last executing test programs: 1m15.334913384s ago: executing program 2 (id=272): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB=' '], 0x20}}, 0x4000000) r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 1m15.014445252s ago: executing program 2 (id=274): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000080), 0x4) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x600, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback, 0x80}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c) 1m14.718195109s ago: executing program 2 (id=277): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000006c0)={[{@orlov}, {@noauto_da_alloc}, {@inlinecrypt}, {@dioread_lock}, {@data_err_ignore}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@data_err_ignore}, {@grpquota}, {@noblock_validity}, {@user_xattr}, {@resuid}, {@errors_remount}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x42, 0x1fe) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f0000000000)='2', 0x1, 0xffff) fallocate(r0, 0x10, 0x7, 0x10001) 1m14.072318618s ago: executing program 2 (id=281): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00') 1m13.68031599s ago: executing program 2 (id=283): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280), 0x40900, 0x0) io_setup(0x6, &(0x7f0000001380)=0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/3\x00') io_submit(r0, 0x1, &(0x7f00000000c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, r1}]) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x5400, 0x0) 1m11.258439912s ago: executing program 2 (id=292): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2508007a0000000000000700000008000300", @ANYRES32=r2, @ANYBLOB="1400060064756d6d7930000000000000000000001400040076652568315f746f5f626f016400000005005300010000000800050004"], 0x54}}, 0x0) 1m10.800606308s ago: executing program 32 (id=292): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2508007a0000000000000700000008000300", @ANYRES32=r2, @ANYBLOB="1400060064756d6d7930000000000000000000001400040076652568315f746f5f626f016400000005005300010000000800050004"], 0x54}}, 0x0) 43.381340493s ago: executing program 1 (id=424): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) syz_open_dev$loop(&(0x7f0000000240), 0x3ff, 0x160862) r0 = io_uring_setup(0x1dd, &(0x7f00000001c0)={0x0, 0x1fffff, 0x0, 0x4, 0x140}) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xd, &(0x7f0000000140)={0x7, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000040)=[{0x0, 0xffffffff00000005}], &(0x7f0000000180)=[0xffffffff, 0x7fffffff, 0x2, 0x6, 0x101, 0x1], 0x7}, 0x20) 42.938267288s ago: executing program 1 (id=428): connect$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x4e21, 0x9, @remote, 0x3}, 0x1c) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000240)=ANY=[@ANYBLOB="e0000002ac1414aa0100000002"], 0x18) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2}}}}}, 0x0) 42.508042604s ago: executing program 1 (id=432): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c000}, 0x44) recvmmsg(r0, &(0x7f00000037c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 41.936039437s ago: executing program 1 (id=436): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x21008, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) chroot(&(0x7f0000000080)='./file0/../file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a0d006, 0x0) pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000180)='./file0\x00') 41.630392755s ago: executing program 1 (id=438): syz_mount_image$fuse(0x0, &(0x7f0000002440)='./file0\x00', 0x800, 0x0, 0x1, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000840), 0x1000000, &(0x7f0000000200)={[{@huge_always}]}) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f0000000000)='./file0\x00', 0x2c0028, &(0x7f0000000200)=ANY=[], 0x1, 0x0, 0x0) creat(&(0x7f00000011c0)='./file0\x00', 0x88) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)) 39.610482253s ago: executing program 1 (id=447): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) unshare(0x22020600) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x0, '\x00', 0x0, r1, 0x4, 0x2}, 0x50) 39.132296561s ago: executing program 33 (id=447): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) unshare(0x22020600) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x0, '\x00', 0x0, r1, 0x4, 0x2}, 0x50) 10.955709039s ago: executing program 5 (id=622): syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0xad3c3b, 0xffffffffffffffff, 0x7, 0x0, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$nfs4(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x106c0e0, &(0x7f00000006c0)={[{'inode64'}]}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000000340)={0x2020}, 0xcb0a) 10.644568118s ago: executing program 5 (id=624): r0 = socket(0x2b, 0x1, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x20000001) connect$unix(r0, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) 10.415641541s ago: executing program 5 (id=626): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000020000000400000004"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000006007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000005000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 10.119739178s ago: executing program 5 (id=628): syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000380)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0xa18812, &(0x7f00000003c0)=ANY=[@ANYBLOB='dmask=00000000000000000002621,utf8,umask=00000000000000000200000,namecase=1,discard,errors=remount-ro,umask=00000000000000000200004,umask=00000000000000000003377,namecase=1,utf8,iocharset=iso8859-4,iocharset=cp874,dmask=01777777777777777777770,errors=remount-ro,uid=', @ANYRESHEX=0x0, @ANYBLOB="6a06164611dfd71ddbc3fca168c6bdc20ccdde4d70eefd6cf6127a7043ee33b2a3aec7a0b48358e6be1b2050574020784e9a1f5fed703b50d12e203e456f3b401c22c8d277af8cb7514da4716a4aa885b3b59e6a5417b1f534d5a9c13675de904e76cbecc2eeeb57328e0124cb1fffc635cea91ef6ba961330d7890aa176ceca2f7646dd25ff9027d378c2c790c90c9f139aadbec9", @ANYRESDEC=0x0, @ANYRESHEX, @ANYRESOCT, @ANYRES8=0x0, @ANYRESDEC=0x0, @ANYBLOB="49440fb4005cba20653d2326292c265c2c00e79feca4a2e1053fdd2c84e7a89aa4ee02cbb47695d7ade8fd4362d0e37fbbb365b529e3d4cfa7ec78bc709784cc24ff7cfd3accb1a53fcd27bcb1794fcc15fc6eeae6dd85887fec609d9df9eb63c1eb27e9a7e7c87e551a878ce3db471a5a29b9509986d21054cc6d2e9be1e16b9e2e6e9df5b4b95e1b"], 0x21, 0x1502, &(0x7f0000002180)="$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") mkdir(&(0x7f0000000300)='./bus\x00', 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open$dir(&(0x7f0000000040)='./bus\x00', 0x10100, 0xc0) mkdirat(r0, &(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK/file0\x00', 0x50) 9.031772211s ago: executing program 5 (id=631): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) bind$packet(r0, &(0x7f00000001c0)={0x11, 0x21, r1, 0x1, 0xb5, 0x6, @multicast}, 0x14) sendto$packet(r0, &(0x7f0000000180)="0b0314002e0064000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x88a8ffff, &(0x7f0000000140)={0x11, 0x88a8, r1}, 0x14) 6.894423387s ago: executing program 5 (id=641): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000003c0)={r0, &(0x7f0000000080), &(0x7f00000008c0)=""/177}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000400008500000001000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0)={r1}, 0xc) 6.49866617s ago: executing program 34 (id=641): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000003c0)={r0, &(0x7f0000000080), &(0x7f00000008c0)=""/177}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000400008500000001000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0)={r1}, 0xc) 5.344455497s ago: executing program 4 (id=650): syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f00000000c0)='./file1\x00', 0x8488, &(0x7f0000000780), 0xfe, 0x10fd, &(0x7f0000001140)="$eJzs2T9rFEEYBvBnds8/3cqmXwQtLCQknF8ghcK1ttqIpDJVrlL8OH4cTWUf0msRsF9Zb/dO5UTwTm1+PzjmvYd9Z2fKmQ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMZsmnkhxUSTtlVZKSdN3F4ipJN+V33tdVSp6eLpaPz+dPlknqb4+XZ0kZuoa2tMf3brfzdt4et48OTu5/WL5+8+rF2dnp+ThNSZfL6/1vpYzrAQAAAH7U76z5z+8HAAAAfmdvFwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAf6hvNnU7FVWSknTdxeIqSbel78Y/Wh8AAACwu5Iqz5tt+eoaYONhPjZlnQ/jlzLUR3m3pR8AAAD4pf7WWHz/fb3c3JzHH2S2PpcP2d3Mcni4+j8O+XyS1EmOfpr88vrty+lX+vpv7wUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgK/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAAAAAPYKAAD///F61s8=") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.stat\x00', 0x275a, 0x0) symlinkat(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') write$binfmt_script(r0, &(0x7f0000000080), 0xfea7) ftruncate(r0, 0xf88) 5.323705208s ago: executing program 3 (id=651): r0 = syz_usb_connect(0x3, 0x24, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0xec, 0x18, 0x90, 0x20, 0x856, 0xac30, 0xdaf9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x77, 0x2, 0x0, 0xb3, 0xcb, 0x2d}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000680)={0x1c, &(0x7f00000005c0)={0x0, 0x0, 0x1, 'T'}, 0x0, 0x0}) 4.274587469s ago: executing program 4 (id=653): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$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") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000002b40), 0x24, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)=@known='system.posix_acl_default\x00') 3.993484816s ago: executing program 6 (id=655): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000000, &(0x7f00000022c0)=ANY=[], 0x1, 0x6ca, &(0x7f0000000500)="$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") r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf64(r0, &(0x7f0000000e00)=ANY=[@ANYBLOB="7f454c4606f80409090000000000000003003e00ba000000ad010000000000004000000000000000fa01000000000000000000001000380004"], 0x120) close(r0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 3.965434768s ago: executing program 0 (id=656): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40801, 0x0) r1 = epoll_create(0x8) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x90000001}) ioctl$FS_IOC_GETFLAGS(r0, 0x5437, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) 3.504568185s ago: executing program 4 (id=657): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x40400, 0x0) fchdir(r0) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000013c0)='cmdline\x00') read$FUSE(r1, &(0x7f0000001400)={0x2020}, 0x2020) 3.400787131s ago: executing program 0 (id=658): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x17, &(0x7f0000000080)=0x1, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="0b0312002e9b97cf5db4d0d010f6", 0xe, 0x0, &(0x7f0000000100)={0x11, 0x88a8, r2, 0x1, 0x0, 0x6, @local}, 0x14) 3.268009159s ago: executing program 3 (id=659): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) syz_emit_ethernet(0x4d, &(0x7f0000000400)={@link_local, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x17, 0x11, 0x0, @remote, @local, {[], {0x3, 0xe22, 0x17, 0x0, @gue={{0x2, 0x1, 0x1, 0x2, 0x100, @val=0x80}, "2bac20af85b2dd"}}}}}}}, 0x0) 3.189951553s ago: executing program 6 (id=660): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x0, &(0x7f0000000000), 0x0, 0x248, &(0x7f0000000940)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='mnt/encrypted_dir\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0) setreuid(0x0, 0xee01) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f00000006c0)=@v2={0x2, @adiantum, 0x4, '\x00', @a}) 3.110411918s ago: executing program 0 (id=661): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r1, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r0}, 0x20) recvmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x40012102, 0x0) 3.109850748s ago: executing program 4 (id=662): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x204001, &(0x7f0000000240), 0x1, 0xb9f, &(0x7f0000000c00)="$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") r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$binfmt_register(r0, &(0x7f00000001c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x1, 0x3a, 'usrjquota=', 0x3a, '\x00\x03!\f\xee\x998r~\b\x13\x89\xae\xf1\x06hz\xcc\xd6\xbb\xb8\x19\x90\x9e\xdb\xa2F\xfa_F(\x05\b\x13\x82\x12\xad\x0f^\xdc\xf2\xb5', 0x3a, './file2', 0x3a, [0x46]}, 0x5c) socket$inet_tcp(0x2, 0x1, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2390024, 0x0) 2.837885694s ago: executing program 3 (id=663): syz_mount_image$exfat(&(0x7f00000005c0), &(0x7f0000000240)='./bus\x00', 0x3010050, &(0x7f0000000600)=ANY=[], 0x41, 0x14fe, &(0x7f0000000700)="$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") mount$overlay(0x0, &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x2, 0x0) syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4808, 0x0, 0x0, 0x0, &(0x7f0000000000)) syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./bus/file0\x00', 0x80008, 0x0, 0x0, 0x0, &(0x7f0000000000)) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)='./bus/file0\x00') 2.775309168s ago: executing program 0 (id=664): syz_mount_image$reiserfs(&(0x7f0000000180), &(0x7f0000000280)='./file0\x00', 0x1000098, &(0x7f00000002c0), 0xfe, 0x10f4, &(0x7f00000022c0)="$eJzs2LGK1FAUBuD/JqNgNXK3DwtaKMjiMr7AFgrTWFjbDVZ2TqXM4/g4spX9sg+wxYK9ksToCoIsGxwYvg9Ccn9ycnLLcwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC9RXI/yVGT1ClrkpSk687Xl0m6KX/4pW1S8ubdevvyw+rVdnwtfdak9FXDup4+qnVVV/W0vjg6e1y3Hz+9b2+0LOlycb3bPHh9NetW+t7trF8EAACAw/D9zpZ77g8AAAD8y2wHCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAzqNNDk6QkXXe+vkzS7fe3AAAAgDsqafJ2+bd8PAb47Vm+LsuQT74Ni+f5PNY/vX33e7cvAQAAgANVbszjT7L4NZf32XEWOTkZ1z9vuTpL2mEy/9PF9W4zXMe7TfmfGwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH6wA8cCAAAAAML8rdPo2AAAAAAAAAAAAAAAgKkCAAD//4CP0SQ=") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) 2.7263706s ago: executing program 6 (id=665): syz_mount_image$hfs(&(0x7f0000002c80), &(0x7f0000000080)='./file1\x00', 0x804490, &(0x7f0000002a00)=ANY=[], 0xfd, 0x28a, &(0x7f0000002cc0)="$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") r0 = open(&(0x7f0000000100)='./bus\x00', 0x143142, 0xa2) write$FUSE_INIT(r0, &(0x7f0000000140)={0x50}, 0xffd3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4142, 0x1f7) ftruncate(r1, 0xfbf) 2.074487239s ago: executing program 3 (id=666): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000280)={r1, r1, 0x1, 0x2, &(0x7f00000004c0)="0006", 0x48, 0x1, 0x5, 0x8, 0x8, 0x1, 0x2, 'syz0\x00'}) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r0, 0x800448d2, &(0x7f0000000200)={0x1, &(0x7f0000000140)=[{@none}]}) 2.003360103s ago: executing program 6 (id=667): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x4}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000000c0)={r1, 0xf9b}, &(0x7f0000000100)=0x8) 1.931114747s ago: executing program 4 (id=668): syz_mount_image$xfs(&(0x7f0000009700), &(0x7f0000009740)='./file0\x00', 0x4000000, &(0x7f0000000040)={[{@filestreams}, {@sysvgroups}, {@noalign}, {@nolazytime}, {@inode32}, {@discard}, {@prjquota}, {@inode64}, {@gquota}, {@nolargeio}, {@nodiscard}]}, 0x1, 0x975c, &(0x7f000001c600)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x441, 0x108) fallocate(r0, 0x20, 0x0, 0x8000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x20441, 0x184) fallocate(r1, 0x0, 0x5, 0x4000) 1.645287334s ago: executing program 3 (id=669): syz_open_procfs(0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x1}, 0x1c) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000005300)=[{0x28, 0x0, 0xfb, 0xfffff034}, {0x80000006, 0x66}]}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "028200", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x0, 0x0, 0xfffc}}}}}}}, 0x0) 1.629091775s ago: executing program 6 (id=670): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x30, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x0, 0x3}}}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1374}]}, 0x30}, 0x1, 0x0, 0x0, 0x24009c80}, 0x40048d4) 1.314458173s ago: executing program 3 (id=671): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000600)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_4={0x3, 0x1, 0x6, "d021a7a8"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "340e"}, @local=@item_012={0x2, 0x2, 0x5, "bfc0"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/devices\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f000000ac40)={0x2020}, 0x2020) 1.146079063s ago: executing program 6 (id=672): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x8002, &(0x7f00000000c0)=ANY=[@ANYBLOB="696f636861727365743d6d616363726f617469616e2c646973636172643d3078303030303030303030303030303030332c6e6f646973636172642c6572726f72733d636f6e74696e75652c696f636861727365743d6d6163637972696c6c69632c0067add4ceec7cb8702b1b4a0ff322839e69b507d7478e0706b00408dc59283f5c0159b8e3c0289dcb182504844ef8e6972cdb3f50680fc9602ed27c1f6b47a91f941f154ae205d34a9b7a7c67efa0c0e2a70251d664fce12ae64a5a521aa83080b7672c4e1566a61a0ade4b6c9d78151053d9fb31fd2cfc77f269f873e14e5fe3c46c0acbb22d40391ae31d2025dcd947adf76739ae4ecbe3b630040b37e2b09d7816e0b93981de1147532cf2f46d4d4904f68fb43cd165b9"], 0x1, 0x6249, &(0x7f000000c6c0)="$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") chdir(&(0x7f0000000340)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x105042, 0xa) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) 991.951342ms ago: executing program 0 (id=673): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) prctl$PR_SET_SECCOMP(0x59616d61, 0x2, 0x0) 362.529708ms ago: executing program 0 (id=674): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000010c0)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000300)={r2, 0x1, 0x30}, &(0x7f0000000340)=0xc) 0s ago: executing program 4 (id=675): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x14040}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000020700000a58000000090a010400000000000000000a0000040900010073797a310000000008000a40fffffffc08000540000000020900020073797a3100000000080003400000011c08000640ffffff000c000b40000000000000009014000000110001"], 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): alized and connected. [ 88.212866][ T124] gp8psk: found Genpix USB device pID = 203 (hex) [ 88.501043][ T950] usb 3-1: USB disconnect, device number 2 [ 88.641382][ T950] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 89.129494][ T7] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 89.319550][ T7] usb 2-1: Using ep0 maxpacket: 8 [ 89.329716][ T7] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 89.348202][ T7] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 89.379253][ T7] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 89.392989][ T7] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 89.403735][ T7] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 89.417695][ T7] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 89.466995][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.704881][ T7] usb 2-1: usb_control_msg returned -32 [ 89.711076][ T7] usbtmc 2-1:16.0: can't read capabilities [ 89.791845][ T4538] loop3: detected capacity change from 0 to 16 [ 89.854652][ T4538] erofs: (device loop3): mounted with root inode @ nid 36. [ 90.122349][ T4545] usbtmc 2-1:16.0: stb usb_control_msg returned -32 [ 90.155401][ T4547] device pim6reg1 entered promiscuous mode [ 90.200566][ T7] usb 2-1: USB disconnect, device number 3 [ 90.705759][ T4561] Illegal XDP return value 472170060 on prog (id 7) dev syz_tun, expect packet loss! [ 90.716114][ T4392] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 90.923847][ T4392] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 90.949817][ T4563] loop4: detected capacity change from 0 to 512 [ 90.976775][ T4392] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 91.000862][ T4563] EXT4-fs: Ignoring removed oldalloc option [ 91.039160][ T4392] usb 1-1: New USB device found, idVendor=056a, idProduct=00bb, bcdDevice= 0.00 [ 91.109494][ T4392] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.119194][ T4563] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 91.187446][ T4392] usb 1-1: config 0 descriptor?? [ 91.289303][ C0] sched: RT throttling activated [ 91.401837][ T4553] loop2: detected capacity change from 0 to 131072 [ 91.422442][ T4553] F2FS-fs (loop2): invalid crc value [ 91.464429][ T4553] F2FS-fs (loop2): Found nat_bits in checkpoint [ 91.533667][ T4553] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 91.627601][ T4278] EXT4-fs (loop4): unmounting filesystem. [ 91.628491][ T4392] wacom 0003:056A:00BB.0003: Unknown device_type for 'HID 056a:00bb'. Assuming pen. [ 91.696576][ T4392] wacom 0003:056A:00BB.0003: hidraw0: USB HID v0.06 Device [HID 056a:00bb] on usb-dummy_hcd.0-1/input0 [ 91.739429][ T4392] input: Wacom Intuos4 12x19 Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:056A:00BB.0003/input/input7 [ 91.873425][ T4392] usb 1-1: USB disconnect, device number 4 [ 92.285537][ T4586] fido_id[4586]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 93.020553][ T26] audit: type=1326 audit(1770773580.693:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4589 comm="syz.1.81" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd44879bf79 code=0x7fc00000 [ 93.069537][ T26] audit: type=1326 audit(1770773580.693:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4589 comm="syz.1.81" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fd44879bf79 code=0x7fc00000 [ 93.133964][ T26] audit: type=1326 audit(1770773580.693:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4589 comm="syz.1.81" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd44879bf79 code=0x7fc00000 [ 93.229474][ T26] audit: type=1326 audit(1770773580.693:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4589 comm="syz.1.81" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd44879bf79 code=0x7fc00000 [ 93.289506][ T26] audit: type=1326 audit(1770773580.693:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4589 comm="syz.1.81" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd44879bf79 code=0x7fc00000 [ 93.379406][ T26] audit: type=1326 audit(1770773580.693:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4589 comm="syz.1.81" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd44879bf79 code=0x7fc00000 [ 93.471511][ T26] audit: type=1326 audit(1770773580.693:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4589 comm="syz.1.81" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd44879bf79 code=0x7fc00000 [ 93.488859][ T4611] loop0: detected capacity change from 0 to 512 [ 93.556587][ T26] audit: type=1326 audit(1770773580.693:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4589 comm="syz.1.81" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd44879bf79 code=0x7fc00000 [ 93.582624][ T26] audit: type=1326 audit(1770773580.693:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4589 comm="syz.1.81" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd44879bf79 code=0x7fc00000 [ 93.601725][ T4611] EXT4-fs: Ignoring removed oldalloc option [ 93.649255][ T26] audit: type=1326 audit(1770773580.693:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4589 comm="syz.1.81" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd44879bf79 code=0x7fc00000 [ 93.748869][ T4611] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 94.014391][ T4277] EXT4-fs (loop0): unmounting filesystem. [ 94.252987][ T7] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 94.429437][ T4392] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 94.440737][ T7] usb 4-1: Using ep0 maxpacket: 8 [ 94.460658][ T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 94.491674][ T7] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 94.511441][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.573701][ T7] usb 4-1: config 0 descriptor?? [ 94.659678][ T4392] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.689226][ T4627] loop2: detected capacity change from 0 to 8192 [ 94.724915][ T4392] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.761018][ T4392] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 94.792688][ T7] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 94.816876][ T4627] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 94.858243][ T4392] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 94.914384][ T4392] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.922722][ T4627] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 94.932604][ T4627] REISERFS (device loop2): using ordered data mode [ 94.939238][ T4627] reiserfs: using flush barriers [ 94.949698][ T4627] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 94.977323][ T4627] REISERFS (device loop2): checking transaction log (loop2) [ 94.994401][ T4392] usb 5-1: config 0 descriptor?? [ 95.285934][ T4627] REISERFS (device loop2): Using tea hash to sort names [ 95.325636][ T4627] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 95.375546][ T4627] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 95.494790][ T4392] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 95.533465][ T4392] plantronics 0003:047F:FFFF.0004: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 95.555190][ T4637] loop0: detected capacity change from 0 to 1024 [ 95.859705][ T7] usb 5-1: USB disconnect, device number 2 [ 96.160448][ T4640] fido_id[4640]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 96.355180][ T4647] loop2: detected capacity change from 0 to 512 [ 96.407865][ T4647] EXT4-fs: Ignoring removed oldalloc option [ 96.468852][ T4647] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 96.539735][ T4646] loop0: detected capacity change from 0 to 8192 [ 96.625049][ T4646] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 96.741690][ T4646] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 96.781833][ T4646] REISERFS (device loop0): using ordered data mode [ 96.812827][ T4646] reiserfs: using flush barriers [ 96.853355][ T4279] EXT4-fs (loop2): unmounting filesystem. [ 96.879391][ T4646] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 96.975466][ T4646] REISERFS (device loop0): checking transaction log (loop0) [ 97.015279][ T4652] netlink: 'syz.2.104': attribute type 13 has an invalid length. [ 97.079699][ T7] usb 4-1: USB disconnect, device number 3 [ 97.129398][ T4652] netlink: 24859 bytes leftover after parsing attributes in process `syz.2.104'. [ 97.333157][ T4646] REISERFS (device loop0): Using tea hash to sort names [ 97.369999][ T4646] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 97.859797][ T4258] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 98.079863][ T4258] usb 2-1: Using ep0 maxpacket: 8 [ 98.107068][ T4258] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 98.150080][ T4258] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 98.188594][ T4258] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 98.219517][ T4258] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 98.263989][ T4258] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 98.299362][ T4258] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.575925][ T4258] usb 2-1: GET_CAPABILITIES returned 0 [ 98.581616][ T4258] usbtmc 2-1:16.0: can't read capabilities [ 98.758133][ T4678] loop2: detected capacity change from 0 to 1024 [ 98.925691][ T4340] usb 2-1: USB disconnect, device number 4 [ 99.517114][ T4692] netlink: 72 bytes leftover after parsing attributes in process `syz.4.118'. [ 99.968936][ T4697] loop3: detected capacity change from 0 to 8192 [ 100.178651][ T4697] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 100.251575][ T4697] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 100.302706][ T4697] REISERFS (device loop3): using ordered data mode [ 100.330845][ T4697] reiserfs: using flush barriers [ 100.379539][ T4697] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 100.457424][ T4697] REISERFS (device loop3): checking transaction log (loop3) [ 100.681081][ T4715] loop1: detected capacity change from 0 to 512 [ 100.740416][ T4715] EXT4-fs: Ignoring removed oldalloc option [ 100.799460][ T4715] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 101.110858][ T4697] REISERFS (device loop3): Using tea hash to sort names [ 101.121723][ T4269] EXT4-fs (loop1): unmounting filesystem. [ 101.149714][ T4697] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 101.326865][ T4724] serio: Serial port ptm0 [ 101.775198][ T4727] loop0: detected capacity change from 0 to 4096 [ 101.805481][ T4732] netlink: 16 bytes leftover after parsing attributes in process `syz.2.135'. [ 102.211641][ T4738] loop2: detected capacity change from 0 to 128 [ 102.439735][ T4744] syz.2.138: attempt to access beyond end of device [ 102.439735][ T4744] loop2: rw=2049, sector=145, nr_sectors = 312 limit=128 [ 102.549219][ T4743] syz.0.130 (4743) used greatest stack depth: 20624 bytes left [ 102.847509][ T46] kworker/u4:3: attempt to access beyond end of device [ 102.847509][ T46] loop2: rw=1, sector=457, nr_sectors = 584 limit=128 [ 102.969972][ T26] kauditd_printk_skb: 48 callbacks suppressed [ 102.969989][ T26] audit: type=1326 audit(1770773590.653:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4748 comm="syz.4.143" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8fe899bf79 code=0x0 [ 103.296161][ T4757] loop0: detected capacity change from 0 to 512 [ 103.347712][ T4757] EXT4-fs: Ignoring removed bh option [ 103.543561][ T4760] loop3: detected capacity change from 0 to 512 [ 103.596335][ T4760] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 103.667390][ T4757] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.144: error while reading EA inode 32 err=-116 [ 103.825918][ T4760] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 103.913801][ T4757] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2800: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 103.937963][ T4760] ext4 filesystem being mounted at /26/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 104.030534][ T4757] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.144: error while reading EA inode 32 err=-116 [ 104.150219][ T4767] netlink: 8 bytes leftover after parsing attributes in process `syz.1.147'. [ 104.181051][ T4757] EXT4-fs (loop0): 1 orphan inode deleted [ 104.209391][ T4757] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 104.694037][ T4273] EXT4-fs (loop3): unmounting filesystem. [ 104.753822][ T4772] loop1: detected capacity change from 0 to 32768 [ 104.794280][ T4772] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop1 scanned by syz.1.149 (4772) [ 104.826005][ T4772] BTRFS info (device loop1): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 104.838341][ T4772] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 104.847990][ T4772] BTRFS info (device loop1): using free space tree [ 104.909878][ T4774] loop2: detected capacity change from 0 to 8192 [ 104.998212][ T4774] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 105.001822][ T4277] EXT4-fs (loop0): unmounting filesystem. [ 105.057650][ T4774] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 105.139368][ T4340] usb 5-1: new low-speed USB device number 3 using dummy_hcd [ 105.193375][ T4774] REISERFS (device loop2): using ordered data mode [ 105.200481][ T4774] reiserfs: using flush barriers [ 105.207002][ T4774] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 105.226058][ T4774] REISERFS (device loop2): checking transaction log (loop2) [ 105.235618][ T4772] BTRFS info (device loop1): enabling ssd optimizations [ 105.329820][ T26] audit: type=1800 audit(1770773593.003:62): pid=4772 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.149" name="file2" dev="loop1" ino=261 res=0 errno=0 [ 105.358094][ T4772] fs-verity: sha512 using implementation "sha512-avx2" [ 105.397417][ T4772] BTRFS info (device loop1): setting compat-ro feature flag for VERITY (0x4) [ 105.412724][ T4340] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 105.446190][ T4340] usb 5-1: config 0 has no interface number 0 [ 105.452510][ T4340] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 105.463861][ T4340] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 105.476463][ T4340] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 105.485922][ T4340] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.495935][ T4340] usb 5-1: config 0 descriptor?? [ 105.536959][ T4778] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 105.600660][ T4340] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 105.697618][ T4269] BTRFS info (device loop1): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 105.899609][ T4340] usb 5-1: USB disconnect, device number 3 [ 105.905542][ C1] iowarrior 5-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 106.118024][ T4774] REISERFS (device loop2): Using tea hash to sort names [ 106.156559][ T4774] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 107.097411][ T4826] netlink: 4 bytes leftover after parsing attributes in process `syz.1.164'. [ 107.179665][ T4827] netlink: 280 bytes leftover after parsing attributes in process `syz.3.162'. [ 107.329403][ T7] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 107.549589][ T7] usb 1-1: Using ep0 maxpacket: 32 [ 107.597877][ T7] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 9 [ 107.670140][ T7] usb 1-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 107.679253][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.729420][ T7] usb 1-1: Product: syz [ 107.733739][ T7] usb 1-1: Manufacturer: syz [ 107.764277][ T7] usb 1-1: SerialNumber: syz [ 107.782686][ T7] usb 1-1: config 0 descriptor?? [ 107.790067][ T4825] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 107.814065][ T7] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input11 [ 108.335269][ T950] usb 1-1: USB disconnect, device number 5 [ 108.341241][ C0] usbtouchscreen 1-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 109.568272][ T4871] loop1: detected capacity change from 0 to 512 [ 109.625759][ T4871] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 109.748248][ T4868] loop4: detected capacity change from 0 to 4096 [ 109.774823][ T4871] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 109.802845][ T4871] ext4 filesystem being mounted at /45/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 109.805639][ T4880] loop0: detected capacity change from 0 to 512 [ 109.858645][ T4880] EXT4-fs (loop0): orphan cleanup on readonly fs [ 109.949579][ T4880] EXT4-fs error (device loop0): ext4_ext_check_inode:520: inode #4: comm syz.0.183: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 1(1) [ 110.006126][ T4871] EXT4-fs error (device loop1): ext4_do_update_inode:5272: inode #2: comm syz.1.181: corrupted inode contents [ 110.028114][ T4868] ntfs: volume version 3.1. [ 110.039715][ T4880] EXT4-fs error (device loop0): ext4_quota_enable:7046: comm syz.0.183: Bad quota inode: 4, type: 1 [ 110.063431][ T4871] EXT4-fs error (device loop1): ext4_dirty_inode:6137: inode #2: comm syz.1.181: mark_inode_dirty error [ 110.064629][ T4880] EXT4-fs warning (device loop0): ext4_enable_quotas:7087: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 110.100806][ T4871] EXT4-fs error (device loop1): ext4_do_update_inode:5272: inode #2: comm syz.1.181: corrupted inode contents [ 110.135776][ T4880] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 110.144673][ T4871] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #2: comm syz.1.181: mark_inode_dirty error [ 110.163557][ T4880] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 110.241502][ T4882] EXT4-fs error (device loop1): ext4_lookup:1855: inode #18: comm syz.1.181: 'wÅü5ÔTÕÔ)­`)YFæ¾nA­½@T<Ÿ3»Ú‚$¢ó×rçcnH³<¿pƒrèñ¹“>ÅwC¾" žð-ùËòöè€Ó8' linked to parent dir [ 110.330244][ T4880] netlink: 'syz.0.183': attribute type 1 has an invalid length. [ 110.338458][ T4880] netlink: 'syz.0.183': attribute type 3 has an invalid length. [ 110.339025][ T4859] loop3: detected capacity change from 0 to 32768 [ 110.409452][ T4880] netlink: 12 bytes leftover after parsing attributes in process `syz.0.183'. [ 110.448955][ T4887] loop4: detected capacity change from 0 to 8 [ 110.562583][ T4269] EXT4-fs (loop1): unmounting filesystem. [ 110.569806][ T4859] XFS (loop3): Mounting V5 Filesystem [ 110.778718][ T4277] EXT4-fs (loop0): unmounting filesystem. [ 110.847450][ T4859] XFS (loop3): Ending clean mount [ 110.903610][ T4859] XFS (loop3): Quotacheck needed: Please wait. [ 110.965843][ T4898] loop1: detected capacity change from 0 to 128 [ 110.998328][ T4859] XFS (loop3): Quotacheck: Done. [ 111.131046][ T4898] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 111.192240][ T4898] hpfs: filesystem error: improperly stopped [ 111.198328][ T4898] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 111.325826][ T4898] hpfs: You really don't want any checks? You are crazy... [ 111.340309][ T4907] loop0: detected capacity change from 0 to 128 [ 111.362522][ T4898] hpfs: hpfs_map_sector(): read error [ 111.367965][ T4898] hpfs: code page support is disabled [ 111.400949][ T4273] XFS (loop3): Unmounting Filesystem [ 111.417029][ T4898] hpfs: hpfs_map_4sectors(): unaligned read [ 111.467024][ T4898] hpfs: hpfs_map_4sectors(): unaligned read [ 111.487553][ T4898] hpfs: filesystem error: unable to find root dir [ 111.493276][ T4910] syz.0.191: attempt to access beyond end of device [ 111.493276][ T4910] loop0: rw=2049, sector=145, nr_sectors = 344 limit=128 [ 111.821707][ T46] kworker/u4:3: attempt to access beyond end of device [ 111.821707][ T46] loop0: rw=1, sector=489, nr_sectors = 552 limit=128 [ 112.616146][ T4281] Bluetooth: hci4: SCO packet for unknown connection handle 522 [ 112.895340][ T4933] loop2: detected capacity change from 0 to 32768 [ 112.930253][ T4933] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.200 (4933) [ 113.001977][ T4933] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 113.012392][ T4933] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 113.021280][ T4933] BTRFS info (device loop2): force clearing of disk cache [ 113.028467][ T4933] BTRFS info (device loop2): enabling auto defrag [ 113.035362][ T4933] BTRFS info (device loop2): max_inline at 0 [ 113.041507][ T4933] BTRFS info (device loop2): enabling disk space caching [ 113.048675][ T4933] BTRFS info (device loop2): disk space caching is enabled [ 113.064921][ T4944] 9pnet: p9_errstr2errno: server reported unknown error @cÿÿÿÿÿÿÿÿD†üB€|˜0x0000000000000004 [ 113.577011][ T4933] BTRFS info (device loop2): enabling ssd optimizations [ 113.586697][ T4933] BTRFS info (device loop2): rebuilding free space tree [ 113.637032][ T4974] serio: Serial port ptm0 [ 113.643264][ T4933] BTRFS info (device loop2): disabling free space tree [ 113.650374][ T4933] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 113.659482][ T950] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 113.660848][ T4933] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 113.889460][ T950] usb 4-1: Using ep0 maxpacket: 8 [ 113.902076][ T950] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 113.933157][ T950] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 113.963767][ T950] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 114.014661][ T950] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 114.061626][ T950] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 114.094426][ T950] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.338422][ T950] usb 4-1: GET_CAPABILITIES returned 0 [ 114.344248][ T950] usbtmc 4-1:16.0: can't read capabilities [ 114.530367][ T4279] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 114.620537][ T950] usb 4-1: USB disconnect, device number 4 [ 115.164427][ T22] kernel write not supported for file /sg0 (pid: 22 comm: kworker/1:0) [ 116.060850][ T5014] loop3: detected capacity change from 0 to 32768 [ 116.135119][ T5030] input: syz1 as /devices/virtual/input/input12 [ 116.146766][ T5014] XFS (loop3): Mounting V5 Filesystem [ 116.282642][ T5014] XFS (loop3): Ending clean mount [ 116.326028][ T5014] XFS (loop3): Quotacheck needed: Please wait. [ 116.432497][ T5014] XFS (loop3): Quotacheck: Done. [ 116.623119][ T5041] loop1: detected capacity change from 0 to 256 [ 116.734362][ T5041] exfat: Deprecated parameter 'utf8' [ 116.860028][ T5045] loop0: detected capacity change from 0 to 2048 [ 116.875214][ T4273] XFS (loop3): Unmounting Filesystem [ 116.939072][ T5041] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 117.200740][ T5051] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 117.332916][ T5045] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: directory entry across blocks - offset=0, inode=2, rec_len=1040, name_len=1 [ 117.442580][ T5045] Remounting filesystem read-only [ 117.444347][ T5055] netlink: 12 bytes leftover after parsing attributes in process `syz.4.237'. [ 117.925778][ T5067] serio: Serial port ptm0 [ 118.376447][ T5084] loop4: detected capacity change from 0 to 512 [ 118.548104][ T5084] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 118.558386][ T5084] ext4 filesystem being mounted at /47/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.781318][ T4278] EXT4-fs (loop4): unmounting filesystem. [ 118.946550][ T5098] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 119.326436][ T5110] serio: Serial port ptm0 [ 119.618334][ T5125] loop2: detected capacity change from 0 to 16 [ 119.627954][ T5124] mmap: syz.4.262 (5124) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 119.676420][ T5124] binder: 5122:5124 ioctl c018620c 2000000002c0 returned -1 [ 119.726066][ T5125] erofs: (device loop2): mounted with root inode @ nid 36. [ 120.071106][ T5133] loop0: detected capacity change from 0 to 2048 [ 120.148000][ T5133] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 120.172133][ T5133] EXT4-fs (loop0): shut down requested (2) [ 120.200609][ T5136] loop3: detected capacity change from 0 to 4096 [ 120.309651][ T4277] EXT4-fs (loop0): unmounting filesystem. [ 120.585723][ T4273] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22. [ 120.603361][ T4273] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 120.644610][ T5150] sctp: [Deprecated]: syz.2.274 (pid 5150) Use of int in max_burst socket option deprecated. [ 120.644610][ T5150] Use struct sctp_assoc_value instead [ 120.998944][ T5158] loop2: detected capacity change from 0 to 1024 [ 121.036503][ T5158] EXT4-fs: Ignoring removed orlov option [ 121.079849][ T5158] EXT4-fs: inline encryption not supported [ 121.203002][ T5158] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 121.288739][ T5164] loop1: detected capacity change from 0 to 8192 [ 121.495619][ T5154] loop3: detected capacity change from 0 to 32768 [ 121.524695][ T4279] EXT4-fs (loop2): unmounting filesystem. [ 121.689875][ T5154] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 122.269944][ T4273] (syz-executor,4273,0):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72 [ 122.307878][ T5182] syz.0.284 uses obsolete (PF_INET,SOCK_PACKET) [ 122.390767][ T4273] ocfs2: Unmounting device (7,3) on (node local) [ 123.092679][ T5180] loop4: detected capacity change from 0 to 131072 [ 123.102001][ T5180] F2FS-fs (loop4): Invalid log sectorsize (67108873) [ 123.108764][ T5180] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 123.118805][ T5180] F2FS-fs (loop4): invalid crc value [ 123.190550][ T5180] F2FS-fs (loop4): Found nat_bits in checkpoint [ 123.252993][ T5180] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 123.260396][ T5180] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 123.489796][ T5194] loop3: detected capacity change from 0 to 64 [ 123.509534][ T22] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 123.719370][ T22] usb 1-1: Using ep0 maxpacket: 8 [ 123.728202][ T22] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 123.779513][ T22] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 123.812678][ T22] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.844490][ T22] usb 1-1: config 0 descriptor?? [ 124.093871][ T22] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 124.160253][ T5184] loop1: detected capacity change from 0 to 32768 [ 124.279595][ T5184] XFS (loop1): DAX unsupported by block device. Turning off DAX. [ 124.306523][ T5184] XFS (loop1): Mounting V5 Filesystem [ 124.344036][ T4332] usb 1-1: USB disconnect, device number 6 [ 124.424561][ T2872] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.468009][ T5184] XFS (loop1): Ending clean mount [ 124.491682][ T5184] XFS (loop1): Quotacheck needed: Please wait. [ 124.564153][ T5184] XFS (loop1): Quotacheck: Done. [ 124.622683][ T2872] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.736828][ T4269] XFS (loop1): Unmounting Filesystem [ 124.765418][ T2872] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.951889][ T2872] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.968588][ T5211] netlink: 72 bytes leftover after parsing attributes in process `syz.3.295'. [ 125.178468][ T22] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 125.369448][ T22] usb 5-1: Using ep0 maxpacket: 8 [ 125.378728][ T22] usb 5-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 125.419360][ T22] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.457649][ T22] usb 5-1: Product: syz [ 125.490117][ T22] usb 5-1: Manufacturer: syz [ 125.494794][ T22] usb 5-1: SerialNumber: syz [ 125.550436][ T22] usb 5-1: config 0 descriptor?? [ 125.558426][ T22] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 125.590887][ T5222] "syz.1.294" (5222) uses obsolete ecb(arc4) skcipher [ 125.640340][ T5223] loop3: detected capacity change from 0 to 512 [ 125.680071][ T4276] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 125.680756][ T5223] EXT4-fs: Ignoring removed bh option [ 125.693793][ T4274] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 125.705927][ T4274] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 125.743511][ T4274] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 125.764142][ T4274] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 125.771780][ T4274] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 125.912382][ T5223] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.298: error while reading EA inode 32 err=-116 [ 126.181731][ T5240] loop0: detected capacity change from 0 to 512 [ 126.192932][ T5223] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.298: error while reading EA inode 32 err=-116 [ 126.247241][ T5223] EXT4-fs (loop3): 1 orphan inode deleted [ 126.272004][ T5223] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 126.572690][ T22] usb 5-1: USB disconnect, device number 4 [ 126.636519][ T4273] EXT4-fs (loop3): unmounting filesystem. [ 126.830369][ T5251] ALSA: mixer_oss: invalid OSS volume 'arp_rcv' [ 126.836690][ T5251] ALSA: mixer_oss: invalid OSS volume '8847' [ 126.844005][ T5246] netlink: 4 bytes leftover after parsing attributes in process `syz.0.302'. [ 126.907907][ T5249] netlink: 48 bytes leftover after parsing attributes in process `syz.0.302'. [ 126.945360][ T5251] ALSA: mixer_oss: invalid OSS volume '00f7' [ 127.083044][ T5224] chnl_net:caif_netlink_parms(): no params data found [ 127.219998][ T5258] loop0: detected capacity change from 0 to 256 [ 127.244227][ T5261] loop3: detected capacity change from 0 to 512 [ 127.265807][ T5258] FAT-fs (loop0): Unrecognized mount option "Ò·œ|Ô±5˜¨èï·ÉÎù¿ïs>ÈY7Oÿh7·v÷wŽ^~ŒJ¥ÅzÔ Çµ(Fn!" or missing value [ 127.357391][ T5263] loop4: detected capacity change from 0 to 128 [ 127.383215][ T5261] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.306: inode has both inline data and extents flags [ 127.429900][ T5261] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.306: couldn't read orphan inode 15 (err -117) [ 127.467672][ T5263] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 127.498947][ T5261] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 127.508490][ T5263] ext4 filesystem being mounted at /55/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.711277][ T4278] EXT4-fs (loop4): unmounting filesystem. [ 127.736687][ T5224] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.763788][ T5224] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.806530][ T5224] device bridge_slave_0 entered promiscuous mode [ 127.829751][ T4281] Bluetooth: hci4: command 0x0409 tx timeout [ 127.980277][ T4273] EXT4-fs (loop3): unmounting filesystem. [ 128.078902][ T5224] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.102906][ T5224] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.130662][ T5224] device bridge_slave_1 entered promiscuous mode [ 128.156684][ T5275] device gretap0 entered promiscuous mode [ 128.178511][ T5283] process 'syz.3.314' launched './file0' with NULL argv: empty string added [ 128.479481][ T22] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 128.500167][ T5224] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 128.522839][ T5224] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 128.621000][ T2872] device hsr_slave_0 left promiscuous mode [ 128.654915][ T2872] device hsr_slave_1 left promiscuous mode [ 128.669534][ T22] usb 1-1: Using ep0 maxpacket: 8 [ 128.678645][ T22] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 128.698230][ T22] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 128.719391][ T4996] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 128.756265][ T22] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 128.766457][ T22] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 128.777862][ T5280] loop1: detected capacity change from 0 to 40427 [ 128.783973][ T22] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 128.803854][ T5280] F2FS-fs (loop1): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288) [ 128.806996][ T22] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 128.824843][ T22] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.836612][ T2872] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 128.838554][ T5280] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 128.861165][ T2872] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 128.883840][ T2872] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 128.884721][ T5280] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x35f7 [ 128.899458][ T2872] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 128.908125][ T2872] device bridge_slave_1 left promiscuous mode [ 128.916987][ T2872] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.928029][ T4996] usb 4-1: Using ep0 maxpacket: 32 [ 128.943481][ T4996] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.957502][ T4996] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.966875][ T5280] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x3ffff [ 128.985615][ T4996] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 129.005289][ T4996] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.006548][ T5280] F2FS-fs (loop1): invalid crc value [ 129.028045][ T4996] usb 4-1: config 0 descriptor?? [ 129.050514][ T2872] device bridge_slave_0 left promiscuous mode [ 129.062774][ T22] usb 1-1: usb_control_msg returned -32 [ 129.068432][ T22] usbtmc 1-1:16.0: can't read capabilities [ 129.077614][ T2872] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.088790][ T5280] F2FS-fs (loop1): Found nat_bits in checkpoint [ 129.197832][ T5280] F2FS-fs (loop1): Start checkpoint disabled! [ 129.207177][ T2872] device veth1_macvtap left promiscuous mode [ 129.224737][ T2872] device veth0_macvtap left promiscuous mode [ 129.238364][ T5280] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 129.242667][ T2872] device veth1_vlan left promiscuous mode [ 129.249527][ T5280] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 129.278537][ T2872] device veth0_vlan left promiscuous mode [ 129.389407][ T5280] F2FS-fs (loop1) : inject no more block in inc_valid_block_count of __allocate_data_block+0x460/0xaa0 [ 129.431288][ T5280] syz.1.312: attempt to access beyond end of device [ 129.431288][ T5280] loop1: rw=0, sector=49152, nr_sectors = 8 limit=40427 [ 129.434435][ T5302] usb 1-1: usbtmc_ioctl_clear_in_halt returned -32 [ 129.465013][ T4996] ft260 0003:0403:6030.0005: unknown main item tag 0x0 [ 129.490055][ T4996] ft260 0003:0403:6030.0005: hidraw0: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.3-1/input0 [ 129.505047][ T26] audit: type=1800 audit(1770773617.183:63): pid=5280 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.312" name="file1" dev="loop1" ino=10 res=0 errno=0 [ 129.662037][ T4996] ft260 0003:0403:6030.0005: chip code: 0000 0000 [ 129.712694][ T9] kworker/u4:0: attempt to access beyond end of device [ 129.712694][ T9] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 129.919794][ T4281] Bluetooth: hci4: command 0x041b tx timeout [ 130.068562][ T4996] ft260 0003:0403:6030.0005: failed to retrieve status: -71 [ 130.119587][ T4996] ft260 0003:0403:6030.0005: failed to reset I2C controller: -71 [ 130.153161][ T4996] usb 4-1: USB disconnect, device number 5 [ 130.264903][ T5305] fido_id[5305]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 130.545255][ T2872] team0 (unregistering): Port device team_slave_1 removed [ 130.594469][ T2872] team0 (unregistering): Port device team_slave_0 removed [ 130.656111][ T2872] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 130.726166][ T2872] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 131.115282][ T2872] bond0 (unregistering): Released all slaves [ 131.218367][ T4332] usb 1-1: USB disconnect, device number 7 [ 131.277186][ T5224] team0: Port device team_slave_0 added [ 131.317328][ T5224] team0: Port device team_slave_1 added [ 131.348395][ T5224] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 131.364487][ T5224] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 131.394487][ T5224] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 131.408089][ T5224] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 131.417864][ T5224] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 131.444100][ T5224] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 131.483710][ T5224] device hsr_slave_0 entered promiscuous mode [ 131.492167][ T5224] device hsr_slave_1 entered promiscuous mode [ 131.739219][ T5224] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 131.757790][ T5224] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 131.795285][ T5224] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 131.811849][ T5224] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 131.968870][ T5224] 8021q: adding VLAN 0 to HW filter on device bond0 [ 131.989734][ T4281] Bluetooth: hci4: command 0x040f tx timeout [ 131.998402][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 132.013528][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 132.027799][ T5224] 8021q: adding VLAN 0 to HW filter on device team0 [ 132.043152][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 132.052959][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 132.062858][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.070062][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 132.090368][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 132.099214][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 132.108310][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 132.117904][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.125167][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 132.136350][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 132.153660][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 132.163323][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 132.178986][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 132.201867][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 132.216224][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 132.226694][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 132.240120][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 132.255142][ T5224] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 132.267024][ T5224] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 132.276643][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 132.567554][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 132.576345][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 132.597983][ T5224] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 132.874878][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.881299][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.107613][ T2872] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 133.124669][ T2872] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 133.156604][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 133.171925][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 133.187065][ T5224] device veth0_vlan entered promiscuous mode [ 133.194546][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 133.204157][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 133.236585][ T5224] device veth1_vlan entered promiscuous mode [ 133.268989][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 133.278424][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 133.287944][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 133.296923][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 133.307885][ T5224] device veth0_macvtap entered promiscuous mode [ 133.324663][ T5224] device veth1_macvtap entered promiscuous mode [ 133.347128][ T5224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.358724][ T5224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.374994][ T5224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.386799][ T5224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.403877][ T5224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.417028][ T5224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.427238][ T5224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.446817][ T5224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.465204][ T5224] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 133.477205][ T2926] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 133.493238][ T2926] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 133.506031][ T5224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.518933][ T5224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.534138][ T5224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.545012][ T5224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.555404][ T5224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.572282][ T5224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.582708][ T5224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.593638][ T5224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.606220][ T5224] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 133.618326][ T2872] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 133.633987][ T2872] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 133.646186][ T5224] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.664840][ T5224] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.686500][ T5224] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.695888][ T5224] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.822464][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.840427][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.851749][ T2926] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 133.890521][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.898400][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.909784][ T2926] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 134.073622][ T4281] Bluetooth: hci4: command 0x0419 tx timeout [ 134.352461][ T5365] loop4: detected capacity change from 0 to 4096 [ 134.396776][ T5378] loop3: detected capacity change from 0 to 128 [ 134.594449][ T5382] syz.3.319: attempt to access beyond end of device [ 134.594449][ T5382] loop3: rw=2049, sector=145, nr_sectors = 408 limit=128 [ 134.718052][ T4278] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22. [ 134.732443][ T5377] loop1: detected capacity change from 0 to 8192 [ 134.757146][ T4278] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 134.821118][ T5377] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 134.865526][ T5377] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 134.882540][ T5377] REISERFS (device loop1): using ordered data mode [ 134.889221][ T5377] reiserfs: using flush barriers [ 134.945664][ T5377] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 134.964316][ T5377] REISERFS (device loop1): checking transaction log (loop1) [ 135.063283][ T2872] kworker/u4:4: attempt to access beyond end of device [ 135.063283][ T2872] loop3: rw=1, sector=553, nr_sectors = 488 limit=128 [ 135.258158][ T5386] loop0: detected capacity change from 0 to 4096 [ 135.323530][ T5377] REISERFS (device loop1): Using tea hash to sort names [ 135.385121][ T5386] ntfs: volume version 3.1. [ 135.396210][ T5377] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 136.215142][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 136.223876][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10a!!! [ 136.232661][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10a!!! [ 136.240971][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10a!!! [ 136.249734][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10a!!! [ 136.266085][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 136.274436][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 136.282771][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 136.291095][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 136.300575][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 137.677793][ T5425] loop5: detected capacity change from 0 to 128 [ 137.900585][ T5425] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 138.064436][ T5425] ext4 filesystem being mounted at /4/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 138.204290][ T5408] loop1: detected capacity change from 0 to 32768 [ 138.351121][ T5408] XFS (loop1): Mounting V5 Filesystem [ 138.477765][ T5408] XFS (loop1): Ending clean mount [ 138.519652][ T5408] XFS (loop1): Quotacheck needed: Please wait. [ 138.655432][ T5224] EXT4-fs (loop5): unmounting filesystem. [ 138.673491][ T5408] XFS (loop1): Quotacheck: Done. [ 138.702329][ T5451] loop0: detected capacity change from 0 to 256 [ 139.050292][ T4269] XFS (loop1): Unmounting Filesystem [ 139.253614][ T5464] netlink: 24 bytes leftover after parsing attributes in process `syz.0.346'. [ 139.487954][ T5460] loop5: detected capacity change from 0 to 8192 [ 139.562003][ T5460] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 139.729879][ T5460] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal [ 139.779469][ T5460] REISERFS (device loop5): using ordered data mode [ 139.782977][ T5474] loop4: detected capacity change from 0 to 1024 [ 139.786102][ T5460] reiserfs: using flush barriers [ 139.843818][ T5474] EXT4-fs: Ignoring removed orlov option [ 139.849385][ T5460] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 139.940860][ T5474] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 139.981128][ T5460] REISERFS (device loop5): checking transaction log (loop5) [ 140.296220][ T4278] EXT4-fs (loop4): unmounting filesystem. [ 140.827497][ T5488] netlink: 12 bytes leftover after parsing attributes in process `syz.4.353'. [ 140.857199][ T5460] REISERFS (device loop5): Using tea hash to sort names [ 140.900240][ T5460] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 141.178551][ T5493] loop1: detected capacity change from 0 to 2048 [ 141.331895][ T5493] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 141.470969][ T5493] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1113: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 141.794019][ T4269] EXT4-fs (loop1): unmounting filesystem. [ 141.909698][ T4997] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 141.938899][ T5509] loop3: detected capacity change from 0 to 64 [ 142.100636][ T4997] usb 5-1: Using ep0 maxpacket: 16 [ 142.116641][ T4997] usb 5-1: config 0 has no interfaces? [ 142.147141][ T4997] usb 5-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 142.187277][ T4997] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.217716][ T4997] usb 5-1: Product: syz [ 142.227877][ T4997] usb 5-1: Manufacturer: syz [ 142.271809][ T4997] usb 5-1: SerialNumber: syz [ 142.304754][ T4997] usb 5-1: config 0 descriptor?? [ 142.466804][ T5525] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input13 [ 142.553913][ T4996] usb 5-1: USB disconnect, device number 5 [ 142.649394][ T5530] sctp: [Deprecated]: syz.1.360 (pid 5530) Use of int in max_burst socket option deprecated. [ 142.649394][ T5530] Use struct sctp_assoc_value instead [ 142.744560][ T5522] loop5: detected capacity change from 0 to 4096 [ 142.802260][ T5532] loop1: detected capacity change from 0 to 128 [ 142.822867][ T5532] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 142.860562][ T5522] ntfs: volume version 3.1. [ 142.947957][ T5532] hpfs: filesystem error: improperly stopped [ 142.957159][ T5532] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 142.992287][ T5532] hpfs: You really don't want any checks? You are crazy... [ 143.017392][ T5532] hpfs: hpfs_map_sector(): read error [ 143.029737][ T5532] hpfs: code page support is disabled [ 143.035485][ T5532] hpfs: hpfs_map_4sectors(): unaligned read [ 143.045580][ T5536] loop3: detected capacity change from 0 to 64 [ 143.059656][ T5532] hpfs: hpfs_map_4sectors(): unaligned read [ 143.139442][ T5532] hpfs: filesystem error: unable to find root dir [ 143.283115][ T5532] hpfs: hpfs_map_4sectors(): unaligned read [ 143.951804][ T5550] Set syz0 is full, maxelem 0 reached [ 144.734822][ T5540] loop4: detected capacity change from 0 to 32768 [ 145.292753][ T5568] loop0: detected capacity change from 0 to 32768 [ 145.398015][ T5568] XFS (loop0): DAX unsupported by block device. Turning off DAX. [ 145.406947][ T5568] XFS (loop0): Mounting V5 Filesystem [ 145.553281][ T5568] XFS (loop0): Ending clean mount [ 145.564321][ T5568] XFS (loop0): Quotacheck needed: Please wait. [ 145.645928][ T5568] XFS (loop0): Quotacheck: Done. [ 145.658041][ T26] audit: type=1800 audit(1770773633.333:64): pid=5568 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.372" name="file1" dev="loop0" ino=4422 res=0 errno=0 [ 146.136039][ T4277] XFS (loop0): Unmounting Filesystem [ 146.307394][ T5560] loop3: detected capacity change from 0 to 32768 [ 146.512363][ T5560] XFS (loop3): Mounting V5 Filesystem [ 146.623568][ T5560] XFS (loop3): Ending clean mount [ 146.672199][ T5560] XFS (loop3): User initiated shutdown received. [ 146.696129][ T5560] XFS (loop3): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:499). Shutting down filesystem. [ 146.751356][ T5560] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [ 146.839888][ T4273] XFS (loop3): Unmounting Filesystem [ 147.854740][ T5604] loop5: detected capacity change from 0 to 32768 [ 147.888623][ T5604] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop5 scanned by syz.5.382 (5604) [ 147.955792][ T5620] loop3: detected capacity change from 0 to 4096 [ 147.974630][ T5604] BTRFS info (device loop5): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 148.019400][ T5604] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm [ 148.028991][ T5604] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 148.081823][ T5620] ntfs: volume version 3.1. [ 148.112495][ T5604] BTRFS info (device loop5): use zstd compression, level 3 [ 148.171088][ T5604] BTRFS info (device loop5): using free space tree [ 148.324918][ T5628] loop1: detected capacity change from 0 to 1024 [ 148.629535][ T5604] BTRFS info (device loop5): enabling ssd optimizations [ 148.719423][ T4996] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 148.919929][ T4996] usb 4-1: Using ep0 maxpacket: 16 [ 148.927193][ T4996] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 148.979382][ T4996] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 149.026613][ T4996] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 149.056551][ T4996] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.065740][ T4996] usb 4-1: Product: syz [ 149.076790][ T5224] BTRFS info (device loop5): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 149.077085][ T4996] usb 4-1: Manufacturer: syz [ 149.118900][ T4996] usb 4-1: SerialNumber: syz [ 149.240272][ T2926] hfsplus: b-tree write err: -5, ino 4 [ 149.374907][ T4996] usb 4-1: 0:2 : does not exist [ 149.433081][ T4996] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 149.536655][ T4996] usb 4-1: USB disconnect, device number 6 [ 149.918430][ T4375] udevd[4375]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 150.169380][ T7] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 150.379729][ T7] usb 6-1: Using ep0 maxpacket: 8 [ 150.391519][ T7] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 150.420573][ T7] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 150.456600][ T7] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 150.491954][ T7] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 150.526407][ T7] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 150.569706][ T7] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 150.600498][ T7] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.764614][ T5696] loop4: detected capacity change from 0 to 512 [ 150.837395][ T5696] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.410: iget: bad i_size value: 38620345925642 [ 150.879982][ T7] usb 6-1: usb_control_msg returned -32 [ 150.885645][ T7] usbtmc 6-1:16.0: can't read capabilities [ 150.887616][ T5696] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.410: couldn't read orphan inode 15 (err -117) [ 150.989480][ T5696] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 151.112340][ T5696] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.410: bg 0: block 5: invalid block bitmap [ 151.197623][ T5696] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 151.244486][ T5696] EXT4-fs (loop4): This should not happen!! Data will be lost [ 151.244486][ T5696] [ 151.269944][ T5696] EXT4-fs (loop4): Total free blocks count 0 [ 151.276785][ T5696] EXT4-fs (loop4): Free/Dirty block details [ 151.290525][ T5696] EXT4-fs (loop4): free_blocks=0 [ 151.300265][ T5710] usbtmc 6-1:16.0: usb_bulk_msg returned -71 [ 151.305763][ T5696] EXT4-fs (loop4): dirty_blocks=2 [ 151.331396][ T5696] EXT4-fs (loop4): Block reservation details [ 151.355336][ T5696] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 151.502143][ T32] usb 6-1: USB disconnect, device number 2 [ 151.528649][ T2926] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 131587 with max blocks 1 with error 28 [ 151.605038][ T5718] netlink: 12 bytes leftover after parsing attributes in process `syz.3.416'. [ 151.860109][ T5725] netlink: 'syz.3.419': attribute type 1 has an invalid length. [ 152.107034][ T5734] loop3: detected capacity change from 0 to 128 [ 152.202623][ T5734] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 152.206840][ T5732] loop4: detected capacity change from 0 to 4096 [ 152.817262][ T4278] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22. [ 152.846176][ T4278] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 153.021613][ T5755] loop6: detected capacity change from 0 to 7 [ 153.049928][ T5757] loop4: detected capacity change from 0 to 512 [ 153.054572][ T5755] Dev loop6: unable to read RDB block 7 [ 153.086509][ T5755] loop6: unable to read partition table [ 153.096677][ T5755] loop6: partition table beyond EOD, truncated [ 153.103193][ T7] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 153.107140][ T5757] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.429: inode has both inline data and extents flags [ 153.142439][ T5757] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.429: couldn't read orphan inode 15 (err -117) [ 153.155994][ T5755] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 153.200340][ T5757] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 153.319377][ T7] usb 4-1: Using ep0 maxpacket: 8 [ 153.328280][ T7] usb 4-1: unable to get BOS descriptor or descriptor too short [ 153.390343][ T7] usb 4-1: config 7 has an invalid interface number: 213 but max is 0 [ 153.398581][ T7] usb 4-1: config 7 has no interface number 0 [ 153.425696][ T7] usb 4-1: config 7 interface 213 altsetting 15 bulk endpoint 0x8F has invalid maxpacket 16 [ 153.464265][ T7] usb 4-1: config 7 interface 213 altsetting 15 endpoint 0xD has an invalid bInterval 128, changing to 7 [ 153.505192][ T7] usb 4-1: config 7 interface 213 altsetting 15 endpoint 0xD has invalid wMaxPacketSize 0 [ 153.520343][ T4278] EXT4-fs (loop4): unmounting filesystem. [ 153.528124][ T7] usb 4-1: config 7 interface 213 altsetting 15 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 153.589533][ T7] usb 4-1: config 7 interface 213 has no altsetting 0 [ 153.613917][ T7] usb 4-1: language id specifier not provided by device, defaulting to English [ 153.641784][ T7] usb 4-1: New USB device found, idVendor=15e8, idProduct=9100, bcdDevice=61.61 [ 153.684818][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.709404][ T7] usb 4-1: Product: syz [ 153.713642][ T7] usb 4-1: Manufacturer: syz [ 153.718287][ T7] usb 4-1: SerialNumber: syz [ 153.765713][ T950] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 153.781304][ T5747] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 153.818332][ T5772] loop4: detected capacity change from 0 to 64 [ 153.981744][ T5772] minix_free_block (loop4:1): bit already cleared [ 153.988693][ T5772] minix_free_block (loop4:4): bit already cleared [ 153.997740][ T950] usb 6-1: Using ep0 maxpacket: 32 [ 154.005371][ T950] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 154.020202][ T7] pegasus: probe of 4-1:7.213 failed with error -71 [ 154.049449][ T7] usb 4-1: USB disconnect, device number 7 [ 154.055651][ T950] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 154.081452][ T950] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 154.095403][ T5772] minix_free_block (loop4:3): bit already cleared [ 154.102502][ T5772] minix_free_block (loop4:2): bit already cleared [ 154.109057][ T5772] minix_free_block (loop4:1): bit already cleared [ 154.116209][ T950] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 154.130123][ T950] usb 6-1: config 0 interface 0 has no altsetting 0 [ 154.151245][ T950] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 154.169339][ T950] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 154.178344][ T950] usb 6-1: Product: syz [ 154.189594][ T950] usb 6-1: Manufacturer: syz [ 154.194281][ T950] usb 6-1: SerialNumber: syz [ 154.222553][ T950] usb 6-1: config 0 descriptor?? [ 154.232677][ T950] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 154.276071][ T950] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 154.607591][ T5001] usb 6-1: USB disconnect, device number 3 [ 154.613714][ C1] ldusb 6-1:0.0: usb_submit_urb failed (-19) [ 154.620424][ T5760] ldusb 6-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 154.650544][ T5777] ldusb 6-1:0.0: Couldn't submit HID_REQ_SET_REPORT -19 [ 154.666038][ T5001] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 154.709671][ T4996] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 154.748366][ T5783] loop3: detected capacity change from 0 to 128 [ 154.791133][ T5783] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 154.909510][ T4996] usb 5-1: Using ep0 maxpacket: 16 [ 154.923342][ T4996] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 154.952955][ T4996] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.995881][ T4996] usb 5-1: Product: syz [ 155.005682][ T4996] usb 5-1: Manufacturer: syz [ 155.036999][ T4996] usb 5-1: SerialNumber: syz [ 155.043715][ T4996] r8152-cfgselector 5-1: config 0 descriptor?? [ 155.269069][ T4996] r8152-cfgselector 5-1: Unknown version 0x0000 [ 155.489513][ T4996] r8152-cfgselector 5-1: Unknown version 0x0000 [ 155.528109][ T4996] r8152-cfgselector 5-1: USB disconnect, device number 6 [ 155.535737][ T5794] loop0: detected capacity change from 0 to 1024 [ 155.566204][ T5794] EXT4-fs: Ignoring removed oldalloc option [ 155.616477][ T5794] EXT4-fs: Ignoring removed bh option [ 155.645540][ T5794] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 155.706373][ T2926] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.793582][ T5794] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 155.894969][ T5806] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 156.007574][ T5806] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 156.110759][ T4277] EXT4-fs (loop0): unmounting filesystem. [ 156.200132][ T2926] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.343742][ T2926] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.490506][ T2926] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.597811][ T5820] loop3: detected capacity change from 0 to 2048 [ 156.748385][ T5820] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 157.177159][ T4273] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1113: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 157.308540][ T4273] EXT4-fs (loop3): unmounting filesystem. [ 157.588469][ T4281] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 157.604877][ T4281] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 157.619130][ T4281] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 157.631478][ T4281] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 157.641484][ T4281] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 157.659290][ T4281] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 157.784918][ T5852] loop0: detected capacity change from 0 to 64 [ 157.907509][ T5852] hfs: walked past end of dir [ 158.938377][ T5875] loop5: detected capacity change from 0 to 2048 [ 158.965354][ T5847] chnl_net:caif_netlink_parms(): no params data found [ 159.026558][ T5875] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=18576, location=18576 [ 159.161050][ T5875] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 159.499590][ T4337] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 159.567223][ T2926] device hsr_slave_0 left promiscuous mode [ 159.601831][ T2926] device hsr_slave_1 left promiscuous mode [ 159.619081][ T2926] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 159.638575][ T2926] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 159.659058][ T2926] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 159.673317][ T2926] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 159.691655][ T4337] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 159.721520][ T4337] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 159.750058][ T4337] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 159.769520][ T4337] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 159.811630][ T2926] device bridge_slave_1 left promiscuous mode [ 159.818031][ T2926] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.827855][ T4337] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 159.838827][ T4274] Bluetooth: hci0: command 0x0409 tx timeout [ 159.849788][ T4996] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 159.858208][ T4337] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 159.876520][ T4337] usb 4-1: Manufacturer: syz [ 159.884439][ T4337] usb 4-1: config 0 descriptor?? [ 159.891906][ T2926] device bridge_slave_0 left promiscuous mode [ 159.898415][ T2926] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.005598][ T2926] device veth1_macvtap left promiscuous mode [ 160.012273][ T2926] device veth0_macvtap left promiscuous mode [ 160.018716][ T2926] device veth1_vlan left promiscuous mode [ 160.024795][ T2926] device veth0_vlan left promiscuous mode [ 160.059362][ T4996] usb 6-1: Using ep0 maxpacket: 8 [ 160.066316][ T4996] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 160.106478][ T4996] usb 6-1: config 179 has no interface number 0 [ 160.130156][ T4996] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 160.166214][ T4996] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 160.224443][ T4996] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 160.259227][ T5910] Bluetooth: MGMT ver 1.22 [ 160.275845][ T4996] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 160.318610][ T4996] usb 6-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 160.335115][ T4337] appleir 0003:05AC:8243.0006: unknown main item tag 0x0 [ 160.353554][ T4337] appleir 0003:05AC:8243.0006: No inputs registered, leaving [ 160.361679][ T4996] usb 6-1: config 179 interface 65 has no altsetting 0 [ 160.381683][ T4996] usb 6-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 160.408529][ T4337] appleir 0003:05AC:8243.0006: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 160.426732][ T4996] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.571860][ T4996] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input14 [ 160.680508][ T4999] usb 4-1: USB disconnect, device number 8 [ 160.698026][ T5914] fido_id[5914]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 160.843124][ T4332] usb 6-1: USB disconnect, device number 4 [ 160.843133][ C1] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 160.904804][ T4332] xpad 6-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 161.199531][ T32] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 161.362005][ T5927] loop3: detected capacity change from 0 to 512 [ 161.397654][ T5927] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 161.399519][ T32] usb 1-1: Using ep0 maxpacket: 16 [ 161.419409][ T5927] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 161.455748][ T32] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 161.506582][ T32] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 161.537784][ T32] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 161.560625][ T32] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 161.569961][ T32] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.578070][ T32] usb 1-1: Product: syz [ 161.582788][ T32] usb 1-1: Manufacturer: syz [ 161.587423][ T32] usb 1-1: SerialNumber: syz [ 161.598280][ T5927] EXT4-fs (loop3): 1 orphan inode deleted [ 161.628832][ T5927] EXT4-fs (loop3): 1 truncate cleaned up [ 161.638995][ T5927] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 161.789434][ T5927] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1113: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 161.823742][ T5927] EXT4-fs (loop3): Remounting filesystem read-only [ 161.899841][ T4273] EXT4-fs (loop3): unmounting filesystem. [ 161.909672][ T4274] Bluetooth: hci0: command 0x041b tx timeout [ 161.989975][ T5935] loop5: detected capacity change from 0 to 64 [ 162.004227][ T5937] input: syz0 as /devices/virtual/input/input15 [ 162.031296][ T32] usb 1-1: 0:2 : does not exist [ 162.168053][ T5939] loop4: detected capacity change from 0 to 256 [ 162.502419][ T2926] team0 (unregistering): Port device team_slave_1 removed [ 162.654500][ T2926] team0 (unregistering): Port device team_slave_0 removed [ 162.683565][ T32] usb 1-1: USB disconnect, device number 8 [ 162.692791][ T5946] loop4: detected capacity change from 0 to 4096 [ 162.768204][ T4375] udevd[4375]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 162.808549][ T5946] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 162.900028][ T5946] ntfs3: loop4: ino=1e, "file1" attr_set_size [ 162.909099][ T2926] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 163.056177][ T2926] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 163.190729][ T5949] loop4: detected capacity change from 0 to 64 [ 163.234991][ T5949] syz.4.493: attempt to access beyond end of device [ 163.234991][ T5949] loop4: rw=2049, sector=161, nr_sectors = 1 limit=64 [ 163.268600][ T5949] Buffer I/O error on dev loop4, logical block 161, lost async page write [ 163.309526][ T5949] syz.4.493: attempt to access beyond end of device [ 163.309526][ T5949] loop4: rw=2049, sector=162, nr_sectors = 1 limit=64 [ 163.360901][ T5949] Buffer I/O error on dev loop4, logical block 162, lost async page write [ 163.416513][ T5949] syz.4.493: attempt to access beyond end of device [ 163.416513][ T5949] loop4: rw=2049, sector=163, nr_sectors = 1 limit=64 [ 163.437272][ T5949] Buffer I/O error on dev loop4, logical block 163, lost async page write [ 163.489500][ T5949] syz.4.493: attempt to access beyond end of device [ 163.489500][ T5949] loop4: rw=2049, sector=167, nr_sectors = 1 limit=64 [ 163.513515][ T5949] Buffer I/O error on dev loop4, logical block 167, lost async page write [ 163.534244][ T5949] syz.4.493: attempt to access beyond end of device [ 163.534244][ T5949] loop4: rw=2049, sector=169, nr_sectors = 1 limit=64 [ 163.571864][ T5949] Buffer I/O error on dev loop4, logical block 169, lost async page write [ 163.608017][ T5949] syz.4.493: attempt to access beyond end of device [ 163.608017][ T5949] loop4: rw=2049, sector=171, nr_sectors = 1 limit=64 [ 163.631927][ T5949] Buffer I/O error on dev loop4, logical block 171, lost async page write [ 163.665471][ T5949] syz.4.493: attempt to access beyond end of device [ 163.665471][ T5949] loop4: rw=2049, sector=172, nr_sectors = 1 limit=64 [ 163.709396][ T5949] Buffer I/O error on dev loop4, logical block 172, lost async page write [ 163.941301][ T46] kworker/u4:3: attempt to access beyond end of device [ 163.941301][ T46] loop4: rw=1, sector=173, nr_sectors = 1 limit=64 [ 163.982502][ T46] Buffer I/O error on dev loop4, logical block 173, lost async page write [ 163.999869][ T4274] Bluetooth: hci0: command 0x040f tx timeout [ 164.001637][ T46] kworker/u4:3: attempt to access beyond end of device [ 164.001637][ T46] loop4: rw=1, sector=174, nr_sectors = 1 limit=64 [ 164.109487][ T46] Buffer I/O error on dev loop4, logical block 174, lost async page write [ 164.118150][ T46] kworker/u4:3: attempt to access beyond end of device [ 164.118150][ T46] loop4: rw=1, sector=175, nr_sectors = 1 limit=64 [ 164.192327][ T5962] loop0: detected capacity change from 0 to 4096 [ 164.199660][ T46] Buffer I/O error on dev loop4, logical block 175, lost async page write [ 164.553088][ T5969] loop3: detected capacity change from 0 to 256 [ 164.598987][ T5969] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d) [ 164.651616][ T2926] bond0 (unregistering): Released all slaves [ 164.685891][ T5973] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input16 [ 165.210167][ T5978] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 165.307706][ T5978] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 165.466168][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.530467][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.538720][ T5847] device bridge_slave_0 entered promiscuous mode [ 165.601703][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.660036][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.670719][ T5847] device bridge_slave_1 entered promiscuous mode [ 165.808035][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 165.865154][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 165.996553][ T5847] team0: Port device team_slave_0 added [ 166.049142][ T5847] team0: Port device team_slave_1 added [ 166.079655][ T4274] Bluetooth: hci0: command 0x0419 tx timeout [ 166.214892][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 166.242841][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 166.359439][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 166.439861][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 166.446965][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 166.562223][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 166.753589][ T5847] device hsr_slave_0 entered promiscuous mode [ 166.835272][ T5847] device hsr_slave_1 entered promiscuous mode [ 166.855417][ T5847] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 166.884040][ T5847] Cannot create hsr debugfs directory [ 167.115368][ T6035] loop5: detected capacity change from 0 to 8192 [ 167.173260][ T6035] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 167.189713][ T6035] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal [ 167.219792][ T6035] REISERFS (device loop5): using ordered data mode [ 167.226467][ T6035] reiserfs: using flush barriers [ 167.241367][ T6035] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 167.259900][ T6035] REISERFS (device loop5): checking transaction log (loop5) [ 167.303351][ T6035] REISERFS (device loop5): Using r5 hash to sort names [ 167.331524][ T6035] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 167.372622][ T6011] loop4: detected capacity change from 0 to 40427 [ 167.426199][ T6011] F2FS-fs (loop4): invalid crc value [ 167.470829][ T6011] F2FS-fs (loop4): Found nat_bits in checkpoint [ 167.598827][ T5847] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 167.668103][ T6011] F2FS-fs (loop4): Start checkpoint disabled! [ 167.706279][ T5847] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 167.718081][ T6011] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 167.750878][ T5847] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 167.806123][ T5847] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 168.240528][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 168.243184][ T32] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 168.302962][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 168.337393][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 168.357544][ T5847] 8021q: adding VLAN 0 to HW filter on device team0 [ 168.456784][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 168.465367][ T32] usb 1-1: Using ep0 maxpacket: 8 [ 168.473161][ T32] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 168.489740][ T4337] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 168.496685][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 168.518886][ T32] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 168.545118][ T32] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 168.549700][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.563656][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 168.572984][ T32] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 168.585659][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 168.601751][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 168.620458][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.620523][ T32] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 168.627665][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 168.659509][ T32] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.674177][ T4337] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.719754][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 168.728198][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 168.740620][ T4337] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 168.751903][ T4337] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 168.768294][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 168.776584][ T4337] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.793157][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 168.821828][ T4337] usb 6-1: config 0 descriptor?? [ 168.823993][ T2926] bio_check_eod: 7 callbacks suppressed [ 168.824011][ T2926] kworker/u4:5: attempt to access beyond end of device [ 168.824011][ T2926] loop4: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 168.836240][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 168.881501][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 168.897990][ T32] usb 1-1: GET_CAPABILITIES returned 0 [ 168.900493][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 168.907175][ T32] usbtmc 1-1:16.0: can't read capabilities [ 168.961960][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 168.981822][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 169.000960][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 169.057569][ T5847] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 169.084430][ T5847] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 169.094991][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 169.106820][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 169.140095][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 169.149663][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 169.172358][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 169.181599][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 169.190701][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 169.210125][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 169.219286][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 169.228485][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 169.237668][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 169.250638][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 169.259764][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 169.268884][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 169.278001][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 169.291161][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 169.291846][ T4337] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0 [ 169.300301][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 169.300347][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 169.326750][ T4337] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0 [ 169.331081][ T4999] usb 1-1: USB disconnect, device number 9 [ 169.333962][ T4337] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0 [ 169.359659][ T4337] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0 [ 169.366689][ T4337] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0 [ 169.373853][ T4337] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0 [ 169.399774][ T4337] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0 [ 169.462333][ T4337] cp2112 0003:10C4:EA90.0007: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.5-1/input0 [ 169.560053][ T4337] cp2112 0003:10C4:EA90.0007: Part Number: 0x82 Device Version: 0xFE [ 169.670384][ T6086] netlink: 8 bytes leftover after parsing attributes in process `syz.4.530'. [ 169.966857][ T4337] cp2112 0003:10C4:EA90.0007: error setting SMBus config [ 169.991123][ T4337] cp2112: probe of 0003:10C4:EA90.0007 failed with error -71 [ 170.030480][ T4337] usb 6-1: USB disconnect, device number 5 [ 170.123868][ T4374] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 170.210626][ T4374] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 170.250731][ T2926] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 170.273856][ T2926] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 170.364621][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 170.568738][ T6101] fido_id[6101]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 171.069592][ T6119] capability: warning: `syz.5.538' uses deprecated v2 capabilities in a way that may be insecure [ 171.074325][ T6091] loop3: detected capacity change from 0 to 32768 [ 171.165667][ T6091] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.531 (6091) [ 171.178367][ T6119] loop5: detected capacity change from 0 to 256 [ 171.254118][ T6119] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001207b, chksum : 0x1e8dde4d, utbl_chksum : 0xe619d30d) [ 171.308784][ T6091] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 171.357640][ T6123] loop4: detected capacity change from 0 to 512 [ 171.383300][ T6091] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 171.436295][ T6091] BTRFS info (device loop3): using free space tree [ 171.489973][ T6123] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 171.617033][ T6123] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #17: comm syz.4.539: inode has both inline data and extents flags [ 171.632620][ T6123] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.539: couldn't read orphan inode 17 (err -117) [ 171.677086][ T6123] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 171.740944][ T6123] EXT4-fs error (device loop4): ext4_readdir:263: inode #12: block 13: comm syz.4.539: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=12, rec_len=0, size=4096 fake=0 [ 171.827165][ T6091] BTRFS info (device loop3): enabling ssd optimizations [ 171.941755][ T4278] EXT4-fs (loop4): unmounting filesystem. [ 172.060707][ T4273] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 172.260969][ T6160] netlink: 100 bytes leftover after parsing attributes in process `syz.4.542'. [ 172.323137][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 172.377150][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 172.528086][ T5963] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 172.544119][ T5963] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 172.606461][ T5963] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 172.617683][ T5963] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 172.684797][ T5847] device veth0_vlan entered promiscuous mode [ 172.760646][ T5847] device veth1_vlan entered promiscuous mode [ 172.865580][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 172.880691][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 172.927790][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 172.965091][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 173.019293][ T5847] device veth0_macvtap entered promiscuous mode [ 173.167430][ T5847] device veth1_macvtap entered promiscuous mode [ 173.236028][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.295465][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.322591][ T6193] loop3: detected capacity change from 0 to 1024 [ 173.329605][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.367647][ T6193] EXT4-fs: inline encryption not supported [ 173.373722][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.390634][ T6193] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 173.403337][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.415914][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.439594][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.456816][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.490576][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 173.499153][ T6193] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 173.558737][ T2926] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 173.590222][ T2926] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 173.630327][ T2926] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 173.671408][ T2926] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 173.690554][ T4273] EXT4-fs (loop3): unmounting filesystem. [ 173.823717][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.857913][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.892946][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.908666][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.928610][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.939575][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.949530][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.980556][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.992549][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 174.006249][ T2926] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 174.041373][ T2926] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 174.093344][ T5847] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.129334][ T5847] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.158621][ T5847] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.199399][ T5847] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.508140][ T6231] loop5: detected capacity change from 0 to 128 [ 174.541265][ T5963] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 174.568595][ T5963] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 174.585540][ T6231] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 174.602196][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 174.665609][ T6231] hpfs: filesystem error: improperly stopped [ 174.710128][ T6231] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 174.722268][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 174.740399][ T6231] hpfs: You really don't want any checks? You are crazy... [ 174.748529][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 174.765925][ T6231] hpfs: hpfs_map_sector(): read error [ 174.780781][ T2926] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 174.820839][ T6231] hpfs: code page support is disabled [ 174.870733][ T6231] hpfs: hpfs_map_4sectors(): unaligned read [ 174.876900][ T6231] hpfs: hpfs_map_4sectors(): unaligned read [ 174.934358][ T6231] hpfs: filesystem error: unable to find root dir [ 175.298474][ T6253] loop0: detected capacity change from 0 to 128 [ 175.684103][ T6257] loop3: detected capacity change from 0 to 40427 [ 175.692476][ T6257] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 175.700356][ T6257] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 175.773429][ T6257] F2FS-fs (loop3): Found nat_bits in checkpoint [ 175.781938][ T6263] syz.0.568: attempt to access beyond end of device [ 175.781938][ T6263] loop0: rw=1, sector=128, nr_sectors = 1 limit=128 [ 175.815845][ T6257] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 175.823119][ T6257] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 175.862020][ T6263] buffer_io_error: 6 callbacks suppressed [ 175.862039][ T6263] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 175.904278][ T6263] syz.0.568: attempt to access beyond end of device [ 175.904278][ T6263] loop0: rw=1, sector=145, nr_sectors = 1 limit=128 [ 175.926877][ T6258] loop4: detected capacity change from 0 to 8192 [ 176.082972][ T6263] Buffer I/O error on dev loop0, logical block 145, lost async page write [ 176.102250][ T6258] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 176.166033][ T6263] syz.0.568: attempt to access beyond end of device [ 176.166033][ T6263] loop0: rw=1, sector=146, nr_sectors = 1 limit=128 [ 176.212934][ T6258] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 176.278577][ T6263] Buffer I/O error on dev loop0, logical block 146, lost async page write [ 176.293208][ T6258] REISERFS (device loop4): using journaled data mode [ 176.351280][ T6258] reiserfs: using flush barriers [ 176.359682][ T6263] syz.0.568: attempt to access beyond end of device [ 176.359682][ T6263] loop0: rw=1, sector=147, nr_sectors = 1 limit=128 [ 176.455680][ T6258] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 176.459652][ T6263] Buffer I/O error on dev loop0, logical block 147, lost async page write [ 176.489873][ T6258] REISERFS (device loop4): checking transaction log (loop4) [ 176.511803][ T6258] REISERFS (device loop4): Using r5 hash to sort names [ 176.519119][ T6258] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 176.550328][ T6257] F2FS-fs (loop3): Start checkpoint disabled! [ 176.553860][ T6263] syz.0.568: attempt to access beyond end of device [ 176.553860][ T6263] loop0: rw=1, sector=148, nr_sectors = 1 limit=128 [ 176.580671][ T6258] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 176.667799][ T6263] Buffer I/O error on dev loop0, logical block 148, lost async page write [ 176.695157][ T6263] syz.0.568: attempt to access beyond end of device [ 176.695157][ T6263] loop0: rw=1, sector=149, nr_sectors = 1 limit=128 [ 176.748809][ T6263] Buffer I/O error on dev loop0, logical block 149, lost async page write [ 176.767877][ T6258] REISERFS error (device loop4): vs-7000 search_by_entry_key: search_by_key returned item position == 0 [ 176.834615][ T6263] syz.0.568: attempt to access beyond end of device [ 176.834615][ T6263] loop0: rw=1, sector=150, nr_sectors = 1 limit=128 [ 176.867853][ T6258] REISERFS (device loop4): Remounting filesystem read-only [ 176.904604][ T6263] Buffer I/O error on dev loop0, logical block 150, lost async page write [ 176.964038][ T6263] syz.0.568: attempt to access beyond end of device [ 176.964038][ T6263] loop0: rw=1, sector=151, nr_sectors = 1 limit=128 [ 176.978485][ T6248] loop6: detected capacity change from 0 to 32768 [ 177.030597][ T6248] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 scanned by syz.6.448 (6248) [ 177.050301][ T6263] Buffer I/O error on dev loop0, logical block 151, lost async page write [ 177.071089][ T6263] syz.0.568: attempt to access beyond end of device [ 177.071089][ T6263] loop0: rw=1, sector=152, nr_sectors = 1 limit=128 [ 177.125682][ T6263] Buffer I/O error on dev loop0, logical block 152, lost async page write [ 177.146107][ T6248] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 177.181930][ T6263] syz.0.568: attempt to access beyond end of device [ 177.181930][ T6263] loop0: rw=1, sector=153, nr_sectors = 1 limit=128 [ 177.196603][ T6248] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm [ 177.240069][ T6248] BTRFS info (device loop6): using free space tree [ 177.249604][ T6263] Buffer I/O error on dev loop0, logical block 153, lost async page write [ 177.556571][ T6248] BTRFS info (device loop6): enabling ssd optimizations [ 177.864425][ T5847] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 178.084837][ T6318] loop3: detected capacity change from 0 to 4096 [ 178.852672][ T6318] EXT4-fs (loop3): Test dummy encryption mode enabled [ 178.887762][ T6342] loop4: detected capacity change from 0 to 128 [ 178.896741][ T6318] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0103] [ 178.907282][ T6318] System zones: 0-5 [ 179.171861][ T6342] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 179.187562][ T6347] loop5: detected capacity change from 0 to 32768 [ 179.188878][ T6318] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 179.204476][ T6347] BTRFS: device fsid 3a375e4e-b156-4d76-a2ad-16e198ce1409 devid 1 transid 8 /dev/loop5 scanned by syz.5.584 (6347) [ 179.222485][ T6342] ext4 filesystem being mounted at /126/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 179.238728][ T6347] BTRFS info (device loop5): first mount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409 [ 179.249043][ T6347] BTRFS info (device loop5): using xxhash64 (xxhash64-generic) checksum algorithm [ 179.258505][ T6347] BTRFS info (device loop5): using free space tree [ 179.335910][ T4278] EXT4-fs (loop4): unmounting filesystem. [ 179.453797][ T6318] EXT4-fs (loop3): shut down requested (0) [ 179.481348][ T6347] BTRFS info (device loop5): enabling ssd optimizations [ 180.060070][ T6347] BTRFS info (device loop5: state M): turning off barriers [ 180.061906][ T4273] EXT4-fs (loop3): unmounting filesystem. [ 180.069038][ T6347] BTRFS info (device loop5: state M): enabling all of the rescue options [ 180.084252][ T6347] BTRFS info (device loop5: state M): ignoring data csums [ 180.091511][ T6347] BTRFS info (device loop5: state M): ignoring bad roots [ 180.098672][ T6347] BTRFS info (device loop5: state M): disabling log replay at mount time [ 180.107506][ T6347] BTRFS info (device loop5: state M): enabling disk space caching [ 180.117127][ T6347] BTRFS info (device loop5: state M): disabling tree log [ 180.124572][ T6347] BTRFS warning (device loop5: state M): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 180.136257][ T6347] BTRFS info (device loop5: state M): trying to use backup root at mount time [ 180.145609][ T6347] BTRFS error (device loop5: state M): cannot disable free space tree [ 180.154365][ T6347] BTRFS info (device loop5: state M): resize thread pool 3 -> 4 [ 180.295330][ T5224] BTRFS info (device loop5): last unmount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409 [ 181.049383][ T4997] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 181.088790][ T6399] block nbd5: shutting down sockets [ 181.251907][ T4997] usb 5-1: Using ep0 maxpacket: 16 [ 181.266381][ T4997] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 181.316629][ T4997] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.339477][ T4997] usb 5-1: Product: syz [ 181.343804][ T4997] usb 5-1: Manufacturer: syz [ 181.368000][ T4997] usb 5-1: SerialNumber: syz [ 181.404467][ T4997] usb 5-1: config 0 descriptor?? [ 181.709232][ T6424] loop6: detected capacity change from 0 to 64 [ 181.798208][ T6424] hfs: get root inode failed [ 181.838238][ T4997] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 181.882966][ T4997] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 181.920437][ T4997] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 181.949371][ T4997] usb 5-1: media controller created [ 181.995104][ T4997] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 182.611591][ T4997] zl10353_read_register: readreg error (reg=127, ret==0) [ 182.641382][ T4997] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 182.675036][ T4997] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 182.719554][ T4997] usb 5-1: USB disconnect, device number 7 [ 182.845599][ T4997] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 183.091618][ T6447] smc: net device bond0 applied user defined pnetid SYZ2 [ 183.184235][ T6447] netlink: 14 bytes leftover after parsing attributes in process `syz.5.610'. [ 183.258428][ T6444] loop6: detected capacity change from 0 to 40427 [ 183.273240][ T6444] F2FS-fs (loop6): Fix alignment : internally, start(4096) end(16896) block(12288) [ 183.284032][ T6444] F2FS-fs (loop6): invalid crc value [ 183.315123][ T6444] F2FS-fs (loop6): Found nat_bits in checkpoint [ 183.357247][ T6444] F2FS-fs (loop6): recover fsync data on readonly fs [ 183.368706][ T6444] F2FS-fs (loop6): Cannot turn on quotas: -2 on 1 [ 183.385102][ T6444] F2FS-fs (loop6): Cannot turn on quotas: -2 on 2 [ 183.393779][ T6444] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 183.450644][ T6454] loop3: detected capacity change from 0 to 512 [ 183.484159][ T6447] smc: removing net device bond0 with user defined pnetid SYZ2 [ 183.521825][ T6454] EXT4-fs (loop3): 1 truncate cleaned up [ 183.533525][ T6447] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 183.538747][ T6454] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 183.571697][ T6447] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 183.616221][ T6447] bond0 (unregistering): Released all slaves [ 183.629511][ T22] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 183.787242][ T4273] EXT4-fs (loop3): unmounting filesystem. [ 183.831055][ T22] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 183.875670][ T22] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 183.931724][ T22] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 183.961101][ T22] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.993882][ T22] usb 1-1: config 0 descriptor?? [ 184.453380][ T22] cm6533_jd 0003:0D8C:0022.0009: unknown main item tag 0x0 [ 184.481084][ T22] cm6533_jd 0003:0D8C:0022.0009: unknown main item tag 0x0 [ 184.510722][ T22] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0D8C:0022.0009/input/input17 [ 184.575538][ T22] cm6533_jd 0003:0D8C:0022.0009: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.0-1/input0 [ 184.720989][ T6173] usb 1-1: USB disconnect, device number 10 [ 184.748965][ T6481] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 184.997524][ T6484] fido_id[6484]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 185.065783][ T6458] loop4: detected capacity change from 0 to 32768 [ 185.203356][ T6458] XFS (loop4): DAX unsupported by block device. Turning off DAX. [ 185.209537][ T22] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 185.231408][ T6458] XFS (loop4): Mounting V5 Filesystem [ 185.326924][ T6458] XFS (loop4): Ending clean mount [ 185.379109][ T6458] XFS (loop4): Quotacheck needed: Please wait. [ 185.405909][ T6505] loop0: detected capacity change from 0 to 512 [ 185.419460][ T22] usb 4-1: Using ep0 maxpacket: 16 [ 185.426693][ T22] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 185.442392][ T6505] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 185.492562][ T22] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 185.542985][ T22] usb 4-1: config 0 has no interface number 0 [ 185.551126][ T6505] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 185.576579][ T6505] ext4 filesystem being mounted at /142/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 185.593627][ T22] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 185.613789][ T22] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.633546][ T22] usb 4-1: Product: syz [ 185.639570][ T22] usb 4-1: Manufacturer: syz [ 185.648887][ T6511] loop5: detected capacity change from 0 to 256 [ 185.654612][ T22] usb 4-1: SerialNumber: syz [ 185.671454][ T22] usb 4-1: config 0 descriptor?? [ 185.691327][ T6458] XFS (loop4): Quotacheck: Done. [ 185.702168][ T22] usb 4-1: Found UVC 0.00 device syz (046d:08f3) [ 185.730051][ T6505] EXT4-fs error (device loop0): ext4_do_update_inode:5272: inode #2: comm syz.0.627: corrupted inode contents [ 185.737006][ T22] usb 4-1: No valid video chain found. [ 185.788614][ T6511] exfat: Deprecated parameter 'utf8' [ 185.839634][ T6511] exfat: Deprecated parameter 'namecase' [ 185.845438][ T6511] exfat: Deprecated parameter 'namecase' [ 185.859825][ T6505] EXT4-fs error (device loop0): ext4_dirty_inode:6137: inode #2: comm syz.0.627: mark_inode_dirty error [ 185.878056][ T6511] exfat: Deprecated parameter 'utf8' [ 185.883844][ T4278] XFS (loop4): Unmounting Filesystem [ 185.938457][ T6505] EXT4-fs error (device loop0): ext4_do_update_inode:5272: inode #2: comm syz.0.627: corrupted inode contents [ 185.957544][ T4812] usb 4-1: USB disconnect, device number 9 [ 185.990357][ T6511] exFAT-fs (loop5): failed to load upcase table (idx : 0x00012153, chksum : 0x822ffc2e, utbl_chksum : 0xe619d30d) [ 186.035627][ T6505] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #2: comm syz.0.627: mark_inode_dirty error [ 186.226253][ T4277] EXT4-fs (loop0): unmounting filesystem. [ 186.505040][ T6490] loop6: detected capacity change from 0 to 40427 [ 186.590009][ T6490] F2FS-fs (loop6): Found nat_bits in checkpoint [ 186.777698][ T6530] loop3: detected capacity change from 0 to 256 [ 186.795992][ T6490] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 186.980792][ T6528] loop0: detected capacity change from 0 to 4096 [ 187.174310][ T6528] ntfs3: loop0: ino=5, "/" directory corrupted [ 187.197222][ T6528] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 187.295308][ T6528] ntfs3: loop0: ino=5, "/" directory corrupted [ 187.354147][ T5847] bio_check_eod: 335 callbacks suppressed [ 187.354164][ T5847] syz-executor: attempt to access beyond end of device [ 187.354164][ T5847] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 187.519423][ T5001] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 187.721412][ T5001] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 187.778950][ T5001] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 187.832864][ T5001] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 187.858661][ T5001] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.880711][ T5001] usb 4-1: Product: syz [ 187.884941][ T5001] usb 4-1: Manufacturer: syz [ 187.910111][ T5001] usb 4-1: SerialNumber: syz [ 187.928027][ T6548] loop0: detected capacity change from 0 to 128 [ 187.966940][ T5001] cdc_mbim 4-1:1.0: skipping garbage [ 188.163094][ T6541] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 188.563892][ T4997] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 188.752317][ T4997] usb 7-1: config 0 interface 0 has no altsetting 0 [ 188.764347][ T4997] usb 7-1: New USB device found, idVendor=28bd, idProduct=0078, bcdDevice= 0.00 [ 188.785938][ T4997] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.811035][ T4997] usb 7-1: config 0 descriptor?? [ 188.816972][ T6541] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 188.829955][ T5001] cdc_mbim 4-1:1.0: dwNtbInMaxSize=1 is too small. Using 2048 [ 188.839597][ T5001] cdc_mbim 4-1:1.0: setting rx_max = 2048 [ 189.055417][ T5001] cdc_mbim 4-1:1.0: cdc-wdm0: USB WDM device [ 189.139658][ T5001] cdc_mbim 4-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.3-1, CDC MBIM, e2:09:2e:0e:96:f1 [ 189.194166][ T5001] usb 4-1: USB disconnect, device number 10 [ 189.225011][ T5001] cdc_mbim 4-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.3-1, CDC MBIM [ 189.244326][ T6555] loop0: detected capacity change from 0 to 32768 [ 189.273690][ T4997] uclogic 0003:28BD:0078.000A: interface is invalid, ignoring [ 189.371177][ T6555] XFS (loop0): DAX unsupported by block device. Turning off DAX. [ 189.406350][ T6555] XFS (loop0): Mounting V5 Filesystem [ 189.493295][ T6173] usb 7-1: USB disconnect, device number 2 [ 189.585019][ T6555] XFS (loop0): Ending clean mount [ 189.641808][ T6555] XFS (loop0): Quotacheck needed: Please wait. [ 189.802742][ T6555] XFS (loop0): Quotacheck: Done. [ 190.142220][ T4277] XFS (loop0): Unmounting Filesystem [ 190.382123][ T4281] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 190.444936][ T4276] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 190.460587][ T4276] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 190.481988][ T4276] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 190.492805][ T4276] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 190.500454][ T4276] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 190.597585][ T6594] loop4: detected capacity change from 0 to 8192 [ 190.633350][ T6594] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 190.646688][ T6594] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 190.656133][ T6594] REISERFS (device loop4): using ordered data mode [ 190.669391][ T5001] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 190.699476][ T6594] reiserfs: using flush barriers [ 190.709311][ T6594] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 190.833225][ T6594] REISERFS (device loop4): checking transaction log (loop4) [ 190.869561][ T5001] usb 4-1: Using ep0 maxpacket: 32 [ 190.876879][ T5001] usb 4-1: config 0 has an invalid interface number: 119 but max is 0 [ 190.895005][ T5001] usb 4-1: config 0 has no interface number 0 [ 190.902144][ T5001] usb 4-1: config 0 interface 119 has no altsetting 0 [ 190.902835][ T6594] REISERFS (device loop4): Using r5 hash to sort names [ 190.911812][ T5001] usb 4-1: New USB device found, idVendor=0856, idProduct=ac30, bcdDevice=da.f9 [ 190.942205][ T5001] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.958302][ T5001] usb 4-1: Product: syz [ 190.974698][ T5001] usb 4-1: Manufacturer: syz [ 190.984118][ T5001] usb 4-1: SerialNumber: syz [ 190.996405][ T5001] usb 4-1: config 0 descriptor?? [ 191.016442][ T6594] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 191.147705][ T6595] chnl_net:caif_netlink_parms(): no params data found [ 191.471253][ T6595] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.478503][ T6595] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.487355][ T6595] device bridge_slave_0 entered promiscuous mode [ 191.497218][ T6595] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.505298][ T6595] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.514146][ T6595] device bridge_slave_1 entered promiscuous mode [ 191.544926][ T6595] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 191.556960][ T6595] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 191.634069][ T5001] mos7840 4-1:0.119: required endpoints missing [ 191.667879][ T6595] team0: Port device team_slave_0 added [ 191.669691][ T5001] usb 4-1: USB disconnect, device number 11 [ 191.743977][ T6595] team0: Port device team_slave_1 added [ 191.755031][ T6625] loop4: detected capacity change from 0 to 128 [ 191.793980][ T6626] loop6: detected capacity change from 0 to 1024 [ 191.901314][ T6625] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 191.912239][ T6625] ext4 filesystem being mounted at /139/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 192.025226][ T6595] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 192.043855][ T6595] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 192.083994][ T6626] hfsplus: xattr searching failed [ 192.087753][ T4278] EXT4-fs (loop4): unmounting filesystem. [ 192.112608][ T6636] hfsplus: xattr searching failed [ 192.116266][ T6595] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 192.168065][ T6636] hfsplus: xattr searching failed [ 192.177584][ T6595] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 192.238350][ T6595] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 192.363710][ T6595] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 192.547796][ T6595] device hsr_slave_0 entered promiscuous mode [ 192.559349][ T4274] Bluetooth: hci4: command 0x0409 tx timeout [ 192.577733][ T6650] loop6: detected capacity change from 0 to 128 [ 192.593753][ T6595] device hsr_slave_1 entered promiscuous mode [ 192.627121][ T6650] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 192.683995][ T6650] ext4 filesystem being mounted at /17/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 192.696238][ T6595] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 192.721267][ T6595] Cannot create hsr debugfs directory [ 192.793179][ T6653] loop4: detected capacity change from 0 to 4096 [ 192.841280][ T5847] EXT4-fs (loop6): unmounting filesystem. [ 192.867420][ T6653] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 192.878289][ T6656] loop3: detected capacity change from 0 to 256 [ 192.948523][ T6656] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 192.986713][ T6656] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 193.018772][ T6659] Quota error (device loop4): find_block_dqentry: Quota for id 0 referenced but not present [ 193.032922][ T6661] loop6: detected capacity change from 0 to 64 [ 193.065576][ T6656] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 193.087720][ T6659] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 193.149514][ T6659] EXT4-fs error (device loop4): ext4_acquire_dquot:6835: comm syz.4.662: Failed to acquire dquot type 1 [ 193.248604][ T26] audit: type=1800 audit(2000000019.330:65): pid=6665 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.665" name="file1" dev="loop6" ino=22 res=0 errno=0 [ 193.271863][ T6659] EXT4-fs warning (device loop4): ext4_enable_quotas:7087: Failed to enable quota tracking (type=1, err=-5, ino=4). Please run e2fsck to fix. [ 193.485243][ T6658] loop0: detected capacity change from 0 to 8192 [ 193.554533][ T6658] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 193.590818][ T6595] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 193.633301][ T6658] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 193.647101][ T6595] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 193.667652][ T6658] REISERFS (device loop0): using ordered data mode [ 193.690505][ T6658] reiserfs: using flush barriers [ 193.716998][ T6595] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 193.721549][ T6658] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 193.745688][ T6595] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 193.773873][ T6658] REISERFS (device loop0): checking transaction log (loop0) [ 193.825766][ T4996] hid-generic 0005:0005:0008.000B: unknown main item tag 0x0 [ 193.841643][ T4996] hid-generic 0005:0005:0008.000B: item fetching failed at offset 1/2 [ 193.850680][ T4996] hid-generic: probe of 0005:0005:0008.000B failed with error -22 [ 194.111482][ T6658] REISERFS (device loop0): Using tea hash to sort names [ 194.142743][ T6658] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 194.185750][ T6658] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 194.315455][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.322886][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.545007][ T4350] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.639464][ T4996] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 194.647395][ T4276] Bluetooth: hci4: command 0x041b tx timeout [ 194.786505][ T4350] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.849826][ T4996] usb 4-1: Using ep0 maxpacket: 16 [ 194.862785][ T4996] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 194.909765][ T4996] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 194.939392][ T4996] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 194.979055][ T4996] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 195.017994][ T4996] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.028540][ T4350] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.088012][ T4996] usb 4-1: config 0 descriptor?? [ 195.233591][ T4350] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.308357][ T6595] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.404792][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 195.413973][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 195.460180][ T6595] 8021q: adding VLAN 0 to HW filter on device team0 [ 195.497928][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 195.546423][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 195.563236][ T4996] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.000C/input/input18 [ 195.590799][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.598051][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 195.634128][ T6692] loop6: detected capacity change from 0 to 32768 [ 195.641545][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 195.656175][ T6692] [ 195.656175][ T6692] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 195.656175][ T6692] [ 195.658804][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 195.682168][ T4996] microsoft 0003:045E:07DA.000C: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 195.698989][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 195.720742][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.728032][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 195.732546][ T4996] usb 4-1: USB disconnect, device number 12 [ 195.776442][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 195.834494][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 195.835285][ T6692] read_mapping_page failed! [ 195.893623][ T6692] ERROR: (device loop6): txCommit: [ 195.893623][ T6692] [ 195.915316][ T5963] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 195.960371][ T5963] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 195.984705][ T5963] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 195.986265][ T6707] read_mapping_page failed! [ 196.003700][ T6705] fido_id[6705]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 196.014989][ T5963] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 196.050656][ T6707] ERROR: (device loop6): txCommit: [ 196.050656][ T6707] [ 196.068365][ T5963] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 196.118351][ T5963] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 196.120235][ T6706] ================================================================== [ 196.134418][ T6706] BUG: KASAN: slab-out-of-bounds in dtInsertEntry+0xd74/0x1270 [ 196.142121][ T6706] Read of size 4 at addr ffff88804156b70c by task syz.6.672/6706 [ 196.149918][ T6706] [ 196.152359][ T6706] CPU: 1 PID: 6706 Comm: syz.6.672 Not tainted syzkaller #0 [ 196.153511][ T5963] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 196.159753][ T6706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 196.159769][ T6706] Call Trace: [ 196.159776][ T6706] [ 196.159783][ T6706] dump_stack_lvl+0x188/0x24e [ 196.159818][ T6706] ? __lock_acquire+0x7d10/0x7d10 [ 196.159844][ T6706] ? show_regs_print_info+0x12/0x12 [ 196.199337][ T6706] ? load_image+0x400/0x400 [ 196.204153][ T6706] ? __virt_addr_valid+0x465/0x540 [ 196.209317][ T6706] ? dtInsertEntry+0xd74/0x1270 [ 196.214213][ T6706] print_report+0xa8/0x210 [ 196.218675][ T6706] kasan_report+0x10b/0x140 [ 196.223315][ T6706] ? dtInsertEntry+0xd74/0x1270 [ 196.228215][ T6706] dtInsertEntry+0xd74/0x1270 [ 196.232951][ T6706] dtSplitPage+0x24f0/0x31f0 [ 196.237591][ T6706] ? dbAllocCtl+0x535/0x9b0 [ 196.242158][ T6706] dtInsert+0x100e/0x5950 [ 196.246546][ T6706] ? txLock+0x2ab/0x20b0 [ 196.250839][ T6706] ? __lock_acquire+0x7d10/0x7d10 [ 196.255927][ T6706] ? UniStrupr+0x2e0/0x2e0 [ 196.260387][ T6706] ? txLock+0x1150/0x20b0 [ 196.264767][ T6706] ? dtSearch+0x1c6b/0x2050 [ 196.269319][ T6706] ? txEnd+0x520/0x520 [ 196.273434][ T6706] jfs_create+0x730/0xad0 [ 196.277817][ T6706] ? jfs_lookup+0x420/0x420 [ 196.282378][ T6706] ? jfs_get_parent+0xa0/0xa0 [ 196.287121][ T6706] ? make_kgid+0x660/0x660 [ 196.291586][ T6706] ? generic_permission+0x230/0x510 [ 196.296843][ T6706] ? inode_permission+0xef/0x480 [ 196.301922][ T6706] ? bpf_lsm_inode_create+0x5/0x10 [ 196.307087][ T6706] ? security_inode_create+0xb3/0x100 [ 196.312507][ T6706] ? jfs_lookup+0x420/0x420 [ 196.317107][ T6706] path_openat+0x1181/0x2ee0 [ 196.321767][ T6706] ? do_filp_open+0x430/0x430 [ 196.326490][ T6706] do_filp_open+0x1f1/0x430 [ 196.331030][ T6706] ? vfs_tmpfile+0x480/0x480 [ 196.335668][ T6706] ? _raw_spin_unlock+0x24/0x40 [ 196.340563][ T6706] ? alloc_fd+0x58f/0x630 [ 196.344945][ T6706] do_sys_openat2+0x150/0x4b0 [ 196.349677][ T6706] ? lockdep_hardirqs_on+0x94/0x140 [ 196.354908][ T6706] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 196.360835][ T6706] ? do_sys_open+0xe0/0xe0 [ 196.365306][ T6706] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 196.371327][ T6706] ? lock_chain_count+0x20/0x20 [ 196.376310][ T6706] __x64_sys_openat+0x135/0x160 [ 196.381209][ T6706] do_syscall_64+0x4c/0xa0 [ 196.385672][ T6706] ? clear_bhb_loop+0x60/0xb0 [ 196.390388][ T6706] ? clear_bhb_loop+0x60/0xb0 [ 196.395190][ T6706] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 196.401130][ T6706] RIP: 0033:0x7fb9d859bf79 [ 196.405583][ T6706] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 196.425504][ T6706] RSP: 002b:00007fb9d946b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 196.429523][ T4276] Bluetooth: hci1: command 0x0406 tx timeout [ 196.434042][ T6706] RAX: ffffffffffffffda RBX: 00007fb9d8816090 RCX: 00007fb9d859bf79 [ 196.434063][ T6706] RDX: 000000000000275a RSI: 0000200000000100 RDI: ffffffffffffff9c [ 196.434078][ T6706] RBP: 00007fb9d86327e0 R08: 0000000000000000 R09: 0000000000000000 [ 196.434091][ T6706] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 196.434103][ T6706] R13: 00007fb9d8816128 R14: 00007fb9d8816090 R15: 00007fff45237968 [ 196.434124][ T6706] [ 196.434145][ T6706] [ 196.434149][ T6706] Allocated by task 6692: [ 196.434160][ T6706] kasan_set_track+0x4b/0x70 [ 196.434189][ T6706] __kasan_slab_alloc+0x6b/0x80 [ 196.434212][ T6706] slab_post_alloc_hook+0x4b/0x480 [ 196.434231][ T6706] kmem_cache_alloc_lru+0x11a/0x2e0 [ 196.434250][ T6706] jfs_alloc_inode+0x24/0x60 [ 196.434272][ T6706] iget_locked+0x1a9/0x830 [ 196.434291][ T6706] jfs_iget+0x20/0x3f0 [ 196.434312][ T6706] jfs_lookup+0x21d/0x420 [ 196.434342][ T6706] __lookup_slow+0x29d/0x3f0 [ 196.434359][ T6706] lookup_slow+0x53/0x70 [ 196.434374][ T6706] walk_component+0x2be/0x3f0 [ 196.434393][ T6706] path_lookupat+0x169/0x440 [ 196.434409][ T6706] filename_lookup+0x224/0x560 [ 196.434425][ T6706] user_path_at_empty+0x3e/0x60 [ 196.434441][ T6706] __se_sys_chdir+0x98/0x280 [ 196.434462][ T6706] do_syscall_64+0x4c/0xa0 [ 196.434485][ T6706] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 196.440526][ T4274] Bluetooth: hci2: command 0x0406 tx timeout [ 196.448457][ T6706] [ 196.448464][ T6706] Last potentially related work creation: [ 196.585300][ T6706] kasan_save_stack+0x3a/0x60 [ 196.590018][ T6706] __kasan_record_aux_stack+0xb2/0xc0 [ 196.595419][ T6706] call_rcu+0x14f/0x990 [ 196.599610][ T6706] evict+0x834/0x8d0 [ 196.603543][ T6706] evict_inodes+0x60c/0x6a0 [ 196.608070][ T6706] generic_shutdown_super+0x93/0x340 [ 196.613380][ T6706] kill_block_super+0x7c/0xe0 [ 196.618084][ T6706] deactivate_locked_super+0x93/0xf0 [ 196.623418][ T6706] cleanup_mnt+0x42c/0x4b0 [ 196.627869][ T6706] task_work_run+0x1d0/0x260 [ 196.632494][ T6706] exit_to_user_mode_loop+0xe6/0x110 [ 196.637816][ T6706] exit_to_user_mode_prepare+0xee/0x180 [ 196.643580][ T6706] syscall_exit_to_user_mode+0x16/0x40 [ 196.649070][ T6706] do_syscall_64+0x58/0xa0 [ 196.653609][ T6706] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 196.659537][ T6706] [ 196.661903][ T6706] The buggy address belongs to the object at ffff88804156ae40 [ 196.661903][ T6706] which belongs to the cache jfs_ip of size 2240 [ 196.675638][ T6706] The buggy address is located 12 bytes to the right of [ 196.675638][ T6706] 2240-byte region [ffff88804156ae40, ffff88804156b700) [ 196.689474][ T6706] [ 196.691822][ T6706] The buggy address belongs to the physical page: [ 196.698259][ T6706] page:ffffea0001055a00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x41568 [ 196.708446][ T6706] head:ffffea0001055a00 order:3 compound_mapcount:0 compound_pincount:0 [ 196.716807][ T6706] memcg:ffff888027a3ec01 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 196.721076][ T6706] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 196.729104][ T6706] raw: 00fff00000010200 0000000000000000 dead000000000122 ffff888147aaca00 [ 196.737823][ T6706] raw: 0000000000000000 00000000800d000d 00000001ffffffff ffff888027a3ec01 [ 196.746546][ T6706] page dumped because: kasan: bad access detected [ 196.753432][ T6706] page_owner tracks the page as allocated [ 196.759363][ T6706] page last allocated via order 3, migratetype Reclaimable, gfp_mask 0x1d2050(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL|__GFP_RECLAIMABLE), pid 5540, tgid 5539 (syz.4.366), ts 144803248073, free_ts 18419295158 [ 196.783385][ T6706] post_alloc_hook+0x173/0x1a0 [ 196.788188][ T6706] get_page_from_freelist+0x1a1e/0x1ab0 [ 196.793870][ T6706] __alloc_pages+0x1ec/0x4f0 [ 196.798508][ T6706] alloc_slab_page+0x5d/0x160 [ 196.803401][ T6706] new_slab+0x87/0x2c0 [ 196.807503][ T6706] ___slab_alloc+0xbc6/0x1240 [ 196.812252][ T6706] kmem_cache_alloc_lru+0x1ae/0x2e0 [ 196.817486][ T6706] jfs_alloc_inode+0x24/0x60 [ 196.822091][ T6706] new_inode_pseudo+0x5f/0x1c0 [ 196.826866][ T6706] new_inode+0x25/0x1c0 [ 196.831114][ T6706] jfs_fill_super+0x398/0xad0 [ 196.835886][ T6706] mount_bdev+0x287/0x3c0 [ 196.840403][ T6706] legacy_get_tree+0xe6/0x180 [ 196.845093][ T6706] vfs_get_tree+0x88/0x270 [ 196.849521][ T6706] do_new_mount+0x24a/0xa40 [ 196.854032][ T6706] __se_sys_mount+0x2e3/0x3d0 [ 196.858721][ T6706] page last free stack trace: [ 196.863492][ T6706] free_unref_page_prepare+0x8b4/0x9a0 [ 196.869061][ T6706] free_unref_page+0x2e/0x3f0 [ 196.873832][ T6706] free_contig_range+0x9d/0x150 [ 196.878799][ T6706] destroy_args+0xf0/0xa0a [ 196.883231][ T6706] debug_vm_pgtable+0x33c/0x38e [ 196.888178][ T6706] do_one_initcall+0x26a/0x840 [ 196.893042][ T6706] do_initcall_level+0x137/0x1e4 [ 196.898000][ T6706] do_initcalls+0x4b/0x8a [ 196.902428][ T6706] kernel_init_freeable+0x415/0x5be [ 196.907899][ T6706] kernel_init+0x19/0x1b0 [ 196.912237][ T6706] ret_from_fork+0x1f/0x30 [ 196.916665][ T6706] [ 196.918991][ T6706] Memory state around the buggy address: [ 196.924638][ T6706] ffff88804156b600: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 196.932704][ T6706] ffff88804156b680: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 196.940766][ T6706] >ffff88804156b700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 196.948829][ T6706] ^ [ 196.953157][ T6706] ffff88804156b780: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 196.961311][ T6706] ffff88804156b800: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 196.969373][ T6706] ================================================================== [ 196.979838][ T4274] Bluetooth: hci4: command 0x040f tx timeout [ 197.059508][ T6706] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 197.066783][ T6706] CPU: 0 PID: 6706 Comm: syz.6.672 Not tainted syzkaller #0 [ 197.074115][ T6706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 197.084295][ T6706] Call Trace: [ 197.087605][ T6706] [ 197.090665][ T6706] dump_stack_lvl+0x188/0x24e [ 197.095477][ T6706] ? memcpy+0x3c/0x60 [ 197.099582][ T6706] ? show_regs_print_info+0x12/0x12 [ 197.104822][ T6706] ? load_image+0x400/0x400 [ 197.109365][ T6706] panic+0x2e5/0x730 [ 197.113298][ T6706] ? bpf_jit_dump+0xd0/0xd0 [ 197.117833][ T6706] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 197.123842][ T6706] ? _raw_spin_unlock+0x40/0x40 [ 197.128703][ T6706] ? print_memory_metadata+0x314/0x400 [ 197.134270][ T6706] check_panic_on_warn+0x80/0xa0 [ 197.139229][ T6706] ? dtInsertEntry+0xd74/0x1270 [ 197.144114][ T6706] end_report+0x66/0x110 [ 197.148370][ T6706] kasan_report+0x118/0x140 [ 197.152887][ T6706] ? dtInsertEntry+0xd74/0x1270 [ 197.157743][ T6706] dtInsertEntry+0xd74/0x1270 [ 197.162445][ T6706] dtSplitPage+0x24f0/0x31f0 [ 197.167052][ T6706] ? dbAllocCtl+0x535/0x9b0 [ 197.171573][ T6706] dtInsert+0x100e/0x5950 [ 197.175911][ T6706] ? txLock+0x2ab/0x20b0 [ 197.180165][ T6706] ? __lock_acquire+0x7d10/0x7d10 [ 197.185209][ T6706] ? UniStrupr+0x2e0/0x2e0 [ 197.189637][ T6706] ? txLock+0x1150/0x20b0 [ 197.194057][ T6706] ? dtSearch+0x1c6b/0x2050 [ 197.198575][ T6706] ? txEnd+0x520/0x520 [ 197.202751][ T6706] jfs_create+0x730/0xad0 [ 197.207199][ T6706] ? jfs_lookup+0x420/0x420 [ 197.211714][ T6706] ? jfs_get_parent+0xa0/0xa0 [ 197.216405][ T6706] ? make_kgid+0x660/0x660 [ 197.221088][ T6706] ? generic_permission+0x230/0x510 [ 197.226586][ T6706] ? inode_permission+0xef/0x480 [ 197.231628][ T6706] ? bpf_lsm_inode_create+0x5/0x10 [ 197.236834][ T6706] ? security_inode_create+0xb3/0x100 [ 197.242215][ T6706] ? jfs_lookup+0x420/0x420 [ 197.246725][ T6706] path_openat+0x1181/0x2ee0 [ 197.251339][ T6706] ? do_filp_open+0x430/0x430 [ 197.256202][ T6706] do_filp_open+0x1f1/0x430 [ 197.260715][ T6706] ? vfs_tmpfile+0x480/0x480 [ 197.265312][ T6706] ? _raw_spin_unlock+0x24/0x40 [ 197.270165][ T6706] ? alloc_fd+0x58f/0x630 [ 197.274532][ T6706] do_sys_openat2+0x150/0x4b0 [ 197.279308][ T6706] ? lockdep_hardirqs_on+0x94/0x140 [ 197.284512][ T6706] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 197.290409][ T6706] ? do_sys_open+0xe0/0xe0 [ 197.294840][ T6706] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 197.300832][ T6706] ? lock_chain_count+0x20/0x20 [ 197.305729][ T6706] __x64_sys_openat+0x135/0x160 [ 197.310620][ T6706] do_syscall_64+0x4c/0xa0 [ 197.315084][ T6706] ? clear_bhb_loop+0x60/0xb0 [ 197.319857][ T6706] ? clear_bhb_loop+0x60/0xb0 [ 197.324545][ T6706] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 197.330443][ T6706] RIP: 0033:0x7fb9d859bf79 [ 197.334864][ T6706] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 197.354483][ T6706] RSP: 002b:00007fb9d946b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 197.362906][ T6706] RAX: ffffffffffffffda RBX: 00007fb9d8816090 RCX: 00007fb9d859bf79 [ 197.370903][ T6706] RDX: 000000000000275a RSI: 0000200000000100 RDI: ffffffffffffff9c [ 197.378883][ T6706] RBP: 00007fb9d86327e0 R08: 0000000000000000 R09: 0000000000000000 [ 197.386888][ T6706] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 197.394982][ T6706] R13: 00007fb9d8816128 R14: 00007fb9d8816090 R15: 00007fff45237968 [ 197.403062][ T6706] [ 197.406536][ T6706] Kernel Offset: disabled [ 197.411032][ T6706] Rebooting in 86400 seconds..