last executing test programs: 1m16.915655789s ago: executing program 0 (id=441): r0 = socket$packet(0x11, 0x2, 0x300) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bind$packet(r0, &(0x7f00000000c0)={0x11, 0x18, r2, 0x1, 0x81}, 0x14) bind$packet(r0, &(0x7f0000000000)={0x11, 0x4, r2, 0x1, 0x4, 0x6, @broadcast}, 0x14) 1m16.762957847s ago: executing program 0 (id=442): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close_range(r1, 0xffffffffffffffff, 0x200000000000000) 1m14.601604445s ago: executing program 0 (id=447): socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x3f00000000000000) 1m14.442387093s ago: executing program 0 (id=449): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@minixdf}, {}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@commit={'commit', 0x3d, 0x5}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@noblock_validity}, {@nomblk_io_submit}]}, 0x1, 0x566, &(0x7f00000015c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x147142, 0x0) r0 = syz_io_uring_setup(0x279, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x1ffe, 0x0, 0x0, 0x0, 0x0) 1m14.041911033s ago: executing program 0 (id=450): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000001340)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x2, 0x1, 0x28, 0x68, 0x0, 0x5, 0x6, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0xb}}, {{0x4e21, 0x4e22, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x20, 0xa, 0x0, 0x8}}}}, 0x36) 1m13.379002356s ago: executing program 0 (id=453): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'macvtap0\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000000)={@mcast2, r2}, 0x14) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x20, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r2, {0xfffd, 0x10}, {0x1, 0xfff1}, {0xfff2, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840) 1m12.928067598s ago: executing program 32 (id=453): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'macvtap0\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000000)={@mcast2, r2}, 0x14) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x20, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r2, {0xfffd, 0x10}, {0x1, 0xfff1}, {0xfff2, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840) 31.492017122s ago: executing program 3 (id=635): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000100), 0xff, 0x4a1, &(0x7f00000004c0)="$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") r0 = creat(0x0, 0x31) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x6000, 0x77b) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2000, 0x2dd8806920477201, 0x0) 30.91057895s ago: executing program 3 (id=637): r0 = memfd_create(&(0x7f0000000b00)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x06\x00\x00\x00\x97A\xc2\xd8\xf0Uq!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xbe}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19\xe5\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\x16\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xf1k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9k\x83\xfc\xa4\xad4\x03\xa2X\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16T~3\x17\x1c\xbf\xbe\xef\xccUxhg\xdfY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96?\x00\x00\x00\x00\x00\x00\x00\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKl\xcc\xa4:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcb\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93>m\xd7q\'\xdf\xfajo\xd8n\xa7\xecJi\xde\xdf\x7f\xe3\xc4*Z 4\xe8S$\xa1H=\xdf\x05\xf3\xc3T\xd1\xdd\xc6f\xa4\xb4\x96\\\xa0\xf9\x0f\x17\x11{\xb6\x9d\xd21\xc1\x90Vj\x13r\x00\x00\xde\x03\xab\xff\x8as0\xc6E\xca\"\xd9*\x9a\x15\xb95r\x8f\xaaj\x82\xd6\xd2%\xed\xa2WQ\xec2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xccX\xfdRB\xffU\xe9\xfa\x1f\xf6\xce\b\xde@\x061\xc6z\xe4\xe0\xc9?\xa7\x94>\x9c\xd1\xa5o\x04\xaaim\xae\xfe\xc7f\xa3\x96\xd7\xb4c)r{\r#\xddI&\n\xf2\xec\xd4\xff\x9f\x136zZ-2\x80\xfbH+\x9b8\xf3\xed\xdf\xa2my\xb28c[\xc3\xfe\xb5M\x84\x97\xa5\'s\xe9\xdc=)I\xabLt2\x9c\v\xd9S', 0x6) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x300000a, 0x12, r0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) vmsplice(r1, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) move_pages(0x0, 0x10, &(0x7f0000000140)=[&(0x7f0000000000/0x1000)=nil], &(0x7f0000000040)=[0x1], 0x0, 0x0) 30.499015161s ago: executing program 3 (id=639): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r1, 0x1, 0x0, @broadcast}, 0x49) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000200)={r1, 0x11, 0x6, @random="bdf19b71a0f9"}, 0x10) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000000)={r1, 0x1, 0x6, @random="6acd6abcee8f"}, 0x10) 30.272405932s ago: executing program 3 (id=643): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) 30.007538435s ago: executing program 3 (id=645): syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) r1 = epoll_create(0x9) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000200)={0x40000004}) close(0x3) 29.362919517s ago: executing program 3 (id=653): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa00008, &(0x7f0000000100), 0x3, 0x7ad, &(0x7f00000007c0)="$eJzs3c9rG1ceAPDvyD/jZNdeWNjNngwLu4YQeZ31JruwsFn2sBQaCLTnJEZWTGrZCpYcYmNIQin00kNLD4XmknPTprdc++PaXvo39FAS0tYJTemhuIw0SmRbcpzEklL8+cBY782M9N533sybZ82gCWDfGk//5CIORwykydFsfhLZjOiPOFlf7+H6WiGdktjYeOW7pLbOg/W1QjS9J3Uwy/wxIj57I+JIbnu5lZXV+ZlSqbiU5SerCxcnKyurRy8szMwV54qLx6emp4+d+MeJ43sX6w9frh66+/b///rRyZ9e/8Ottz5P4mQcypY1x7FXxmM82yYD6Sbc5H97XViPJb2uAM8kPTT76kd5HI7R6NuhJf/T1ZoBAJ1yJSI2AIB9JnH+B4B9pvE9wIP1tUJjivr1nKs9/WKiS+79NyKG6/E3rm/Wl/TXr9l9NVy7DjryIKldI2lIImJsD8ofj4jrt8/cTKfo0HVIgFauXouIc2PjW/v/tIfbes/C0/rbLtYZ35LX/0H3fJKOf/65ffwXkcuO/+Ha363jn6EWx+6zePLxn7uzKTuwB4U2Scd//266t+1hU/yZsb4s95vamG8gOX+hVEz7tt9GxEQMDKX5qR3KmLj/8/12y5rHf9+/89oHafnp6+M1cnf6hza/Z3amOvM8MTe7dy3iT/2t4k8etX/SZvx7epdlvPSvN99vtyyNP423MW2Pv7M2bkT8pWX7P74PKtnx/sTJ2u4w2dgpWvj46/dG2pXf3P7Xb6clrRUa/wt0Q9r+IzvHP5Y0369Zefoyvrgx+mm7ZZvjP3MzLX9z/K33/8Hk1Vp6MJt3eaZaXZqKGExe3j7/2OP3NvKN9dP4J/7c+vjfaf9Pu6FzWXrjCTc/9t/99sNnj7+z0vhn0/ZPsiCe2P5Pn7j1cL6vXfm7a//pWmoim7O9/+vf9rm7reBzbTwAAAAAAAAAAAAAAAAAAAAAAAAA2KVcRByKJJd/lM7l8vn6M7x/HyO5UrlSPXK+vLw4G7VnZY/FQK7xU5ejTb+HOpX9Hn4jf2xL/u8R8buIeHfoQC2fL5RLs70OHgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAyB9s8/z/1zVCvawcAdMxwrysAAHSd8z8A7D9tzv+DrWcf6GhdAIDuqJ3/k/5eVwMA6CLf/wPA/uP8DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQIedPnUqnTZ+XF8rpPnZSyvL8+VLR2eLlfn8wnIhXygvXczPlctzpWK+UF5o+0FX6y+lcvnidCwuX56sFivVycrK6tmF8vJi9eyFhZm54tniQNciAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDdq6yszs+USsUliZ0TV16IalzLmq3XW0PihUgMRUSnimjuJQ70pnMCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+BX4JQAA//9qsh/Y") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000005c0)='\"', 0x1, 0x4fed0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x4842, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x64000}], 0x1) 28.548676448s ago: executing program 33 (id=653): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa00008, &(0x7f0000000100), 0x3, 0x7ad, &(0x7f00000007c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000005c0)='\"', 0x1, 0x4fed0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x4842, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x64000}], 0x1) 2.81208342s ago: executing program 4 (id=765): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f00000003c0)={&(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, r2}) ioctl$DRM_IOCTL_MODE_GETENCODER(r1, 0xc01464a6, &(0x7f0000000440)={r3}) 2.671176427s ago: executing program 4 (id=768): syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/time_for_children\x00') mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_matches\x00') fchdir(r0) readlink(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240)=""/223, 0xdf) 2.628427288s ago: executing program 2 (id=769): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x42, &(0x7f0000000080)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x2, 0x34, 0xfffd, 0x4000, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x8, 0x10, 0x0, 0x0, 0x2d9, {[@timestamp={0x8, 0xa, 0x29, 0xfffffaa6}]}}}}}}}, 0x0) 2.499853195s ago: executing program 4 (id=770): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x17, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x90) close(0x3) 2.40413843s ago: executing program 2 (id=771): ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001080)={0x0, 0x2b, 0x1, [0x7, 0x40, 0x4, 0x1d, 0x8], [0x81, 0x80, 0xfffffffffffffffc, 0x2, 0x4, 0xfffffffffffffffb, 0x5, 0x7fffffff, 0x1, 0x1, 0x7, 0xf, 0x8000000000000001, 0xa, 0x10000000000e, 0x80, 0xfffffffffffffff8, 0x7faf, 0x938, 0x8, 0x6, 0xfffffffffffff664, 0x3, 0x80000000, 0xfb, 0x3, 0x20000000007, 0x3, 0x5, 0x400000008000008, 0x9, 0x9, 0xc, 0x6, 0xfffd, 0x4, 0xf4, 0xfffffffbfffdfffa, 0x3, 0x800000000000000, 0x5617, 0x1, 0x2, 0x5, 0x2, 0x2, 0x4000006, 0x71, 0x1, 0xfc4, 0x75, 0x40800cb14, 0x3b, 0x80000004, 0x8000000000000001, 0x40000000000756, 0x3, 0x0, 0x1246, 0x3ff, 0x4, 0x642, 0x66, 0x9, 0x1, 0x1, 0x8, 0x401, 0x1, 0x5, 0x9, 0x5, 0xfff, 0xfffffffffffffffe, 0x0, 0x400000000100001, 0xd32d, 0x8, 0x632, 0x7, 0x2, 0x8000000000000000, 0xfffffffffffffff9, 0x1, 0x5, 0x3, 0x7, 0x4, 0xd7, 0x8, 0x3, 0xb, 0x8, 0x8, 0x145, 0x5e9, 0xe51a, 0x40000000053ed, 0x2, 0x80, 0x0, 0x1, 0x402, 0x2, 0x5, 0x8000, 0x4, 0x0, 0xffff, 0x1, 0x19, 0x8, 0x2000000009, 0x4b3, 0x0, 0x34d8, 0xfff2, 0x9, 0xbf7, 0x100000000000b1, 0x8000000000000001]}) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f00000001c0)=0x2001) r1 = fcntl$dupfd(r0, 0x0, r0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000001140)=""/136, 0x3f}], 0x1) 2.182489361s ago: executing program 4 (id=772): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r1, &(0x7f0000000400)={0x0, 0x57, &(0x7f00000003c0)={&(0x7f0000000340)={0x20, 0x3, 0x3, 0x5, 0x0, 0x0, {0x5}}, 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000010) 1.965277082s ago: executing program 4 (id=774): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000000240)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000040)=""/2, 0x2}}, 0x120) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/155, 0x9b}, {0x0, 0x4}], 0x2) read(r0, &(0x7f0000000180)=""/78, 0x4e) write$UHID_DESTROY(r0, &(0x7f0000000200), 0x4) 1.672806036s ago: executing program 1 (id=775): openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r0 = syz_io_uring_setup(0x10d, &(0x7f0000000980)={0x0, 0x45885, 0x80, 0x0, 0x8}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r0, 0x3516, 0x20000000, 0x0, 0x0, 0x0) 1.422223299s ago: executing program 2 (id=776): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'syzkaller0\x00'}) syz_usb_disconnect(r0) syz_usb_connect(0x4, 0x24, &(0x7f0000000400)=ANY=[], 0x0) ioctl$EVIOCRMFF(r0, 0xc0085504, &(0x7f0000000000)=0x10) 1.353982732s ago: executing program 1 (id=785): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x66, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0x5}, 0x50) r1 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={r0, &(0x7f0000000480), &(0x7f0000000540)=@tcp=r1}, 0x20) recvfrom(r1, &(0x7f0000000000)=""/205, 0xcd, 0x40, 0x0, 0x0) 1.237209217s ago: executing program 1 (id=778): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) write$P9_RLERRORu(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="5300000007000046009d", @ANYRESHEX=r0, @ANYRES16=r0], 0x53) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x2004000, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) 1.138387563s ago: executing program 1 (id=779): syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, &(0x7f0000000d00), 0x1, 0x1104, &(0x7f0000001440)="$eJzs2LGKE1EUBuD/TkZhEYyM/bCghYIsu+QJLBTSWFjbLVZ2plLyOD6ObGUf9gFSBGysRiazo6IrEhMR5fuamXu49/4z5TkBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAXp3cTHK3SpqxViUpSdtezC+TtGP9zvtJlZLnL+eLJ69nTxfDtvS1KqU/tV03Z/fqZtbMmrNbt5P7zeLN21eTbyJL2qw2y/OjZ+uD/kqf3ed03UGvBQAAgH9et7fpdn7wg/XxzyKPDpsPAAAA/MqfmCkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/K5mfKmSlKRtL+aXSdq/+1kAAADAnkqqvJheVx/GAF89yodp2dZHH0u/5zTvhvMPd0+/sfsRAAAA+E+V5FN31Y8/SP2lL+978ePUOTkZ1lePrB8nkySn392z2izPV5tld027DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwmR04EAAAAAAQ5G89yAUAAAAAAAAAAAAAAAAAAABLBQAA//8yitR0") r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000) symlinkat(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', r0, &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) unlinkat(r0, &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 1.133850183s ago: executing program 5 (id=780): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180200002343ffff0000000000000000850000004100000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r1, r2, 0x25, 0x4, @val=@tcx={@void, @value=r1}}, 0x1c) syz_emit_ethernet(0xfdef, &(0x7f0000001180)=ANY=[], 0x0) 980.20875ms ago: executing program 4 (id=781): syz_usb_connect(0x3, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902120001000000000904"], 0x0) r0 = syz_open_dev$dvb_demux(&(0x7f00000002c0), 0x1, 0x0) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000000200)={0x7, {"9db867d09ed91aa9c5c29f2f1e4be6bf", "cc6c2d12e0353c0e42899a29fdefe3bc", "9defe9f49655f386b84e6bb715dac54f"}, 0x445, 0x7}) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000000000)={0x5, {"c7517da9e7a8757d9c02fd45c7ed7c6a", "f61ac59ed63a57d6df15bd7dae0ceb42", "d08098bd12cdd439c06442623f678bba"}, 0x10001, 0x7}) ioctl$DVB_DEMUX_DMX_START(r0, 0x6f29) 962.053061ms ago: executing program 5 (id=782): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r0, r2, 0x25, 0x0, @val=@tcx}, 0x1c) syz_emit_ethernet(0xd81, &(0x7f0000000b80)={@link_local={0x3}, @link_local, @val={@void, {0x8100, 0x0, 0x1, 0x2}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x17, 0xd6f, 0x68, 0x0, 0x0, 0x6, 0x0, @multicast2, @rand_addr=0x64010101}, {{0x4e23, 0x4e21, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x40, 0x7982, 0x0, 0x2}, {"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"}}}}}}, 0x0) 658.675437ms ago: executing program 5 (id=783): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x6000, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0xfffffffffffffebe}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x0) 530.979083ms ago: executing program 1 (id=784): syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0x3, 0x0, 'queue1\x00', 0x6}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0xbf, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0x17, @time={0x65757100, 0x316575}}) 527.087233ms ago: executing program 2 (id=786): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x40c42, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)=0x3) r1 = syz_io_uring_setup(0x313f, &(0x7f0000000080)={0x0, 0x2, 0x10100, 0x3, 0x171}, &(0x7f0000000380)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x40, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="1a", 0x1}], 0x1}) io_uring_enter(r1, 0x4d10, 0x2, 0x2, 0x0, 0x0) 339.309892ms ago: executing program 5 (id=787): r0 = syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x3bce, 0x10100, 0x0, 0x313}, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000700)="f7", 0x1}], 0x1}, 0x4000000) syz_io_uring_submit(r1, r2, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, r4, 0x0, &(0x7f00000001c0)={0x0, 0xffffffffffffff3d, &(0x7f00000019c0)=[{&(0x7f00000002c0)=""/183, 0xb7}], 0x94}, 0x0, 0x40000103}) io_uring_enter(r0, 0x46f3, 0x0, 0x0, 0x0, 0x0) 280.392545ms ago: executing program 2 (id=788): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="09000000040000000c0000000b"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r1}, 0xc) 169.537261ms ago: executing program 5 (id=789): sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x24, 0x1, 0x4, 0x5, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0xaa5}, @NFULA_CFG_FLAGS={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000084}, 0x4008011) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000016000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r1, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r2, &(0x7f0000000280), 0x0}, 0x20) 70.059996ms ago: executing program 5 (id=790): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000540)='./bus\x00', 0x8800, &(0x7f0000000280)={[{@errors_remount}, {@usrquota}, {@minixdf}, {@nombcache}]}, 0x1, 0x51a, &(0x7f0000000f00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x5) pwrite64(r0, &(0x7f0000000140)='2', 0xff10, 0x8000c61) read$msr(r0, &(0x7f0000001200)=""/244, 0xfffffc9c) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0xb2) 26.412478ms ago: executing program 1 (id=791): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file2\x00', 0x10, &(0x7f00000001c0)={[{@nodiscard}, {@nocheckpoint_merge}, {@fault_type={'fault_type', 0x3d, 0x7fff}}, {@background_gc_off}, {@noflush_merge}, {@fault_injection={'fault_injection', 0x3d, 0x4ee}}, {@acl}, {@inlinecrypt}, {@compress_cache}, {@alloc_mode_def}, {@noinline_xattr}, {@grpjquota}, {@checkpoint_diasble}]}, 0x4, 0x5510, &(0x7f00000020c0)="$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") r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0da6) fchown(r0, 0xffffffffffffffff, 0xee01) setresuid(0xee00, 0xee00, 0x0) write$UHID_INPUT(r0, &(0x7f0000000180)={0x8, {"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", 0x1000}}, 0x1006) 0s ago: executing program 2 (id=792): r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) nanosleep(&(0x7f00000002c0)={0x77359400}, 0x0) setpriority(0x2, 0xff, 0x0) kernel console output (not intermixed with test programs): .266486][ T6351] netlink: 256 bytes leftover after parsing attributes in process `syz.3.179'. [ 122.377836][ T6333] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 122.395946][ T6333] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 122.777276][ T5773] syz-executor: attempt to access beyond end of device [ 122.777276][ T5773] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 122.805125][ T5773] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 123.655539][ T5842] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 123.843959][ T5842] usb 3-1: config index 0 descriptor too short (expected 39, got 27) [ 123.852412][ T5842] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 123.862932][ T5842] usb 3-1: config 0 interface 0 has no altsetting 0 [ 123.879163][ T5842] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 123.895364][ T5842] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 123.903711][ T5842] usb 3-1: Product: syz [ 123.914307][ T5842] usb 3-1: Manufacturer: syz [ 123.919239][ T5842] usb 3-1: SerialNumber: syz [ 123.929518][ T5842] usb 3-1: config 0 descriptor?? [ 123.948702][ T5842] hub 3-1:0.0: bad descriptor, ignoring hub [ 123.954804][ T5842] hub: probe of 3-1:0.0 failed with error -5 [ 123.971773][ T5842] usb 3-1: selecting invalid altsetting 0 [ 124.393420][ T6401] loop3: detected capacity change from 0 to 1024 [ 124.453497][ T6401] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.556970][ T28] audit: type=1800 audit(1774534271.287:7): pid=6401 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.197" name="file1" dev="loop3" ino=13 res=0 errno=0 [ 124.578109][ C0] vkms_vblank_simulate: vblank timer overrun [ 124.636943][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.690386][ T6409] loop0: detected capacity change from 0 to 4096 [ 124.808217][ T6388] usb 3-1: reset high-speed USB device number 3 using dummy_hcd [ 124.858763][ T6388] usb 3-1: device reset changed ep0 maxpacket size! [ 124.888925][ T5842] usb 3-1: USB disconnect, device number 3 [ 125.165686][ T5842] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 125.291255][ T6423] loop1: detected capacity change from 0 to 512 [ 125.323101][ T6423] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 125.337504][ T6423] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 125.352626][ T6423] EXT4-fs error (device loop1): ext4_orphan_get:1398: inode #15: comm syz.1.207: inode has both inline data and extents flags [ 125.373408][ T6423] EXT4-fs error (device loop1): ext4_orphan_get:1403: comm syz.1.207: couldn't read orphan inode 15 (err -117) [ 125.376169][ T5842] usb 3-1: Using ep0 maxpacket: 16 [ 125.420401][ T6423] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.499840][ T5842] usb 3-1: unable to get BOS descriptor or descriptor too short [ 125.500732][ T6423] EXT4-fs error (device loop1): ext4_read_inline_dir:1583: inode #12: block 7: comm syz.1.207: path /44/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=40, inode=2085390, rec_len=0, size=80 fake=0 [ 125.533672][ T5842] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 125.567547][ T5842] usb 3-1: can't read configurations, error -71 [ 125.658493][ T5771] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.802777][ T6434] loop0: detected capacity change from 0 to 128 [ 125.824995][ T6434] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 125.856110][ T6434] ext4 filesystem being mounted at /54/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 125.909732][ T6435] loop1: detected capacity change from 0 to 256 [ 125.962863][ T6435] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 125.979309][ T28] audit: type=1800 audit(1774534272.707:8): pid=6434 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.211" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop0" ino=12 res=0 errno=0 [ 126.034657][ T6434] EXT4-fs error (device loop0): dx_make_map:1328: inode #2: block 18: comm syz.0.211: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 126.068538][ T6434] EXT4-fs error (device loop0) in do_split:2095: Corrupt filesystem [ 126.202347][ T5774] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 126.313378][ T6443] veth1_to_bond: entered allmulticast mode [ 126.323816][ T6442] veth1_to_bond: left allmulticast mode [ 126.449787][ T6447] loop0: detected capacity change from 0 to 1024 [ 126.486849][ T6447] EXT4-fs: inline encryption not supported [ 126.557745][ T6447] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 126.620500][ T6447] ext4 filesystem being mounted at /55/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.769182][ T6447] EXT4-fs error (device loop0): ext4_map_blocks:718: inode #15: block 3: comm syz.0.214: lblock 3 mapped to illegal pblock 3 (length 3) [ 126.821538][ T6447] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 126.836085][ T6458] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.214: bg 0: block 112: padding at end of block bitmap is not set [ 126.899005][ T6447] EXT4-fs (loop0): This should not happen!! Data will be lost [ 126.899005][ T6447] [ 126.934905][ T6458] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 117 [ 126.954670][ T6458] EXT4-fs (loop0): This should not happen!! Data will be lost [ 126.954670][ T6458] [ 127.104080][ T59] EXT4-fs error (device loop0): ext4_map_blocks:718: inode #15: block 8: comm kworker/u4:4: lblock 8 mapped to illegal pblock 8 (length 8) [ 127.147809][ T59] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 127.168073][ T59] EXT4-fs (loop0): This should not happen!! Data will be lost [ 127.168073][ T59] [ 127.207414][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 127.663981][ T6486] loop3: detected capacity change from 0 to 64 [ 127.717031][ T6486] hfs: keylen 1794 too large [ 127.744715][ T6486] hfs: keylen 1794 too large [ 127.768816][ T6487] hfs: keylen 1794 too large [ 127.890372][ T1119] hfs: keylen 1794 too large [ 127.929679][ T5842] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 128.137674][ T5842] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 128.155374][ T5842] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.182697][ T5842] usb 2-1: config 0 descriptor?? [ 128.206321][ T5842] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 128.616313][ T6511] Bluetooth: MGMT ver 1.22 [ 128.630984][ T5842] cpia1 2-1:0.0: unexpected state after lo power cmd: 00 [ 129.041324][ T5842] cpia1 2-1:0.0: only firmware version 1 is supported (got: 0) [ 129.182140][ T6524] loop2: detected capacity change from 0 to 512 [ 129.226723][ T6524] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.239716][ T6524] ext4 filesystem being mounted at /61/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.282972][ T5842] usb 2-1: USB disconnect, device number 2 [ 129.451116][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.757391][ T6538] netlink: 'syz.3.253': attribute type 3 has an invalid length. [ 129.765341][ T6538] netlink: 8 bytes leftover after parsing attributes in process `syz.3.253'. [ 129.775548][ T788] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 129.929983][ T6542] netlink: 16 bytes leftover after parsing attributes in process `syz.3.255'. [ 129.947738][ T6542] netem: incorrect gi model size [ 129.963911][ T6542] netem: change failed [ 129.968266][ T788] usb 1-1: Using ep0 maxpacket: 8 [ 129.975665][ T788] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 129.995725][ T788] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 130.013821][ T788] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 130.031378][ T788] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 130.081835][ T788] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 130.101648][ T788] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.376477][ T788] usb 1-1: GET_CAPABILITIES returned 0 [ 130.395436][ T788] usbtmc 1-1:16.0: can't read capabilities [ 130.589806][ T6540] loop2: detected capacity change from 0 to 32768 [ 130.643986][ T6540] (syz.2.254,6540,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 130.650571][ T788] usb 1-1: USB disconnect, device number 3 [ 130.678907][ T6540] (syz.2.254,6540,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 130.711720][ T6557] loop3: detected capacity change from 0 to 512 [ 130.757830][ T6557] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.262: invalid indirect mapped block 4294967295 (level 1) [ 130.798071][ T6557] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.262: invalid indirect mapped block 4294967295 (level 1) [ 130.839234][ T6540] JBD2: Ignoring recovery information on journal [ 130.879278][ T6557] EXT4-fs (loop3): 2 truncates cleaned up [ 130.920226][ T6557] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.961909][ T6540] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 131.078461][ T6557] EXT4-fs error (device loop3): ext4_check_dx_root:2266: inode #2: comm syz.3.262: Corrupt dir, invalid name_len for '.', running e2fsck is recommended [ 131.200418][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.429006][ T6569] netlink: 476 bytes leftover after parsing attributes in process `syz.3.264'. [ 131.439128][ T6569] sch_tbf: peakrate 3 is lower than or equals to rate 183 ! [ 131.465492][ T6540] syz.2.254 (6540) used greatest stack depth: 18768 bytes left [ 131.672724][ T6578] input: syz0 as /devices/virtual/input/input5 [ 131.692410][ T6576] loop1: detected capacity change from 0 to 8192 [ 131.740785][ T6576] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 131.767342][ T5773] ocfs2: Unmounting device (7,2) on (node local) [ 131.810323][ T6576] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 131.841276][ T6576] REISERFS (device loop1): using ordered data mode [ 131.879645][ T6576] reiserfs: using flush barriers [ 131.893680][ T6576] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 131.975521][ T6576] REISERFS (device loop1): checking transaction log (loop1) [ 132.018976][ T6576] REISERFS (device loop1): Using r5 hash to sort names [ 132.053043][ T6576] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 132.445409][ T5842] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 132.649212][ T5842] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 132.665892][ T5842] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 132.680273][ T6597] loop1: detected capacity change from 0 to 8192 [ 132.687634][ T5842] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 132.705470][ T5842] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.725794][ T6597] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 132.739451][ T6597] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 132.749870][ T6597] REISERFS (device loop1): using ordered data mode [ 132.758282][ T6597] reiserfs: using flush barriers [ 132.766622][ T6597] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 132.785633][ T5817] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 132.786375][ T6597] REISERFS (device loop1): checking transaction log (loop1) [ 132.806564][ T6597] REISERFS (device loop1): Using rupasov hash to sort names [ 132.814450][ T6597] REISERFS (device loop1): using 3.5.x disk format [ 132.823229][ T6597] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 132.835319][ T6597] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 132.848902][ T6597] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 132.860442][ T6597] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 UNKNOWN] (nlink == 1) not found (pos 2) [ 132.875519][ T6597] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 132.936100][ T6597] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 132.956127][ T5842] usb 1-1: usb_control_msg returned -32 [ 132.961795][ T5842] usbtmc 1-1:16.0: can't read capabilities [ 132.971247][ T6597] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 133.003848][ T6599] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 133.006923][ T5817] usb 3-1: Using ep0 maxpacket: 32 [ 133.046594][ T6599] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 133.067384][ T5817] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 133.076947][ T6599] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 133.096295][ T5817] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.103098][ T6599] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 UNKNOWN] (nlink == 1) not found (pos 2) [ 133.140231][ T5817] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 133.149051][ T6597] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 133.166731][ T6601] loop3: detected capacity change from 0 to 64 [ 133.209131][ T6597] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 UNKNOWN] (nlink == 1) not found (pos 2) [ 133.244645][ T6597] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 UNKNOWN] (nlink == 1) not found (pos 2) [ 133.302289][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.311212][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.715441][ T27] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 133.909616][ T27] usb 4-1: Using ep0 maxpacket: 8 [ 133.917623][ T27] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 133.935170][ T27] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 133.953069][ T27] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 133.963336][ T27] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 133.985485][ T27] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 133.995161][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.024795][ T6606] loop1: detected capacity change from 0 to 40427 [ 134.040697][ T6606] F2FS-fs (loop1): Invalid segment/section count (31, 24 x 1) [ 134.050835][ T6606] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 134.061350][ T6606] F2FS-fs (loop1): invalid crc value [ 134.067466][ T6606] F2FS-fs (loop1): Ignore s_resuid=0, s_resgid=60928 w/o reserve_root [ 134.084197][ T6606] F2FS-fs (loop1): Found nat_bits in checkpoint [ 134.162743][ T6606] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 134.177465][ T6606] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 134.201287][ T5817] gspca_nw80x: reg_w err -71 [ 134.217566][ T5817] nw80x: probe of 3-1:3.0 failed with error -71 [ 134.237824][ T5817] usb 3-1: USB disconnect, device number 6 [ 134.262972][ T27] usb 4-1: usb_control_msg returned -32 [ 134.278655][ T27] usbtmc 4-1:16.0: can't read capabilities [ 134.407021][ T5771] syz-executor: attempt to access beyond end of device [ 134.407021][ T5771] loop1: rw=2049, sector=45096, nr_sectors = 24 limit=40427 [ 134.424254][ T5771] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 134.431796][ T5771] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 134.439544][ T5771] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 135.181636][ T5817] usb 1-1: USB disconnect, device number 4 [ 135.389564][ T6627] loop0: detected capacity change from 0 to 8192 [ 135.400592][ T6627] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 135.416414][ T6627] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 135.426359][ T6627] REISERFS (device loop0): using ordered data mode [ 135.433112][ T6627] reiserfs: using flush barriers [ 135.440844][ T6627] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 135.458253][ T6627] REISERFS (device loop0): checking transaction log (loop0) [ 135.469994][ T6627] REISERFS (device loop0): Using r5 hash to sort names [ 135.479841][ T6627] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 135.750685][ T6630] netlink: 12 bytes leftover after parsing attributes in process `syz.0.288'. [ 135.762251][ T6630] block nbd0: Unsupported socket: should be TCP or UNIX. [ 135.899616][ T6634] loop0: detected capacity change from 0 to 1024 [ 135.966692][ T6634] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 135.986148][ T6634] ext4 filesystem being mounted at /69/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 136.144064][ T6639] loop2: detected capacity change from 0 to 4096 [ 136.200730][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 136.398931][ T6639] ntfs3: loop2: ino=5, "/" directory corrupted [ 136.502488][ T5842] usb 4-1: USB disconnect, device number 4 [ 136.980947][ T6641] loop1: detected capacity change from 0 to 32768 [ 137.109893][ T6641] JBD2: Ignoring recovery information on journal [ 137.349922][ T6655] loop3: detected capacity change from 0 to 32768 [ 137.364897][ T6641] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 137.402551][ T6655] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.299 (6655) [ 137.482974][ T6655] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 137.518591][ T6655] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 137.570195][ T6655] BTRFS info (device loop3): setting nodatasum [ 137.606039][ T6655] BTRFS info (device loop3): force zlib compression, level 3 [ 137.645574][ T6655] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8) [ 137.655052][ T6655] BTRFS info (device loop3): use lzo compression, level 0 [ 137.698295][ T6655] BTRFS info (device loop3): turning on flush-on-commit [ 137.707732][ T6655] BTRFS info (device loop3): enabling auto defrag [ 137.714271][ T6655] BTRFS info (device loop3): max_inline at 4096 [ 137.735125][ T6655] BTRFS info (device loop3): using free space tree [ 137.826313][ T6666] OCFS2: ERROR (device loop1): int ocfs2_validate_inode_block(struct super_block *, struct buffer_head *): Invalid dinode #65: signature = [ 137.845649][ T6666] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 137.856833][ T6666] OCFS2: File system is now read-only. [ 137.862943][ T6666] (syz.1.292,6666,0):ocfs2_assign_bh:2416 ERROR: status = -30 [ 137.865821][ T2134] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 137.905361][ T6666] (syz.1.292,6666,0):ocfs2_inode_lock_full_nested:2511 ERROR: status = -30 [ 137.922277][ T6655] BTRFS info (device loop3): enabling ssd optimizations [ 137.955772][ T6666] (syz.1.292,6666,0):ocfs2_inode_lock_atime:2603 ERROR: status = -30 [ 137.975024][ T6666] (syz.1.292,6666,0):ocfs2_readdir:1966 ERROR: status = -30 [ 138.086775][ T2134] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 138.093624][ T5771] ocfs2: Unmounting device (7,1) on (node local) [ 138.107011][ T2134] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.148147][ T2134] usb 1-1: Product: syz [ 138.152744][ T2134] usb 1-1: Manufacturer: syz [ 138.169215][ T2134] usb 1-1: SerialNumber: syz [ 138.192751][ T2134] usb 1-1: config 0 descriptor?? [ 138.251599][ T2134] ch341 1-1:0.0: ch341-uart converter detected [ 138.294244][ T5772] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 138.521679][ T5791] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop3 scanned by udevd (5791) [ 139.207804][ T6688] loop2: detected capacity change from 0 to 32768 [ 139.235740][ T6688] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.306 (6688) [ 139.286023][ T2134] ch341-uart ttyUSB0: failed to read break control: -71 [ 139.295985][ T6688] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 139.300509][ T2134] ch341-uart: probe of ttyUSB0 failed with error -71 [ 139.328618][ T6688] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 139.338421][ T6688] BTRFS info (device loop2): using free space tree [ 139.387347][ T2134] usb 1-1: USB disconnect, device number 5 [ 139.416545][ T2134] ch341 1-1:0.0: device disconnected [ 139.495867][ T6688] BTRFS info (device loop2): enabling ssd optimizations [ 139.535487][ T6688] BTRFS info (device loop2): auto enabling async discard [ 139.824375][ T5773] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 140.635992][ T6724] loop0: detected capacity change from 0 to 32768 [ 140.684945][ T6724] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 140.792475][ T6724] XFS (loop0): Ending clean mount [ 140.904709][ T6724] XFS (loop0): Quotacheck needed: Please wait. [ 141.121662][ T6724] XFS (loop0): Quotacheck: Done. [ 141.285843][ T6746] loop1: detected capacity change from 0 to 256 [ 141.301958][ T5774] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 141.408167][ T6746] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66dc59, utbl_chksum : 0xe619d30d) [ 141.610636][ T6744] loop2: detected capacity change from 0 to 32768 [ 142.029700][ T6756] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 142.802447][ T6765] loop0: detected capacity change from 0 to 40427 [ 142.823831][ T6765] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 142.830533][ T6765] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 142.841800][ T6765] F2FS-fs (loop0): invalid crc value [ 143.068911][ T6765] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 143.085335][ T6765] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 143.145678][ T6783] loop1: detected capacity change from 0 to 512 [ 143.203418][ T6783] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.273599][ T6783] ext4 filesystem being mounted at /74/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 143.401349][ T5774] syz-executor: attempt to access beyond end of device [ 143.401349][ T5774] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 143.432771][ T5774] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 143.504666][ T5771] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.627067][ T6778] loop2: detected capacity change from 0 to 32768 [ 143.739273][ T6778] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 143.933564][ T6778] XFS (loop2): Ending clean mount [ 143.988431][ T6778] XFS (loop2): Quotacheck needed: Please wait. [ 144.137186][ T6778] XFS (loop2): Quotacheck: Done. [ 144.269365][ T6808] bond0: entered promiscuous mode [ 144.274668][ T6808] bond_slave_0: entered promiscuous mode [ 144.298444][ T6808] bond_slave_1: entered promiscuous mode [ 144.559563][ T5773] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 144.632769][ T6819] netlink: 4 bytes leftover after parsing attributes in process `syz.0.346'. [ 145.039487][ T6825] loop2: detected capacity change from 0 to 256 [ 145.064205][ T6825] exfat: Deprecated parameter 'utf8' [ 145.085421][ T6825] exfat: Deprecated parameter 'utf8' [ 145.104260][ T6827] Invalid argument reading file caps for ./file0 [ 145.158004][ T6825] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 145.371697][ T6830] loop1: detected capacity change from 0 to 2048 [ 145.440429][ T6830] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 145.534363][ T6813] loop3: detected capacity change from 0 to 40427 [ 145.596240][ T6813] F2FS-fs (loop3): invalid crc value [ 145.624174][ T6813] F2FS-fs (loop3): Found nat_bits in checkpoint [ 145.695730][ T27] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 145.766573][ T6813] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 145.886401][ T27] usb 1-1: Using ep0 maxpacket: 32 [ 145.914655][ T27] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.955350][ T27] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 145.985315][ T27] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 146.014773][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.078632][ T27] usb 1-1: config 0 descriptor?? [ 146.108258][ T6844] loop2: detected capacity change from 0 to 2048 [ 146.266061][ T6847] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 146.370716][ T6846] loop1: detected capacity change from 0 to 4096 [ 146.543974][ T27] ft260 0003:0403:6030.0002: unknown main item tag 0x0 [ 146.569237][ T27] ft260 0003:0403:6030.0002: unknown main item tag 0x0 [ 146.671346][ T6847] NILFS (loop2): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 146.678309][ T6849] loop3: detected capacity change from 0 to 512 [ 146.710311][ T6847] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=4) [ 146.745373][ T27] ft260 0003:0403:6030.0002: chip code: 0000 0000 [ 146.773664][ T6849] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.786910][ T6847] Remounting filesystem read-only [ 146.806232][ T1131] NILFS (loop2): discard dirty page: offset=4096, ino=6 [ 146.824028][ T6849] ext4 filesystem being mounted at /94/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 146.862987][ T1131] NILFS (loop2): discard dirty block: blocknr=39, size=1024 [ 146.886225][ T1131] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 146.901617][ T1131] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 146.915536][ T1131] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 146.932294][ T1131] NILFS (loop2): discard dirty page: offset=0, ino=2 [ 146.940279][ T1131] NILFS (loop2): discard dirty block: blocknr=18, size=1024 [ 146.952775][ T1131] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 146.962932][ T1131] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 146.984558][ T1131] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 146.998929][ T1131] NILFS (loop2): discard dirty page: offset=0, ino=5 [ 147.023713][ T1131] NILFS (loop2): discard dirty block: blocknr=41, size=1024 [ 147.048307][ T1131] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 147.078162][ T1131] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 147.112790][ T1131] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 147.141013][ T5773] NILFS (loop2): disposed unprocessed dirty file(s) when stopping log writer [ 147.177575][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.189103][ T5773] NILFS (loop2): discard dirty page: offset=0, ino=6 [ 147.198443][ T5773] NILFS (loop2): discard dirty block: blocknr=35, size=1024 [ 147.208860][ T5773] NILFS (loop2): discard dirty block: blocknr=36, size=1024 [ 147.220616][ T5773] NILFS (loop2): discard dirty block: blocknr=37, size=1024 [ 147.229127][ T5773] NILFS (loop2): discard dirty block: blocknr=38, size=1024 [ 147.274398][ T5773] NILFS (loop2): discard dirty page: offset=0, ino=4 [ 147.291571][ T27] usb 1-1: USB disconnect, device number 6 [ 147.302758][ T5773] NILFS (loop2): discard dirty block: blocknr=40, size=1024 [ 147.313847][ T5773] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 147.343186][ T5773] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 147.390226][ T5773] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 147.403223][ T5773] NILFS (loop2): discard dirty page: offset=0, ino=3 [ 147.412189][ T5773] NILFS (loop2): discard dirty block: blocknr=42, size=1024 [ 147.430926][ T5773] NILFS (loop2): discard dirty block: blocknr=43, size=1024 [ 147.448920][ T5773] NILFS (loop2): discard dirty block: blocknr=44, size=1024 [ 147.470886][ T5773] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 147.505584][ T5773] NILFS (loop2): discard dirty page: offset=196608, ino=3 [ 147.512958][ T5773] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 147.535696][ T5773] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 147.573774][ T5773] NILFS (loop2): discard dirty block: blocknr=49, size=1024 [ 147.581739][ T5773] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 148.059661][ T6871] loop0: detected capacity change from 0 to 4096 [ 148.067820][ T6871] EXT4-fs: inline encryption not supported [ 148.283405][ T6881] loop2: detected capacity change from 0 to 256 [ 148.341969][ T6881] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011f1c, chksum : 0x850fc7e5, utbl_chksum : 0xe619d30d) [ 148.380953][ T6871] EXT4-fs (loop0): Test dummy encryption mode enabled [ 148.429883][ T6871] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c09d, mo2=0003] [ 148.445718][ T6884] netlink: 14 bytes leftover after parsing attributes in process `syz.3.372'. [ 148.487009][ T6871] System zones: 0-5 [ 148.553869][ T6871] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.796608][ T6891] netlink: 'syz.2.374': attribute type 12 has an invalid length. [ 148.809509][ T6891] netlink: 'syz.2.374': attribute type 29 has an invalid length. [ 148.838519][ T6891] netlink: 148 bytes leftover after parsing attributes in process `syz.2.374'. [ 148.870083][ T6891] netlink: 'syz.2.374': attribute type 1 has an invalid length. [ 149.041448][ T6893] netlink: 48 bytes leftover after parsing attributes in process `syz.1.375'. [ 149.069895][ T6871] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 149.271829][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.639436][ T6904] netlink: 5364 bytes leftover after parsing attributes in process `syz.0.378'. [ 149.961624][ T6910] netlink: 44 bytes leftover after parsing attributes in process `syz.1.382'. [ 149.999429][ T6910] netlink: 39 bytes leftover after parsing attributes in process `syz.1.382'. [ 150.019902][ T6910] netlink: 'syz.1.382': attribute type 5 has an invalid length. [ 150.176651][ T28] audit: type=1326 audit(1774534296.897:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6912 comm="syz.3.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dfb79c799 code=0x7ffc0000 [ 150.227217][ T6913] loop3: detected capacity change from 0 to 256 [ 150.244045][ T28] audit: type=1326 audit(1774534296.897:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6912 comm="syz.3.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dfb79c799 code=0x7ffc0000 [ 150.288939][ T28] audit: type=1326 audit(1774534296.927:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6912 comm="syz.3.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dfb79c799 code=0x7ffc0000 [ 150.312502][ T28] audit: type=1326 audit(1774534296.927:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6912 comm="syz.3.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dfb79c799 code=0x7ffc0000 [ 150.350749][ T28] audit: type=1326 audit(1774534296.937:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6912 comm="syz.3.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f1dfb79c799 code=0x7ffc0000 [ 150.372891][ T6897] loop2: detected capacity change from 0 to 40427 [ 150.393381][ T6897] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x35f7 [ 150.425056][ T6897] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x7ffff [ 150.442812][ T28] audit: type=1326 audit(1774534296.937:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6912 comm="syz.3.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f1dfb79c502 code=0x7ffc0000 [ 150.444282][ T6897] F2FS-fs (loop2): inline encryption not supported [ 150.473701][ T6897] F2FS-fs (loop2): Image doesn't support compression [ 150.482583][ T28] audit: type=1326 audit(1774534296.937:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6912 comm="syz.3.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f1dfb75cfce code=0x7ffc0000 [ 150.513040][ T6897] F2FS-fs (loop2): invalid crc value [ 150.529236][ T6897] F2FS-fs (loop2): Found nat_bits in checkpoint [ 150.566124][ T28] audit: type=1326 audit(1774534296.947:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6912 comm="syz.3.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f1dfb79c5c7 code=0x7ffc0000 [ 150.668736][ T28] audit: type=1326 audit(1774534296.957:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6912 comm="syz.3.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1dfb75cfce code=0x7ffc0000 [ 150.695345][ T9] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 150.743913][ T6897] F2FS-fs (loop2): Start checkpoint disabled! [ 150.752655][ T6897] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 150.760466][ T28] audit: type=1326 audit(1774534296.957:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6912 comm="syz.3.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1dfb79c42b code=0x7ffc0000 [ 150.771991][ T6921] loop3: detected capacity change from 0 to 256 [ 150.831342][ T6921] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001043e, chksum : 0xdd084882, utbl_chksum : 0xe619d30d) [ 150.850915][ T6921] exFAT-fs (loop3): IO charset =Ws)=iso8?D6ThhMM{6ME =="â tHJC'Gc not found [ 150.893137][ T6897] syz.2.376: attempt to access beyond end of device [ 150.893137][ T6897] loop2: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 150.922996][ T9] usb 2-1: config 0 has no interfaces? [ 150.949109][ T9] usb 2-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 150.956450][ T6897] F2FS-fs (loop2): inject write IO error in f2fs_write_end_io of __submit_merged_bio+0x256/0x630 [ 150.985376][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.025266][ T9] usb 2-1: Product: syz [ 151.029602][ T9] usb 2-1: Manufacturer: syz [ 151.034300][ T9] usb 2-1: SerialNumber: syz [ 151.063462][ T9] usb 2-1: config 0 descriptor?? [ 151.185520][ T1093] kworker/u4:7: attempt to access beyond end of device [ 151.185520][ T1093] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 151.199865][ T1093] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 151.207182][ T1093] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 151.321932][ T5842] usb 2-1: USB disconnect, device number 3 [ 152.037902][ T6941] loop1: detected capacity change from 0 to 128 [ 152.084734][ T6941] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 152.101075][ T6941] hpfs: filesystem error: improperly stopped [ 152.116844][ T6941] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 152.128765][ T6941] hpfs: You really don't want any checks? You are crazy... [ 152.151340][ T6941] hpfs: hpfs_map_sector(): read error [ 152.169596][ T6941] hpfs: code page support is disabled [ 152.201249][ T6941] hpfs: hpfs_map_4sectors(): unaligned read [ 152.208238][ T6941] hpfs: hpfs_map_4sectors(): unaligned read [ 152.214335][ T6941] hpfs: filesystem error: unable to find root dir [ 152.255553][ T5787] Bluetooth: hci4: command 0x1003 tx timeout [ 152.262839][ T51] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 152.598593][ T6952] loop0: detected capacity change from 0 to 128 [ 152.662385][ T6954] loop2: detected capacity change from 0 to 1024 [ 152.686598][ T6954] EXT4-fs: Ignoring removed bh option [ 152.732468][ T6954] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 152.803267][ T6954] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 153.010688][ T6954] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 153.095404][ T5817] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 153.229408][ T5773] EXT4-fs error (device loop2): ext4_read_inline_dir:1583: inode #12: block 7: comm syz-executor: path /100/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 153.279158][ T5773] EXT4-fs error (device loop2): ext4_read_inline_dir:1583: inode #12: block 7: comm syz-executor: path /100/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 153.327016][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.357204][ T5817] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 153.385516][ T5817] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 153.415343][ T5817] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 153.460613][ T5817] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 153.484514][ T5817] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.496768][ T5817] usb 4-1: config 0 descriptor?? [ 153.905919][ T6981] syzkaller1: entered promiscuous mode [ 153.911657][ T6981] syzkaller1: entered allmulticast mode [ 153.990757][ T5817] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 154.036384][ T5817] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 154.078719][ T2134] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 154.287290][ T2134] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 154.305640][ T2134] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 154.329254][ T2134] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 154.355357][ T2134] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 154.385073][ T2134] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 154.421756][ T2134] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 154.436797][ T2134] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 154.459743][ T2134] usb 2-1: Product: syz [ 154.471634][ T2134] usb 2-1: Manufacturer: syz [ 154.494514][ T2134] cdc_wdm 2-1:1.0: skipping garbage [ 154.506751][ T2134] cdc_wdm 2-1:1.0: skipping garbage [ 154.529807][ T2134] cdc_wdm 2-1:1.0: cdc-wdm1: USB WDM device [ 154.536786][ T2134] cdc_wdm 2-1:1.0: Unknown control protocol [ 154.806164][ T2134] usb 2-1: USB disconnect, device number 4 [ 155.430255][ T7017] syzkaller1: entered promiscuous mode [ 155.436346][ T7017] syzkaller1: entered allmulticast mode [ 155.973920][ T7023] loop2: detected capacity change from 0 to 32768 [ 156.038697][ T7023] JBD2: Ignoring recovery information on journal [ 156.176700][ T7023] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 156.212539][ T7032] loop1: detected capacity change from 0 to 2048 [ 156.290243][ T9] usb 4-1: USB disconnect, device number 5 [ 156.350652][ T7032] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 156.396707][ T7032] ext4 filesystem being mounted at /99/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 156.515892][ T7032] fs-verity: sha512 using implementation "sha512-avx2" [ 156.658127][ T5773] ocfs2: Unmounting device (7,2) on (node local) [ 156.737136][ T5771] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.194211][ T7033] loop3: detected capacity change from 0 to 40427 [ 157.228354][ T7033] F2FS-fs (loop3): heap/no_heap options were deprecated [ 157.263843][ T7033] F2FS-fs (loop3): build fault injection attr: rate: 19, type: 0x7ffff [ 157.300225][ T7033] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x77e8c [ 157.349102][ T7033] F2FS-fs (loop3): invalid crc value [ 157.392120][ T9] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 157.413320][ T7033] F2FS-fs (loop3): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_ra_meta_pages+0x21d/0x9b0 [ 157.472724][ T7033] F2FS-fs (loop3): Found nat_bits in checkpoint [ 157.516233][ T7033] F2FS-fs (loop3): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_submit_page_bio+0x134/0x650 [ 157.549255][ C1] F2FS-fs (loop3): inject read IO error in f2fs_read_end_io of blk_update_request+0x597/0xe40 [ 157.599286][ T9] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 157.612756][ T7033] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 157.641629][ T9] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 157.660473][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 157.670217][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 157.706767][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 157.715733][ T2134] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 157.741556][ T9] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 157.768459][ T9] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 157.793027][ T9] usb 1-1: Product: syz [ 157.798888][ T9] usb 1-1: Manufacturer: syz [ 157.809911][ T7033] F2FS-fs (loop3): inject no more block in inc_valid_node_count of f2fs_new_node_page+0x187/0x910 [ 157.835111][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 157.853391][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 157.875165][ T7033] F2FS-fs (loop3): inject truncate fail in f2fs_truncate of f2fs_setattr+0xcbe/0x1360 [ 157.875309][ T28] kauditd_printk_skb: 28 callbacks suppressed [ 157.875323][ T28] audit: type=1800 audit(1774534304.597:47): pid=7033 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.434" name="file1" dev="loop3" ino=12 res=0 errno=0 [ 157.915470][ T9] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 157.921480][ T9] cdc_wdm 1-1:1.0: Unknown control protocol [ 157.967322][ T2134] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 158.003258][ T5772] syz-executor: attempt to access beyond end of device [ 158.003258][ T5772] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 158.025799][ T2134] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 158.040242][ T5772] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 158.075412][ T2134] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 158.115329][ T2134] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 158.145374][ T2134] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.173531][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 158.180572][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 158.187217][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 158.193893][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 158.200483][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 158.207256][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 158.213742][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 158.220669][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 158.220693][ T2134] usb 2-1: config 0 descriptor?? [ 158.227441][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 158.239274][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 158.247506][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 158.254309][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 158.261168][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 158.268168][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 158.274743][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 158.281521][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 158.287881][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 158.294547][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 158.301971][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 158.308911][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 158.315558][ T9] usb 1-1: USB disconnect, device number 7 [ 158.315628][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 158.770581][ T7064] loop2: detected capacity change from 0 to 32768 [ 158.783262][ T2134] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 158.833652][ T2134] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 158.850184][ T7064] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 159.426339][ T5773] ocfs2: Unmounting device (7,2) on (node local) [ 159.485042][ T7075] loop0: detected capacity change from 0 to 1024 [ 159.494055][ T7075] EXT4-fs: Ignoring removed nomblk_io_submit option [ 159.564618][ T7075] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.621971][ T28] audit: type=1800 audit(1774534306.347:48): pid=7075 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.449" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 159.743847][ T5774] EXT4-fs error (device loop0): ext4_lookup:1858: inode #14: comm syz-executor: iget: bad extra_isize 17960 (inode size 256) [ 159.783977][ T5774] EXT4-fs error (device loop0): ext4_lookup:1858: inode #14: comm syz-executor: iget: bad extra_isize 17960 (inode size 256) [ 160.126963][ T2134] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 160.237775][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.325433][ T2134] usb 4-1: Using ep0 maxpacket: 16 [ 160.337161][ T2134] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 160.365785][ T2134] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.390241][ T2134] usb 4-1: config 0 descriptor?? [ 160.410199][ T2134] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 160.438315][ T59] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.580940][ T27] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 160.605626][ T59] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.793721][ T27] usb 3-1: config 0 has no interfaces? [ 160.804949][ T59] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.819197][ T27] usb 3-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 160.844369][ T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.874992][ T27] usb 3-1: Product: syz [ 160.879787][ T27] usb 3-1: Manufacturer: syz [ 160.884481][ T27] usb 3-1: SerialNumber: syz [ 160.909610][ T27] usb 3-1: config 0 descriptor?? [ 160.946867][ T5817] usb 2-1: USB disconnect, device number 5 [ 161.022048][ T7090] loop1: detected capacity change from 0 to 1024 [ 161.040388][ T59] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.068775][ T7090] EXT4-fs: Ignoring removed orlov option [ 161.118851][ T7090] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.249435][ T788] usb 3-1: USB disconnect, device number 7 [ 161.480499][ T2134] gspca_sonixj: reg_w1 err -71 [ 161.485976][ T5771] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.535458][ T2134] sonixj: probe of 4-1:0.0 failed with error -71 [ 161.574750][ T2134] usb 4-1: USB disconnect, device number 6 [ 161.707466][ T5787] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 161.722580][ T5787] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 161.741690][ T5787] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 161.757070][ T5787] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 161.779557][ T5787] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 161.799815][ T5787] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 162.307852][ T7109] loop3: detected capacity change from 0 to 1024 [ 162.416644][ T7105] loop1: detected capacity change from 0 to 8192 [ 162.501884][ T7105] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 162.571760][ T7111] netlink: 20 bytes leftover after parsing attributes in process `syz.2.460'. [ 163.855572][ T5787] Bluetooth: hci1: command tx timeout [ 163.882583][ T7094] chnl_net:caif_netlink_parms(): no params data found [ 163.909299][ T7141] loop1: detected capacity change from 0 to 512 [ 163.936182][ T7129] loop2: detected capacity change from 0 to 32768 [ 163.968138][ T7141] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 164.007907][ T7141] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 164.044087][ T7129] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 164.085950][ T7141] System zones: 1-12 [ 164.121220][ T7141] EXT4-fs (loop1): 1 truncate cleaned up [ 164.156309][ T7141] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.318435][ T7129] XFS (loop2): Ending clean mount [ 164.337092][ T5771] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.382103][ T7129] XFS (loop2): Quotacheck needed: Please wait. [ 164.546799][ T7129] XFS (loop2): Quotacheck: Done. [ 164.572475][ T59] hsr_slave_0: left promiscuous mode [ 164.602964][ T59] hsr_slave_1: left promiscuous mode [ 164.630992][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 164.665569][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 164.706303][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 164.732765][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 164.777848][ T59] bridge_slave_1: left allmulticast mode [ 164.796461][ T59] bridge_slave_1: left promiscuous mode [ 164.817982][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.877848][ T59] bridge_slave_0: left allmulticast mode [ 164.883589][ T59] bridge_slave_0: left promiscuous mode [ 164.924336][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.039083][ T59] veth1_macvtap: left promiscuous mode [ 165.047200][ T5773] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 165.056782][ T59] veth0_macvtap: left promiscuous mode [ 165.071484][ T59] veth1_vlan: left promiscuous mode [ 165.079981][ T59] veth0_vlan: left promiscuous mode [ 165.281827][ T7158] loop3: detected capacity change from 0 to 32768 [ 165.327819][ T7158] XFS (loop3): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 165.444601][ T7158] XFS (loop3): Starting recovery (logdev: internal) [ 165.524026][ T7158] XFS (loop3): Ending recovery (logdev: internal) [ 165.825964][ T5772] XFS (loop3): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 165.944148][ T5787] Bluetooth: hci1: command tx timeout [ 166.336544][ T59] team0 (unregistering): Port device team_slave_1 removed [ 166.423208][ T59] team0 (unregistering): Port device team_slave_0 removed [ 166.518402][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 166.620459][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 167.325360][ T2134] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 167.373218][ T59] bond0 (unregistering): Released all slaves [ 167.535009][ T2134] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 167.564269][ T2134] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 167.578100][ T2134] usb 3-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 167.588403][ T2134] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 167.596731][ T2134] usb 3-1: Manufacturer: syz [ 167.622455][ T2134] usb 3-1: config 0 descriptor?? [ 167.744050][ T7094] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.778856][ T7094] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.838622][ T7094] bridge_slave_0: entered allmulticast mode [ 167.897628][ T7094] bridge_slave_0: entered promiscuous mode [ 167.945274][ T7094] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.965574][ T7094] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.974178][ T7094] bridge_slave_1: entered allmulticast mode [ 167.982633][ T7094] bridge_slave_1: entered promiscuous mode [ 168.016133][ T5787] Bluetooth: hci1: command tx timeout [ 168.122501][ T7205] loop3: detected capacity change from 0 to 8192 [ 168.157250][ T2134] cougar 0003:060B:700A.0005: unknown main item tag 0x0 [ 168.178741][ T7094] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 168.208009][ T2134] cougar 0003:060B:700A.0005: unknown main item tag 0x0 [ 168.224565][ T2134] cougar 0003:060B:700A.0005: unknown main item tag 0x0 [ 168.258490][ T7094] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 168.269879][ T2134] cougar 0003:060B:700A.0005: unknown main item tag 0x0 [ 168.279873][ T2134] cougar 0003:060B:700A.0005: unknown main item tag 0x0 [ 168.333622][ T2134] cougar 0003:060B:700A.0005: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 168.396243][ T2134] usb 3-1: USB disconnect, device number 8 [ 168.425036][ T7094] team0: Port device team_slave_0 added [ 168.475028][ T7094] team0: Port device team_slave_1 added [ 168.645724][ T7094] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 168.653152][ T7094] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.760527][ T7213] fido_id[7213]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 168.775525][ T7094] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 168.790223][ T7094] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 168.855352][ T7094] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.963915][ T7094] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 169.271566][ T7094] hsr_slave_0: entered promiscuous mode [ 169.335925][ T7094] hsr_slave_1: entered promiscuous mode [ 169.353868][ T7094] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 169.390445][ T7094] Cannot create hsr debugfs directory [ 169.510814][ T7237] netlink: 'syz.1.488': attribute type 3 has an invalid length. [ 169.535909][ T7237] netlink: 132 bytes leftover after parsing attributes in process `syz.1.488'. [ 170.100982][ T5787] Bluetooth: hci1: command tx timeout [ 170.260093][ T7094] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 170.291025][ T7094] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 170.333420][ T7094] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 170.376804][ T7094] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 170.643513][ T7250] loop2: detected capacity change from 0 to 128 [ 170.694701][ T7250] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 170.739496][ T7250] ext4 filesystem being mounted at /130/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 170.851640][ T7250] fscrypt (loop2, inode 12): Unsupported encryption flags (0x10) [ 170.894379][ T7235] loop3: detected capacity change from 0 to 40427 [ 170.957709][ T7094] 8021q: adding VLAN 0 to HW filter on device bond0 [ 170.983323][ T7245] loop1: detected capacity change from 0 to 32768 [ 171.011151][ T5773] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 171.029000][ T7235] F2FS-fs (loop3): invalid crc value [ 171.090220][ T7235] F2FS-fs (loop3): Found nat_bits in checkpoint [ 171.104787][ T7094] 8021q: adding VLAN 0 to HW filter on device team0 [ 171.183945][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.191430][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.265033][ T7245] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 171.314398][ T1093] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.321694][ T1093] bridge0: port 2(bridge_slave_1) entered forwarding state [ 171.425389][ T5817] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 171.455148][ T7245] XFS (loop1): Ending clean mount [ 171.503804][ T7235] F2FS-fs (loop3): Start checkpoint disabled! [ 171.557968][ T7235] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 171.660677][ T5817] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 171.714630][ T5817] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 171.772897][ T5817] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 171.805369][ T28] audit: type=1804 audit(1774534318.517:49): pid=7235 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.486" name="/newroot/130/file0/file0" dev="loop3" ino=10 res=1 errno=0 [ 171.855383][ T5817] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 171.881988][ T5817] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.924477][ T5817] usb 3-1: config 0 descriptor?? [ 171.943363][ T5771] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 172.104879][ T1093] kworker/u4:7: attempt to access beyond end of device [ 172.104879][ T1093] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 172.161449][ T1093] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 172.169831][ T1093] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 172.448428][ T5817] plantronics 0003:047F:FFFF.0006: unknown main item tag 0xd [ 172.482689][ T7094] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 172.493214][ T5817] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 172.569298][ T5817] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 172.848349][ T27] usb 3-1: USB disconnect, device number 9 [ 172.907548][ T7282] fido_id[7282]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 173.656829][ T7094] veth0_vlan: entered promiscuous mode [ 173.713548][ T7094] veth1_vlan: entered promiscuous mode [ 173.941603][ T7094] veth0_macvtap: entered promiscuous mode [ 174.029962][ T7094] veth1_macvtap: entered promiscuous mode [ 174.173885][ T7094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.227403][ T7094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.291532][ T7094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.319650][ T7094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.381049][ T7094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.429108][ T7311] loop2: detected capacity change from 0 to 4096 [ 174.438500][ T7094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.499524][ T7094] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 174.561351][ T7094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 174.590921][ T7094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.618617][ T7094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 174.681034][ T7094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.723134][ T7094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 174.768856][ T7094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.836464][ T7094] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 174.846846][ T7311] ntfs3: loop2: ino=21, "file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" fiemap is not supported for compressed file (cp -r) [ 174.892396][ T7094] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.956765][ T7094] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.975407][ T7094] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.984523][ T7094] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.371251][ T4467] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 175.408399][ T4467] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 175.569480][ T4482] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 175.580729][ T7307] loop1: detected capacity change from 0 to 40427 [ 175.599373][ T4482] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 175.649473][ T7307] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x7ffff [ 175.705459][ T7307] F2FS-fs (loop1): heap/no_heap options were deprecated [ 175.725804][ T7307] F2FS-fs (loop1): Image doesn't support compression [ 175.765321][ T7307] F2FS-fs (loop1): invalid crc value [ 175.836313][ T7307] F2FS-fs (loop1): Found nat_bits in checkpoint [ 175.929774][ T7328] netlink: 4 bytes leftover after parsing attributes in process `syz.2.502'. [ 176.075162][ T7332] loop4: detected capacity change from 0 to 136 [ 176.083577][ T7307] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 176.385023][ T7307] F2FS-fs (loop1): sanity_check_inode: corrupted inode i_blocks i_ino=b iblocks=0, run fsck to fix. [ 176.498292][ T7338] overlayfs: failed to decode file handle (len=5, type=0, flags=0, err=-22) [ 176.541674][ T7341] input: syz1 as /devices/virtual/input/input9 [ 176.586701][ T5771] syz-executor: attempt to access beyond end of device [ 176.586701][ T5771] loop1: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 176.638841][ T5771] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 176.675636][ T5771] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 176.843631][ T7347] loop4: detected capacity change from 0 to 16 [ 176.891947][ T7347] erofs: (device loop4): mounted with root inode @ nid 36. [ 177.834211][ T7349] loop2: detected capacity change from 0 to 32768 [ 177.902107][ T7349] (syz.2.509,7349,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 177.970694][ T7349] (syz.2.509,7349,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 178.076603][ T7349] JBD2: Ignoring recovery information on journal [ 178.321092][ T7349] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 178.651419][ T7387] loop3: detected capacity change from 0 to 128 [ 178.663631][ T7361] loop4: detected capacity change from 0 to 32768 [ 178.680757][ T7361] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.512 (7361) [ 178.729830][ T7361] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 178.749568][ T5791] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 178.764503][ T7361] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 178.794267][ T7361] BTRFS info (device loop4): using free space tree [ 178.838240][ T28] audit: type=1800 audit(1774534325.567:50): pid=7349 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.509" name="file1" dev="loop2" ino=16979 res=0 errno=0 [ 178.941730][ T7392] netlink: 100 bytes leftover after parsing attributes in process `syz.1.519'. [ 179.145662][ T7361] BTRFS info (device loop4): enabling ssd optimizations [ 179.186102][ T7361] BTRFS info (device loop4): auto enabling async discard [ 179.302931][ T5773] ocfs2: Unmounting device (7,2) on (node local) [ 179.654781][ T7094] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 180.361315][ T7434] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 180.640314][ T7409] loop3: detected capacity change from 0 to 40427 [ 180.687297][ T7409] F2FS-fs (loop3): build fault injection attr: rate: 771, type: 0x7ffff [ 180.739638][ T7409] F2FS-fs (loop3): invalid crc value [ 180.803171][ T7409] F2FS-fs (loop3): Found nat_bits in checkpoint [ 180.969873][ T7409] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 180.993603][ T7446] loop4: detected capacity change from 0 to 2048 [ 181.052766][ T7446] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 181.122879][ T7446] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 181.247312][ T5772] syz-executor: attempt to access beyond end of device [ 181.247312][ T5772] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 181.335969][ T5772] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 181.507276][ T7455] syzkaller1: entered promiscuous mode [ 181.513005][ T7455] syzkaller1: entered allmulticast mode [ 181.911611][ T7444] loop2: detected capacity change from 0 to 40427 [ 181.948015][ T7444] F2FS-fs (loop2): invalid crc value [ 181.981199][ T7444] F2FS-fs (loop2): Found nat_bits in checkpoint [ 182.137083][ T7444] F2FS-fs (loop2): Start checkpoint disabled! [ 182.184226][ T7444] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 182.333043][ T7469] loop1: detected capacity change from 0 to 512 [ 182.399406][ T7469] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 182.461938][ T7469] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 182.550454][ T7469] ext4 filesystem being mounted at /131/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 182.715647][ T7469] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.534: bg 0: block 217: padding at end of block bitmap is not set [ 182.797425][ T7469] EXT4-fs (loop1): Remounting filesystem read-only [ 182.967283][ T5771] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.040140][ T7458] loop4: detected capacity change from 0 to 40427 [ 183.058968][ T7458] F2FS-fs (loop4): Fix alignment : done, start(4096) end(16896) block(12288) [ 183.087131][ T27] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 183.100023][ T7458] F2FS-fs (loop4): invalid crc value [ 183.124603][ T7458] F2FS-fs (loop4): Found nat_bits in checkpoint [ 183.255352][ T7458] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 183.277476][ T27] usb 4-1: Using ep0 maxpacket: 8 [ 183.298545][ T27] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 183.320877][ T27] usb 4-1: config 179 has no interface number 0 [ 183.341210][ T27] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 183.383872][ T27] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 183.427541][ T27] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 183.454535][ T7094] syz-executor: attempt to access beyond end of device [ 183.454535][ T7094] loop4: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 183.486569][ T27] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 183.514658][ T7094] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 183.541670][ T27] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 183.549703][ T7094] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 183.585470][ T27] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 183.595627][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.653613][ T7478] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 184.158024][ T7498] loop1: detected capacity change from 0 to 4096 [ 184.191707][ T7498] EXT4-fs (loop1): Test dummy encryption mode enabled [ 184.240483][ T5817] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input10 [ 184.275973][ T7498] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 184.397546][ T7502] EXT4-fs (loop1): shut down requested (1) [ 184.459776][ T7478] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.526028][ T7478] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.545656][ T5771] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.592510][ T4467] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 184.645890][ T4467] Quota error (device loop1): write_blk: dquota write failed [ 184.663798][ T4467] Quota error (device loop1): free_dqentry: Can't write quota data block 5 [ 184.704896][ T4467] Quota error (device loop1): dquot_write_dquot: Can't write quota structure (error -5). Quota may get out of sync! [ 184.962359][ T7507] loop4: detected capacity change from 0 to 128 [ 185.023548][ T5777] usb 4-1: USB disconnect, device number 7 [ 185.023562][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 185.023668][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 185.762175][ T7522] vxcan1: tx drop: invalid sa for name 0x0000000000000005 [ 186.479087][ T7542] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 186.917473][ T7550] loop4: detected capacity change from 0 to 256 [ 186.937093][ T7550] exfat: Deprecated parameter 'utf8' [ 186.979197][ T7550] exfat: Deprecated parameter 'utf8' [ 187.021085][ T7552] loop1: detected capacity change from 0 to 1024 [ 187.029328][ T7550] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 187.040171][ T7552] EXT4-fs: inline encryption not supported [ 187.086963][ T7552] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 187.228650][ T7552] EXT4-fs error (device loop1): ext4_map_blocks:608: inode #3: block 2: comm syz.1.555: lblock 2 mapped to illegal pblock 2 (length 1) [ 187.258135][ T7552] EXT4-fs (loop1): Remounting filesystem read-only [ 187.265770][ T7552] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 187.274692][ T7552] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 187.285586][ T7552] EXT4-fs (loop1): 1 orphan inode deleted [ 187.292910][ T7552] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 187.454272][ T5771] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.703729][ T7548] loop3: detected capacity change from 0 to 32768 [ 187.731711][ T7548] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 scanned by syz.3.553 (7548) [ 187.782149][ T7548] BTRFS info (device loop3): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 187.813533][ T7548] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 187.860022][ T7548] BTRFS info (device loop3): enabling disk space caching [ 187.911251][ T7548] BTRFS info (device loop3): force clearing of disk cache [ 187.945443][ T7548] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 187.982690][ T7548] BTRFS info (device loop3): use zstd compression, level 3 [ 188.006626][ T7548] BTRFS info (device loop3): disk space caching is enabled [ 188.265401][ T7548] BTRFS info (device loop3): enabling ssd optimizations [ 188.301518][ T7548] BTRFS info (device loop3): auto enabling async discard [ 188.309694][ T7548] BTRFS info (device loop3): rebuilding free space tree [ 188.401638][ T7548] BTRFS info (device loop3): disabling free space tree [ 188.402178][ T7548] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 188.459592][ T7548] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 188.635387][ T5821] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 188.736545][ T5772] BTRFS info (device loop3): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 188.808108][ T7573] loop2: detected capacity change from 0 to 32768 [ 188.855372][ T5821] usb 2-1: Using ep0 maxpacket: 16 [ 188.870166][ T5821] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 188.893046][ T5821] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 188.905753][ T7573] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 188.921436][ T5821] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 188.934024][ T5821] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.948377][ T5821] usb 2-1: Product: syz [ 188.953280][ T5821] usb 2-1: Manufacturer: syz [ 188.960194][ T5821] usb 2-1: SerialNumber: syz [ 189.181556][ T7573] XFS (loop2): Ending clean mount [ 189.436887][ T5821] usb 2-1: 0:2 : does not exist [ 189.472953][ T5821] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 189.556008][ T5821] usb 2-1: USB disconnect, device number 6 [ 189.718694][ T5939] udevd[5939]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 189.960000][ T5773] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 190.184072][ T5777] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 190.377558][ T5777] usb 5-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 190.387986][ T5777] usb 5-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 190.399942][ T5777] usb 5-1: config 1 interface 0 has no altsetting 0 [ 190.410571][ T5777] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 190.420414][ T5777] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.431871][ T5777] usb 5-1: Product: syz [ 190.436654][ T5777] usb 5-1: Manufacturer: syz [ 190.441448][ T5777] usb 5-1: SerialNumber: syz [ 190.453074][ T7624] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 190.461165][ T7624] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 190.495343][ T788] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 190.685501][ T788] usb 3-1: Using ep0 maxpacket: 32 [ 190.709376][ T788] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 190.738431][ T788] usb 3-1: config 0 has no interface number 0 [ 190.748685][ T788] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 190.769550][ T788] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.794472][ T788] usb 3-1: Product: syz [ 190.804866][ T788] usb 3-1: Manufacturer: syz [ 190.814989][ T788] usb 3-1: SerialNumber: syz [ 190.838320][ T788] usb 3-1: config 0 descriptor?? [ 190.854172][ T788] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 191.076967][ T788] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 191.094293][ T788] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 191.194657][ T7633] loop3: detected capacity change from 0 to 32768 [ 191.238098][ T7633] find_entry called with index = 0 [ 191.243676][ T7633] find_entry called with index = 0 [ 191.373112][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - port change to invalid port: 83 [ 191.516783][ T7643] loop3: detected capacity change from 0 to 512 [ 191.526677][ T5777] (unnamed net_device) (uninitialized): Assigned a random MAC address: 1a:62:d0:59:27:ee [ 191.579032][ T5777] rtl8150 5-1:1.0: eth5: rtl8150 is detected [ 191.615560][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 191.624294][ T5821] usb 3-1: USB disconnect, device number 10 [ 191.630749][ T5817] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 191.666007][ T5777] usb 5-1: USB disconnect, device number 2 [ 191.681453][ T5821] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 191.753551][ T5821] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 191.797033][ T5821] quatech2 3-1:0.51: device disconnected [ 191.862122][ T7643] loop3: detected capacity change from 0 to 8192 [ 191.865863][ T5817] usb 2-1: Using ep0 maxpacket: 16 [ 191.888374][ T5817] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 191.901650][ T5817] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 191.930559][ T5817] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 191.955999][ T5817] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.966431][ T5817] usb 2-1: Product: syz [ 191.970802][ T5817] usb 2-1: Manufacturer: syz [ 191.975630][ T5817] usb 2-1: SerialNumber: syz [ 192.305082][ T5817] usb 2-1: 0:2 : does not exist [ 192.381498][ T5817] usb 2-1: USB disconnect, device number 7 [ 192.528104][ T5939] udevd[5939]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 193.038613][ T7658] netlink: 40 bytes leftover after parsing attributes in process `syz.3.579'. [ 193.053849][ T7658] (unnamed net_device) (uninitialized): option mode: invalid value (68) [ 193.233031][ T7650] loop4: detected capacity change from 0 to 32768 [ 193.260219][ T7664] netlink: 72 bytes leftover after parsing attributes in process `syz.3.580'. [ 193.277937][ T7648] loop2: detected capacity change from 0 to 32768 [ 193.287773][ T7650] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.577 (7650) [ 193.328872][ T7648] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz.2.576 (7648) [ 193.347086][ T7650] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 193.392589][ T7650] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 193.462794][ T7650] BTRFS info (device loop4): enabling auto defrag [ 193.471931][ T5939] I/O error, dev loop2, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 193.498755][ T7650] BTRFS info (device loop4): use no compression [ 193.521497][ T7650] BTRFS info (device loop4): max_inline at 4096 [ 193.572012][ T7650] BTRFS info (device loop4): using free space tree [ 193.855408][ T7650] BTRFS info (device loop4): enabling ssd optimizations [ 193.893470][ T7650] BTRFS info (device loop4): auto enabling async discard [ 194.425741][ T7094] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 194.740418][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.911653][ T5791] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 10 /dev/loop4 scanned by udevd (5791) [ 195.898134][ T7712] loop1: detected capacity change from 0 to 32768 [ 195.927144][ T7712] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 scanned by syz.1.599 (7712) [ 195.986316][ T7712] BTRFS info (device loop1): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 196.012408][ T7712] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 196.074584][ T7712] BTRFS info (device loop1): enabling disk space caching [ 196.089888][ T7712] BTRFS info (device loop1): force clearing of disk cache [ 196.116335][ T7712] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 196.159644][ T7712] BTRFS info (device loop1): use zstd compression, level 3 [ 196.168860][ T7712] BTRFS info (device loop1): disk space caching is enabled [ 196.270027][ T7712] BTRFS info (device loop1): enabling ssd optimizations [ 196.285423][ T7712] BTRFS info (device loop1): auto enabling async discard [ 196.310743][ T7712] BTRFS info (device loop1): rebuilding free space tree [ 196.367527][ T7712] BTRFS info (device loop1): disabling free space tree [ 196.393780][ T7712] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 196.428325][ T7763] loop2: detected capacity change from 0 to 164 [ 196.436241][ T7712] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 196.486639][ T5791] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 197.201683][ T5771] BTRFS info (device loop1): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 197.340430][ T7786] loop2: detected capacity change from 0 to 512 [ 197.367094][ T7786] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 197.424938][ T7786] EXT4-fs error (device loop2): ext4_orphan_get:1398: inode #15: comm syz.2.608: inode has both inline data and extents flags [ 197.550424][ T7786] EXT4-fs error (device loop2): ext4_orphan_get:1403: comm syz.2.608: couldn't read orphan inode 15 (err -117) [ 197.638600][ T7786] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 197.844596][ T7786] EXT4-fs error (device loop2): ext4_read_inline_dir:1583: inode #12: block 7: comm syz.2.608: path /154/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=40, inode=2085390, rec_len=0, size=80 fake=0 [ 197.964181][ T7801] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 198.000520][ T7801] CIFS mount error: No usable UNC path provided in device string! [ 198.000520][ T7801] [ 198.039339][ T7801] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 198.080026][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.968043][ T7794] loop3: detected capacity change from 0 to 40427 [ 199.034721][ T7794] F2FS-fs (loop3): Fix alignment : done, start(4096) end(16896) block(12288) [ 199.073311][ T7794] F2FS-fs (loop3): invalid crc value [ 199.139763][ T7794] F2FS-fs (loop3): Found nat_bits in checkpoint [ 199.375543][ T7794] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 199.598001][ T7835] loop2: detected capacity change from 0 to 2048 [ 199.611567][ T5772] syz-executor: attempt to access beyond end of device [ 199.611567][ T5772] loop3: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 199.652054][ T7835] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 199.675521][ T5772] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 199.695901][ T5772] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 200.194432][ T7849] loop1: detected capacity change from 0 to 128 [ 200.380402][ T27] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 200.600703][ T27] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 200.635444][ T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.643619][ T27] usb 3-1: Product: syz [ 200.690327][ T27] usb 3-1: Manufacturer: syz [ 200.695153][ T27] usb 3-1: SerialNumber: syz [ 200.711117][ T27] usb 3-1: config 0 descriptor?? [ 200.845529][ T8] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 200.962099][ T7868] loop4: detected capacity change from 0 to 512 [ 200.966732][ T27] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 201.032822][ T7868] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.046418][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 201.070685][ T8] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 201.099723][ T7868] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 201.120446][ T8] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 201.150831][ T8] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 201.212907][ T8] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 201.275396][ T8] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 201.335339][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.397734][ T27] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -32 [ 201.441083][ T27] usb 3-1: USB disconnect, device number 11 [ 201.453673][ T7094] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.465383][ T7876] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 201.617091][ T8] usb 2-1: GET_CAPABILITIES returned 0 [ 201.639128][ T8] usbtmc 2-1:16.0: can't read capabilities [ 201.881795][ T8] usb 2-1: USB disconnect, device number 8 [ 202.360415][ T7897] loop4: detected capacity change from 0 to 8192 [ 202.395563][ T7903] loop3: detected capacity change from 0 to 512 [ 202.443187][ T7897] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 202.488686][ T7897] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 202.499031][ T7897] REISERFS (device loop4): using ordered data mode [ 202.506354][ T7897] reiserfs: using flush barriers [ 202.518080][ T7897] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 202.535954][ T7897] REISERFS (device loop4): checking transaction log (loop4) [ 202.548549][ T7897] REISERFS (device loop4): Using rupasov hash to sort names [ 202.566789][ T7897] REISERFS (device loop4): using 3.5.x disk format [ 202.584097][ T7897] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 202.611047][ T7897] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 202.638554][ T7903] EXT4-fs error (device loop3): ext4_orphan_get:1398: inode #15: comm syz.3.635: inode has both inline data and extents flags [ 202.675980][ T7897] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 202.688499][ T7897] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 UNKNOWN] (nlink == 1) not found (pos 2) [ 202.703685][ T7897] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 202.716815][ T7903] EXT4-fs error (device loop3): ext4_orphan_get:1403: comm syz.3.635: couldn't read orphan inode 15 (err -117) [ 202.732631][ T7903] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 202.810774][ T7897] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 202.852208][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.892510][ T7897] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 202.969737][ T7912] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 203.024401][ T7912] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 203.091853][ T7912] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 203.111909][ T7912] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 UNKNOWN] (nlink == 1) not found (pos 2) [ 203.133487][ T7913] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 203.188040][ T7913] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 UNKNOWN] (nlink == 1) not found (pos 2) [ 203.233097][ T7913] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 UNKNOWN] (nlink == 1) not found (pos 2) [ 203.357190][ T7924] batadv_slave_0: entered promiscuous mode [ 203.365079][ T7923] batadv_slave_0: left promiscuous mode [ 204.442413][ T7958] loop4: detected capacity change from 0 to 4096 [ 204.506389][ T5821] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 204.593678][ T1119] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.745624][ T5821] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 204.809112][ T5821] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 204.859993][ T7938] loop2: detected capacity change from 0 to 32768 [ 204.868338][ T5821] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 204.905422][ T5821] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.926700][ T1119] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.994767][ T7938] JBD2: Ignoring recovery information on journal [ 205.099603][ T7938] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 205.176470][ T5821] usb 2-1: usb_control_msg returned -32 [ 205.182249][ T5821] usbtmc 2-1:16.0: can't read capabilities [ 205.299631][ T1119] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.539570][ T7969] OCFS2: ERROR (device loop2): int ocfs2_validate_inode_block(struct super_block *, struct buffer_head *): Invalid dinode #65: signature = [ 205.577417][ T1119] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.607265][ T7969] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 205.636244][ T7969] OCFS2: File system is now read-only. [ 205.658484][ T7969] (syz.2.644,7969,1):ocfs2_assign_bh:2416 ERROR: status = -30 [ 205.704711][ T7969] (syz.2.644,7969,1):ocfs2_inode_lock_full_nested:2511 ERROR: status = -30 [ 205.734290][ T7969] (syz.2.644,7969,1):ocfs2_inode_lock_atime:2603 ERROR: status = -30 [ 205.752801][ T7969] (syz.2.644,7969,1):ocfs2_readdir:1966 ERROR: status = -30 [ 205.979196][ T5773] ocfs2: Unmounting device (7,2) on (node local) [ 206.115945][ T7980] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 206.443257][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 206.456747][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 206.473914][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 206.482576][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 206.491692][ T51] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 206.503297][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 207.243497][ T2134] usb 2-1: USB disconnect, device number 9 [ 207.331137][ T8003] use of bytesused == 0 is deprecated and will be removed in the future, [ 207.395374][ T8003] use the actual size instead. [ 207.406710][ T8005] loop4: detected capacity change from 0 to 2048 [ 207.500461][ T8010] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 207.684691][ T7987] chnl_net:caif_netlink_parms(): no params data found [ 207.723726][ T8010] NILFS (loop4): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 207.799442][ T8010] NILFS error (device loop4): nilfs_bmap_propagate: broken bmap (inode number=4) [ 207.830383][ T8010] Remounting filesystem read-only [ 207.851397][ T59] NILFS (loop4): discard dirty page: offset=4096, ino=6 [ 207.873883][ T59] NILFS (loop4): discard dirty block: blocknr=39, size=1024 [ 207.906560][ T59] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 207.938457][ T8016] loop2: detected capacity change from 0 to 4096 [ 207.945659][ T59] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 207.954679][ T59] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 207.974122][ T59] NILFS (loop4): discard dirty page: offset=0, ino=2 [ 207.983729][ T59] NILFS (loop4): discard dirty block: blocknr=18, size=1024 [ 208.012559][ T59] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 208.023126][ T59] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 208.077742][ T59] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 208.105721][ T59] NILFS (loop4): discard dirty page: offset=0, ino=5 [ 208.113641][ T59] NILFS (loop4): discard dirty block: blocknr=41, size=1024 [ 208.124101][ T59] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 208.133361][ T59] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 208.142782][ T59] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 208.152533][ T59] NILFS (loop4): discard dirty page: offset=0, ino=3 [ 208.161073][ T59] NILFS (loop4): discard dirty block: blocknr=42, size=1024 [ 208.169949][ T59] NILFS (loop4): discard dirty block: blocknr=43, size=1024 [ 208.177949][ T59] NILFS (loop4): discard dirty block: blocknr=44, size=1024 [ 208.185925][ T59] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 208.195123][ T59] NILFS (loop4): discard dirty page: offset=196608, ino=3 [ 208.202529][ T59] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 208.213146][ T59] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 208.224918][ T59] NILFS (loop4): discard dirty block: blocknr=49, size=1024 [ 208.233131][ T59] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 208.242276][ T59] NILFS (loop4): discard dirty page: offset=0, ino=4 [ 208.265303][ T59] NILFS (loop4): discard dirty block: blocknr=40, size=1024 [ 208.272948][ T59] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 208.282409][ T1119] hsr_slave_0: left promiscuous mode [ 208.298959][ T1119] hsr_slave_1: left promiscuous mode [ 208.305328][ T59] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 208.325441][ T59] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024 [ 208.342930][ T1119] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 208.355946][ T1119] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 208.366463][ T7094] NILFS (loop4): disposed unprocessed dirty file(s) when stopping log writer [ 208.379938][ T1119] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 208.395272][ T1119] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 208.417065][ T7094] NILFS (loop4): discard dirty page: offset=0, ino=6 [ 208.424245][ T7094] NILFS (loop4): discard dirty block: blocknr=35, size=1024 [ 208.437599][ T1119] bridge_slave_1: left allmulticast mode [ 208.470863][ T1119] bridge_slave_1: left promiscuous mode [ 208.474545][ T7094] NILFS (loop4): discard dirty block: blocknr=36, size=1024 [ 208.486348][ T7094] NILFS (loop4): discard dirty block: blocknr=37, size=1024 [ 208.492088][ T1119] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.493817][ T7094] NILFS (loop4): discard dirty block: blocknr=38, size=1024 [ 208.527592][ T1119] bridge_slave_0: left allmulticast mode [ 208.549111][ T1119] bridge_slave_0: left promiscuous mode [ 208.577121][ T1119] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.586172][ T5787] Bluetooth: hci3: command tx timeout [ 208.899221][ T1119] veth1_macvtap: left promiscuous mode [ 208.932585][ T1119] veth0_macvtap: left promiscuous mode [ 208.939092][ T1119] veth1_vlan: left promiscuous mode [ 208.969558][ T1119] veth0_vlan: left promiscuous mode [ 209.294285][ T8039] loop4: detected capacity change from 0 to 512 [ 209.569909][ T8034] loop2: detected capacity change from 0 to 32768 [ 209.578521][ T8034] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 scanned by syz.2.665 (8034) [ 209.633866][ T8034] BTRFS info (device loop2): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 209.655463][ T8034] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 209.673586][ T8034] BTRFS info (device loop2): enabling disk space caching [ 209.682973][ T8034] BTRFS info (device loop2): force clearing of disk cache [ 209.715945][ T8034] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 209.739417][ T8034] BTRFS info (device loop2): use zstd compression, level 3 [ 209.748617][ T8034] BTRFS info (device loop2): disk space caching is enabled [ 209.766613][ T8043] loop4: detected capacity change from 0 to 1024 [ 210.005356][ T8034] BTRFS info (device loop2): enabling ssd optimizations [ 210.048811][ T8034] BTRFS info (device loop2): auto enabling async discard [ 210.070653][ T49] hfsplus: b-tree write err: -5, ino 25 [ 210.088661][ T8034] BTRFS info (device loop2): rebuilding free space tree [ 210.104055][ T49] hfsplus: b-tree write err: -5, ino 4 [ 210.116573][ T49] hfsplus: b-tree write err: -5, ino 2 [ 210.241951][ T8034] BTRFS info (device loop2): disabling free space tree [ 210.262658][ T8034] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 210.289499][ T8034] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 210.655358][ T5786] Bluetooth: hci3: command tx timeout [ 210.842791][ T8071] loop4: detected capacity change from 0 to 4096 [ 210.852090][ T5773] BTRFS info (device loop2): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 210.873448][ T8071] EXT4-fs: inline encryption not supported [ 210.893900][ T8071] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 210.903038][ T8071] System zones: 0-5 [ 210.938483][ T8071] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 211.082075][ T28] audit: type=1800 audit(1774534357.787:51): pid=8071 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.676" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 211.413973][ T8077] overlayfs: failed to resolve './file0': -2 [ 211.525772][ T7094] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.048758][ T1119] team0 (unregistering): Port device team_slave_1 removed [ 212.122809][ T1119] team0 (unregistering): Port device team_slave_0 removed [ 212.189282][ T5786] Bluetooth: hci0: command 0x0406 tx timeout [ 212.189318][ T5776] Bluetooth: hci2: command 0x0406 tx timeout [ 212.227584][ T1119] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 212.300775][ T1119] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 212.735833][ T51] Bluetooth: hci3: command tx timeout [ 212.866277][ T1119] bond0 (unregistering): Released all slaves [ 213.175572][ T8093] netlink: 'syz.2.682': attribute type 1 has an invalid length. [ 213.184725][ T8093] netlink: 76 bytes leftover after parsing attributes in process `syz.2.682'. [ 213.206436][ T7987] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.245430][ T7987] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.273490][ T7987] bridge_slave_0: entered allmulticast mode [ 213.337578][ T7987] bridge_slave_0: entered promiscuous mode [ 213.376954][ T7987] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.385695][ T7987] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.393080][ T7987] bridge_slave_1: entered allmulticast mode [ 213.453207][ T7987] bridge_slave_1: entered promiscuous mode [ 213.623874][ T7987] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 213.672175][ T7987] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 213.836580][ T7987] team0: Port device team_slave_0 added [ 213.856649][ T7987] team0: Port device team_slave_1 added [ 213.951018][ T7987] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 213.972576][ T7987] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.012400][ T7987] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 214.063962][ T7987] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 214.084515][ T7987] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.123665][ T7987] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 214.273309][ T7987] hsr_slave_0: entered promiscuous mode [ 214.279707][ T8096] loop1: detected capacity change from 0 to 32768 [ 214.292413][ T7987] hsr_slave_1: entered promiscuous mode [ 214.323043][ T8096] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 10 [ 214.326557][ T7987] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 214.393955][ T7987] Cannot create hsr debugfs directory [ 214.816720][ T51] Bluetooth: hci3: command tx timeout [ 214.876169][ T8159] loop2: detected capacity change from 0 to 128 [ 215.162237][ T5791] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 10 [ 215.422813][ T7987] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 215.450646][ T7987] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 215.469335][ T7987] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 215.506322][ T7987] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 215.814189][ T7987] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.872823][ T7987] 8021q: adding VLAN 0 to HW filter on device team0 [ 215.917151][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.924682][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 215.954335][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.961850][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 215.969844][ T8160] loop4: detected capacity change from 0 to 32768 [ 216.014729][ T8160] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop4 scanned by syz.4.685 (8160) [ 216.090294][ T8160] BTRFS info (device loop4): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 216.146425][ T8160] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 216.179659][ T8160] BTRFS info (device loop4): enabling disk space caching [ 216.202381][ T8160] BTRFS info (device loop4): force clearing of disk cache [ 216.223413][ T8160] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 216.251811][ T8160] BTRFS info (device loop4): use zstd compression, level 3 [ 216.286411][ T8160] BTRFS info (device loop4): disk space caching is enabled [ 216.455909][ T8160] BTRFS info (device loop4): enabling ssd optimizations [ 216.463121][ T8160] BTRFS info (device loop4): auto enabling async discard [ 216.487038][ T8160] BTRFS info (device loop4): rebuilding free space tree [ 216.540848][ T8160] BTRFS info (device loop4): disabling free space tree [ 216.569718][ T8160] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 216.597324][ T8160] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 216.831167][ T7987] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 217.127865][ T7094] BTRFS info (device loop4): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 217.406856][ T2134] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 217.635283][ T2134] usb 2-1: Using ep0 maxpacket: 16 [ 217.691616][ T2134] usb 2-1: New USB device found, idVendor=0b05, idProduct=17a0, bcdDevice= 0.40 [ 217.729431][ T2134] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.773288][ T2134] usb 2-1: Product: syz [ 217.805974][ T2134] usb 2-1: Manufacturer: syz [ 217.810662][ T2134] usb 2-1: SerialNumber: syz [ 218.021735][ T7987] veth0_vlan: entered promiscuous mode [ 218.073227][ T7987] veth1_vlan: entered promiscuous mode [ 218.212576][ T7987] veth0_macvtap: entered promiscuous mode [ 218.242600][ T7987] veth1_macvtap: entered promiscuous mode [ 218.309256][ T7987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.344074][ T7987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.391120][ T7987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.412591][ T7987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.441523][ T7987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.457813][ T7987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.470418][ T7987] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 218.493666][ T7987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.513598][ T2134] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 218.524961][ T8239] loop2: detected capacity change from 0 to 1024 [ 218.524973][ T7987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.544889][ T8239] EXT4-fs: inline encryption not supported [ 218.551503][ T7987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.573802][ T7987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.605398][ T8239] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 218.663181][ T7987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.693868][ T7987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.722845][ T8239] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 218.742347][ T2134] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 218.761746][ T7987] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 218.788109][ T2134] usb 2-1: USB disconnect, device number 10 [ 218.824662][ T7987] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.845978][ T7987] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.855031][ T7987] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.868168][ T7987] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.881835][ T5791] udevd[5791]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 219.016135][ T8248] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4059: comm syz.2.699: Allocating blocks 497-513 which overlap fs metadata [ 219.067910][ T8248] EXT4-fs (loop2): Remounting filesystem read-only [ 219.216141][ T1078] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.224214][ T1078] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 219.239300][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.365890][ T170] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.374505][ T170] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 219.741723][ T8262] netlink: 'syz.1.711': attribute type 2 has an invalid length. [ 220.003482][ T8273] netlink: 'syz.4.705': attribute type 34 has an invalid length. [ 220.043302][ T8275] loop1: detected capacity change from 0 to 256 [ 220.647291][ T8290] loop1: detected capacity change from 0 to 1024 [ 220.677130][ T8290] EXT4-fs: Ignoring removed bh option [ 220.760668][ T8290] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 220.851468][ T8270] loop5: detected capacity change from 0 to 32768 [ 220.870439][ T8270] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop5 scanned by syz.5.703 (8270) [ 220.900077][ T8270] BTRFS info (device loop5): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 220.914392][ T8270] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 220.925085][ T8270] BTRFS info (device loop5): enabling disk space caching [ 220.942275][ T8270] BTRFS info (device loop5): force clearing of disk cache [ 220.964796][ T8270] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 221.011496][ T8290] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 221.018898][ T8270] BTRFS info (device loop5): use zstd compression, level 3 [ 221.065323][ T8270] BTRFS info (device loop5): disk space caching is enabled [ 221.119424][ T8303] netlink: 64 bytes leftover after parsing attributes in process `syz.2.716'. [ 221.190030][ T8309] loop4: detected capacity change from 0 to 1024 [ 221.224400][ T8309] EXT4-fs: Ignoring removed orlov option [ 221.320705][ T8270] BTRFS info (device loop5): enabling ssd optimizations [ 221.356617][ T5771] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.368765][ T8270] BTRFS info (device loop5): auto enabling async discard [ 221.386592][ T8309] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 221.435622][ T8270] BTRFS info (device loop5): rebuilding free space tree [ 221.562639][ T8270] BTRFS info (device loop5): disabling free space tree [ 221.610828][ T8330] loop2: detected capacity change from 0 to 1024 [ 221.617936][ T8270] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 221.679804][ T8270] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 221.697613][ T8330] EXT4-fs: inline encryption not supported [ 221.748512][ T8330] EXT4-fs: Ignoring removed bh option [ 221.789499][ T8330] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 221.837035][ T7094] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.904547][ T8330] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 222.262038][ T8345] loop1: detected capacity change from 0 to 1024 [ 222.271177][ T7987] BTRFS info (device loop5): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 222.317718][ T8345] EXT4-fs: inline encryption not supported [ 222.339421][ T8345] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 222.382155][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.456443][ T8345] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 222.881203][ T5771] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.000289][ T8351] loop2: detected capacity change from 0 to 8192 [ 223.275882][ T8343] loop4: detected capacity change from 0 to 32768 [ 223.459072][ T8343] XFS (loop4): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 223.766559][ T8343] XFS (loop4): Starting recovery (logdev: internal) [ 223.867088][ T8343] XFS (loop4): Ending recovery (logdev: internal) [ 223.956334][ T8387] syzkaller1: entered promiscuous mode [ 223.976994][ T8387] syzkaller1: entered allmulticast mode [ 224.111541][ T8391] loop2: detected capacity change from 0 to 128 [ 224.285351][ T28] audit: type=1804 audit(1774534370.987:52): pid=8391 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.730" name="/newroot/190/file1/bus" dev="loop2" ino=1048606 res=1 errno=0 [ 224.321212][ T7094] XFS (loop4): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 225.198940][ T8416] netlink: 'syz.4.738': attribute type 12 has an invalid length. [ 225.222859][ T8416] netlink: 'syz.4.738': attribute type 29 has an invalid length. [ 225.245403][ T8416] netlink: 148 bytes leftover after parsing attributes in process `syz.4.738'. [ 225.268934][ T8416] netlink: 'syz.4.738': attribute type 2 has an invalid length. [ 225.736698][ T8398] loop5: detected capacity change from 0 to 40427 [ 225.775735][ T8398] F2FS-fs (loop5): invalid crc value [ 225.790828][ T8398] F2FS-fs (loop5): Found nat_bits in checkpoint [ 226.032925][ T8398] F2FS-fs (loop5): Start checkpoint disabled! [ 226.113598][ T8398] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 226.333137][ T8417] loop1: detected capacity change from 0 to 32768 [ 226.369333][ T8434] loop4: detected capacity change from 0 to 8192 [ 226.446446][ T8434] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 226.505860][ T8434] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 226.515605][ T8434] REISERFS (device loop4): using ordered data mode [ 226.534721][ T8434] reiserfs: using flush barriers [ 226.560222][ T8434] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 226.577648][ T8434] REISERFS (device loop4): checking transaction log (loop4) [ 226.624247][ T8438] loop2: detected capacity change from 0 to 1024 [ 226.790871][ T170] kworker/u4:5: attempt to access beyond end of device [ 226.790871][ T170] loop5: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 226.853000][ T170] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 226.882511][ T170] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 226.905970][ T8434] REISERFS (device loop4): Using tea hash to sort names [ 226.942826][ T8434] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 226.997935][ T8434] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 227.092707][ T8441] input: syz1 as /devices/virtual/input/input11 [ 228.072128][ T8464] loop4: detected capacity change from 0 to 1024 [ 228.098044][ T8464] EXT4-fs: Ignoring removed bh option [ 228.111264][ T8464] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 228.127715][ T8465] loop2: detected capacity change from 0 to 136 [ 228.150312][ T8464] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 228.279241][ T8464] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 228.413784][ T7094] EXT4-fs error (device loop4): ext4_read_inline_dir:1583: inode #12: block 7: comm syz-executor: path /68/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 228.462874][ T7094] EXT4-fs error (device loop4): ext4_read_inline_dir:1583: inode #12: block 7: comm syz-executor: path /68/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 228.590797][ T7094] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.601044][ T8479] loop2: detected capacity change from 0 to 2048 [ 228.676137][ T2134] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 228.700208][ T8479] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 228.756169][ T8479] ext4 filesystem being mounted at /196/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 228.897381][ T2134] usb 6-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 228.924960][ T2134] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.986979][ T2134] usb 6-1: config 0 descriptor?? [ 229.003668][ T2134] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 229.127589][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.249738][ T8492] netlink: 256 bytes leftover after parsing attributes in process `syz.1.764'. [ 229.462109][ T2134] cpia1 6-1:0.0: unexpected state after lo power cmd: 00 [ 229.577251][ T8495] loop2: detected capacity change from 0 to 8192 [ 229.609226][ T8495] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 229.716912][ T5842] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 229.864598][ T2134] cpia1 6-1:0.0: only firmware version 1 is supported (got: 0) [ 229.913994][ T8505] loop2: detected capacity change from 0 to 512 [ 229.942159][ T8505] EXT4-fs: Ignoring removed i_version option [ 229.955700][ T5842] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 229.974542][ T5842] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 229.984856][ T5842] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 230.008059][ T5842] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 230.020385][ T5842] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.036713][ T8505] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 230.081259][ T5842] usb 2-1: config 0 descriptor?? [ 230.131069][ T9] usb 6-1: USB disconnect, device number 2 [ 230.324329][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.530245][ T5842] plantronics 0003:047F:FFFF.0007: unknown main item tag 0xd [ 230.544875][ T5842] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 230.597570][ T5842] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 230.899250][ T5842] usb 2-1: USB disconnect, device number 11 [ 231.719876][ T8543] netlink: 12 bytes leftover after parsing attributes in process `syz.4.772'. [ 231.969927][ T23] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 231.987345][ T23] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 232.036557][ T23] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz0] on syz1 [ 232.258635][ T8554] fido_id[8554]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 232.484153][ T8561] syzkaller1: entered promiscuous mode [ 232.490996][ T8561] syzkaller1: entered allmulticast mode [ 232.595890][ T8564] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000000004 [ 232.800056][ T8566] loop1: detected capacity change from 0 to 8192 [ 232.810037][ T8566] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 232.828235][ T8566] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 232.840015][ T8566] REISERFS (device loop1): using ordered data mode [ 232.847253][ T8566] reiserfs: using flush barriers [ 232.857100][ T8566] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 232.874298][ T8566] REISERFS (device loop1): checking transaction log (loop1) [ 233.036403][ T8566] REISERFS (device loop1): Using tea hash to sort names [ 233.044390][ T8566] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 233.065449][ T8566] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 233.102566][ T8566] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 233.129487][ T8566] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 233.265325][ T23] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 233.475755][ T23] usb 5-1: Using ep0 maxpacket: 32 [ 233.546011][ T23] usb 5-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 233.575823][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.625067][ T23] usb 5-1: config 0 descriptor?? [ 233.661330][ T23] as10x_usb: device has been detected [ 233.690829][ T23] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 233.838492][ T8588] loop5: detected capacity change from 0 to 512 [ 233.845710][ T23] usb 5-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 233.902849][ T8573] ------------[ cut here ]------------ [ 233.908938][ T8573] DEBUG_LOCKS_WARN_ON(lock->magic != lock) [ 233.913158][ T8588] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 233.935025][ T8588] ext4 filesystem being mounted at /17/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 233.949049][ T23] as10x_usb: error during firmware upload part1 [ 233.965422][ T8573] WARNING: CPU: 1 PID: 8573 at kernel/locking/mutex.c:582 __mutex_lock+0xb85/0xcc0 [ 233.975328][ T8573] Modules linked in: [ 233.979404][ T8573] CPU: 1 PID: 8573 Comm: syz.4.781 Not tainted syzkaller #0 [ 233.986986][ T8573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 233.997172][ T8573] RIP: 0010:__mutex_lock+0xb85/0xcc0 [ 234.002521][ T8573] Code: 04 08 84 c0 0f 85 27 01 00 00 83 3d 94 87 fc 03 00 0f 85 95 f5 ff ff 48 c7 c7 80 b4 ca 8a 48 c7 c6 20 b5 ca 8a e8 5b 28 c2 f6 <0f> 0b e9 7b f5 ff ff 0f 0b e9 5f f9 ff ff 0f 0b e9 18 f6 ff ff e8 [ 234.023951][ T8573] RSP: 0000:ffffc9000b92faa0 EFLAGS: 00010246 [ 234.031197][ T8573] RAX: e7c01669e6664900 RBX: ffff88802892ece0 RCX: 0000000000080000 [ 234.039818][ T8573] RDX: ffffc9000bf49000 RSI: 000000000000952c RDI: 000000000000952d [ 234.048862][ T8573] RBP: ffffc9000b92fbf8 R08: ffff8880b8f28c13 R09: 1ffff110171e5182 [ 234.058110][ T8573] R10: dffffc0000000000 R11: ffffed10171e5183 R12: 0000000000000000 [ 234.067249][ T8573] R13: 1ffff92001725f64 R14: dffffc0000000000 R15: 0000000000000000 [ 234.075837][ T8573] FS: 00007f09ce1f46c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 234.085063][ T8573] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 234.091941][ T8573] CR2: 00007f325c6f2000 CR3: 000000006b621000 CR4: 00000000003506e0 [ 234.100650][ T8573] Call Trace: [ 234.103997][ T8573] [ 234.107168][ T8573] ? trace_contention_end+0x39/0xe0 [ 234.112520][ T8573] ? __mutex_lock+0x315/0xcc0 [ 234.118142][ T8573] ? as102_dvb_dmx_start_feed+0x70/0x280 [ 234.124113][ T8573] ? mutex_lock_nested+0x20/0x20 [ 234.129599][ T8573] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 234.135526][ T8573] ? dmx_section_feed_start_filtering+0x55/0x690 [ 234.142018][ T8573] ? mutex_lock_nested+0x20/0x20 [ 234.147055][ T8573] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 234.153267][ T8573] ? lock_chain_count+0x20/0x20 [ 234.158428][ T8573] ? _raw_spin_lock_irq+0xbb/0xf0 [ 234.163901][ T8573] as102_dvb_dmx_start_feed+0x70/0x280 [ 234.169755][ T8573] dmx_section_feed_start_filtering+0x4f5/0x690 [ 234.176207][ T8573] dvb_dmxdev_filter_start+0xcbd/0x10c0 [ 234.181819][ T8573] ? dvb_dmxdev_filter_set+0x2cc/0x580 [ 234.187777][ T8573] dvb_demux_do_ioctl+0x467/0x530 [ 234.193042][ T8573] dvb_usercopy+0x195/0x2b0 [ 234.197768][ T8573] ? dvb_dmxdev_buffer_read+0x4c0/0x4c0 [ 234.203728][ T8573] ? dvb_generic_ioctl+0xb0/0xb0 [ 234.208973][ T8573] ? dvb_demux_poll+0x220/0x220 [ 234.214065][ T8573] dvb_demux_ioctl+0x29/0x30 [ 234.219533][ T8573] __se_sys_ioctl+0xfd/0x170 [ 234.224292][ T8573] do_syscall_64+0x55/0xa0 [ 234.229111][ T8573] ? clear_bhb_loop+0x40/0x90 [ 234.234099][ T8573] ? clear_bhb_loop+0x40/0x90 [ 234.238962][ T8573] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 234.245037][ T8573] RIP: 0033:0x7f09cd39c799 [ 234.250143][ T8573] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 234.270489][ T8573] RSP: 002b:00007f09ce1f4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 234.279041][ T8573] RAX: ffffffffffffffda RBX: 00007f09cd615fa0 RCX: 00007f09cd39c799 [ 234.287390][ T8573] RDX: 0000200000000200 RSI: 00000000403c6f2b RDI: 0000000000000004 [ 234.295810][ T8573] RBP: 00007f09cd432c99 R08: 0000000000000000 R09: 0000000000000000 [ 234.303880][ T8573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 234.312259][ T8573] R13: 00007f09cd616038 R14: 00007f09cd615fa0 R15: 00007ffe20174018 [ 234.320500][ T8573] [ 234.324340][ T8573] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 234.331771][ T8573] CPU: 1 PID: 8573 Comm: syz.4.781 Not tainted syzkaller #0 [ 234.339556][ T8573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 234.349840][ T8573] Call Trace: [ 234.353200][ T8573] [ 234.356267][ T8573] dump_stack_lvl+0x18c/0x250 [ 234.361168][ T8573] ? show_regs_print_info+0x20/0x20 [ 234.366824][ T8573] ? load_image+0x400/0x400 [ 234.371551][ T8573] panic+0x2dc/0x730 [ 234.375684][ T8573] ? bpf_jit_dump+0xd0/0xd0 [ 234.380278][ T8573] __warn+0x2e0/0x470 [ 234.384486][ T8573] ? __mutex_lock+0xb85/0xcc0 [ 234.389374][ T8573] ? __mutex_lock+0xb85/0xcc0 [ 234.394161][ T8573] report_bug+0x2be/0x4f0 [ 234.398605][ T8573] ? __mutex_lock+0xb85/0xcc0 [ 234.403471][ T8573] ? __mutex_lock+0xb85/0xcc0 [ 234.408176][ T8573] ? __mutex_lock+0xb87/0xcc0 [ 234.412869][ T8573] handle_bug+0xcf/0x120 [ 234.417221][ T8573] exc_invalid_op+0x1a/0x50 [ 234.421782][ T8573] asm_exc_invalid_op+0x1a/0x20 [ 234.426765][ T8573] RIP: 0010:__mutex_lock+0xb85/0xcc0 [ 234.432198][ T8573] Code: 04 08 84 c0 0f 85 27 01 00 00 83 3d 94 87 fc 03 00 0f 85 95 f5 ff ff 48 c7 c7 80 b4 ca 8a 48 c7 c6 20 b5 ca 8a e8 5b 28 c2 f6 <0f> 0b e9 7b f5 ff ff 0f 0b e9 5f f9 ff ff 0f 0b e9 18 f6 ff ff e8 [ 234.452468][ T8573] RSP: 0000:ffffc9000b92faa0 EFLAGS: 00010246 [ 234.458939][ T8573] RAX: e7c01669e6664900 RBX: ffff88802892ece0 RCX: 0000000000080000 [ 234.467286][ T8573] RDX: ffffc9000bf49000 RSI: 000000000000952c RDI: 000000000000952d [ 234.475660][ T8573] RBP: ffffc9000b92fbf8 R08: ffff8880b8f28c13 R09: 1ffff110171e5182 [ 234.483669][ T8573] R10: dffffc0000000000 R11: ffffed10171e5183 R12: 0000000000000000 [ 234.491844][ T8573] R13: 1ffff92001725f64 R14: dffffc0000000000 R15: 0000000000000000 [ 234.499940][ T8573] ? trace_contention_end+0x39/0xe0 [ 234.505420][ T8573] ? __mutex_lock+0x315/0xcc0 [ 234.510214][ T8573] ? as102_dvb_dmx_start_feed+0x70/0x280 [ 234.515999][ T8573] ? mutex_lock_nested+0x20/0x20 [ 234.521132][ T8573] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 234.526894][ T8573] ? dmx_section_feed_start_filtering+0x55/0x690 [ 234.533759][ T8573] ? mutex_lock_nested+0x20/0x20 [ 234.538946][ T8573] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 234.545598][ T8573] ? lock_chain_count+0x20/0x20 [ 234.550757][ T8573] ? _raw_spin_lock_irq+0xbb/0xf0 [ 234.555912][ T8573] as102_dvb_dmx_start_feed+0x70/0x280 [ 234.561592][ T8573] dmx_section_feed_start_filtering+0x4f5/0x690 [ 234.568267][ T8573] dvb_dmxdev_filter_start+0xcbd/0x10c0 [ 234.573970][ T8573] ? dvb_dmxdev_filter_set+0x2cc/0x580 [ 234.579576][ T8573] dvb_demux_do_ioctl+0x467/0x530 [ 234.584754][ T8573] dvb_usercopy+0x195/0x2b0 [ 234.589543][ T8573] ? dvb_dmxdev_buffer_read+0x4c0/0x4c0 [ 234.595150][ T8573] ? dvb_generic_ioctl+0xb0/0xb0 [ 234.600493][ T8573] ? dvb_demux_poll+0x220/0x220 [ 234.605651][ T8573] dvb_demux_ioctl+0x29/0x30 [ 234.610282][ T8573] __se_sys_ioctl+0xfd/0x170 [ 234.614916][ T8573] do_syscall_64+0x55/0xa0 [ 234.619468][ T8573] ? clear_bhb_loop+0x40/0x90 [ 234.624553][ T8573] ? clear_bhb_loop+0x40/0x90 [ 234.629461][ T8573] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 234.635745][ T8573] RIP: 0033:0x7f09cd39c799 [ 234.640444][ T8573] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 234.660707][ T8573] RSP: 002b:00007f09ce1f4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 234.669261][ T8573] RAX: ffffffffffffffda RBX: 00007f09cd615fa0 RCX: 00007f09cd39c799 [ 234.677567][ T8573] RDX: 0000200000000200 RSI: 00000000403c6f2b RDI: 0000000000000004 [ 234.685746][ T8573] RBP: 00007f09cd432c99 R08: 0000000000000000 R09: 0000000000000000 [ 234.694097][ T8573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 234.702359][ T8573] R13: 00007f09cd616038 R14: 00007f09cd615fa0 R15: 00007ffe20174018 [ 234.710623][ T8573] [ 234.714244][ T8573] Kernel Offset: disabled [ 234.718664][ T8573] Rebooting in 86400 seconds..