882309][ T7507] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 223.047963][ T7507] hsr_slave_0: entered promiscuous mode [ 223.068283][ T7507] hsr_slave_1: entered promiscuous mode [ 223.097674][ T7507] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 223.105409][ T7507] Cannot create hsr debugfs directory [ 223.778510][ T7507] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 223.792861][ T7507] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 223.815537][ T7675] loop0: detected capacity change from 0 to 164 [ 223.829934][ T7507] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 223.864156][ T5787] gspca_vc032x: reg_w err -71 [ 223.869179][ T5787] gspca_vc032x: I2c Bus Busy Wait 00 [ 223.882773][ T5787] gspca_vc032x: I2c Bus Busy Wait 00 [ 223.908964][ T5787] gspca_vc032x: I2c Bus Busy Wait 00 [ 223.914352][ T5787] gspca_vc032x: I2c Bus Busy Wait 00 [ 223.943950][ T7507] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 223.962240][ T5787] gspca_vc032x: I2c Bus Busy Wait 00 [ 223.987519][ T5787] gspca_vc032x: I2c Bus Busy Wait 00 [ 224.003053][ T5787] gspca_vc032x: I2c Bus Busy Wait 00 [ 224.033063][ T5787] gspca_vc032x: I2c Bus Busy Wait 00 [ 224.051147][ T5787] gspca_vc032x: I2c Bus Busy Wait 00 [ 224.056782][ T5787] gspca_vc032x: I2c Bus Busy Wait 00 [ 224.084071][ T5787] gspca_vc032x: I2c Bus Busy Wait 00 [ 224.090816][ T5787] gspca_vc032x: I2c Bus Busy Wait 00 [ 224.096186][ T5787] gspca_vc032x: I2c Bus Busy Wait 00 [ 224.127633][ T5787] gspca_vc032x: I2c Bus Busy Wait 00 [ 224.144756][ T5787] gspca_vc032x: I2c Bus Busy Wait 00 [ 224.153493][ T5787] gspca_vc032x: I2c Bus Busy Wait 00 [ 224.163632][ T5787] gspca_vc032x: I2c Bus Busy Wait 00 [ 224.177710][ T5787] gspca_vc032x: I2c Bus Busy Wait 00 [ 224.183331][ T5787] gspca_vc032x: Unknown sensor... [ 224.197582][ T5787] vc032x: probe of 3-1:0.0 failed with error -22 [ 224.222410][ T5787] usb 3-1: USB disconnect, device number 10 [ 224.384110][ T7648] loop3: detected capacity change from 0 to 40427 [ 224.444950][ T7648] F2FS-fs (loop3): build fault injection attr: rate: 14, type: 0x7ffff [ 224.460976][ T7507] 8021q: adding VLAN 0 to HW filter on device bond0 [ 224.499326][ T7648] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x30e4 [ 224.542464][ T7507] 8021q: adding VLAN 0 to HW filter on device team0 [ 224.566612][ T7648] F2FS-fs (loop3): invalid crc value [ 224.603981][ T2943] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.611443][ T2943] bridge0: port 1(bridge_slave_0) entered forwarding state [ 224.663789][ T7648] F2FS-fs (loop3): Found nat_bits in checkpoint [ 224.672937][ T2943] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.680216][ T2943] bridge0: port 2(bridge_slave_1) entered forwarding state [ 224.924095][ T7648] F2FS-fs (loop3): inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x665/0x970 [ 225.082115][ T7648] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 225.276039][ T7700] f2fs_ckpt-7:3: attempt to access beyond end of device [ 225.276039][ T7700] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 225.343346][ T7700] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 225.379095][ T7507] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 226.225268][ T7693] loop2: detected capacity change from 0 to 40427 [ 226.270614][ T7693] F2FS-fs (loop2): Corrupted extension count (327717 + 1 > 64) [ 226.300762][ T7693] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 226.328876][ T7693] F2FS-fs (loop2): build fault injection attr: rate: 771, type: 0x7ffff [ 226.340024][ T7693] F2FS-fs (loop2): invalid crc value [ 226.362394][ T7693] F2FS-fs (loop2): Found nat_bits in checkpoint [ 226.432085][ T7507] veth0_vlan: entered promiscuous mode [ 226.499867][ T7507] veth1_vlan: entered promiscuous mode [ 226.587680][ T7693] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 226.603408][ T7693] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 226.706984][ T7507] veth0_macvtap: entered promiscuous mode [ 226.764244][ T7507] veth1_macvtap: entered promiscuous mode [ 226.823983][ T5780] syz-executor: attempt to access beyond end of device [ 226.823983][ T5780] loop2: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 226.849450][ T7507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.871034][ T5780] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 226.894538][ T5780] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 226.906879][ T7507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.934837][ T7507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.963279][ T7507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.993709][ T7507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.021348][ T7507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.064496][ T7507] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 227.095518][ T7507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 227.118498][ T7507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.134330][ T7507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 227.157504][ T7507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.167775][ T7507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 227.193030][ T7507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.231220][ T7507] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 227.268246][ T7507] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.284273][ T7732] loop0: detected capacity change from 0 to 736 [ 227.304743][ T7507] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.347671][ T7507] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.377752][ T7507] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.809473][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.817394][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.980045][ T2963] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.999759][ T2963] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.232235][ T7747] loop0: detected capacity change from 0 to 128 [ 228.306055][ T7747] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 228.418026][ T7747] ext4 filesystem being mounted at /209/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 228.532016][ T7747] syz.0.662 (pid 7747) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 228.706571][ T5781] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 228.851267][ T5847] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 229.072565][ T5847] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 229.092680][ T7773] loop4: detected capacity change from 0 to 512 [ 229.107662][ T5847] usb 3-1: New USB device found, idVendor=08ca, idProduct=0001, bcdDevice= 1.00 [ 229.128993][ T7773] EXT4-fs: Ignoring removed i_version option [ 229.135414][ T7773] EXT4-fs: Ignoring removed oldalloc option [ 229.142586][ T5847] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.180434][ T7773] EXT4-fs (loop4): Test dummy encryption mode enabled [ 229.223622][ T7773] EXT4-fs (loop4): 1 truncate cleaned up [ 229.233686][ T7773] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 229.279279][ T28] audit: type=1800 audit(1791209474.173:53): pid=7773 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.667" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 229.720934][ T7507] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.889023][ T7792] loop4: detected capacity change from 0 to 8 [ 230.494280][ T7781] loop3: detected capacity change from 0 to 32768 [ 230.577946][ T5847] aiptek 3-1:1.0: Aiptek using 400 ms programming speed [ 230.610722][ T5847] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input11 [ 230.817585][ C1] aiptek 3-1:1.0: aiptek_irq - usb_submit_urb failed with result -19 [ 230.828198][ T5847] usb 3-1: USB disconnect, device number 11 [ 231.017981][ T7781] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 231.143847][ T7815] loop2: detected capacity change from 0 to 512 [ 231.205218][ T7815] EXT4-fs: Ignoring removed bh option [ 231.257983][ T7815] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 231.309170][ T7781] (syz.3.669,7781,0):ocfs2_remount:623 ERROR: Cannot change heartbeat mode on remount [ 231.367291][ T7815] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 231.405007][ T7815] ext4 filesystem being mounted at /169/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 231.441367][ T7781] OCFS2: ERROR (device loop3): int ocfs2_validate_gd_parent(struct super_block *, struct ocfs2_dinode *, struct buffer_head *, int): Group descriptor #64 has bitmap size 448 but physical max of 256 [ 231.503123][ T7781] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 231.547603][ T7781] OCFS2: File system is now read-only. [ 231.568038][ T7781] (syz.3.669,7781,0):ocfs2_test_suballoc_bit:2814 ERROR: read group 64 failed -30 [ 231.598247][ T7801] loop4: detected capacity change from 0 to 32768 [ 231.606053][ T7781] (syz.3.669,7781,0):ocfs2_test_suballoc_bit:2825 ERROR: status = -30 [ 231.650092][ T7781] (syz.3.669,7781,0):ocfs2_test_inode_bit:2887 ERROR: test suballoc bit failed -30 [ 231.663522][ T7781] (syz.3.669,7781,0):ocfs2_test_inode_bit:2896 ERROR: status = -30 [ 231.721253][ T7781] (syz.3.669,7781,0):ocfs2_get_parent:166 ERROR: test inode bit failed -30 [ 231.786518][ T5780] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.063287][ T5777] ocfs2: Unmounting device (7,3) on (node local) [ 232.215752][ T7833] loop2: detected capacity change from 0 to 512 [ 232.279608][ T7833] EXT4-fs: Ignoring removed i_version option [ 232.285867][ T7833] EXT4-fs: Ignoring removed oldalloc option [ 232.358787][ T7833] EXT4-fs (loop2): Test dummy encryption mode enabled [ 232.430225][ T7833] EXT4-fs (loop2): 1 truncate cleaned up [ 232.437418][ T7833] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 232.441698][ T7837] loop0: detected capacity change from 0 to 1024 [ 232.496358][ T28] audit: type=1800 audit(1791209477.403:54): pid=7833 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.680" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 232.558050][ T7837] hfsplus: failed to load catalog file [ 233.104388][ T5780] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.407027][ T7866] loop3: detected capacity change from 0 to 128 [ 233.466937][ T7866] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 233.503750][ T7866] ext4 filesystem being mounted at /146/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 233.577164][ T5777] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 234.100561][ T7884] FAULT_INJECTION: forcing a failure. [ 234.100561][ T7884] name failslab, interval 1, probability 0, space 0, times 0 [ 234.134183][ T7884] CPU: 1 PID: 7884 Comm: syz.4.692 Not tainted syzkaller #0 [ 234.141616][ T7884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 234.151741][ T7884] Call Trace: [ 234.155084][ T7884] [ 234.158063][ T7884] dump_stack_lvl+0x18c/0x250 [ 234.162846][ T7884] ? show_regs_print_info+0x20/0x20 [ 234.168290][ T7884] ? load_image+0x420/0x420 [ 234.172875][ T7884] ? __might_sleep+0xe0/0xe0 [ 234.177538][ T7884] ? __lock_acquire+0x7eb0/0x7eb0 [ 234.182646][ T7884] should_fail_ex+0x394/0x4c0 [ 234.187437][ T7884] should_failslab+0x9/0x20 [ 234.192026][ T7884] slab_pre_alloc_hook+0x59/0x300 [ 234.197164][ T7884] kmem_cache_alloc+0x5a/0x2c0 [ 234.202054][ T7884] ? security_file_alloc+0x34/0x120 [ 234.207372][ T7884] security_file_alloc+0x34/0x120 [ 234.212475][ T7884] init_file+0x94/0x1f0 [ 234.216690][ T7884] alloc_empty_file+0xb7/0x1d0 [ 234.221518][ T7884] alloc_file+0x5b/0x600 [ 234.225941][ T7884] alloc_file_pseudo+0x184/0x210 [ 234.230961][ T7884] ? fput+0x1a0/0x1a0 [ 234.235020][ T7884] ? alloc_fd+0x590/0x640 [ 234.239608][ T7884] anon_inode_getfd+0xca/0x1c0 [ 234.244543][ T7884] map_create+0xf13/0x12f0 [ 234.249039][ T7884] __sys_bpf+0x651/0x890 [ 234.253390][ T7884] ? bpf_link_show_fdinfo+0x560/0x560 [ 234.258845][ T7884] ? lock_chain_count+0x20/0x20 [ 234.263767][ T7884] __x64_sys_bpf+0x7c/0x90 [ 234.268258][ T7884] do_syscall_64+0x55/0xb0 [ 234.272743][ T7884] ? clear_bhb_loop+0x40/0x90 [ 234.277472][ T7884] ? clear_bhb_loop+0x40/0x90 [ 234.282209][ T7884] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 234.288196][ T7884] RIP: 0033:0x7f1a7699e199 [ 234.292668][ T7884] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 234.312340][ T7884] RSP: 002b:00007f1a74bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 234.320830][ T7884] RAX: ffffffffffffffda RBX: 00007f1a76c25fa0 RCX: 00007f1a7699e199 [ 234.328864][ T7884] RDX: 0000000000000050 RSI: 0000200000000040 RDI: 0000000000000000 [ 234.336911][ T7884] RBP: 00007f1a76a350b8 R08: 0000000000000000 R09: 0000000000000000 [ 234.344976][ T7884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 234.353008][ T7884] R13: 00007f1a76c26038 R14: 00007f1a76c25fa0 R15: 00007ffca54bc108 [ 234.361055][ T7884] [ 234.822520][ T7878] loop2: detected capacity change from 0 to 32768 [ 235.127191][ T7885] loop3: detected capacity change from 0 to 32768 [ 235.138523][ T7900] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.147998][ T7900] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.192400][ T7900] bridge0: entered allmulticast mode [ 235.233043][ T7901] bridge_slave_1: left allmulticast mode [ 235.252792][ T7885] JBD2: Ignoring recovery information on journal [ 235.254858][ T7901] bridge_slave_1: left promiscuous mode [ 235.269214][ T7901] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.368955][ T7901] bridge_slave_0: left allmulticast mode [ 235.396540][ T7901] bridge_slave_0: left promiscuous mode [ 235.424260][ T7901] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.523047][ T7885] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 235.607761][ T5787] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 235.819720][ T5787] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 235.836774][ T5787] usb 1-1: config 1 has no interface number 0 [ 235.843784][ T5787] usb 1-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 235.860821][ T5777] ocfs2: Unmounting device (7,3) on (node local) [ 235.921097][ T5787] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 235.957752][ T5787] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 236.010982][ T5787] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice= 0.40 [ 236.029837][ T5787] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.057535][ T5787] usb 1-1: Product: syz [ 236.077628][ T5787] usb 1-1: Manufacturer: syz [ 236.082314][ T5787] usb 1-1: SerialNumber: syz [ 236.342361][ T5787] usb 1-1: 1:0 : does not exist [ 236.347338][ T5787] usb 1-1: 2:1 : incorrect wMaxPacketSize for BADD profile [ 236.357057][ T5787] usb 1-1: 1:3 : does not exist [ 236.362694][ T5787] usb 1-1: 1:4 : does not exist [ 236.367993][ T5787] usb 1-1: 1:5 : does not exist [ 236.373037][ T5787] usb 1-1: incorrect wMaxPacketSize 0x200 for BADD profile [ 236.443283][ T5787] snd-usb-audio: probe of 1-1:1.1 failed with error -22 [ 236.455661][ T5787] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 236.464738][ T5787] snd_usb_pod 1-1:1.1: set_interface failed [ 236.472903][ T5787] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 236.489365][ T5787] snd_usb_pod: probe of 1-1:1.1 failed with error -71 [ 236.509360][ T5787] usb 1-1: USB disconnect, device number 9 [ 236.544599][ T7929] loop5: detected capacity change from 0 to 7 [ 236.553715][ T7929] Dev loop5: unable to read RDB block 7 [ 236.566595][ T7929] loop5: unable to read partition table [ 236.584080][ T5792] udevd[5792]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 236.607322][ T7929] loop5: partition table beyond EOD, truncated [ 236.613972][ T7929] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 237.191205][ T7933] loop2: detected capacity change from 0 to 32768 [ 237.260149][ T7933] XFS (loop2): DAX unsupported by block device. Turning off DAX. [ 237.306649][ T7933] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 237.403507][ T7933] XFS (loop2): Ending clean mount [ 237.460743][ T7933] XFS (loop2): Quotacheck needed: Please wait. [ 237.531046][ T7959] page:ffffea00015a8000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x56a00 [ 237.584242][ T7959] head:ffffea00015a8000 order:9 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 237.608635][ T7959] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 237.640865][ T7959] page_type: 0xffffffff() [ 237.653274][ T7933] XFS (loop2): Quotacheck: Done. [ 237.682416][ T7959] raw: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 237.701970][ T7959] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 237.738223][ T7959] page dumped because: unmovable page [ 237.743716][ T7959] page_owner tracks the page as allocated [ 237.771735][ T7959] page last allocated via order 9, migratetype Unmovable, gfp_mask 0x1c25c2(__GFP_HIGHMEM|__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_COMP|__GFP_ZERO|__GFP_NOMEMALLOC|__GFP_HARDWALL|__GFP_DIRECT_RECLAIM), pid 6726, tgid 6725 (syz.3.335), ts 172960018907, free_ts 37276973346 [ 237.809742][ T7959] post_alloc_hook+0x1c1/0x200 [ 237.814710][ T7959] get_page_from_freelist+0x2181/0x22a0 [ 237.821287][ T7959] __alloc_pages+0x1f0/0x460 [ 237.826068][ T7959] mm_get_huge_zero_page+0x168/0x2b0 [ 237.839597][ T7959] do_huge_pmd_anonymous_page+0x8a5/0x18b0 [ 237.845603][ T7959] handle_mm_fault+0x1184/0x4a50 [ 237.856291][ T7959] __get_user_pages+0x604/0x1580 [ 237.863599][ T7959] faultin_page_range+0x28c/0x8a0 [ 237.879313][ T7959] do_madvise+0xed9/0x3790 [ 237.883982][ T7959] __x64_sys_madvise+0xa6/0xc0 [ 237.891819][ T7959] do_syscall_64+0x55/0xb0 [ 237.896491][ T7959] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 237.905751][ T7959] page last free stack trace: [ 237.913403][ T7959] free_unref_page_prepare+0x7d7/0x8f0 [ 237.923259][ T7959] free_unref_page+0x32/0x2e0 [ 237.947657][ T7959] free_contig_range+0xa1/0x150 [ 237.952671][ T7959] destroy_args+0x7d/0x840 [ 237.957159][ T7959] debug_vm_pgtable+0x411/0x440 [ 237.966638][ T7959] do_one_initcall+0x242/0x790 [ 237.972849][ T7959] do_initcall_level+0x13d/0x1f0 [ 237.984824][ T7959] do_initcalls+0x69/0xd0 [ 237.989427][ T7959] kernel_init_freeable+0x3d9/0x560 [ 237.994724][ T7959] kernel_init+0x1d/0x1c0 [ 238.002245][ T7959] ret_from_fork+0x48/0x80 [ 238.006774][ T7959] ret_from_fork_asm+0x11/0x20 [ 238.052589][ T5780] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 238.791420][ T7997] loop0: detected capacity change from 0 to 256 [ 238.797796][ T23] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 238.898535][ T5787] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 238.977657][ T23] usb 4-1: Using ep0 maxpacket: 32 [ 238.985963][ T23] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 238.999891][ T23] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 239.009452][ T23] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 239.017807][ T23] usb 4-1: Product: syz [ 239.023478][ T23] usb 4-1: Manufacturer: syz [ 239.028294][ T23] usb 4-1: SerialNumber: syz [ 239.036090][ T23] usb 4-1: config 0 descriptor?? [ 239.043470][ T7985] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 239.109240][ T5787] usb 3-1: not running at top speed; connect to a high speed hub [ 239.134163][ T5787] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 239.141611][ T8003] loop0: detected capacity change from 0 to 512 [ 239.168969][ T5787] usb 3-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 239.187629][ T5787] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.198868][ T5787] usb 3-1: Product: syz [ 239.203196][ T5787] usb 3-1: Manufacturer: syz [ 239.208596][ T5787] usb 3-1: SerialNumber: syz [ 239.224087][ T8003] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 239.227367][ T5787] oti6858 3-1:1.0: oti6858 converter detected [ 239.237111][ T8003] ext4 filesystem being mounted at /230/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 239.284986][ T8003] EXT4-fs (loop0): shut down requested (1) [ 239.316805][ T5787] usb 3-1: oti6858 converter now attached to ttyUSB0 [ 239.330939][ T5781] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.341914][ T11] Quota error (device loop0): dquot_write_dquot: Can't write quota structure (error -5). Quota may get out of sync! [ 239.490256][ T8011] loop0: detected capacity change from 0 to 128 [ 239.535346][ T8011] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 239.553371][ T8011] ext4 filesystem being mounted at /231/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 239.632709][ T5781] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 240.109784][ T5787] usb 3-1: USB disconnect, device number 12 [ 240.169392][ T5787] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 240.188414][ T5787] oti6858 3-1:1.0: device disconnected [ 240.588719][ T5845] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 240.781474][ T5845] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 240.797645][ T5845] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 240.852276][ T5845] usb 5-1: New USB device found, idVendor=15a4, idProduct=9035, bcdDevice= 2.00 [ 240.861581][ T5845] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.108822][ T8047] loop0: detected capacity change from 0 to 512 [ 241.133700][ T8049] netlink: 8 bytes leftover after parsing attributes in process `syz.2.749'. [ 241.153183][ T8049] netlink: 28 bytes leftover after parsing attributes in process `syz.2.749'. [ 241.176495][ T8049] geneve2: entered promiscuous mode [ 241.184416][ T8047] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 241.197775][ T8047] ext4 filesystem being mounted at /239/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 241.222979][ T8049] geneve2: entered allmulticast mode [ 241.280554][ T8047] EXT4-fs error (device loop0): ext4_do_update_inode:5268: inode #2: comm syz.0.750: corrupted inode contents [ 241.298863][ T8047] EXT4-fs error (device loop0): ext4_dirty_inode:6166: inode #2: comm syz.0.750: mark_inode_dirty error [ 241.321425][ T8047] EXT4-fs error (device loop0): ext4_do_update_inode:5268: inode #2: comm syz.0.750: corrupted inode contents [ 241.334975][ T8047] EXT4-fs error (device loop0): __ext4_ext_dirty:208: inode #2: comm syz.0.750: mark_inode_dirty error [ 241.365299][ T8047] EXT4-fs error (device loop0): ext4_do_update_inode:5268: inode #2: comm syz.0.750: corrupted inode contents [ 241.484009][ T5781] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.590378][ T5827] usb 4-1: USB disconnect, device number 8 [ 241.886802][ T5845] dvb_usb_af9035 5-1:1.0: command=00 checksum mismatch (0102 != feff) [ 241.907641][ T5845] dvb_usb_af9035: probe of 5-1:1.0 failed with error -5 [ 241.927578][ T23] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 241.961657][ T8070] db_root: cannot open: /dev/net/tun [ 241.967011][ T8070] db_root: not a directory: /dev/net/tun [ 242.123667][ T23] usb 1-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 242.139453][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.148262][ T5827] usb 5-1: USB disconnect, device number 2 [ 242.160231][ T23] usb 1-1: Product: syz [ 242.164562][ T23] usb 1-1: Manufacturer: syz [ 242.171367][ T23] usb 1-1: SerialNumber: syz [ 242.183019][ T23] usb 1-1: config 0 descriptor?? [ 242.202170][ T23] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 242.495959][ T8088] loop3: detected capacity change from 0 to 64 [ 242.506051][ T8089] netlink: 4 bytes leftover after parsing attributes in process `syz.2.766'. [ 242.589796][ T8088] hfs: request for non-existent node 237 in B*Tree [ 242.596410][ T8088] hfs: request for non-existent node 237 in B*Tree [ 242.622227][ T8088] hfs: request for non-existent node 237 in B*Tree [ 242.630103][ T8088] hfs: request for non-existent node 237 in B*Tree [ 242.655128][ T8088] hfs: request for non-existent node 237 in B*Tree [ 242.663575][ T8088] hfs: request for non-existent node 237 in B*Tree [ 242.684479][ T8088] hfs: request for non-existent node 237 in B*Tree [ 242.695065][ T8088] hfs: request for non-existent node 237 in B*Tree [ 242.778962][ T8092] loop4: detected capacity change from 0 to 512 [ 242.786693][ T8092] EXT4-fs: Ignoring removed oldalloc option [ 242.834685][ T8092] EXT4-fs (loop4): orphan cleanup on readonly fs [ 242.867559][ T8092] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 242.881244][ T5795] Bluetooth: hci3: command 0x0406 tx timeout [ 242.887354][ T5795] Bluetooth: hci2: command 0x0406 tx timeout [ 242.919893][ T8092] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #13: comm syz.4.768: attempt to clear invalid blocks 2 len 1 [ 243.005759][ T8095] FAULT_INJECTION: forcing a failure. [ 243.005759][ T8095] name failslab, interval 1, probability 0, space 0, times 0 [ 243.018743][ T8095] CPU: 0 PID: 8095 Comm: syz.3.770 Not tainted syzkaller #0 [ 243.026107][ T8095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 243.036249][ T8095] Call Trace: [ 243.039592][ T8095] [ 243.042625][ T8095] dump_stack_lvl+0x18c/0x250 [ 243.047412][ T8095] ? show_regs_print_info+0x20/0x20 [ 243.052756][ T8095] ? load_image+0x420/0x420 [ 243.053334][ T8092] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1244: group 0, [ 243.057313][ T8095] ? __might_sleep+0xe0/0xe0 [ 243.066411][ T8092] block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 243.070230][ T8095] ? __lock_acquire+0x7eb0/0x7eb0 [ 243.070270][ T8095] should_fail_ex+0x394/0x4c0 [ 243.070315][ T8095] should_failslab+0x9/0x20 [ 243.093013][ T8095] slab_pre_alloc_hook+0x59/0x300 [ 243.098107][ T8095] kmem_cache_alloc_lru+0x4d/0x2b0 [ 243.103289][ T8095] ? __d_alloc+0x31/0x710 [ 243.107664][ T8095] __d_alloc+0x31/0x710 [ 243.111863][ T8095] d_alloc_pseudo+0x1d/0x70 [ 243.116407][ T8095] alloc_file_pseudo+0xe4/0x210 [ 243.121339][ T8095] ? fput+0x1a0/0x1a0 [ 243.125374][ T8095] ? _raw_spin_unlock+0x28/0x40 [ 243.130270][ T8095] ? alloc_fd+0x590/0x640 [ 243.134658][ T8095] anon_inode_getfd+0xca/0x1c0 [ 243.139461][ T8095] __se_sys_timerfd_create+0x214/0x270 [ 243.144958][ T8095] do_syscall_64+0x55/0xb0 [ 243.149458][ T8095] ? clear_bhb_loop+0x40/0x90 [ 243.154177][ T8095] ? clear_bhb_loop+0x40/0x90 [ 243.158905][ T8095] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 243.164875][ T8095] RIP: 0033:0x7f86f159e199 [ 243.169360][ T8095] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 243.189022][ T8095] RSP: 002b:00007f86f2393028 EFLAGS: 00000246 ORIG_RAX: 000000000000011b [ 243.197501][ T8095] RAX: ffffffffffffffda RBX: 00007f86f1825fa0 RCX: 00007f86f159e199 [ 243.205534][ T8095] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 243.213556][ T8095] RBP: 00007f86f16350b8 R08: 0000000000000000 R09: 0000000000000000 [ 243.221569][ T8095] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 243.229588][ T8095] R13: 00007f86f1826038 R14: 00007f86f1825fa0 R15: 00007fff50743d68 [ 243.237621][ T8095] [ 243.269696][ T8092] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.768: invalid indirect mapped block 1819239214 (level 0) [ 243.301092][ T8092] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.768: invalid indirect mapped block 1819239214 (level 1) [ 243.325069][ T8092] EXT4-fs (loop4): 1 truncate cleaned up [ 243.333532][ T8092] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 243.429568][ T7507] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.481442][ T23] gspca_sunplus: reg_w_riv err -71 [ 243.497008][ T23] sunplus: probe of 1-1:0.0 failed with error -71 [ 243.529728][ T23] usb 1-1: USB disconnect, device number 10 [ 243.557564][ T5827] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 243.721884][ T8107] loop3: detected capacity change from 0 to 164 [ 243.748499][ T8107] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 243.768068][ T5827] usb 3-1: Using ep0 maxpacket: 8 [ 243.777731][ T5827] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 243.798001][ T5827] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 243.819217][ T8107] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 243.837932][ T5827] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 243.838286][ T8107] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 243.858364][ T5827] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 243.882927][ T5827] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 243.906504][ T5827] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 243.926950][ T5827] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.163927][ T5827] usb 3-1: usb_control_msg returned -32 [ 244.169863][ T5827] usbtmc 3-1:16.0: can't read capabilities [ 244.367872][ T5787] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 244.400426][ T28] audit: type=1326 audit(1791209489.313:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8124 comm="syz.4.782" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1a7699e199 code=0x0 [ 244.429686][ T8122] loop0: detected capacity change from 0 to 8192 [ 244.589983][ T5787] usb 4-1: Using ep0 maxpacket: 8 [ 244.608383][ T5787] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 244.619083][ T5787] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 244.639301][ T5787] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 244.653413][ T5787] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 244.664373][ T5787] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 244.681218][ T5787] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 244.693752][ T5787] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.744591][ T23] usb 3-1: USB disconnect, device number 13 [ 244.939899][ T5787] usb 4-1: usb_control_msg returned -32 [ 244.946153][ T5787] usbtmc 4-1:16.0: can't read capabilities [ 245.357011][ T8144] usbtmc 4-1:16.0: INITIATE_CLEAR returned 0 [ 245.435674][ T8152] syz_tun: entered allmulticast mode [ 245.560293][ T8] usb 4-1: USB disconnect, device number 9 [ 245.626176][ T8160] IPVS: fo: FWM 3 0x00000003 - no destination available [ 245.633444][ T5787] IPVS: starting estimator thread 0... [ 245.682127][ T8167] netlink: 4 bytes leftover after parsing attributes in process `syz.2.791'. [ 245.701175][ T8166] input: syz1 as /devices/virtual/input/input12 [ 245.737995][ T8161] IPVS: using max 18 ests per chain, 43200 per kthread [ 245.855209][ T8167] bond1: Invalid ad_actor_system MAC address. [ 245.861547][ T8167] bond1: option ad_actor_system: invalid value (1) [ 245.887666][ T8167] bond1 (unregistering): Released all slaves [ 245.952164][ T8175] FAULT_INJECTION: forcing a failure. [ 245.952164][ T8175] name failslab, interval 1, probability 0, space 0, times 0 [ 245.965097][ T8175] CPU: 0 PID: 8175 Comm: syz.0.794 Not tainted syzkaller #0 [ 245.972450][ T8175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 245.982588][ T8175] Call Trace: [ 245.985915][ T8175] [ 245.988894][ T8175] dump_stack_lvl+0x18c/0x250 [ 245.993640][ T8175] ? show_regs_print_info+0x20/0x20 [ 245.998891][ T8175] ? load_image+0x420/0x420 [ 246.003438][ T8175] ? __might_sleep+0xe0/0xe0 [ 246.008155][ T8175] ? __lock_acquire+0x7eb0/0x7eb0 [ 246.013238][ T8175] should_fail_ex+0x394/0x4c0 [ 246.018005][ T8175] should_failslab+0x9/0x20 [ 246.022569][ T8175] slab_pre_alloc_hook+0x59/0x300 [ 246.027656][ T8175] ? ops_init+0x8b/0x640 [ 246.031980][ T8175] ? ops_init+0x8b/0x640 [ 246.036527][ T8175] __kmem_cache_alloc_node+0x53/0x250 [ 246.041955][ T8175] ? ops_init+0x8b/0x640 [ 246.046233][ T8175] __kmalloc+0xa7/0x240 [ 246.050428][ T8175] ? csum_init_net+0x15a/0x190 [ 246.055228][ T8175] ops_init+0x8b/0x640 [ 246.059350][ T8175] setup_net+0x3b6/0xa20 [ 246.063633][ T8175] ? copy_net_ns+0x530/0x530 [ 246.068287][ T8175] ? copy_net_ns+0x347/0x530 [ 246.072933][ T8175] ? down_read_killable+0x1d0/0x340 [ 246.078178][ T8175] copy_net_ns+0x361/0x530 [ 246.082732][ T8175] create_new_namespaces+0x3ce/0x700 [ 246.088082][ T8175] unshare_nsproxy_namespaces+0x11a/0x160 [ 246.093848][ T8175] ksys_unshare+0x4fa/0x8f0 [ 246.098429][ T8175] ? sighand_ctor+0x50/0x50 [ 246.102970][ T8175] ? lock_chain_count+0x20/0x20 [ 246.107873][ T8175] ? syscall_enter_from_user_mode+0x25/0x80 [ 246.113810][ T8175] __x64_sys_unshare+0x38/0x40 [ 246.118609][ T8175] do_syscall_64+0x55/0xb0 [ 246.123330][ T8175] ? clear_bhb_loop+0x40/0x90 [ 246.128071][ T8175] ? clear_bhb_loop+0x40/0x90 [ 246.132792][ T8175] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 246.138742][ T8175] RIP: 0033:0x7f103239e199 [ 246.143205][ T8175] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 246.162872][ T8175] RSP: 002b:00007f103325a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 246.171340][ T8175] RAX: ffffffffffffffda RBX: 00007f1032625fa0 RCX: 00007f103239e199 [ 246.179361][ T8175] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 246.187396][ T8175] RBP: 00007f10324350b8 R08: 0000000000000000 R09: 0000000000000000 [ 246.195409][ T8175] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 246.203429][ T8175] R13: 00007f1032626038 R14: 00007f1032625fa0 R15: 00007fffee8288f8 [ 246.211469][ T8175] [ 246.580932][ T8189] loop2: detected capacity change from 0 to 128 [ 246.627594][ T8189] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 246.818817][ T1090] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 247.033648][ T8204] netlink: 4 bytes leftover after parsing attributes in process `syz.4.805'. [ 247.089096][ T8204] veth0_macvtap: left promiscuous mode [ 247.241612][ T8214] Invalid argument reading file caps for ./file0 [ 247.441130][ T5786] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 247.447495][ T5794] Bluetooth: hci0: command 0x0c1a tx timeout [ 247.522403][ T8222] loop4: detected capacity change from 0 to 2048 [ 247.608936][ T8222] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 248.143964][ T8238] dummy0: entered promiscuous mode [ 248.162929][ T8238] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 248.211054][ T8238] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 248.219134][ T8238] Cannot create hsr debugfs directory [ 248.235943][ T8216] loop2: detected capacity change from 0 to 32768 [ 248.247880][ T8238] hsr1: entered allmulticast mode [ 248.258103][ T8216] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.808 (8216) [ 248.271329][ T8238] dummy0: entered allmulticast mode [ 248.307832][ T8216] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 248.313268][ T8238] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 248.348296][ T8216] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 248.388693][ T8216] BTRFS info (device loop2): setting nodatacow, compression disabled [ 248.396903][ T8216] BTRFS info (device loop2): disabling tree log [ 248.428754][ T8216] BTRFS info (device loop2): max_inline at 0 [ 248.434866][ T8216] BTRFS info (device loop2): using free space tree [ 248.613795][ T8216] BTRFS info (device loop2): auto enabling async discard [ 248.829447][ T8261] loop4: detected capacity change from 0 to 1024 [ 248.856615][ T8216] BTRFS error (device loop2: state M): unrecognized mount option '0x0000000000000000184467440737095516150xffffffffffffffff00000000000000000000003-[[E~xidqc?fgr&ҳY?&!_.}Afx}7_Rq)a5D֏as' [ 248.905575][ T8261] ext4: Unknown parameter 'rootcontext' [ 248.942658][ T8261] mtrr: base(0x2becfee7ffe61d43000) is not aligned on a size(0x96c076bb000) boundary [ 249.046581][ T8231] loop3: detected capacity change from 0 to 40427 [ 249.088253][ T5780] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 249.127746][ T8231] F2FS-fs (loop3): Corrupted extension count (327717 + 1 > 64) [ 249.157501][ T8231] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 249.166050][ T8231] F2FS-fs (loop3): build fault injection attr: rate: 771, type: 0x7ffff [ 249.217600][ T8231] F2FS-fs (loop3): invalid crc value [ 249.329127][ T8231] F2FS-fs (loop3): Found nat_bits in checkpoint [ 249.336034][ T5792] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 9 /dev/loop2 scanned by udevd (5792) [ 249.617686][ T8231] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 249.663849][ T8231] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 249.828516][ T8231] F2FS-fs (loop3): Stopped filesystem due to reason: 0 [ 250.273541][ T8291] loop0: detected capacity change from 0 to 4096 [ 250.646975][ T8291] ntfs3: loop0: failed to convert "0080" to koi8-ru [ 250.705873][ T8291] ntfs3: loop0: failed to convert name for inode 1e. [ 250.746631][ T8291] ntfs3: loop0: ino=1f, mi_enum_attr [ 250.782731][ T8291] ntfs3: loop0: failed to convert "256c" to koi8-ru [ 250.817643][ T8302] ntfs3: loop0: failed to convert "256c" to koi8-ru [ 250.974251][ T8270] loop4: detected capacity change from 0 to 40427 [ 251.030687][ T8270] F2FS-fs (loop4): invalid crc value [ 251.066229][ T8270] F2FS-fs (loop4): Found nat_bits in checkpoint [ 251.226451][ T8270] F2FS-fs (loop4): Start checkpoint disabled! [ 251.317578][ T8270] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 251.401933][ T8314] loop3: detected capacity change from 0 to 128 [ 251.511945][ T8314] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 251.598713][ T8314] ext4 filesystem being mounted at /177/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 251.796564][ T5777] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 251.841461][ T8300] loop2: detected capacity change from 0 to 32768 [ 251.887672][ T8300] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop2 scanned by syz.2.828 (8300) [ 251.937643][ T8300] BTRFS info (device loop2): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 251.974826][ T8300] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 252.027904][ T8300] BTRFS info (device loop2): setting nodatacow, compression disabled [ 252.039591][ T8300] BTRFS info (device loop2): turning on flush-on-commit [ 252.046628][ T8300] BTRFS info (device loop2): using free space tree [ 252.211514][ T12] kworker/u4:1: attempt to access beyond end of device [ 252.211514][ T12] loop4: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 252.246184][ T12] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 252.289373][ T8300] BTRFS info (device loop2): enabling ssd optimizations [ 252.296464][ T8300] BTRFS info (device loop2): auto enabling async discard [ 252.558343][ T5780] BTRFS info (device loop2): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 253.316279][ T8366] loop4: detected capacity change from 0 to 2048 [ 253.378095][ T5787] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 253.411519][ T5787] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 253.421237][ T8366] Alternate GPT is invalid, using primary GPT. [ 253.421366][ T8366] loop4: p1 p2 p3 [ 253.421391][ T8366] loop4: partition table partially beyond EOD, truncated [ 253.962367][ T8383] loop4: detected capacity change from 0 to 512 [ 254.335867][ T8391] loop4: detected capacity change from 0 to 8 [ 254.374212][ T8391] SQUASHFS error: lzo decompression failed, data probably corrupt [ 254.388091][ T8391] SQUASHFS error: Failed to read block 0x144: -5 [ 254.409862][ T8391] SQUASHFS error: Unable to read metadata cache entry [142] [ 254.458775][ T8391] SQUASHFS error: Unable to read inode 0x11f [ 255.808897][ T8399] loop4: detected capacity change from 0 to 32768 [ 255.883258][ T8399] XFS (loop4): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 256.005421][ T8399] XFS (loop4): Ending clean mount [ 256.167793][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.176557][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.457148][ T7507] XFS (loop4): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 256.932196][ T8462] loop4: detected capacity change from 0 to 4096 [ 256.980370][ T8464] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 257.213976][ T8469] sd 0:0:1:0: PR command failed: 1026 [ 257.230722][ T8469] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 257.258072][ T8469] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 257.417562][ T56] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 257.625105][ T56] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 257.647591][ T56] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 257.667568][ T56] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 257.676655][ T56] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 257.712092][ T56] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 257.741142][ T56] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 257.762213][ T56] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 257.777660][ T56] usb 4-1: Product: syz [ 257.781907][ T56] usb 4-1: Manufacturer: syz [ 257.801746][ T56] cdc_wdm 4-1:1.0: skipping garbage [ 257.807037][ T56] cdc_wdm 4-1:1.0: skipping garbage [ 257.838634][ T56] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 257.844631][ T56] cdc_wdm 4-1:1.0: Unknown control protocol [ 258.269792][ T8490] futex_wake_op: syz.4.863 tries to shift op by -1; fix this program [ 258.299701][ C1] cdc_wdm 4-1:1.0: Unexpected error -71 [ 258.305415][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 258.312078][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 258.321494][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 258.328167][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 258.335978][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 258.342710][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 258.349130][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 258.355786][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 258.362111][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 258.368769][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 258.375132][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 258.381796][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 258.388169][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 258.394826][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 258.401380][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 258.408048][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 258.414364][ T56] usb 4-1: USB disconnect, device number 10 [ 258.420960][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 258.420987][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 258.421013][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 258.605752][ T8485] loop0: detected capacity change from 0 to 32768 [ 258.674418][ T8485] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 258.740636][ T8485] XFS (loop0): Ending clean mount [ 258.994960][ T5781] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 259.607708][ T5794] Bluetooth: hci1: command tx timeout [ 259.675976][ T8518] lo: entered allmulticast mode [ 259.697056][ T8518] lo: left allmulticast mode [ 260.122450][ T8509] loop4: detected capacity change from 0 to 131072 [ 260.130283][ T8509] XFS: ikeep mount option is deprecated. [ 260.191423][ T8509] XFS (loop4): Mounting V5 Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846 [ 260.519676][ T8509] XFS (loop4): Starting recovery (logdev: internal) [ 260.572163][ T8509] XFS (loop4): Ending recovery (logdev: internal) [ 260.829120][ T7507] XFS (loop4): Unmounting Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846 [ 261.246378][ T8542] loop2: detected capacity change from 0 to 128 [ 261.390001][ T8542] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 261.447846][ T8542] ext4 filesystem being mounted at /222/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 261.638895][ T8548] binder: 8547:8548 ioctl c0306201 200000000480 returned -14 [ 261.822513][ T5780] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 262.692582][ T8576] loop4: detected capacity change from 0 to 4096 [ 262.785265][ T8580] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 262.907662][ T23] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 263.065115][ T8562] loop3: detected capacity change from 0 to 40427 [ 263.087502][ T8562] F2FS-fs (loop3): Corrupted extension count (64 + 1 > 64) [ 263.099689][ T8562] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 263.114816][ T8562] F2FS-fs (loop3): Image doesn't support compression [ 263.145718][ T8562] F2FS-fs (loop3): Image doesn't support compression [ 263.168650][ T8562] F2FS-fs (loop3): invalid crc value [ 263.424915][ T8562] F2FS-fs (loop3): Start checkpoint disabled! [ 263.453014][ T8562] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 263.465664][ T8562] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 263.539749][ T8562] F2FS-fs (loop3): Inconsistent segment (8) type [1, 0] in SIT and SSA [ 263.558522][ T8562] F2FS-fs (loop3): Stopped filesystem due to reason: 4 [ 263.673585][ T8592] loop0: detected capacity change from 0 to 2048 [ 263.729490][ T8592] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 263.787598][ T5845] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 263.880383][ T8593] loop2: detected capacity change from 0 to 4096 [ 263.978447][ T8594] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 264.012069][ T5845] usb 5-1: config index 0 descriptor too short (expected 64906, got 45) [ 264.058188][ T5845] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 264.087529][ T5845] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.115979][ T5845] usb 5-1: Product: syz [ 264.121134][ T5845] usb 5-1: Manufacturer: syz [ 264.125802][ T5845] usb 5-1: SerialNumber: syz [ 264.368851][ T5845] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 264.416493][ T5845] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 264.482031][ T5845] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 264.507626][ T5845] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 264.541545][ T5845] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 264.618416][ T5845] lan78xx: probe of 5-1:1.0 failed with error -71 [ 264.648451][ T5845] usb 5-1: USB disconnect, device number 3 [ 265.590409][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.719233][ T8617] loop4: detected capacity change from 0 to 40427 [ 265.756310][ T8617] F2FS-fs (loop4): Corrupted extension count (64 + 1 > 64) [ 265.764140][ T5845] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 265.777473][ T8617] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 265.801060][ T8617] F2FS-fs (loop4): Image doesn't support compression [ 265.817612][ T8617] F2FS-fs (loop4): Image doesn't support compression [ 265.830399][ T8617] F2FS-fs (loop4): invalid crc value [ 265.894936][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.979638][ T5845] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 266.004660][ T5845] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 266.057477][ T5845] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 266.078962][ T8617] F2FS-fs (loop4): Start checkpoint disabled! [ 266.101784][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.127151][ T5845] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 266.147913][ T5845] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 266.156020][ T5845] usb 4-1: Product: syz [ 266.168776][ T8617] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 266.177541][ T5845] usb 4-1: Manufacturer: syz [ 266.194332][ T8617] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 266.205711][ T8624] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 266.224868][ T5845] garmin_gps 4-1:1.0: Garmin GPS usb/tty converter detected [ 266.288122][ T5845] usb 4-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 266.367862][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.389536][ T8617] F2FS-fs (loop4): Inconsistent segment (8) type [1, 0] in SIT and SSA [ 266.409956][ T8617] F2FS-fs (loop4): Stopped filesystem due to reason: 4 [ 266.494126][ T8630] loop2: detected capacity change from 0 to 2048 [ 266.513273][ T23] usb 4-1: USB disconnect, device number 11 [ 266.550904][ T23] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 266.571843][ T8630] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 266.596046][ T23] garmin_gps 4-1:1.0: device disconnected [ 267.756674][ T5786] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 267.768469][ T5786] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 267.777348][ T5786] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 267.785889][ T5786] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 267.816889][ T5786] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 267.824553][ T5786] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 268.563471][ T8658] loop3: detected capacity change from 0 to 32768 [ 268.633509][ T8658] JBD2: Ignoring recovery information on journal [ 268.771175][ T8658] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 269.082990][ T8658] OCFS2: ERROR (device loop3): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #17056 has bit count 2061 but max bitmap bits of 2048 [ 269.143424][ T8658] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 269.165962][ T8658] OCFS2: Returning error to the calling process. [ 269.176623][ T8658] (syz.3.926,8658,0):ocfs2_search_chain:1783 ERROR: status = -5 [ 269.199852][ T8658] (syz.3.926,8658,0):ocfs2_search_chain:1893 ERROR: status = -5 [ 269.218773][ T8658] (syz.3.926,8658,0):ocfs2_claim_suballoc_bits:1972 ERROR: status = -5 [ 269.242637][ T8658] (syz.3.926,8658,0):ocfs2_claim_suballoc_bits:2015 ERROR: status = -5 [ 269.267141][ T8658] (syz.3.926,8658,0):ocfs2_claim_new_inode:2248 ERROR: status = -5 [ 269.297543][ T8658] (syz.3.926,8658,0):ocfs2_claim_new_inode:2263 ERROR: status = -5 [ 269.316098][ T8658] (syz.3.926,8658,0):ocfs2_mknod_locked:641 ERROR: status = -5 [ 269.328395][ T8651] chnl_net:caif_netlink_parms(): no params data found [ 269.337835][ T8658] (syz.3.926,8658,0):ocfs2_mknod:385 ERROR: status = -5 [ 269.345085][ T8658] (syz.3.926,8658,0):ocfs2_mknod:504 ERROR: status = -5 [ 269.373460][ T8658] (syz.3.926,8658,0):ocfs2_mkdir:661 ERROR: status = -5 [ 269.665807][ T5777] ocfs2: Unmounting device (7,3) on (node local) [ 269.677266][ T12] hsr_slave_0: left promiscuous mode [ 269.685756][ T12] hsr_slave_1: left promiscuous mode [ 269.747712][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 269.755338][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 269.798315][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 269.828701][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 269.853628][ T12] bridge_slave_1: left allmulticast mode [ 269.878414][ T12] bridge_slave_1: left promiscuous mode [ 269.884942][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.918092][ T5794] Bluetooth: hci3: command tx timeout [ 269.927091][ T12] bridge_slave_0: left allmulticast mode [ 269.945754][ T12] bridge_slave_0: left promiscuous mode [ 269.978595][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.126050][ T12] veth1_macvtap: left promiscuous mode [ 270.140833][ T12] veth0_macvtap: left promiscuous mode [ 270.155555][ T12] veth1_vlan: left promiscuous mode [ 270.174962][ T12] veth0_vlan: left promiscuous mode [ 271.780159][ T12] team0 (unregistering): Port device team_slave_1 removed [ 271.911535][ T12] team0 (unregistering): Port device team_slave_0 removed [ 271.997643][ T5794] Bluetooth: hci3: command tx timeout [ 272.009319][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 272.100028][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 272.758634][ T12] bond0 (unregistering): Released all slaves [ 272.988803][ T8651] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.996103][ T8651] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.030912][ T8651] bridge_slave_0: entered allmulticast mode [ 273.060188][ T8651] bridge_slave_0: entered promiscuous mode [ 273.080823][ T8651] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.097610][ T8651] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.104875][ T8651] bridge_slave_1: entered allmulticast mode [ 273.121905][ T8651] bridge_slave_1: entered promiscuous mode [ 273.271248][ T8651] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 273.301241][ T8651] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 273.486175][ T8651] team0: Port device team_slave_0 added [ 273.493998][ T8732] loop3: detected capacity change from 0 to 164 [ 273.503438][ T8651] team0: Port device team_slave_1 added [ 273.656089][ T8651] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 273.683944][ T8651] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 273.780981][ T8651] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 273.817206][ T8651] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 273.863498][ T8651] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 273.977501][ T8651] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 274.005868][ T8744] loop3: detected capacity change from 0 to 512 [ 274.068722][ T8744] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 274.078472][ T5794] Bluetooth: hci3: command tx timeout [ 274.195184][ T8744] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4059: comm syz.3.948: Allocating blocks 41-42 which overlap fs metadata [ 274.227674][ T8744] EXT4-fs (loop3): Remounting filesystem read-only [ 274.276733][ T8744] Quota error (device loop3): write_blk: dquota write failed [ 274.312632][ T8744] Quota error (device loop3): find_free_dqentry: Can't write quota data block 5 [ 274.350547][ T8744] Quota error (device loop3): write_blk: dquota write failed [ 274.362736][ T8744] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 274.379150][ T8651] hsr_slave_0: entered promiscuous mode [ 274.386599][ T8744] EXT4-fs (loop3): 1 truncate cleaned up [ 274.407259][ T8744] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 274.420364][ T8651] hsr_slave_1: entered promiscuous mode [ 274.536504][ T8744] gfs2: gfs2 mount does not exist [ 274.626881][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.996105][ T8765] loop3: detected capacity change from 0 to 128 [ 275.077359][ T8765] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 275.193440][ T8765] ext4 filesystem being mounted at /211/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 275.504767][ T5777] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 275.698275][ T8777] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input13 [ 276.140072][ T8651] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 276.158700][ T5794] Bluetooth: hci3: command tx timeout [ 276.168867][ T8651] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 276.180062][ T8651] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 276.240626][ T8651] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 276.517129][ T8651] 8021q: adding VLAN 0 to HW filter on device bond0 [ 276.584846][ T8651] 8021q: adding VLAN 0 to HW filter on device team0 [ 276.634577][ T2927] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.641840][ T2927] bridge0: port 1(bridge_slave_0) entered forwarding state [ 276.712896][ T2927] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.721008][ T2927] bridge0: port 2(bridge_slave_1) entered forwarding state [ 276.759623][ T8808] loop3: detected capacity change from 0 to 1024 [ 276.830528][ T8808] hfsplus: failed to load catalog file [ 276.965924][ T8651] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 277.141022][ T8817] loop2: detected capacity change from 0 to 128 [ 277.396884][ T8817] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 277.474784][ T8817] ext4 filesystem being mounted at /244/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 277.835291][ T8651] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 277.900985][ T5780] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 278.063940][ T8651] veth0_vlan: entered promiscuous mode [ 278.163136][ T8651] veth1_vlan: entered promiscuous mode [ 278.171401][ T8811] loop4: detected capacity change from 0 to 32768 [ 278.283696][ T8651] veth0_macvtap: entered promiscuous mode [ 278.328538][ T8811] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 278.355060][ T8651] veth1_macvtap: entered promiscuous mode [ 278.456978][ T8651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 278.495158][ T8651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.525893][ T8811] (syz.4.966,8811,1):ocfs2_remount:623 ERROR: Cannot change heartbeat mode on remount [ 278.547843][ T8651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 278.571318][ T8651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.593127][ T8651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 278.603787][ T8811] OCFS2: ERROR (device loop4): int ocfs2_validate_gd_parent(struct super_block *, struct ocfs2_dinode *, struct buffer_head *, int): Group descriptor #64 has bitmap size 448 but physical max of 256 [ 278.616663][ T8651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.654916][ T8811] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 278.669118][ T8651] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 278.680858][ T8651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.693513][ T8651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.705112][ T8651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.717778][ T8811] OCFS2: File system is now read-only. [ 278.727574][ T8811] (syz.4.966,8811,1):ocfs2_test_suballoc_bit:2814 ERROR: read group 64 failed -30 [ 278.742047][ T8811] (syz.4.966,8811,1):ocfs2_test_suballoc_bit:2825 ERROR: status = -30 [ 278.750854][ T8651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.761040][ T8651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.771708][ T8811] (syz.4.966,8811,1):ocfs2_test_inode_bit:2887 ERROR: test suballoc bit failed -30 [ 278.781334][ T8651] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.794208][ T8811] (syz.4.966,8811,1):ocfs2_test_inode_bit:2896 ERROR: status = -30 [ 278.810679][ T8651] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 278.822821][ T8811] (syz.4.966,8811,1):ocfs2_get_parent:166 ERROR: test inode bit failed -30 [ 278.853384][ T8651] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.868263][ T8651] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.894119][ T8651] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.916433][ T8651] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.070879][ T7507] ocfs2: Unmounting device (7,4) on (node local) [ 279.163436][ T2963] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.215056][ T2963] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.332007][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.365031][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.713855][ T8857] device-mapper: ioctl: populate_table: no targets specified [ 280.137188][ T8839] loop2: detected capacity change from 0 to 40427 [ 280.182347][ T8839] F2FS-fs (loop2): build fault injection attr: rate: 14, type: 0x7ffff [ 280.240591][ T8839] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x30e4 [ 280.290563][ T8839] F2FS-fs (loop2): invalid crc value [ 280.333665][ T8839] F2FS-fs (loop2): Found nat_bits in checkpoint [ 280.407671][ T8876] FAULT_INJECTION: forcing a failure. [ 280.407671][ T8876] name failslab, interval 1, probability 0, space 0, times 0 [ 280.437118][ T8876] CPU: 1 PID: 8876 Comm: syz.3.975 Not tainted syzkaller #0 [ 280.444499][ T8876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 280.454611][ T8876] Call Trace: [ 280.457932][ T8876] [ 280.460941][ T8876] dump_stack_lvl+0x18c/0x250 [ 280.465700][ T8876] ? show_regs_print_info+0x20/0x20 [ 280.470979][ T8876] ? load_image+0x420/0x420 [ 280.475556][ T8876] ? __might_sleep+0xe0/0xe0 [ 280.480205][ T8876] ? __lock_acquire+0x7eb0/0x7eb0 [ 280.485285][ T8876] should_fail_ex+0x394/0x4c0 [ 280.485642][ T8839] F2FS-fs (loop2): inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x665/0x970 [ 280.490021][ T8876] should_failslab+0x9/0x20 [ 280.490058][ T8876] slab_pre_alloc_hook+0x59/0x300 [ 280.490100][ T8876] kmem_cache_alloc_lru+0x4d/0x2b0 [ 280.490132][ T8876] ? __d_alloc+0x31/0x710 [ 280.490157][ T8876] __d_alloc+0x31/0x710 [ 280.490184][ T8876] d_alloc_pseudo+0x1d/0x70 [ 280.490207][ T8876] alloc_file_pseudo+0xe4/0x210 [ 280.490234][ T8876] ? fput+0x1a0/0x1a0 [ 280.490256][ T8876] ? alloc_fd+0x590/0x640 [ 280.490294][ T8876] anon_inode_getfd+0xca/0x1c0 [ 280.490320][ T8876] map_create+0xf13/0x12f0 [ 280.490353][ T8876] __sys_bpf+0x651/0x890 [ 280.490382][ T8876] ? bpf_link_show_fdinfo+0x560/0x560 [ 280.490425][ T8876] ? lock_chain_count+0x20/0x20 [ 280.490461][ T8876] __x64_sys_bpf+0x7c/0x90 [ 280.490487][ T8876] do_syscall_64+0x55/0xb0 [ 280.490520][ T8876] ? clear_bhb_loop+0x40/0x90 [ 280.490541][ T8876] ? clear_bhb_loop+0x40/0x90 [ 280.490565][ T8876] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 280.490598][ T8876] RIP: 0033:0x7f86f159e199 [ 280.490618][ T8876] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 280.490637][ T8876] RSP: 002b:00007f86f2393028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 280.490662][ T8876] RAX: ffffffffffffffda RBX: 00007f86f1825fa0 RCX: 00007f86f159e199 [ 280.490678][ T8876] RDX: 0000000000000050 RSI: 0000200000000040 RDI: 0000000000000000 [ 280.490693][ T8876] RBP: 00007f86f16350b8 R08: 0000000000000000 R09: 0000000000000000 [ 280.490708][ T8876] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 280.490721][ T8876] R13: 00007f86f1826038 R14: 00007f86f1825fa0 R15: 00007fff50743d68 [ 280.490752][ T8876] [ 280.893174][ T8884] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.894212][ T8839] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 280.901806][ T8884] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.970325][ T8884] bridge0: entered allmulticast mode [ 281.020269][ T8887] bridge_slave_1: left allmulticast mode [ 281.037766][ T8887] bridge_slave_1: left promiscuous mode [ 281.046099][ T8887] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.128757][ T8887] bridge_slave_0: left allmulticast mode [ 281.163989][ T8887] bridge_slave_0: left promiscuous mode [ 281.184016][ T8887] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.287744][ T8891] f2fs_ckpt-7:2: attempt to access beyond end of device [ 281.287744][ T8891] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 281.341403][ T8891] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 281.619303][ T5787] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 281.807639][ T5787] usb 5-1: Using ep0 maxpacket: 32 [ 281.858832][ T5787] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 281.877478][ T5787] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.920091][ T5787] usb 5-1: config 0 descriptor?? [ 281.983784][ T5787] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 282.466711][ T8915] loop0: detected capacity change from 0 to 8 [ 282.979887][ T5787] gspca_vc032x: reg_w err -71 [ 282.984652][ T5787] gspca_vc032x: I2c Bus Busy Wait 00 [ 282.997574][ T5787] gspca_vc032x: I2c Bus Busy Wait 00 [ 283.002948][ T5787] gspca_vc032x: I2c Bus Busy Wait 00 [ 283.021670][ T5787] gspca_vc032x: I2c Bus Busy Wait 00 [ 283.027828][ T5787] gspca_vc032x: I2c Bus Busy Wait 00 [ 283.033183][ T5787] gspca_vc032x: I2c Bus Busy Wait 00 [ 283.045530][ T5787] gspca_vc032x: I2c Bus Busy Wait 00 [ 283.052094][ T5787] gspca_vc032x: I2c Bus Busy Wait 00 [ 283.057846][ T5787] gspca_vc032x: I2c Bus Busy Wait 00 [ 283.063184][ T5787] gspca_vc032x: I2c Bus Busy Wait 00 [ 283.070019][ T5787] gspca_vc032x: I2c Bus Busy Wait 00 [ 283.075363][ T5787] gspca_vc032x: I2c Bus Busy Wait 00 [ 283.081301][ T5787] gspca_vc032x: I2c Bus Busy Wait 00 [ 283.086658][ T5787] gspca_vc032x: I2c Bus Busy Wait 00 [ 283.103432][ T5787] gspca_vc032x: I2c Bus Busy Wait 00 [ 283.117671][ T5787] gspca_vc032x: I2c Bus Busy Wait 00 [ 283.123071][ T5787] gspca_vc032x: I2c Bus Busy Wait 00 [ 283.128894][ T5787] gspca_vc032x: I2c Bus Busy Wait 00 [ 283.134227][ T5787] gspca_vc032x: Unknown sensor... [ 283.147797][ T5787] vc032x: probe of 5-1:0.0 failed with error -22 [ 283.166937][ T5787] usb 5-1: USB disconnect, device number 4 [ 283.273464][ T8927] bonding: no command found in bonding_masters - use +ifname or -ifname [ 283.561326][ T8934] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input14 [ 283.750084][ T8922] loop2: detected capacity change from 0 to 32768 [ 283.955769][ T8940] device-mapper: ioctl: populate_table: no targets specified [ 284.814578][ T8965] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input15 [ 285.150377][ T8974] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1006'. [ 285.387861][ T5827] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 285.593178][ T5827] usb 5-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 285.613349][ T5827] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.636761][ T5827] usb 5-1: Product: syz [ 285.641983][ T5827] usb 5-1: Manufacturer: syz [ 285.657920][ T5827] usb 5-1: SerialNumber: syz [ 285.670967][ T5827] usb 5-1: config 0 descriptor?? [ 285.690065][ T5827] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 285.822248][ T8983] device-mapper: ioctl: populate_table: no targets specified [ 286.196763][ T8992] loop3: detected capacity change from 0 to 2048 [ 286.212662][ T8992] EXT4-fs: Ignoring removed nobh option [ 286.261246][ T8992] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 286.286901][ T8992] ext4 filesystem being mounted at /236/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 286.365407][ T8997] dummy0: entered promiscuous mode [ 286.384623][ T28] audit: type=1800 audit(1791209531.293:56): pid=8992 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1015" name="file0" dev="loop3" ino=13 res=0 errno=0 [ 286.406034][ T8997] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 286.420776][ T8997] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 286.429011][ T8997] Cannot create hsr debugfs directory [ 286.434625][ T8997] hsr1: entered allmulticast mode [ 286.439989][ T8997] dummy0: entered allmulticast mode [ 286.445257][ T8997] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 286.634782][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.727205][ T9003] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1020'. [ 286.754431][ T5827] gspca_sunplus: reg_w_riv err -71 [ 286.762909][ T9001] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input16 [ 286.778378][ T5827] sunplus: probe of 5-1:0.0 failed with error -71 [ 286.818778][ T5827] usb 5-1: USB disconnect, device number 5 [ 287.063701][ T9008] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input17 [ 287.126855][ T9010] loop2: detected capacity change from 0 to 1024 [ 287.168690][ T9010] ext4: Unknown parameter 'rootcontext' [ 287.199036][ T9010] mtrr: base(0x2becfee7ffe61d43000) is not aligned on a size(0x96c076bb000) boundary [ 287.430219][ T9016] Invalid argument reading file caps for ./file0 [ 288.103831][ T9038] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1033'. [ 288.334611][ T9044] loop0: detected capacity change from 0 to 1024 [ 288.356183][ T9044] ext4: Unknown parameter 'rootcontext' [ 288.402273][ T9044] mtrr: base(0x2becfee7ffe61d43000) is not aligned on a size(0x96c076bb000) boundary [ 288.645514][ T9033] loop3: detected capacity change from 0 to 40427 [ 288.683313][ T9033] F2FS-fs (loop3): invalid crc value [ 288.702051][ T9033] F2FS-fs (loop3): Found nat_bits in checkpoint [ 288.894670][ T9033] F2FS-fs (loop3): Start checkpoint disabled! [ 288.937741][ T9033] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 288.959217][ T9057] loop2: detected capacity change from 0 to 512 [ 288.989612][ T9057] EXT4-fs: Ignoring removed oldalloc option [ 289.038722][ T9057] EXT4-fs (loop2): orphan cleanup on readonly fs [ 289.077500][ T9057] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 289.103429][ T9057] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #13: comm syz.2.1052: attempt to clear invalid blocks 2 len 1 [ 289.136639][ T9057] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 289.171459][ T9057] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.1052: invalid indirect mapped block 1819239214 (level 0) [ 289.234995][ T9057] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.1052: invalid indirect mapped block 1819239214 (level 1) [ 289.251670][ T9057] EXT4-fs (loop2): 1 truncate cleaned up [ 289.260628][ T9057] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 289.428547][ T5780] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.541178][ T7507] syz_tun (unregistering): left allmulticast mode [ 289.636484][ T2927] kworker/u4:7: attempt to access beyond end of device [ 289.636484][ T2927] loop3: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 289.658905][ T2927] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 289.703724][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.837816][ T5794] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 289.844324][ T5794] Bluetooth: hci0: command 0x0c1a tx timeout [ 289.927159][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.074361][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.244375][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): left promiscuous mode [ 290.265357][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.526768][ T9086] loop0: detected capacity change from 0 to 2048 [ 290.582031][ T9086] EXT4-fs: Ignoring removed nobh option [ 290.658969][ T9086] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 290.681057][ T9086] ext4 filesystem being mounted at /21/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 290.723277][ T5795] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 290.742808][ T5795] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 290.762394][ T5795] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 290.781225][ T5795] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 290.793205][ T5795] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 290.811907][ T5795] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 290.864151][ T28] audit: type=1800 audit(1791209535.773:57): pid=9086 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1051" name="file0" dev="loop0" ino=13 res=0 errno=0 [ 291.140506][ T8651] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.750048][ T9091] chnl_net:caif_netlink_parms(): no params data found [ 292.078430][ T5794] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 292.078664][ T5786] Bluetooth: hci0: command 0x0c1a tx timeout [ 292.175965][ T9116] FAULT_INJECTION: forcing a failure. [ 292.175965][ T9116] name failslab, interval 1, probability 0, space 0, times 0 [ 292.188884][ T9116] CPU: 0 PID: 9116 Comm: syz.3.1053 Not tainted syzkaller #0 [ 292.196506][ T9116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 292.206614][ T9116] Call Trace: [ 292.209945][ T9116] [ 292.212947][ T9116] dump_stack_lvl+0x18c/0x250 [ 292.217705][ T9116] ? show_regs_print_info+0x20/0x20 [ 292.222969][ T9116] ? load_image+0x420/0x420 [ 292.227519][ T9116] ? __might_sleep+0xe0/0xe0 [ 292.232158][ T9116] ? __lock_acquire+0x7eb0/0x7eb0 [ 292.237235][ T9116] should_fail_ex+0x394/0x4c0 [ 292.241965][ T9116] should_failslab+0x9/0x20 [ 292.246511][ T9116] slab_pre_alloc_hook+0x59/0x300 [ 292.251581][ T9116] ? ops_init+0x8b/0x640 [ 292.255860][ T9116] ? ops_init+0x8b/0x640 [ 292.260144][ T9116] __kmem_cache_alloc_node+0x53/0x250 [ 292.265569][ T9116] ? ops_init+0x8b/0x640 [ 292.269847][ T9116] __kmalloc+0xa7/0x240 [ 292.274053][ T9116] ? pedit_init_net+0x15a/0x190 [ 292.278958][ T9116] ops_init+0x8b/0x640 [ 292.283087][ T9116] setup_net+0x3b6/0xa20 [ 292.287364][ T9116] ? copy_net_ns+0x530/0x530 [ 292.291996][ T9116] ? copy_net_ns+0x347/0x530 [ 292.296627][ T9116] ? down_read_killable+0x1d0/0x340 [ 292.301864][ T9116] copy_net_ns+0x361/0x530 [ 292.306323][ T9116] create_new_namespaces+0x3ce/0x700 [ 292.311663][ T9116] unshare_nsproxy_namespaces+0x11a/0x160 [ 292.317443][ T9116] ksys_unshare+0x4fa/0x8f0 [ 292.322029][ T9116] ? sighand_ctor+0x50/0x50 [ 292.326579][ T9116] ? lock_chain_count+0x20/0x20 [ 292.331512][ T9116] ? syscall_enter_from_user_mode+0x25/0x80 [ 292.337471][ T9116] __x64_sys_unshare+0x38/0x40 [ 292.342291][ T9116] do_syscall_64+0x55/0xb0 [ 292.346748][ T9116] ? clear_bhb_loop+0x40/0x90 [ 292.351454][ T9116] ? clear_bhb_loop+0x40/0x90 [ 292.356167][ T9116] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 292.362106][ T9116] RIP: 0033:0x7f86f159e199 [ 292.366579][ T9116] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 292.386242][ T9116] RSP: 002b:00007f86f2393028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 292.394693][ T9116] RAX: ffffffffffffffda RBX: 00007f86f1825fa0 RCX: 00007f86f159e199 [ 292.402697][ T9116] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 292.410704][ T9116] RBP: 00007f86f16350b8 R08: 0000000000000000 R09: 0000000000000000 [ 292.418711][ T9116] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 292.426721][ T9116] R13: 00007f86f1826038 R14: 00007f86f1825fa0 R15: 00007fff50743d68 [ 292.434735][ T9116] [ 292.654313][ T9091] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.662466][ T9124] loop0: detected capacity change from 0 to 512 [ 292.676944][ T9124] EXT4-fs: Ignoring removed oldalloc option [ 292.690204][ T9091] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.701188][ T9091] bridge_slave_0: entered allmulticast mode [ 292.716857][ T9091] bridge_slave_0: entered promiscuous mode [ 292.728169][ T9124] EXT4-fs (loop0): orphan cleanup on readonly fs [ 292.734988][ T9091] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.748058][ T9124] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 292.756170][ T9091] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.756682][ T9091] bridge_slave_1: entered allmulticast mode [ 292.777247][ T9091] bridge_slave_1: entered promiscuous mode [ 292.788870][ T9124] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #13: comm syz.0.1058: attempt to clear invalid blocks 2 len 1 [ 292.822981][ T9124] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 292.844933][ T9124] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.1058: invalid indirect mapped block 1819239214 (level 0) [ 292.869906][ T9124] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.1058: invalid indirect mapped block 1819239214 (level 1) [ 292.888304][ T5786] Bluetooth: hci1: command tx timeout [ 292.921225][ T9124] EXT4-fs (loop0): 1 truncate cleaned up [ 292.966212][ T9124] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 293.024570][ T12] dummy0: left promiscuous mode [ 293.041576][ T12] hsr_slave_0: left promiscuous mode [ 293.093212][ T12] hsr_slave_1: left promiscuous mode [ 293.102363][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 293.114951][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 293.135985][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 293.144103][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 293.155893][ T8651] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.214619][ T12] veth1_macvtap: left promiscuous mode [ 293.233013][ T12] veth1_vlan: left promiscuous mode [ 293.249050][ T12] veth0_vlan: left promiscuous mode [ 293.328193][ T9135] ecryptfs_mount: kern_path() failed [ 293.349901][ T9135] Reading sb failed; rc = [-2] [ 293.800666][ T9141] loop2: detected capacity change from 0 to 2048 [ 293.851002][ T9141] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 293.980778][ T9134] loop0: detected capacity change from 0 to 32768 [ 294.003275][ T9134] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.1063 (9134) [ 294.070150][ T9134] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 294.088598][ T9134] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 294.097950][ T9134] BTRFS info (device loop0): setting nodatacow, compression disabled [ 294.118899][ T9134] BTRFS info (device loop0): disabling tree log [ 294.125276][ T9134] BTRFS info (device loop0): max_inline at 0 [ 294.131625][ T9134] BTRFS info (device loop0): using free space tree [ 294.326211][ T9134] BTRFS info (device loop0): auto enabling async discard [ 294.446089][ T9134] BTRFS error (device loop0: state M): unrecognized mount option '0x0000000000000000184467440737095516150xffffffffffffffff00000000000000000000003-[[E~xidqc?fgr&ҳY?&!_.}Afx}7_Rq)a5D֏as' [ 294.537141][ T8651] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 294.781926][ T8715] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 9 /dev/loop0 scanned by udevd (8715) [ 294.963266][ T5786] Bluetooth: hci1: command tx timeout [ 295.036359][ T12] team0 (unregistering): Port device team_slave_1 removed [ 295.102131][ T12] team0 (unregistering): Port device team_slave_0 removed [ 295.162153][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 295.232901][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 295.628774][ T12] bond0 (unregistering): Released all slaves [ 295.692932][ T9091] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 295.723550][ T9091] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 295.833064][ T9091] team0: Port device team_slave_0 added [ 295.872771][ T9091] team0: Port device team_slave_1 added [ 295.915834][ T9091] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 295.924838][ T9091] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 295.965400][ T9091] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 296.000053][ T9091] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 296.007078][ T9091] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 296.033935][ T9091] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 296.124769][ T9091] hsr_slave_0: entered promiscuous mode [ 296.131900][ T9091] hsr_slave_1: entered promiscuous mode [ 296.138408][ T9091] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 296.146022][ T9091] Cannot create hsr debugfs directory [ 296.229717][ T12] IPVS: stop unused estimator thread 0... [ 296.984043][ T9091] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 296.995971][ T9091] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 297.014780][ T9091] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 297.037665][ T5786] Bluetooth: hci1: command tx timeout [ 297.048281][ T9091] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 297.173564][ T9091] 8021q: adding VLAN 0 to HW filter on device bond0 [ 297.230461][ T9091] 8021q: adding VLAN 0 to HW filter on device team0 [ 297.269235][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.276498][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state [ 297.303831][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.311254][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state [ 297.681780][ T9091] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 298.163890][ T9091] veth0_vlan: entered promiscuous mode [ 298.183814][ T9091] veth1_vlan: entered promiscuous mode [ 298.252545][ T9091] veth0_macvtap: entered promiscuous mode [ 298.281693][ T9091] veth1_macvtap: entered promiscuous mode [ 298.326467][ T9091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 298.337698][ T9091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.350197][ T9091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 298.361223][ T9091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.381796][ T9091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 298.393169][ T9091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.405867][ T9091] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 298.431579][ T9091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 298.456618][ T9091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.467043][ T9091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 298.485401][ T9091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.496608][ T9091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 298.507708][ T9091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.519985][ T9091] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 298.532604][ T9091] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.548057][ T9091] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.564038][ T9091] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.574419][ T9091] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.786447][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 298.816305][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 298.926206][ T988] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 298.947444][ T988] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 299.122997][ T5786] Bluetooth: hci1: command tx timeout [ 299.416576][ T9227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 299.448768][ T8] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 299.477831][ T9227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! Stopping sshd: [ 299.501000][ T9232] FAULT_INJECTION: forcing a failure. [ 299.501000][ T9232] name failslab, interval 1, probability 0, space 0, times 0 [ 299.523926][ T9227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 299.545943][ T9232] CPU: 1 PID: 9232 Comm: syz.4.1071 Not tainted syzkaller #0 [ 299.553411][ T9232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 299.563526][ T9232] Call Trace: [ 299.566862][ T9232] [ 299.569847][ T9232] dump_stack_lvl+0x18c/0x250 [ 299.574607][ T9232] ? show_regs_print_info+0x20/0x20 [ 299.579888][ T9232] ? load_image+0x420/0x420 [ 299.584462][ T9232] ? __might_sleep+0xe0/0xe0 [ 299.589114][ T9232] ? __lock_acquire+0x7eb0/0x7eb0 [ 299.594203][ T9232] should_fail_ex+0x394/0x4c0 [ 299.598959][ T9232] should_failslab+0x9/0x20 [ 299.603533][ T9232] slab_pre_alloc_hook+0x59/0x300 [ 299.608724][ T9232] ? ops_init+0x8b/0x640 [ 299.613025][ T9232] ? ops_init+0x8b/0x640 [ 299.617326][ T9232] __kmem_cache_alloc_node+0x53/0x250 [ 299.622775][ T9232] ? ops_init+0x8b/0x640 [ 299.627102][ T9232] __kmalloc+0xa7/0x240 [ 299.631338][ T9232] ops_init+0x8b/0x640 [ 299.635483][ T9232] setup_net+0x3b6/0xa20 [ 299.639785][ T9232] ? copy_net_ns+0x530/0x530 [ 299.644434][ T9232] ? copy_net_ns+0x347/0x530 [ 299.649084][ T9232] ? down_read_killable+0x1d0/0x340 [ 299.654350][ T9232] copy_net_ns+0x361/0x530 [ 299.658832][ T9232] create_new_namespaces+0x3ce/0x700 [ 299.664187][ T9232] unshare_nsproxy_namespaces+0x11a/0x160 [ 299.669986][ T9232] ksys_unshare+0x4fa/0x8f0 [ 299.674558][ T9232] ? sighand_ctor+0x50/0x50 [ 299.679123][ T9232] ? lock_chain_count+0x20/0x20 [ 299.684036][ T9232] ? syscall_enter_from_user_mode+0x25/0x80 [ 299.690000][ T9232] __x64_sys_unshare+0x38/0x40 [ 299.694830][ T9232] do_syscall_64+0x55/0xb0 [ 299.699311][ T9232] ? clear_bhb_loop+0x40/0x90 [ 299.700526][ T9227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.704063][ T9232] ? clear_bhb_loop+0x40/0x90 [ 299.718657][ T9232] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 299.724641][ T9232] RIP: 0033:0x7f128639e199 [ 299.729129][ T9232] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 299.748792][ T9232] RSP: 002b:00007f12872ad028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 299.754075][ T8] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 299.757247][ T9232] RAX: ffffffffffffffda RBX: 00007f1286625fa0 RCX: 00007f128639e199 [ 299.774932][ T9232] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 299.782958][ T9232] RBP: 00007f12864350b8 R08: 0000000000000000 R09: 0000000000000000 [ 299.787817][ T9227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 299.790954][ T9232] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 299.790973][ T9232] R13: 00007f1286626038 R14: 00007f1286625fa0 R15: 00007ffdfc315948 [ 299.791033][ T9232] [ 299.807545][ T8] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 299.890984][ T9227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.920485][ T8] usb 4-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00 [ 299.942278][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.962991][ T9227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 299.984457][ T8] usb 4-1: Product: syz [ 300.002266][ T8] usb 4-1: Manufacturer: syz stopped /usr/sbin/sshd (pid 5529) [ 300.017534][ T9227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.024363][ T8] usb 4-1: SerialNumber: syz [ 300.027661][ T9227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 300.027683][ T9227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! OK [ 300.099753][ T8] ums-sddr09 4-1:1.0: USB Mass Storage device detected [ 300.125618][ T8] ums-sddr09 4-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 300.125618][ T8] Please send a copy of this message to and [ 300.160070][ T9227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 300.177886][ T9227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! Stopping crond: stopped /usr/sbin/crond (pid 5514) OK [ 300.644010][ T9248] loop2: detected capacity change from 0 to 8 [ 300.729166][ T9248] SQUASHFS error: Unable to read inode 0xa7 [ 300.856190][ T8] ums-sddr09: probe of 4-1:1.0 failed with error -5 Stopping dhcpcd... [ 301.033220][ T23] usb 4-1: USB disconnect, device number 12 stopped /sbin/dhcpcd (pid 5434) Stopping network: [ 301.778742][ T9279] loop3: detected capacity change from 0 to 512 [ 301.806626][ T9279] EXT4-fs: Ignoring removed oldalloc option [ 301.840108][ T9280] netlink: 'syz.2.1074': attribute type 4 has an invalid length. [ 301.857771][ T9280] netlink: 'syz.2.1074': attribute type 4 has an invalid length. [ 301.865587][ T9280] netlink: 203268 bytes leftover after parsing attributes in process `syz.2.1074'. [ 301.875627][ T9279] EXT4-fs (loop3): orphan cleanup on readonly fs [ 301.925115][ T9279] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 301.990697][ T9279] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #13: comm syz.3.1073: attempt to clear invalid blocks 2 len 1 [ 302.060252][ T9279] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 302.101894][ T9279] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.1073: invalid indirect mapped block 1819239214 (level 0) [ 302.153650][ T9279] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.1073: invalid indirect mapped block 1819239214 (level 1) [ 302.186604][ T9279] EXT4-fs (loop3): 1 truncate cleaned up [ 302.203442][ T9279] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 302.347148][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. OK Stopping iptables: OK [ 302.765528][ T9274] loop0: detected capacity change from 0 to 40427 [ 302.801511][ T9274] F2FS-fs (loop0): invalid crc value [ 302.850227][ T9274] F2FS-fs (loop0): Found nat_bits in checkpoint Stopping system message bus: [ 303.000923][ T9274] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 303.124511][ T9274] F2FS-fs (loop0): Stopped filesystem due to reason: 0 [ 303.349339][ T9308] FAULT_INJECTION: forcing a failure. [ 303.349339][ T9308] name failslab, interval 1, probability 0, space 0, times 0 [ 303.403699][ T9308] CPU: 1 PID: 9308 Comm: syz.2.1081 Not tainted syzkaller #0 [ 303.411177][ T9308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 303.421295][ T9308] Call Trace: [ 303.424650][ T9308] [ 303.427629][ T9308] dump_stack_lvl+0x18c/0x250 [ 303.432381][ T9308] ? show_regs_print_info+0x20/0x20 [ 303.437647][ T9308] ? load_image+0x420/0x420 [ 303.442217][ T9308] ? __lock_acquire+0x7eb0/0x7eb0 [ 303.447306][ T9308] should_fail_ex+0x394/0x4c0 [ 303.452079][ T9308] should_failslab+0x9/0x20 [ 303.456641][ T9308] slab_pre_alloc_hook+0x59/0x300 [ 303.461763][ T9308] ? nfs_init_fs_context+0x58/0xf60 [ 303.467020][ T9308] __kmem_cache_alloc_node+0x53/0x250 [ 303.472452][ T9308] ? nfs_init_fs_context+0x58/0xf60 [ 303.477696][ T9308] kmalloc_trace+0x2a/0xe0 [ 303.482177][ T9308] nfs_init_fs_context+0x58/0xf60 [ 303.487238][ T9308] alloc_fs_context+0x618/0x7a0 [ 303.492129][ T9308] __se_sys_fsopen+0xa0/0x2c0 [ 303.496851][ T9308] do_syscall_64+0x55/0xb0 [ 303.501310][ T9308] ? clear_bhb_loop+0x40/0x90 [ 303.506014][ T9308] ? clear_bhb_loop+0x40/0x90 [ 303.510724][ T9308] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 303.516681][ T9308] RIP: 0033:0x7f99c619e199 [ 303.521138][ T9308] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 303.540777][ T9308] RSP: 002b:00007f99c6f80028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 303.549232][ T9308] RAX: ffffffffffffffda RBX: 00007f99c6425fa0 RCX: 00007f99c619e199 [ 303.557230][ T9308] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000080 [ 303.565232][ T9308] RBP: 00007f99c62350b8 R08: 0000000000000000 R09: 0000000000000000 [ 303.573232][ T9308] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 303.581234][ T9308] R13: 00007f99c6426038 R14: 00007f99c6425fa0 R15: 00007ffed0ea58c8 [ 303.589243][ T9308] done [ 305.432561][ T9363] loop3: detected capacity change from 0 to 256 [ 305.581252][ T9363] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d) [ 306.065068][ T9370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 306.100781][ T9370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.136061][ T9370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 306.167594][ T9370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.187596][ T9370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 306.189650][ T5786] block nbd0: Receive control failed (result -32) [ 306.218185][ T9364] block nbd0: shutting down sockets [ 306.257781][ T9370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.333685][ T9370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 306.407588][ T9370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! Stopping klogd: [ 306.437511][ T9370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 306.480037][ T9370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.531434][ T9370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 306.580002][ T9370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.582623][ T9353] loop2: detected capacity change from 0 to 40427 [ 306.615070][ T9353] F2FS-fs (loop2): invalid crc value [ 306.626764][ T9353] F2FS-fs (loop2): Found nat_bits in checkpoint [ 306.879920][ T9353] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 OK [ 307.064156][ T9353] F2FS-fs (loop2): Stopped filesystem due to reason: 0 Stopping acpid: [ 307.344840][ T9407] loop3: detected capacity change from 0 to 64 [ 307.479892][ T28] audit: type=1800 audit(1791209552.383:58): pid=9407 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1105" name="file1" dev="loop3" ino=21 res=0 errno=0 [ 307.603616][ T9407] syz.3.1105: attempt to access beyond end of device [ 307.603616][ T9407] loop3: rw=34817, sector=57, nr_sectors = 8 limit=64 [ 307.852278][ T9418] loop5: detected capacity change from 0 to 7 [ 307.877577][ T9418] Dev loop5: unable to read RDB block 7 [ 307.883241][ T9418] loop5: unable to read partition table [ 307.921755][ T9418] loop5: partition table beyond EOD, truncated [ 307.940480][ T9418] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 308.257323][ T9434] loop0: detected capacity change from 0 to 512 [ 308.258059][ T56] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 308.292302][ T9434] EXT4-fs: Ignoring removed oldalloc option [ 308.307085][ T9434] EXT4-fs warning (device loop0): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 308.319023][ T9434] EXT4-fs warning (device loop0): dx_probe:881: Enable large directory feature to access it [ 308.329242][ T9434] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.1112: Corrupt directory, running e2fsck is recommended [ 308.343374][ T9434] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 308.352235][ T9434] EXT4-fs error (device loop0): ext4_iget_extra_inode:4752: inode #15: comm syz.0.1112: corrupted in-inode xattr: e_name out of bounds [ 308.371386][ T9434] EXT4-fs error (device loop0): ext4_orphan_get:1413: comm syz.0.1112: couldn't read orphan inode 15 (err -117) [ 308.387102][ T9434] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 308.424728][ T9434] EXT4-fs warning (device loop0): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 308.428768][ T9438] ip_tables: iptables: counters copy to user failed while replacing table [ 308.462048][ T9434] EXT4-fs warning (device loop0): dx_probe:881: Enable large directory feature to access it [ 308.488892][ T56] usb 3-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00 [ 308.499029][ T9434] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.1112: Corrupt directory, running e2fsck is recommended [ 308.517972][ T56] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.538015][ T9439] EXT4-fs warning (device loop0): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 308.550959][ T56] usb 3-1: config 0 descriptor?? [ 308.566564][ T9439] EXT4-fs warning (device loop0): dx_probe:881: Enable large directory feature to access it [ 308.576921][ T9439] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.1112: Corrupt directory, running e2fsck is recommended [ 308.602384][ T9434] EXT4-fs warning (device loop0): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 308.616321][ T9434] EXT4-fs warning (device loop0): dx_probe:881: Enable large directory feature to access it [ 308.631445][ T9434] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.1112: Corrupt directory, running e2fsck is recommended [ 308.665367][ T9434] EXT4-fs warning (device loop0): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 308.733607][ T8651] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. OK [ 308.827701][ T8] usb 4-1: new high-speed USB device number 13 using dummy_hcd Stopping syslogd: [ 308.995195][ T56] microsoft 0003:045E:009D.0004: unknown main item tag 0x2 [ 309.008653][ T8] usb 4-1: Using ep0 maxpacket: 8 [ 309.015987][ T8] usb 4-1: config index 0 descriptor too short (expected 301, got 45) stopped /sbin/syslogd (pid 5122) [ 309.032835][ T56] microsoft 0003:045E:009D.0004: unknown main item tag 0x1 [ 309.040358][ T8] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 309.049694][ T56] microsoft 0003:045E:009D.0004: unknown main item tag 0x0 [ 309.063451][ T56] microsoft 0003:045E:009D.0004: unknown main item tag 0x0 OK [ 309.072307][ T56] microsoft 0003:045E:009D.0004: unknown main item tag 0x0 [ 309.080256][ T8] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 309.097710][ T56] microsoft 0003:045E:009D.0004: ignoring exceeding usage max [ 309.115693][ T8] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 309.133745][ T56] microsoft 0003:045E:009D.0004: unknown main item tag 0x5 [ 309.136580][ T8] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 309.154228][ T56] microsoft 0003:045E:009D.0004: unknown main item tag 0x6 [ 309.177784][ T56] microsoft 0003:045E:009D.0004: hidraw0: USB HID v0.c4 Device [HID 045e:009d] on usb-dummy_hcd.2-1/input0 [ 309.189390][ T56] microsoft 0003:045E:009D.0004: no inputs found [ 309.197734][ T9421] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 309.206636][ T56] microsoft 0003:045E:009D.0004: could not initialize ff, continuing anyway [ 309.215894][ T9421] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 309.235810][ T8] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 309.266713][ T56] usb 3-1: USB disconnect, device number 14 [ 309.276596][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.437643][ T5794] Bluetooth: hci0: command 0x0c1a tx timeout [ 309.647642][ T5827] usb 1-1: new high-speed USB device number 12 using dummy_hcd umount: can't remount debugfs read-only [ 309.848441][ T5827] usb 1-1: Using ep0 maxpacket: 32 [ 309.867623][ T5827] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 309.889662][ T5827] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 309.912170][ T5827] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 309.948851][ T5827] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 309.957278][ T5827] usb 1-1: Product: syz [ 309.983743][ T5827] usb 1-1: Manufacturer: syz [ 310.006782][ T5827] hub 1-1:4.0: USB hub found [ 310.254666][ T5827] hub 1-1:4.0: config failed, can't read hub descriptor (err -22) [ 310.328972][ T5827] usb 1-1: USB disconnect, device number 12 [ 310.878052][ T5827] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 311.124361][ T5827] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 311.148691][ T5827] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 311.177265][ T5827] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 311.186685][ T5827] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 311.201292][ T5827] usb 1-1: Product: syz [ 311.205709][ T5827] usb 1-1: Manufacturer: syz [ 311.219900][ T5827] hub 1-1:4.0: USB hub found [ 311.426479][ T5827] hub 1-1:4.0: 1 port detected [ 311.453238][ T9472] loop2: detected capacity change from 0 to 2048 [ 311.504109][ T9472] Alternate GPT is invalid, using primary GPT. [ 311.516088][ T9472] loop2: p1 p2 p3 [ 311.523190][ T9472] loop2: partition table partially beyond EOD, truncated [ 311.634570][ T5845] usb 4-1: USB disconnect, device number 13 [ 311.847620][ T5827] hub 1-1:4.0: set hub depth failed [ 311.875968][ T5827] usb 1-1: USB disconnect, device number 13 umount: sysfs busy - remounted read-only umount: devtmpfs busy - remounted read-only umount: can't remount /dev/root read-only The system is going down NOW! Sent SIGTERM to all processes Connection to 10.128.1.26 closed by remote host. [ 313.559588][ T5777] syz_tun (unregistering): left allmulticast mode [ 313.802218][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 Sent SIGKILL to all processes Requesting system poweroff [ 313.933622][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.992165][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.127329][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): left promiscuous mode [ 314.137943][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.930243][ T9493] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 314.944066][ T9493] ACPI: PM: Preparing to enter system sleep state S5 [ 314.955121][ T9493] kvm: exiting hardware virtualization [ 314.962307][ T9493] reboot: Power down serialport: VM disconnected.