last executing test programs: 2m24.090577531s ago: executing program 4 (id=197): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f00000005c0), 0x1, 0x515, &(0x7f0000000b40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./file1\x00', 0x105042, 0x1db) truncate(&(0x7f0000000280)='./file1\x00', 0x40003) writev(r1, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x3fe00}], 0x1) fallocate(r0, 0x8, 0x4000, 0xc000) 2m23.367977332s ago: executing program 4 (id=208): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}}, 0x20) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0xfd}) 2m23.096158514s ago: executing program 4 (id=213): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000040)={0x0, 0x7, 0x2, [0x1, 0x267]}, 0xc) 2m22.810543953s ago: executing program 4 (id=214): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) 2m21.880821498s ago: executing program 4 (id=219): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x2008002, &(0x7f00000000c0)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1000}}, {@nodiscard}, {@quota}]}, 0x1, 0x560, &(0x7f0000000c00)="$eJzs3c9vI1cdAPDvTH42u212oQeogF2gsKDV2htvu6p6abmAUFWpouLEYRsSbxTWXi+xU5oQifRvAAkkTvAncEDigNQTB24ckTgAohyQCkSgDRIHoxlPEjdxWLN2bDb+fKTZ+fFm5vuevTPv+dmZF8DEuhoRuxExGxFvRcRisT0ppni1M2X7PdzbWdnf21lJot1+829Jnp5ti65jMheKc85HxNe+EvHN5GTc5tb2veVarbpRrJdb9Qfl5tb2jfX68lp1rXq/Urm9dPvmS7derAytrFfqP/vgy+uvff2Xv/jk+7/Z/eJ3s2xdLNK6yzFMnaLPHMbJTEfEa2cRbAymivnsmPPB40kj4iMR8Zn8+l+Mqfx/JwBwnrXbi9Fe7F4HAM67NO8DS9JSRKRp0Qgodfrwno2FtNZotq7fbWzeX+30lV2KmfTueq168/Lc776d7zyTZOtLeVqenq9Xjq3fiojLEfGDuafy9dJKo7Y6niYPAEy8C931f0T8cy5NS6W+Du3xrR4A8MSYH3cGAICRU/8DwORR/wPA5Omj/i++7N8987wAAKPh8z8ATB71PwBMHvU/AEyUN15/PZva+8Xzr1ff3tq813j7xmq1ea9U31wprTQ2HpTWGo21/Jk99Uedr9ZoPFh6ITbfKbeqzVa5ubV9p97YvN+6kz/X+051ZiSlAgD+m8tX3vttEhG7Lz+VT9E1loO6Gs63dIh7AU+WqUEO1kCAJ5rRvmBy9VWF542EX595XoDx6Pkw7/meix/2o/8hiN8Zwf+Vax/vv//fGM9wvujZh8n1eP3/rww9H8DoPXb//x+Gmw9g9Nrt5PiY/7OHSd3eGOWoxADAWRrgJ3zt7w2rEQKM1aMG8x7K9/8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwzlyMiG9FkpbyscDT7N+0VIp4OiIuxUxyd71WvRkRz8SViJiZy9aXxp1pAGBA6V+SYvyva4vPXzyeOpv8ay6fR8R3fvzmD99ZbrU2lrLtfz/cPncwfFjl6LgBxhUEAPr3p352yuvvSjHv+iD/cG9n5WA6wzye8MGXDgcfXdnf28mnTsp0tNvtdsR83pZY+EcS08Ux8xHxXERMDSH+7rsR8bFe5U/yvpFLxcin3fGjiP30SOOnH4qf5mmdefbyfXQIeYFJ8152/3m11/WXxtV83vv6n8/vUIPL73/zEQf3vv2u+NNFpKke8bNr/mq/MV741VdPbGwvdtLejXhuulf85DB+ckr85/uM//tPfOr7r5yS1v5JxLXoHb87VrlVf1Bubm3fWK8vr1XXqvcrldtLt2++dOvFSjnvoy4f9FSf9NeXrz9zWt6y8i+cEr/zzl84Vv7Zw2M/12f5f/rvt77x6aPVuePxv/DZ3u//s/m89+uf1Ymf7zP+8sLPTx2+O4u/ekr5H/X+X+8z/vt/3l7tc1cAYASaW9v3lmu16sZAC9mn0GGc58RClsX+dj5oLg4W9I+RLxy9LEkkMexyZY2xfnaeOatX9cwXpg/bisM44VRnYaE45YiLkw6pFIMtxKVi4eGogo7nfgSMztFFP+6cAAAAAAAAAAAAAAAApxnF3zCNu4wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACcX/8JAAD//7a0vsc=") syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='./bus\x00', 0x204b82f, 0x0, 0x3, 0x0, &(0x7f0000000240)) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file7\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./file7/file0\x00', 0x100000, 0x0, 0x0, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x2) 2m21.595551747s ago: executing program 4 (id=221): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f0000001500)={0x30, r1, 0x1, 0x70bd07, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x64}, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xb, 0x4000003f}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x40000a0}, 0x4044010) close_range(r0, 0xffffffffffffffff, 0x0) 2m21.395156462s ago: executing program 32 (id=221): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f0000001500)={0x30, r1, 0x1, 0x70bd07, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x64}, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xb, 0x4000003f}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x40000a0}, 0x4044010) close_range(r0, 0xffffffffffffffff, 0x0) 1m26.125102504s ago: executing program 3 (id=598): syz_mount_image$btrfs(&(0x7f0000000180), &(0x7f0000005600)='./file0\x00', 0x0, &(0x7f0000000000)={[{@nodatasum}]}, 0x1, 0x559a, &(0x7f0000005680)="$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") open$dir(0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x143040, 0x30) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x109142, 0x84) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f00000000c0)={{r0}}) 1m24.956851446s ago: executing program 3 (id=603): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x2b, 0x80801, 0x1) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x14, 0x601, 0x0, 0x0, {0x2b, 0xfa}}, 0x14}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 1m23.454982069s ago: executing program 3 (id=616): syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) socket$inet6(0xa, 0x2, 0x3a) getdents(r0, 0x0, 0x0) 1m23.310478304s ago: executing program 3 (id=617): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x21008, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) chroot(&(0x7f0000000080)='./file0\x00') unshare(0x2c020400) pivot_root(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000180)='./file0/../file0\x00') 1m23.243548041s ago: executing program 3 (id=618): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4006, &(0x7f0000003f80), 0x5, 0x44f, &(0x7f00000007c0)="$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") mkdir(&(0x7f0000000080)='./bus\x00', 0x3) r0 = open(&(0x7f0000000000)='./bus\x00', 0x40000, 0x0) setxattr$trusted_overlay_nlink(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000740), &(0x7f0000000780)={'L-', 0xefa}, 0x16, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000200)=@v1={0x0, @aes256, 0x0, @auto="fa9049eb44765637"}) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x8010661b, &(0x7f00000001c0)) 1m22.800912043s ago: executing program 3 (id=620): syz_mount_image$udf(&(0x7f0000002480), &(0x7f0000000500)='./file0\x00', 0x200000, &(0x7f0000000000)=ANY=[], 0x1, 0x495, &(0x7f0000000a40)="$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") syz_mount_image$udf(&(0x7f0000000100), &(0x7f0000000f00)='./file0\x00', 0x14444, &(0x7f0000001d80)=ANY=[@ANYBLOB="696f636861727365743d61736369692c6e6f6164696e696362000064696e6963622c6769643d69676e6f72652c7569643d666f726765742c756d61736b3d30303030303030303030303030303030303030303030322c076f6e6761642c6769643d771d0f4d30dc61469a581342d98a7a4c3534a971c3e26de72edc9ec3db403d8b2e970b9dcea448ddbb5a116ce6f67d99a77aa50bce7fc5451bcf5b13e9698d80385c54fff77d38aa9703314cd19a075893a1648dd8ef78a118122ee7a0e400"/203, @ANYRESDEC=0x0, @ANYBLOB=',nostrict,\x00'], 0xfe, 0xc22, &(0x7f00000002c0)="$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") setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x129242, 0x30) pwrite64(r0, &(0x7f0000000200)='a', 0x1, 0x80000000e0) truncate(&(0x7f0000000200)='./file1\x00', 0x20fffffffc) 1m22.566341071s ago: executing program 33 (id=620): syz_mount_image$udf(&(0x7f0000002480), &(0x7f0000000500)='./file0\x00', 0x200000, &(0x7f0000000000)=ANY=[], 0x1, 0x495, &(0x7f0000000a40)="$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") syz_mount_image$udf(&(0x7f0000000100), &(0x7f0000000f00)='./file0\x00', 0x14444, &(0x7f0000001d80)=ANY=[@ANYBLOB="696f636861727365743d61736369692c6e6f6164696e696362000064696e6963622c6769643d69676e6f72652c7569643d666f726765742c756d61736b3d30303030303030303030303030303030303030303030322c076f6e6761642c6769643d771d0f4d30dc61469a581342d98a7a4c3534a971c3e26de72edc9ec3db403d8b2e970b9dcea448ddbb5a116ce6f67d99a77aa50bce7fc5451bcf5b13e9698d80385c54fff77d38aa9703314cd19a075893a1648dd8ef78a118122ee7a0e400"/203, @ANYRESDEC=0x0, @ANYBLOB=',nostrict,\x00'], 0xfe, 0xc22, &(0x7f00000002c0)="$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") setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x129242, 0x30) pwrite64(r0, &(0x7f0000000200)='a', 0x1, 0x80000000e0) truncate(&(0x7f0000000200)='./file1\x00', 0x20fffffffc) 28.939871466s ago: executing program 6 (id=1048): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000005c0)={r1, r0, 0x15, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0}}, 0x30) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, 0x0, 0xfffffffffffffffe) 28.813151503s ago: executing program 6 (id=1050): r0 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000020ef0ec47200000000000109022d0001020000000904000007030003000921000036012205000905810300040c028e090502"], 0x0) syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000204f045db60000000000"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)={0x0, 0xe, 0x57, {0x57, 0x1, "a7ea3163fd3bc518194b120c1e73d54cfc4ad2841ef4f6a3fd7c59ccb785025f2e7b3504ff87cbfd10f3c080b73385a7015d3a32ed6b5217cdbb6fadb2ea7a288982d5337c364daf03bd400d66293b0a2b103dd93f"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 25.012501788s ago: executing program 6 (id=1071): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x84, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000140), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x6, 0x24, &(0x7f0000000740)=ANY=[], 0x0) ioctl$EVIOCRMFF(r0, 0x40085503, &(0x7f0000000200)=0x6) 24.150932285s ago: executing program 6 (id=1074): syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000180)=ANY=[], 0x3, 0x5fe, &(0x7f0000000b00)="$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") open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) setxattr$trusted_overlay_nlink(&(0x7f0000000240)='./file0\x00', &(0x7f0000000340), 0x0, 0x0, 0x2) 23.606699198s ago: executing program 6 (id=1077): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000001c0)={"c718ae3ddd25e4c2826499cb6a055b56a5a7336f377a556f824db28eb6743cf045afd0e932534b9eb3b847abbcef63c85319991745999ed89ff49783a84d57cf175a89f8733d74a1bdddcb0a6c3f7535e7976e79da1b52de6403f6710d606fafaf685ec19f369b7829b12aa2b8cd2ab52f9c688683979cdb9516cb61f2adb9aefd44fee30bddb81ebefa818f31f60d89a4e390920c7ed0e2512fd59f719e734b0a1d1f3ff7babb54258a1585514aac0b000000733671e0543929c06f72fc598939003ac6777f3497523536fd25ac4f1e265f5038fa7455f2cc6131d4a189a16b0f0b89e6a495e1d95b840c36488adc22cb2d1b8af57f6dce7214152ba1b3c0d3ad0a6db821518e44b24cb36a02d76ea11a1c45879fc77e7bb2af8c345ddddf49f41228df2114f2c27d16499fa36097a5015ad61a6a9484c09e0a2dfb50f7b7ca71135dc32804a80380a6e20e0ae03be775e472cd31d6a31e615937c38e746a5cf6c9d8194242990dd497a2c52ab50300000000000000cebbd983c3f86dbe92c4b751c04693cb09af88521ab305ceabf6d2bab40bb1b219fbe95ace2f6c49fea798e76b4ef336dff5ac0f7ab022b800ac1aa42fd231b52465a410177ed85dcc9c6d794e2aa0b90cdc409541aa85fa16e3cbc3a9d6c83ffd4d01e5ba898555eeffccf0cb28ce5df0ba31cb793675276162de2fdcb486455bca57edf4fb14e1533554eb22527d66a28a960c430f6136927f54e670c46292454fe28485f35405025844fd24fe846f6656c77d9b5f2b4750ac4805897b02c85caba80000bb96f71f468c9e746d860238b3b113ab1eef51e1507f8832d5d69528083d44548e491477cda51d7e083a134097438e9d7ea34eae8a2e6b516327db9310c7478a37f5c562037196131cc7c84fa29c3c2576f2ae7570b5a98aaa49ca7ddfd5a8c046ce82e4a2d06082ad7a3ab0dfbe208630b1410b674781855752c9c57c1c5ab0a74a336ce89b3a9c0d37a3ca4e698a798a85faf7f4f1dc020b7dd5750062c9810c4bc1ad7afe338f2b0f29059e684fe16098eb30da105be01ca11a293635dfc6d25ecc770ba72792fd3c6851d951b770d0f9edafb1cb4241350d85b04ed737a9bfd7e8301c43b65a95dda76d6850860ba3195040b14c8ad1a8b52472785521147182352a1dbd93595cbc26e813ccd75e16f9247fe82ed150c121f0041022522ec76476f0a9cffa3be1d3ffffffffffffffff29358bbfd8b7a12fe94a0355beb9420eee0a5c11220100c782b89e9430de84b220e8c0df4bd40be3400c58f149319f891fe86fba751dab3326bf2deb9e782b37ec9c7adf36025a091a4b3600000000000000000000000000000000000000000000000000000000000000000600"}) 22.182633864s ago: executing program 6 (id=1081): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200080, &(0x7f00000000c0), 0x3, 0x56d, &(0x7f0000000c00)="$eJzs3c+PG1cdAPDvzP6w86PdBHqAqpAAhYCieLNOG1W9NLmAUFUJUXFAHNJl11ktseMQe0t3icT2bwAJBCf4EzggcUDqiQM3jkgcEFI5IAWIQFkESEYznt04WVtxYq/d7H4+0mR+vHnzfU/O+D0/e+cFcGSdjYjtiJiPiHciYqE4nhRLXOku2Xn3791Z2bl3ZyWJTuftvyd5enYsevJkThTXLEfE178S8e1kf9zW5taN5Xq9drvYX2w3bi22NrcurDeW12prtZvV6uWlyxdfu/RqdWx1PdP45d0vr7/5jd/8+lMf/n77S9/PinWySOutxzh1qz63FyczGxFvHkSwKZgp1vP7Ul7qn+HKwZaHJ5NGxMci4rP5/b8QM/n/TgDgMOt0fhqdhd59AOCwyz7/nywnaSUi0rToBFS6Y3gvxPG03my1z19vbtxc7Y6VnYq59Pp6vXbxdOmP381Pnkuy/aU8LU/P96uP7F+KiNMR8aPSsXy/stKsr06nywMAR96J/Duwov2PiH+V0rRSGSprn2/1AIBnRnkKOQGA6eptxUtTLAcAMDk+xQPA0TNE+1982b994GUBACbD538AOHq0/wBw9Dxp++83ggDwTPvaW29lS2eneP716rubG3PNdy+s1lo3Ko2NlcpK8/atylqzuZY/s6fxUOZjPdtFn6DebN5aeiU23lts11rtxdbm1rVGc+Nm+1r+XO9rtbmJ1g4A6Of0mQ/+kETE9uvH8iV65nLQVsPhlk67AMDUzDzYrJ140sw6CPBMe7rZvv4z9nIAkzdUE553En534GUBpqPvw7zLfTcf9pMnCOJ3xvCRcu6Tw4//75/jGXiWGf+Ho2vmqXK9MfZyAJP3dOP/wGHQ6SSPzvk/v5cEABxKI/yEr/ODcXVCgKl63GTeY/n+HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6ZkxHxnUjSSj4XeJr9m1YqEc9FxKmYS66v12sXI+L5OBMRc6Vsf2nahQYARpT+NSnm/zq38PLJR1Pnk3+X8nVEfO9nb//4veV2+/ZSdvwfe8dLu9OHVR/kG2FeQQBgOJ3SkCfm7Xe1WPd8kL9/787K7nJQhezn7tX4XzEV8crOvTv50k2ZjexgRDnvSxz/ZxKzRZ5yRLwYETNjiL/9fkR8ol/9k3xs5FQx82lv/ChiPzfR+OlD8dM8rbvOOl8fH0NZ4Kj54GpEXOl3/6VxNl/3v//L+TvU6O5e7V5s971vpyf+bBFppk/87J4/O2yMV3771X0HOwvdtPcjXpztFz/Zi58MiP/ykPH/9NKnf/jGgLTOzyPORf/4vbEW241bi63NrQvrjeW12lo5qtXLS5cvvnbp1epiPka9uDtSvd/fXj///KCyZfU/PiB+uW/95/fyfn7I+v/iv+986zMPdkuPxv/i5/q//i/0jd+VtYlfeDhMZ1D85eO/Gjh9dxZ/dUD9H/f6nx+m8hHx4V+2Voc8FQCYgNbm1o3ler12e6SNNHY647jOvo2siMOdvNtdHC3on+MgavGUG3MjV2daG7N7fcXxXvmb2RUnXJ107LUYaeP+pGJN7z0JmIwHN/20SwIAAAAAAAAAAAAAAAwyiT9dmnYdAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOLz+HwAA//+WydIx") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x80) mount(0x0, &(0x7f0000000300)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x10000, 0x0) getdents64(r0, &(0x7f0000001f40)=""/4113, 0xafa) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 21.905429906s ago: executing program 34 (id=1081): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200080, &(0x7f00000000c0), 0x3, 0x56d, &(0x7f0000000c00)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x80) mount(0x0, &(0x7f0000000300)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x10000, 0x0) getdents64(r0, &(0x7f0000001f40)=""/4113, 0xafa) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 6.252581982s ago: executing program 2 (id=1164): r0 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x1, 0x0, 0xfffc, 0x0, 0xa, 0x0, 0x0, 0x0, r2}, {0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0xff}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffb, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) 5.51259728s ago: executing program 2 (id=1172): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt(r0, 0x200000000114, 0x271e, 0x0, &(0x7f0000000400)) 5.351425772s ago: executing program 2 (id=1176): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x24d, &(0x7f0000000740)="$eJzs3T9oY3UAB/Dve0k8exfl1EUQTkFEtFDOTXA5F4UDPQ4RQYUTERflKtQWt9bJxUFnlU4uRdysjtKluCiCU9UOdRG0OFgcdIgkr5VqU1ubNE99nw+85L3k9+/xft9fQuCRAI11PsmlJK0k00k6SYr9Be6qtvO7h8tT69eSXu+Jn4pBueq4slfvXJKlJA8mWSuLvNROFlaf2fpl49F735zv3PP+6tNTEz3JXdtbm4/tvHfljY8uP7DwxVc/XClyKd0/ndf4FUNeaxfJrafR2b9E0a57BBzH1dc+/Lqf+9uS3D3Ifydlqov31twNa53c/+5hdd/+8cs7JjlWYPx6vU7/M3CpBzROmaSbopxJUu2X5cxM9R3+m9bZ8uXZuVenX5ydv/5C3SsVMC7dZPORT858fO4v+f++VeUf+A874he2fv6fvLrybX9/pzW0yIWbTmVgQN36+Z9+bvG+HJ5/4H9K/qG55B+aS/6hueQfmkv+obnkH5pL/qG55B+aS/6hufbnHwBolt6Zuu9ABupS9/oDAAAAAAAAAAAAAAAAAAActDy1fm1vm1Sfn72TbD+cpD2s/9bg/4iTGwePZ38u+sX+UFTVRvLsnSM2MKIPar77+ubvxtLMiS/D5xfy+FhGcEKL15Ol15NcbLcPzr9id/4donN0+7cc8X7n+X8y2vF76Kl6+/9tpd7+L28kn/bXn4vD1p8ytw+eh68/3eNNgb/1yq8jNgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDE/B4AAP//e+xttA==") mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='mnt/encrypted_dir\x00', 0x800, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f00000006c0)=@v1={0x0, @aes128, 0x1, @desc3}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000000040)=@v1={0x0, @aes128, 0x3, @auto="42a53b4a5bef077c"}) 4.61043177s ago: executing program 5 (id=1181): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/2, 0x200000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x20000, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x1, r2}, 0x10) 4.60899409s ago: executing program 2 (id=1182): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010800d972a440b72040155ab7010203010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000bc0)={0x44, &(0x7f0000000900)={0x20, 0x15, 0x6, "ec6d7eebc103"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000640)={0x40, 0xb}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001140)={0x84, &(0x7f0000001200)=ANY=[@ANYBLOB="00136700000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.98917598s ago: executing program 5 (id=1184): r0 = syz_io_uring_setup(0xea8, &(0x7f0000000480), &(0x7f0000000080)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r0, 0x0, 0x464f, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x0, 0x235c, 0x3, 0x0, 0x0) io_uring_enter(r0, 0x47fa, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x1815, 0x0, 0x0, 0x0, 0x0) 3.621888384s ago: executing program 5 (id=1185): syz_emit_ethernet(0x0, 0x0, 0x0) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000080)={0x233, 0x7d, 0x2, {{0x500, 0xf2, 0x0, 0x4, {0x0, 0x1, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x1b, '\x04nodev{evoo~\x059\xc6\x00\x05\x00\x007\xd9:\x8b\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00+Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1', 0xf, '\xcf\xc2m\xd7\xc5\xb4\x99\xbf\xb4+\x93\x80~\x8bZ', 0x5d, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\xa6\x1dR\xc3l\xde{\a\xdb\xda\xb2\x88K\xaf\x05\x00~\x04\xe6\x9d\xb0\xc3\xca\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x9e\x95?\xa5\xe0R\x15t\x80\xe8\x00'/93}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4U\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x233) r0 = syz_mount_image$xfs(&(0x7f0000000500), &(0x7f0000000000)='./file0\x00', 0x2218a5d, &(0x7f0000000140), 0x0, 0x96a4, &(0x7f0000002080)="$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") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x18, 0x68, 0x5fb9a818fb7378e9}, 0x18}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x8810) ioctl$FS_IOC_GETFSMAP(r0, 0xc0205867, &(0x7f00000000c0)=ANY=[]) 2.618929506s ago: executing program 0 (id=1189): sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x4008092) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000000) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x2717, 0x0, &(0x7f0000000280)) 2.482630381s ago: executing program 5 (id=1193): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) sendmsg$inet(r0, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x8000) sendto$inet6(r0, &(0x7f0000000040)="b3", 0x1, 0x2400c080, 0x0, 0x0) 2.410855029s ago: executing program 7 (id=1194): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={r1, 0x3, 0x6}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x1, r1, 0x1, 0x9}, 0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0x0, 0x2000001, {0x0, 0x0, 0x0, r1, {0x7, 0xa}, {0xa, 0xc}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) 2.325152654s ago: executing program 0 (id=1196): pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) write$UHID_SET_REPORT_REPLY(r1, &(0x7f0000000080)={0xe, {0xa, 0xa0, 0x9, 0x19, "8a7a7fcba97da07e8a8fc0e39436ff83236f924405ae382c63"}}, 0x25) bind$alg(r2, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0x4000000000000a12, 0x0) 2.129131639s ago: executing program 0 (id=1197): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00\xfdM\xab\x89\xff\xda\xc7dw2\xa1\xb2\xabuQQ\x14\x97\xc9\xfae\xc7\xa1U\xe2\xbe\"\xb9t\xa0\x0e\xfa\xdb\xf1\xa5.\xd87\xc3p\xa5l\xf8vC\xe2\xe8 \xd5-<#\x186\xe1\xbd\xc0\xc3\xb5N(vj\xa7+<:\xc4\xe00\x01\xdd \x82\x83\xed\x0e\xc4\x1d\xac\xef7\b\xd3Z5\\A\'\x18\xa2\xc3\xab\xc7`\xc3\v\xf3L\x9d[Q\x9e\x11@=\xa1\x9b\xdc\xb1\xef\xc3k<\x97L\xa0\xab\xa6\x1ce\xcd\x99\xb3m\xef\x87\xc5i^N\xbd@\x01\xc0\xb2\x88\xc3\xe2\x96T\xa3\xa5\xeb\x0f\xf2f\xb9$\xd2\x140xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) r1 = epoll_create1(0x0) recvmsg(r0, &(0x7f0000003700)={0x0, 0x0, 0x0}, 0x40006100) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x90000005}) close(0x3) 1.020903362s ago: executing program 0 (id=1208): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e14", 0xfffffffffffffe4c, 0x20004811, 0x0, 0xffffffffffffffbd) recvmsg(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000780)=""/243, 0x11000}], 0x1}, 0x142) 866.421564ms ago: executing program 0 (id=1210): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='ns\x00') getdents(r0, &(0x7f0000000000)=""/182, 0xb6) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 275.097579ms ago: executing program 0 (id=1211): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={r1, 0x3, 0x6}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x1, r1, 0x1, 0x9}, 0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0x0, 0x2000001, {0x0, 0x0, 0x0, r1, {0x7, 0xa}, {0xa, 0xc}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) 274.854739ms ago: executing program 7 (id=1212): r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000200)={0x1d, r1}, 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe"], 0x20000600}}, 0x0) sendmsg$sock(r2, &(0x7f0000001940)={&(0x7f00000002c0)=@sco={0x1f, @none}, 0x80, &(0x7f0000000000), 0x5, &(0x7f00000008c0)=[@timestamping={{0x14}}], 0x18}, 0x0) 207.046077ms ago: executing program 7 (id=1213): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r0, 0x0, 0x0) getdents64(r0, &(0x7f0000000280)=""/82, 0x52) 44.108628ms ago: executing program 7 (id=1214): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000380)={0x20, 0x15, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$kvm(0xffffffffffffff9c, 0x0, 0xa0000, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f0000000240)={0x0, 0x6, 0x4, "74a93919"}, 0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 1 (id=1215): r0 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x1, 0x0, 0xfffc, 0x0, 0xa, 0x0, 0x0, 0x0, r2}, {0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0xff}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffb, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) kernel console output (not intermixed with test programs): 7f:ffff] on usb-dummy_hcd.3-1/input0 [ 137.185098][ T6157] loop1: detected capacity change from 0 to 32768 [ 137.281014][ T4574] usb 4-1: USB disconnect, device number 8 [ 137.362289][ T6157] JBD2: Ignoring recovery information on journal [ 137.565171][ T6157] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 138.048336][ T4186] ocfs2: Unmounting device (7,1) on (node local) [ 138.381975][ T6178] loop2: detected capacity change from 0 to 131072 [ 138.475140][ T6178] F2FS-fs (loop2): Wrong CP boundary, start(512) end(1536) blocks(0) [ 138.484553][ T6178] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 138.494602][ T6178] F2FS-fs (loop2): invalid crc value [ 138.519352][ T6178] F2FS-fs (loop2): Found nat_bits in checkpoint [ 138.580478][ T4226] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 138.592524][ T6178] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 138.599861][ T6178] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 138.880458][ T4226] usb 6-1: Using ep0 maxpacket: 32 [ 139.196902][ T4226] usb 6-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 139.220019][ T4226] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.224458][ T6201] loop0: detected capacity change from 0 to 128 [ 139.228805][ T4226] usb 6-1: Product: syz [ 139.239091][ T4226] usb 6-1: Manufacturer: syz [ 139.244256][ T4226] usb 6-1: SerialNumber: syz [ 139.260527][ T4226] usb 6-1: config 0 descriptor?? [ 139.312907][ T4226] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 139.368846][ T6201] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 139.872038][ T6205] loop1: detected capacity change from 0 to 40427 [ 139.917227][ T6205] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 139.928594][ T6205] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 139.951530][ T6205] F2FS-fs (loop1): invalid crc value [ 139.988162][ T6205] F2FS-fs (loop1): Found nat_bits in checkpoint [ 140.083473][ T6205] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 140.090720][ T6205] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 140.100601][ T4574] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 140.140614][ T5088] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 140.360546][ T4574] usb 4-1: Using ep0 maxpacket: 16 [ 140.520746][ T4562] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 140.565054][ T4574] usb 4-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 140.576219][ T4574] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 140.586176][ T4574] usb 4-1: config 1 interface 0 altsetting 0 has a duplicate endpoint with address 0xE, skipping [ 140.622087][ T4226] gspca_ov534_9: reg_w failed -71 [ 140.640608][ T5088] usb 3-1: not running at top speed; connect to a high speed hub [ 140.750914][ T5088] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1024, setting to 1023 [ 140.760621][ T4574] usb 4-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 140.762344][ T5088] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 143, changing to 4 [ 140.776700][ T4574] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.791090][ T4574] usb 4-1: Product: syz [ 140.795299][ T4574] usb 4-1: Manufacturer: syz [ 140.800199][ T4574] usb 4-1: SerialNumber: syz [ 140.890593][ T4562] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.901974][ T4562] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.912197][ T4562] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 140.925201][ T4562] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 140.934469][ T4562] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.945959][ T4562] usb 1-1: config 0 descriptor?? [ 140.960939][ T5088] usb 3-1: New USB device found, idVendor=0763, idProduct=2003, bcdDevice= 0.40 [ 140.970287][ T5088] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.978899][ T5088] usb 3-1: Product: syz [ 140.983390][ T5088] usb 3-1: Manufacturer: syz [ 140.988106][ T5088] usb 3-1: SerialNumber: syz [ 141.050565][ T4226] gspca_ov534_9: Unknown sensor 0000 [ 141.050645][ T4226] ov534_9: probe of 6-1:0.0 failed with error -22 [ 141.066424][ T4226] usb 6-1: USB disconnect, device number 2 [ 141.175609][ T6245] loop5: detected capacity change from 0 to 512 [ 141.226291][ T6245] EXT4-fs (loop5): Test dummy encryption mode enabled [ 141.284420][ T6245] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 141.319149][ T4574] usb 4-1: USB disconnect, device number 9 [ 141.380631][ T6245] EXT4-fs error (device loop5): ext4_orphan_get:1426: comm syz.5.535: bad orphan inode 131083 [ 141.405532][ T6245] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,norecovery,,errors=continue. Quota mode: none. [ 141.430562][ T5088] usb 3-1: 1:1 : format type 0 is detected, processed as PCM [ 141.432576][ T4562] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 141.455982][ T5088] usb 3-1: 1:1 : sample bitwidth 202 in over sample bytes 2 [ 141.469343][ T4562] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 141.482039][ T5088] usb 3-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 141.560973][ T5088] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 141.608779][ T5088] usb 3-1: USB disconnect, device number 2 [ 141.785945][ T4327] udevd[4327]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 141.822768][ T2285] usb 1-1: USB disconnect, device number 8 [ 141.983550][ T4348] udevd[4348]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 142.007207][ T6264] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 142.558298][ T6282] loop2: detected capacity change from 0 to 512 [ 142.654955][ T6286] loop3: detected capacity change from 0 to 512 [ 142.678873][ T6286] EXT4-fs (loop3): Test dummy encryption mode enabled [ 142.684535][ T6282] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000001000,nodiscard,quota,,errors=continue. Quota mode: writeback. [ 142.697167][ T6286] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 142.743751][ T6286] EXT4-fs error (device loop3): ext4_orphan_get:1426: comm syz.3.550: bad orphan inode 131083 [ 142.762351][ T6282] EXT4-fs error (device loop2): ext4_do_update_inode:5222: inode #2: comm syz.2.549: corrupted inode contents [ 142.804739][ T6282] EXT4-fs error (device loop2): ext4_dirty_inode:6058: inode #2: comm syz.2.549: mark_inode_dirty error [ 142.822641][ T6286] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,norecovery,,errors=continue. Quota mode: none. [ 142.833961][ T6282] EXT4-fs error (device loop2): ext4_do_update_inode:5222: inode #2: comm syz.2.549: corrupted inode contents [ 142.865413][ T6282] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #2: comm syz.2.549: mark_inode_dirty error [ 143.145330][ T5088] libceph: connect (1)[c::]:6789 error -101 [ 143.160683][ T5088] libceph: mon0 (1)[c::]:6789 connect error [ 143.180225][ T5088] libceph: connect (1)[c::]:6789 error -101 [ 143.186811][ T5088] libceph: mon0 (1)[c::]:6789 connect error [ 143.213736][ T6304] loop2: detected capacity change from 0 to 256 [ 143.264017][ T6292] loop0: detected capacity change from 0 to 32768 [ 143.298991][ T6304] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x395e47cf, utbl_chksum : 0xe619d30d) [ 143.323734][ T26] audit: type=1800 audit(143.285:26): pid=6304 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.556" name="file2" dev="loop2" ino=1048611 res=0 errno=0 [ 143.371003][ T6304] exFAT-fs (loop2): hint_cluster is invalid (17) [ 143.379452][ T6304] exFAT-fs (loop2): error, invalid access to FAT (entry 0xffffffff) [ 143.388189][ T6304] exFAT-fs (loop2): Filesystem has been set read-only [ 143.404807][ T6304] exFAT-fs (loop2): error, invalid access to FAT (entry 0xffffffff) [ 143.464373][ T5088] libceph: connect (1)[c::]:6789 error -101 [ 143.471376][ T5088] libceph: mon0 (1)[c::]:6789 connect error [ 143.552546][ T6292] XFS (loop0): Mounting V5 Filesystem [ 143.721231][ T6292] XFS (loop0): Ending clean mount [ 143.739215][ T6292] XFS (loop0): Quotacheck needed: Please wait. [ 143.951245][ T6298] ceph: No mds server is up or the cluster is laggy [ 143.981984][ T5088] libceph: connect (1)[c::]:6789 error -101 [ 143.988081][ T5088] libceph: mon0 (1)[c::]:6789 connect error [ 144.044175][ T6292] XFS (loop0): Quotacheck: Done. [ 144.101440][ T26] audit: type=1800 audit(144.065:27): pid=6292 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.552" name="file1" dev="loop0" ino=6150 res=0 errno=0 [ 144.339817][ T26] audit: type=1326 audit(144.295:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6329 comm="syz.3.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83018ab799 code=0x7ffc0000 [ 144.410485][ T26] audit: type=1326 audit(144.295:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6329 comm="syz.3.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f83018ab799 code=0x7ffc0000 [ 144.473038][ T4189] XFS (loop0): Unmounting Filesystem [ 144.528383][ T26] audit: type=1326 audit(144.295:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6329 comm="syz.3.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83018ab799 code=0x7ffc0000 [ 144.564165][ T6335] loop8: detected capacity change from 0 to 8 [ 144.602952][ T4326] Dev loop8: unable to read RDB block 8 [ 144.614002][ T4326] loop8: unable to read partition table [ 144.632484][ T4326] loop8: partition table beyond EOD, truncated [ 144.672207][ T6335] Dev loop8: unable to read RDB block 8 [ 144.677918][ T6335] loop8: unable to read partition table [ 144.709245][ T6335] loop8: partition table beyond EOD, truncated [ 144.730661][ T6335] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 144.926882][ T6323] loop5: detected capacity change from 0 to 32768 [ 144.947421][ T6337] loop2: detected capacity change from 0 to 256 [ 145.155534][ T6337] FAT-fs (loop2): Directory bread(block 64) failed [ 145.167820][ T6337] FAT-fs (loop2): Directory bread(block 65) failed [ 145.187498][ T6337] FAT-fs (loop2): Directory bread(block 66) failed [ 145.208472][ T6337] FAT-fs (loop2): Directory bread(block 67) failed [ 145.243064][ T6337] FAT-fs (loop2): Directory bread(block 68) failed [ 145.257521][ T6337] FAT-fs (loop2): Directory bread(block 69) failed [ 145.295642][ T6337] FAT-fs (loop2): Directory bread(block 70) failed [ 145.318398][ T6337] FAT-fs (loop2): Directory bread(block 71) failed [ 145.350127][ T6337] FAT-fs (loop2): Directory bread(block 72) failed [ 145.371138][ T6337] FAT-fs (loop2): Directory bread(block 73) failed [ 145.554768][ T6344] netlink: 'syz.1.566': attribute type 3 has an invalid length. [ 145.572158][ T6346] loop0: detected capacity change from 0 to 512 [ 145.584436][ T6344] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.566'. [ 145.741849][ T6346] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 145.805253][ T6346] EXT4-fs (loop0): shut down requested (2) [ 145.999852][ T6359] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 146.405646][ T6371] loop1: detected capacity change from 0 to 64 [ 146.501483][ T6372] Core dump to core aborted: cannot preserve file permissions [ 146.847731][ T6381] loop2: detected capacity change from 0 to 8 [ 147.002513][ T6382] loop5: detected capacity change from 0 to 2048 [ 147.125801][ T6389] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 147.138359][ T6368] loop3: detected capacity change from 0 to 32768 [ 147.167335][ T26] audit: type=1804 audit(147.125:31): pid=6382 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.581" name="/newroot/69/file0/file1" dev="loop5" ino=15 res=1 errno=0 [ 147.214677][ T6380] NILFS (loop5): DAT doesn't have a block to manage vblocknr = 256 [ 147.255817][ T6380] NILFS error (device loop5): nilfs_bmap_truncate: broken bmap (inode number=15) [ 147.309796][ T6386] loop0: detected capacity change from 0 to 8192 [ 147.317966][ T6368] ERROR: (device loop3): dbAdjCtl: the maximum free buddy is not the old root [ 147.317966][ T6368] [ 147.350552][ T6380] Remounting filesystem read-only [ 147.380574][ T6380] NILFS (loop5): error -5 truncating bmap (ino=15) [ 147.406871][ T6368] ERROR: (device loop3): remounting filesystem as read-only [ 147.447772][ T6386] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 147.528533][ T6386] REISERFS (device loop0): using ordered data mode [ 147.540601][ T6386] reiserfs: using flush barriers [ 147.589200][ T4957] NILFS (loop5): disposed unprocessed dirty file(s) when detaching log writer [ 147.601335][ T6386] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 147.717461][ T6386] REISERFS (device loop0): checking transaction log (loop0) [ 147.776325][ T6386] REISERFS (device loop0): Using r5 hash to sort names [ 147.817427][ T6386] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 148.049340][ T6415] loop3: detected capacity change from 0 to 64 [ 148.171338][ T6418] Core dump to core aborted: cannot preserve file permissions [ 148.600618][ T6428] netlink: 'syz.0.594': attribute type 3 has an invalid length. [ 148.608738][ T6428] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.594'. [ 148.660429][ T4226] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 148.940527][ T4226] usb 6-1: Using ep0 maxpacket: 32 [ 149.070456][ T4563] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 149.120626][ T4226] usb 6-1: unable to get BOS descriptor or descriptor too short [ 149.230793][ T4226] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 113, changing to 7 [ 149.239979][ T6429] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.598 (6429) [ 149.294237][ T6429] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 149.314193][ T6429] BTRFS info (device loop3): setting nodatasum [ 149.330541][ T4563] usb 1-1: Using ep0 maxpacket: 32 [ 149.336009][ T6429] BTRFS info (device loop3): using free space tree [ 149.350615][ T6429] BTRFS info (device loop3): has skinny extents [ 149.450641][ T4563] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 149.472306][ T4563] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 149.476365][ T4226] usb 6-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 149.490445][ T4563] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 149.501032][ T4563] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.512533][ T4563] usb 1-1: config 0 descriptor?? [ 149.524519][ T4226] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.552519][ T4563] hub 1-1:0.0: USB hub found [ 149.557894][ T4226] usb 6-1: Product: syz [ 149.572900][ T4226] usb 6-1: Manufacturer: syz [ 149.575834][ T6429] BTRFS info (device loop3): enabling ssd optimizations [ 149.584242][ T4226] usb 6-1: SerialNumber: syz [ 149.782780][ T4563] hub 1-1:0.0: 1 port detected [ 150.050905][ T4226] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 150.077347][ T4226] usb 6-1: unit 2 not found! [ 150.090434][ T4226] usb 6-1: unit 5 not found! [ 150.150300][ T4226] usb 6-1: USB disconnect, device number 3 [ 150.271789][ T5088] Bluetooth: hci4: command 0x0411 tx timeout [ 150.306964][ T6471] set_capacity_and_notify: 2 callbacks suppressed [ 150.306981][ T6471] loop2: detected capacity change from 0 to 128 [ 150.398588][ T6468] loop1: detected capacity change from 0 to 8192 [ 150.460547][ T4574] hub 1-1:0.0: activate --> -90 [ 150.470572][ T6471] loop_set_status: loop2 () has still dirty pages (nrpages=2) [ 150.513514][ T6468] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 150.533012][ T6468] REISERFS (device loop1): using ordered data mode [ 150.542699][ T6468] reiserfs: using flush barriers [ 150.579347][ T6468] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 150.672722][ T6468] REISERFS (device loop1): checking transaction log (loop1) [ 150.698707][ T6468] REISERFS (device loop1): Using r5 hash to sort names [ 150.720998][ T6468] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 150.898727][ T4226] usb 1-1: USB disconnect, device number 9 [ 150.944620][ T6484] device syzkaller1 entered promiscuous mode [ 151.376686][ T6481] loop5: detected capacity change from 0 to 32768 [ 151.470264][ T6481] ocfs2: Slot 0 on device (7,5) was already allocated to this node! [ 151.509151][ T6495] loop0: detected capacity change from 0 to 164 [ 151.550501][ T6481] JBD2: Ignoring recovery information on journal [ 151.590773][ T6472] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 151.639836][ T6495] Unable to read rock-ridge attributes [ 151.710730][ T6481] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 151.865040][ T6486] loop2: detected capacity change from 0 to 32768 [ 151.960691][ T6472] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 151.972531][ T6472] usb 2-1: config 0 has no interfaces? [ 151.978755][ T6472] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 151.989002][ T6472] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.009833][ T6486] XFS (loop2): Mounting V5 Filesystem [ 152.049007][ T4957] ocfs2: Unmounting device (7,5) on (node local) [ 152.059430][ T6472] usb 2-1: config 0 descriptor?? [ 152.168020][ T6486] XFS (loop2): Ending clean mount [ 152.306040][ T4193] XFS (loop2): Unmounting Filesystem [ 152.380002][ T6472] usb 2-1: USB disconnect, device number 6 [ 152.801771][ T6522] netlink: 'syz.0.627': attribute type 20 has an invalid length. [ 152.838232][ T6522] netlink: 4 bytes leftover after parsing attributes in process `syz.0.627'. [ 152.892205][ T6522] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 152.900877][ T6522] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 152.909186][ T6522] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 152.917552][ T6522] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 152.953931][ T6520] loop5: detected capacity change from 0 to 8192 [ 152.973798][ T6522] netlink: 'syz.0.627': attribute type 20 has an invalid length. [ 153.010249][ T6522] netlink: 4 bytes leftover after parsing attributes in process `syz.0.627'. [ 153.019389][ T6520] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal [ 153.051425][ T6520] REISERFS (device loop5): using ordered data mode [ 153.080459][ T6520] reiserfs: using flush barriers [ 153.089542][ T6520] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 153.160836][ T6520] REISERFS (device loop5): checking transaction log (loop5) [ 153.172492][ T6520] REISERFS (device loop5): Using r5 hash to sort names [ 153.210837][ T6520] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 153.323260][ T6515] chnl_net:caif_netlink_parms(): no params data found [ 153.505663][ T6515] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.519501][ T6515] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.533420][ T6515] device bridge_slave_0 entered promiscuous mode [ 153.554612][ T6515] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.610475][ T6515] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.647636][ T6515] device bridge_slave_1 entered promiscuous mode [ 153.735055][ T6515] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 153.756761][ T6515] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 153.799553][ T6515] team0: Port device team_slave_0 added [ 153.824342][ T6515] team0: Port device team_slave_1 added [ 153.926418][ T6515] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 153.940563][ T4572] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 153.954275][ T6515] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.075405][ T6515] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 154.140253][ T6515] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 154.148764][ T6515] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.200672][ T4572] usb 6-1: Using ep0 maxpacket: 32 [ 154.203816][ T6515] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 154.299370][ T6515] device hsr_slave_0 entered promiscuous mode [ 154.312745][ T6515] device hsr_slave_1 entered promiscuous mode [ 154.327382][ T4572] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 154.338931][ T6515] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 154.343716][ T4572] usb 6-1: config 0 has no interface number 0 [ 154.353561][ T4574] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 154.358114][ T6515] Cannot create hsr debugfs directory [ 154.387350][ T4572] usb 6-1: config 0 interface 184 has no altsetting 0 [ 154.550476][ T6473] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 154.560615][ T4572] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 154.591535][ T4572] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.599629][ T4572] usb 6-1: Product: syz [ 154.611289][ T4574] usb 2-1: Using ep0 maxpacket: 16 [ 154.626804][ T4572] usb 6-1: Manufacturer: syz [ 154.632427][ T4572] usb 6-1: SerialNumber: syz [ 154.659235][ T6515] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 154.678624][ T4226] Bluetooth: hci2: command 0x0409 tx timeout [ 154.679480][ T4572] usb 6-1: config 0 descriptor?? [ 154.695217][ T6515] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 154.740324][ T6515] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 154.744636][ T6559] loop0: detected capacity change from 0 to 64 [ 154.755526][ T4572] smsc75xx v1.0.0 [ 154.756758][ T6515] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 154.831929][ T6473] usb 3-1: Using ep0 maxpacket: 16 [ 154.891484][ T4574] usb 2-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 154.906153][ T4574] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.923965][ T4574] usb 2-1: Product: syz [ 154.928455][ T4574] usb 2-1: Manufacturer: syz [ 154.933599][ T4574] usb 2-1: SerialNumber: syz [ 154.944392][ T6515] 8021q: adding VLAN 0 to HW filter on device bond0 [ 154.960655][ T6473] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 154.988474][ T6473] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 154.998429][ T758] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 155.017748][ T758] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 155.041107][ T6515] 8021q: adding VLAN 0 to HW filter on device team0 [ 155.063169][ T758] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 155.075829][ T758] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 155.086536][ T758] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.094135][ T758] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.104155][ T758] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 155.116380][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 155.127876][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 155.137137][ T1228] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.144277][ T1228] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.157681][ T1228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 155.160865][ T6473] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 155.176168][ T6473] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.178286][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 155.184771][ T6473] usb 3-1: Product: syz [ 155.197127][ T6473] usb 3-1: Manufacturer: syz [ 155.202147][ T6473] usb 3-1: SerialNumber: syz [ 155.221606][ T154] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 155.241114][ T154] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.242460][ T4574] usb 2-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 155.273160][ T758] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 155.286418][ T758] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 155.295484][ T758] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 155.307439][ T758] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 155.309586][ T4574] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 155.331641][ T154] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 155.333558][ T4574] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 155.344419][ T154] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.359666][ T4574] usb 2-1: media controller created [ 155.369024][ T6515] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 155.381511][ T4574] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 155.393243][ T6515] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 155.414000][ T758] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 155.427736][ T758] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 155.437908][ T758] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 155.446977][ T758] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 155.456747][ T758] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 155.479997][ T154] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 155.500760][ T154] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.520656][ T758] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 155.577912][ T758] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 155.590805][ T758] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 155.610007][ T154] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 155.621934][ T154] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.637172][ T6515] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 155.653366][ T4574] zl10353_read_register: readreg error (reg=127, ret==-110) [ 155.680749][ T6473] usb 3-1: cannot find UAC_HEADER [ 155.736843][ T6473] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 155.761100][ T4574] dvb_usb_gl861: probe of 2-1:157.0 failed with error -5 [ 155.790919][ T4574] usb 2-1: USB disconnect, device number 7 [ 155.875008][ T4326] udevd[4326]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 156.026982][ T4227] usb 3-1: USB disconnect, device number 3 [ 156.050602][ T4572] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 156.079017][ T4572] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 156.120587][ T4572] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 156.140618][ T4572] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 156.177876][ T4572] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 156.219265][ T4572] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 156.222731][ T758] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 156.248261][ T758] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 156.250840][ T4572] smsc75xx: probe of 6-1:0.184 failed with error -71 [ 156.303927][ T758] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 156.322201][ T4572] usb 6-1: USB disconnect, device number 4 [ 156.338669][ T758] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 156.362732][ T758] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 156.392827][ T758] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 156.535115][ T6515] device veth0_vlan entered promiscuous mode [ 156.560251][ T6515] device veth1_vlan entered promiscuous mode [ 156.693436][ T758] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 156.707192][ T758] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 156.726035][ T6515] device veth0_macvtap entered promiscuous mode [ 156.742067][ T4227] Bluetooth: hci2: command 0x041b tx timeout [ 156.772358][ T6473] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 156.782848][ T6515] device veth1_macvtap entered promiscuous mode [ 156.854788][ T6515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.908556][ T6515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.959842][ T6515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.970583][ T6604] loop5: detected capacity change from 0 to 128 [ 157.016752][ T6515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.050470][ T6473] usb 3-1: Using ep0 maxpacket: 8 [ 157.074588][ T6515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.116674][ T6515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.143509][ T6515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.158782][ T6515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.169346][ T6515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.190654][ T6473] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 157.201770][ T6473] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 157.216519][ T6473] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.245454][ T6515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.256659][ T6473] usb 3-1: config 0 descriptor?? [ 157.279619][ T6515] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 157.384718][ T758] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 157.419345][ T758] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 157.462794][ T758] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 157.473000][ T758] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 157.484207][ T6515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.512559][ T6473] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 157.524458][ T6515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.536235][ T6515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.547104][ T6515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.570000][ T6515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.598679][ T6515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.609123][ T6515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.620233][ T6515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.641825][ T6515] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 157.669741][ T6620] netlink: 8 bytes leftover after parsing attributes in process `syz.5.652'. [ 157.693402][ T6620] netlink: 8 bytes leftover after parsing attributes in process `syz.5.652'. [ 157.706258][ T758] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 157.715454][ T758] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 157.719466][ T4572] usb 3-1: USB disconnect, device number 4 [ 157.730404][ C0] iowarrior 3-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19 [ 157.768074][ T6515] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.795235][ T6515] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.812873][ T6515] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.828429][ T6515] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.877198][ T6630] loop5: detected capacity change from 0 to 8192 [ 158.156366][ T4268] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.177805][ T4268] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.216781][ T5955] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 158.382476][ T758] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.425509][ T758] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.434299][ T5955] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 158.470304][ C0] Unknown status report in ack skb [ 158.723469][ T154] device hsr_slave_0 left promiscuous mode [ 158.733738][ T154] device hsr_slave_1 left promiscuous mode [ 158.754231][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 158.795311][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 158.812495][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 158.827700][ T5098] Bluetooth: hci2: command 0x040f tx timeout [ 158.835004][ T154] device bridge_slave_1 left promiscuous mode [ 158.844154][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.867189][ T154] device bridge_slave_0 left promiscuous mode [ 158.881641][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.926177][ T154] device veth1_macvtap left promiscuous mode [ 158.933834][ T154] device veth0_macvtap left promiscuous mode [ 158.946881][ T154] device veth1_vlan left promiscuous mode [ 158.962601][ T154] device veth0_vlan left promiscuous mode [ 159.023457][ T6635] loop0: detected capacity change from 0 to 32768 [ 159.120711][ T6635] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 159.135298][ T6635] JBD2: Ignoring recovery information on journal [ 159.215023][ T154] bond1 (unregistering): (slave lo): Releasing backup interface [ 159.252198][ T154] bond1 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 159.271300][ T154] bond1 (unregistering): Released all slaves [ 159.294149][ T6635] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 159.387333][ T4189] ocfs2: Unmounting device (7,0) on (node local) [ 159.557868][ T154] team0 (unregistering): Port device team_slave_1 removed [ 159.605184][ T154] team0 (unregistering): Port device team_slave_0 removed [ 159.665501][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 159.699465][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 159.809716][ T154] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 159.860698][ T154] bond0 (unregistering): Released all slaves [ 159.868557][ T6681] netlink: 8 bytes leftover after parsing attributes in process `syz.2.669'. [ 160.901063][ T4227] Bluetooth: hci2: command 0x0419 tx timeout [ 161.239294][ T6719] loop0: detected capacity change from 0 to 128 [ 161.286135][ T6716] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 161.316964][ T6719] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 161.543132][ T1228] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 161.556845][ T6722] device syzkaller1 entered promiscuous mode [ 162.321354][ T6757] loop1: detected capacity change from 0 to 256 [ 162.411301][ T6757] exfat: Deprecated parameter 'utf8' [ 162.456458][ T6757] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe3865569, utbl_chksum : 0xe619d30d) [ 163.516380][ T6793] loop0: detected capacity change from 0 to 16 [ 163.625351][ T6793] erofs: (device loop0): mounted with root inode @ nid 36. [ 163.793634][ T5098] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 164.023186][ T1228] wlan1: Trigger new scan to find an IBSS to join [ 164.213266][ T6809] loop2: detected capacity change from 0 to 8192 [ 164.240783][ T5098] usb 2-1: config 1 interface 0 has no altsetting 0 [ 164.265315][ T6809] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 164.560805][ T5098] usb 2-1: string descriptor 0 read error: -22 [ 164.568446][ T5098] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.40 [ 164.625790][ T5098] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.928970][ T6832] loop6: detected capacity change from 0 to 128 [ 165.041601][ T6832] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 165.100483][ T4572] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 165.275762][ T5098] lua 0003:1E7D:2C2E.0007: unknown main item tag 0x6 [ 165.301693][ T5098] lua 0003:1E7D:2C2E.0007: item 0 0 0 8 parsing failed [ 165.330572][ T5098] lua 0003:1E7D:2C2E.0007: parse failed [ 165.354401][ T5098] lua: probe of 0003:1E7D:2C2E.0007 failed with error -22 [ 165.394083][ T6840] 9pnet: p9_errstr2errno: server reported unknown error ÿÿþ [ 165.460814][ T4572] usb 1-1: config 1 interface 0 has no altsetting 0 [ 165.477251][ T5088] usb 2-1: USB disconnect, device number 8 [ 165.705885][ T4572] usb 1-1: string descriptor 0 read error: -22 [ 165.715925][ T4572] usb 1-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.40 [ 165.746237][ T4572] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.820602][ T4227] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 165.838182][ T6692] Set syz1 is full, maxelem 65536 reached [ 165.939984][ T6860] loop5: detected capacity change from 0 to 1024 [ 166.019238][ T6860] EXT4-fs (loop5): Ignoring removed orlov option [ 166.047925][ T6860] EXT4-fs (loop5): inline encryption not supported [ 166.104605][ T6860] EXT4-fs (loop5): mounted filesystem without journal. Opts: orlov,noauto_da_alloc,inlinecrypt,dioread_lock,data_err=ignore,barrier=0x0000000000000007,data_err=ignore,grpquota,noblock_validity,user_xattr,resuid=0x0000000000000000,errors=remount-ro,. Quota mode: writeback. [ 166.131940][ T4227] usb 3-1: Using ep0 maxpacket: 32 [ 166.261307][ T4227] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 166.280430][ T4227] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 166.343445][ T4227] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 166.383895][ T4227] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.440126][ T6879] loop5: detected capacity change from 0 to 1024 [ 166.469456][ T4227] usb 3-1: config 0 descriptor?? [ 166.491311][ T4572] uclogic 0003:28BD:0071.0008: interface is invalid, ignoring [ 166.521449][ T4227] hub 3-1:0.0: USB hub found [ 166.585257][ T6879] EXT4-fs (loop5): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,noquota,delalloc,journal_dev=0x0000000000000009,nodioread_nolock,,errors=continue. Quota mode: none. [ 166.594667][ T4572] usb 1-1: USB disconnect, device number 10 [ 166.655598][ T2285] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 166.678416][ T2285] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 166.720623][ T4227] hub 3-1:0.0: 1 port detected [ 166.943951][ T2285] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 167.060579][ T5955] wlan1: Trigger new scan to find an IBSS to join [ 167.360725][ T4227] hub 3-1:0.0: activate --> -90 [ 167.395241][ T2285] usb 7-1: config 0 has no interfaces? [ 167.483442][ T2285] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 167.550186][ T2285] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 167.571339][ T2285] usb 7-1: SerialNumber: syz [ 167.575496][ T13] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 167.584565][ T2285] usb 7-1: config 0 descriptor?? [ 167.618846][ T6919] netlink: 28 bytes leftover after parsing attributes in process `syz.1.733'. [ 167.775843][ T4226] usb 3-1: USB disconnect, device number 5 [ 167.890750][ T2285] usb 7-1: USB disconnect, device number 2 [ 167.955742][ T13] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 167.988650][ T13] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 168.038037][ T13] usb 6-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 168.075000][ T13] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.092123][ T6935] loop1: detected capacity change from 0 to 128 [ 168.164184][ T6935] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 168.240895][ T6935] Invalid argument reading file caps for ./file0 [ 168.766505][ T6952] loop1: detected capacity change from 0 to 4096 [ 168.966812][ T6962] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 169.001200][ T26] audit: type=1800 audit(168.962:32): pid=6952 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.739" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 169.694243][ T6985] loop1: detected capacity change from 0 to 4096 [ 169.797611][ T6987] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 169.850642][ T13] aiptek 6-1:17.0: Aiptek using 400 ms programming speed [ 169.873019][ T13] input: Aiptek as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:17.0/input/input8 [ 169.957725][ T13] input: failed to attach handler kbd to device input8, error: -5 [ 170.034738][ T144] wlan1: Trigger new scan to find an IBSS to join [ 170.073513][ T13] usb 6-1: USB disconnect, device number 5 [ 170.286344][ T4226] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 170.580576][ T4226] usb 3-1: Using ep0 maxpacket: 32 [ 170.590599][ T2285] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 170.729182][ T4226] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 170.730525][ T13] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 170.744701][ T4226] usb 3-1: config 0 has no interface number 0 [ 170.758318][ T4226] usb 3-1: config 0 interface 184 has no altsetting 0 [ 170.966133][ T7003] loop6: detected capacity change from 0 to 32768 [ 170.982283][ T4226] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 170.991605][ T4226] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.020882][ T154] wlan1: Creating new IBSS network, BSSID be:ca:37:21:b0:8e [ 171.023120][ T4226] usb 3-1: Product: syz [ 171.033047][ T4226] usb 3-1: Manufacturer: syz [ 171.037974][ T26] audit: type=1800 audit(171.002:33): pid=7003 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.754" name="file1" dev="loop6" ino=7 res=0 errno=0 [ 171.061042][ T4226] usb 3-1: SerialNumber: syz [ 171.088679][ T2285] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 171.099727][ T4226] usb 3-1: config 0 descriptor?? [ 171.104879][ T2285] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 171.117670][ T2285] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 171.120718][ T13] usb 6-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 171.154059][ T4226] smsc75xx v1.0.0 [ 171.171663][ T13] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.199716][ T13] usb 6-1: config 0 descriptor?? [ 171.352108][ T2285] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 171.367476][ T2285] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 171.378167][ T2285] usb 2-1: Product: syz [ 171.384166][ T2285] usb 2-1: Manufacturer: syz [ 171.389137][ T2285] usb 2-1: SerialNumber: syz [ 171.526986][ T6911] Set syz1 is full, maxelem 65536 reached [ 171.585425][ T7009] loop6: detected capacity change from 0 to 128 [ 171.654199][ T7015] loop0: detected capacity change from 0 to 128 [ 171.656802][ T2285] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 9 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 171.695367][ T7009] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 171.701775][ T7015] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 171.831918][ T4226] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 171.867953][ T4226] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 171.909666][ T4572] usb 2-1: USB disconnect, device number 9 [ 171.931730][ T7000] usblp0: removed [ 171.997766][ T7021] loop0: detected capacity change from 0 to 128 [ 172.103649][ T1228] UDF-fs: error (device loop6): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 172.123125][ T1228] UDF-fs: error (device loop6): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 172.142143][ T4226] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 172.153807][ T4226] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 172.159211][ T7021] attempt to access beyond end of device [ 172.159211][ T7021] loop0: rw=1, want=1041, limit=128 [ 172.180425][ T4226] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 172.196753][ T4226] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 172.207660][ T4226] smsc75xx: probe of 3-1:0.184 failed with error -71 [ 172.218579][ T4226] usb 3-1: USB disconnect, device number 6 [ 172.343031][ T7025] loop0: detected capacity change from 0 to 256 [ 172.363580][ T7025] exfat: Deprecated parameter 'namecase' [ 172.396547][ T7025] exfat: Deprecated parameter 'namecase' [ 172.428795][ T7025] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 172.571823][ T13] usb 6-1: Cannot set autoneg [ 172.577066][ T13] MOSCHIP usb-ethernet driver: probe of 6-1:0.0 failed with error -71 [ 172.603288][ T13] usb 6-1: USB disconnect, device number 6 [ 172.866306][ T7023] loop6: detected capacity change from 0 to 32768 [ 173.150549][ T4226] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 173.440461][ T4226] usb 1-1: Using ep0 maxpacket: 8 [ 173.541100][ T7055] loop5: detected capacity change from 0 to 4096 [ 173.569977][ T7043] loop2: detected capacity change from 0 to 32768 [ 173.596606][ T4226] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 173.611935][ T4226] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 173.654988][ T4226] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 173.716266][ T4226] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 173.740384][ T4226] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 173.764137][ T4226] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 173.784340][ T4226] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.813096][ T7043] XFS (loop2): Mounting V5 Filesystem [ 173.952119][ T7043] XFS (loop2): Ending clean mount [ 173.968940][ T7043] XFS (loop2): Quotacheck needed: Please wait. [ 174.038793][ T7060] loop6: detected capacity change from 0 to 32768 [ 174.070638][ T4226] usb 1-1: usb_control_msg returned -32 [ 174.076425][ T4226] usbtmc 1-1:16.0: can't read capabilities [ 174.145597][ T7043] XFS (loop2): Quotacheck: Done. [ 174.275947][ T7072] loop5: detected capacity change from 0 to 8192 [ 174.291384][ T7060] XFS (loop6): Mounting V5 Filesystem [ 174.313806][ T4193] XFS (loop2): Unmounting Filesystem [ 174.465852][ T7072] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal [ 174.480689][ T7072] REISERFS (device loop5): using ordered data mode [ 174.487087][ T7060] XFS (loop6): Ending clean mount [ 174.514541][ T7060] XFS (loop6): Quotacheck needed: Please wait. [ 174.531229][ T7072] reiserfs: using flush barriers [ 174.568917][ T7072] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 174.585809][ T7041] usbtmc 1-1:16.0: usb_control_msg returned -32 [ 174.628936][ T13] usb 1-1: USB disconnect, device number 11 [ 174.661249][ T7067] loop1: detected capacity change from 0 to 32768 [ 174.673706][ T7072] REISERFS (device loop5): checking transaction log (loop5) [ 174.794821][ T7060] XFS (loop6): Quotacheck: Done. [ 174.840477][ T7067] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.779 (7067) [ 174.904061][ T7067] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 174.945506][ T7067] BTRFS info (device loop1): setting nodatacow, compression disabled [ 174.982584][ T7067] BTRFS info (device loop1): setting datasum, datacow enabled [ 175.029159][ T7067] BTRFS info (device loop1): force clearing of disk cache [ 175.041054][ T6515] XFS (loop6): Unmounting Filesystem [ 175.060919][ T7067] BTRFS info (device loop1): enabling ssd optimizations [ 175.078259][ T7067] BTRFS info (device loop1): using spread ssd allocation scheme [ 175.091450][ T7067] BTRFS info (device loop1): turning on sync discard [ 175.098217][ T7067] BTRFS info (device loop1): turning off barriers [ 175.134400][ T7067] BTRFS info (device loop1): enabling auto defrag [ 175.168470][ T7067] BTRFS info (device loop1): not using ssd optimizations [ 175.170578][ T7072] REISERFS (device loop5): Using tea hash to sort names [ 175.200462][ T7067] BTRFS info (device loop1): not using spread ssd allocation scheme [ 175.200870][ T7072] REISERFS warning (device loop5): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 175.241451][ T7072] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 175.281951][ T26] audit: type=1804 audit(175.252:34): pid=7072 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.780" name="/newroot/97/file0/file0" dev="loop5" ino=4 res=1 errno=0 [ 175.310626][ T7067] BTRFS info (device loop1): using free space tree [ 175.327863][ T7067] BTRFS info (device loop1): has skinny extents [ 175.415233][ T7101] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 175.929680][ T7134] loop5: detected capacity change from 0 to 1024 [ 175.937481][ T7067] BTRFS info (device loop1): clearing free space tree [ 175.969349][ T7067] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 176.007063][ T7067] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 176.148114][ T7134] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 176.151179][ T7129] loop0: detected capacity change from 0 to 32768 [ 176.167455][ T7067] BTRFS info (device loop1): creating free space tree [ 176.184275][ T7067] BTRFS info (device loop1): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 176.194505][ T7067] BTRFS info (device loop1): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 176.201479][ T7143] loop6: detected capacity change from 0 to 1024 [ 176.216298][ T26] audit: type=1800 audit(176.182:35): pid=7134 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.783" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 176.241542][ T7134] EXT4-fs error (device loop5): ext4_map_blocks:739: inode #15: comm syz.5.783: lblock 0 mapped to illegal pblock 0 (length 6) [ 176.259963][ T26] audit: type=1800 audit(176.202:36): pid=7134 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.783" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 176.273918][ T7134] EXT4-fs error (device loop5): ext4_ext_remove_space:2929: inode #15: comm syz.5.783: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 176.378134][ T7129] XFS (loop0): Mounting V5 Filesystem [ 176.465315][ T7143] EXT4-fs (loop6): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,errors=remount-ro,auto_da_alloc,nodioread_nolock,. Quota mode: none. [ 176.742015][ T7143] EXT4-fs error (device loop6): ext4_map_blocks:739: inode #15: block 3: comm syz.6.782: lblock 3 mapped to illegal pblock 3 (length 3) [ 176.822433][ T7143] EXT4-fs (loop6): Remounting filesystem read-only [ 176.896916][ T7164] EXT4-fs error (device loop6): ext4_map_blocks:739: inode #15: block 8: comm syz.6.782: lblock 8 mapped to illegal pblock 8 (length 8) [ 176.928118][ T7164] EXT4-fs (loop6): Remounting filesystem read-only [ 177.024485][ T7129] XFS (loop0): Ending clean mount [ 177.232407][ T7175] device syzkaller1 entered promiscuous mode [ 177.290300][ T4189] XFS (loop0): Unmounting Filesystem [ 177.513667][ T7177] loop1: detected capacity change from 0 to 1024 [ 177.612455][ T7179] UBIFS error (pid: 7179): cannot open "./file0", error -22 [ 177.743590][ T26] audit: type=1800 audit(177.712:37): pid=7181 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.788" name="file2" dev="loop1" ino=22 res=0 errno=0 [ 177.834226][ T5955] hfsplus: b-tree write err: -5, ino 25 [ 177.841612][ T5955] hfsplus: b-tree write err: -5, ino 4 [ 177.847538][ T5955] hfsplus: b-tree write err: -5, ino 2 [ 177.859723][ T7165] loop5: detected capacity change from 0 to 40427 [ 177.980389][ T26] audit: type=1800 audit(177.942:38): pid=7184 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.798" name=6F73782E20202030202020202020206161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 dev="loop6" ino=1048625 res=0 errno=0 [ 177.994623][ T7165] F2FS-fs (loop5): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 178.056924][ T7165] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 178.130863][ T7165] F2FS-fs (loop5): invalid crc value [ 178.201938][ T7165] F2FS-fs (loop5): Found nat_bits in checkpoint [ 178.225388][ T7194] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 178.291817][ T7193] netlink: 16 bytes leftover after parsing attributes in process `syz.0.800'. [ 178.378483][ T7165] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 178.397393][ T7173] XFS (loop2): Mounting V5 Filesystem [ 178.421174][ T7165] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 178.581293][ T7189] attempt to access beyond end of device [ 178.581293][ T7189] loop5: rw=2049, want=45104, limit=40427 [ 178.592152][ T7211] set_capacity_and_notify: 2 callbacks suppressed [ 178.592168][ T7211] loop0: detected capacity change from 0 to 256 [ 178.626473][ T26] audit: type=1800 audit(178.592:39): pid=7165 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.790" name="bus" dev="loop5" ino=10 res=0 errno=0 [ 178.648291][ T7173] XFS (loop2): Ending clean mount [ 178.704918][ T7211] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 178.721656][ T7213] loop6: detected capacity change from 0 to 64 [ 178.781354][ T4193] XFS (loop2): Unmounting Filesystem [ 178.956140][ T7213] hfs: keylen 1794 too large [ 179.083847][ T7216] hfs: keylen 1794 too large [ 179.112409][ T7213] hfs: keylen 1794 too large [ 179.251399][ T758] hfs: keylen 1794 too large [ 179.439448][ T7218] loop0: detected capacity change from 0 to 8192 [ 179.490839][ T7218] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 179.547026][ T7218] REISERFS (device loop0): using ordered data mode [ 179.560483][ T7218] reiserfs: using flush barriers [ 179.569512][ T7218] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 179.611223][ T7218] REISERFS (device loop0): checking transaction log (loop0) [ 179.619317][ T7240] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input9 [ 179.639402][ T7218] REISERFS (device loop0): Using r5 hash to sort names [ 179.658317][ T7218] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 179.748869][ T7218] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 3 0(1) DIR], item_len 35, item_location 3633, free_space(entry_count) 2 [ 179.768651][ T7218] REISERFS error (device loop0): vs-5150 search_by_key: invalid format found in block 532. Fsck? [ 179.779562][ T7218] REISERFS (device loop0): Remounting filesystem read-only [ 180.307457][ T7272] loop0: detected capacity change from 0 to 256 [ 180.463762][ T7272] exfat: Unknown parameter 'zero_size_dir' [ 180.613276][ T7278] loop5: detected capacity change from 0 to 32768 [ 180.777530][ T7278] ocfs2: Mounting device (7,5) on (node local, slot 0) with writeback data mode. [ 181.022982][ T4957] ocfs2: Unmounting device (7,5) on (node local) [ 181.150659][ T4227] Bluetooth: hci0: command 0x0406 tx timeout [ 181.159178][ T4227] Bluetooth: hci1: command 0x0406 tx timeout [ 181.159682][ T7295] device veth0 entered promiscuous mode [ 181.189373][ T4227] Bluetooth: hci3: command 0x0406 tx timeout [ 181.207446][ T7295] netlink: 4 bytes leftover after parsing attributes in process `syz.5.826'. [ 181.335232][ T7272] loop0: detected capacity change from 0 to 32768 [ 181.481311][ T7272] XFS (loop0): Mounting V5 Filesystem [ 181.522385][ T7276] loop6: detected capacity change from 0 to 40427 [ 181.609077][ T7276] F2FS-fs (loop6): invalid crc value [ 181.637719][ T7276] F2FS-fs (loop6): Found nat_bits in checkpoint [ 181.656098][ T7272] XFS (loop0): Ending clean mount [ 181.669140][ T7272] cifs: Unknown parameter 'inode32' [ 181.669236][ T7313] loop5: detected capacity change from 0 to 256 [ 181.680425][ T4259] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 181.733997][ T4189] XFS (loop0): Unmounting Filesystem [ 181.738904][ T7276] F2FS-fs (loop6): Cannot turn on quotas: -2 on 0 [ 181.775082][ T7276] F2FS-fs (loop6): Cannot turn on quotas: -2 on 1 [ 181.810997][ T7276] F2FS-fs (loop6): Start checkpoint disabled! [ 181.855509][ T7276] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 181.914755][ T7276] attempt to access beyond end of device [ 181.914755][ T7276] loop6: rw=0, want=45072, limit=40427 [ 181.940470][ T4259] usb 3-1: Using ep0 maxpacket: 16 [ 182.095809][ T4259] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 182.130208][ T4259] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 182.156880][ T4259] usb 3-1: config 0 interface 0 has no altsetting 0 [ 182.164233][ T9] attempt to access beyond end of device [ 182.164233][ T9] loop6: rw=2049, want=40968, limit=40427 [ 182.185938][ T4259] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 182.202146][ T4259] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.237484][ T4259] usb 3-1: config 0 descriptor?? [ 182.790464][ T13] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 182.808489][ T7321] loop5: detected capacity change from 0 to 32768 [ 182.878977][ T7321] XFS (loop5): Mounting V5 Filesystem [ 182.976528][ T7300] loop2: detected capacity change from 0 to 512 [ 182.986738][ T7321] XFS (loop5): Ending clean mount [ 183.021095][ T7321] XFS (loop5): Quotacheck needed: Please wait. [ 183.030583][ T13] usb 2-1: Using ep0 maxpacket: 8 [ 183.144472][ T4572] usb 3-1: USB disconnect, device number 7 [ 183.150734][ T13] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 183.189226][ T13] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 183.215024][ T13] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 183.240633][ T13] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 183.260598][ T13] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 183.290453][ T13] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 183.310424][ T13] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.328315][ T7321] XFS (loop5): Quotacheck: Done. [ 183.472537][ T4957] XFS (loop5): Unmounting Filesystem [ 183.581712][ T13] usb 2-1: usb_control_msg returned -32 [ 183.587565][ T13] usbtmc 2-1:16.0: can't read capabilities [ 184.095092][ T6472] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 184.350685][ T6472] usb 1-1: Using ep0 maxpacket: 32 [ 184.461384][ T7398] usbtmc 2-1:16.0: usb_control_msg returned -32 [ 184.470724][ T6472] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 184.503540][ T6472] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 184.538372][ T6472] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 184.557346][ T6472] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.597119][ T6472] usb 1-1: config 0 descriptor?? [ 184.642830][ T4259] usb 2-1: USB disconnect, device number 10 [ 185.106210][ T6472] savu 0003:1E7D:2D5A.000B: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 185.324948][ T7456] netlink: 4 bytes leftover after parsing attributes in process `syz.5.862'. [ 185.384318][ T6472] usb 1-1: USB disconnect, device number 12 [ 186.258232][ T7464] set_capacity_and_notify: 1 callbacks suppressed [ 186.258250][ T7464] loop5: detected capacity change from 0 to 32768 [ 186.260752][ T7461] loop2: detected capacity change from 0 to 32768 [ 186.290478][ T6472] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 186.357159][ T7461] XFS (loop2): Mounting V5 Filesystem [ 186.398771][ T7461] XFS (loop2): Ending clean mount [ 186.416759][ T7461] XFS (loop2): Quotacheck needed: Please wait. [ 186.530607][ T6472] usb 2-1: Using ep0 maxpacket: 32 [ 186.545473][ T7461] XFS (loop2): Quotacheck: Done. [ 186.657548][ T6472] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 186.670014][ T4193] XFS (loop2): Unmounting Filesystem [ 186.674042][ T6472] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.724614][ T6472] usb 2-1: config 0 descriptor?? [ 186.980667][ T6472] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 187.002898][ T6472] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 187.062169][ T6472] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 187.091006][ T6472] usb 2-1: media controller created [ 187.115337][ T7519] netlink: 'syz.5.880': attribute type 2 has an invalid length. [ 187.118394][ T6472] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 187.201348][ T6472] az6027: usb out operation failed. (-71) [ 187.222179][ T6472] az6027: usb out operation failed. (-71) [ 187.228068][ T6472] stb0899_attach: Driver disabled by Kconfig [ 187.241865][ T6472] az6027: no front-end attached [ 187.241865][ T6472] [ 187.262210][ T6472] az6027: usb out operation failed. (-71) [ 187.268214][ T6472] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 187.309188][ T6472] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input10 [ 187.334500][ T6472] dvb-usb: schedule remote query interval to 400 msecs. [ 187.347904][ T6472] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 187.359600][ T6472] usb 2-1: USB disconnect, device number 11 [ 187.469261][ T6472] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 187.485035][ T7526] netlink: 'syz.2.882': attribute type 1 has an invalid length. [ 187.598159][ T7517] loop6: detected capacity change from 0 to 32768 [ 187.606650][ T7530] loop2: detected capacity change from 0 to 512 [ 187.609971][ T7517] XFS: attr2 mount option is deprecated. [ 187.654406][ T7517] XFS (loop6): Mounting V5 Filesystem [ 187.689870][ T7530] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 187.808463][ T7517] XFS (loop6): Ending clean mount [ 187.821997][ T7517] XFS (loop6): Quotacheck needed: Please wait. [ 187.989070][ T7517] XFS (loop6): Quotacheck: Done. [ 188.040484][ T26] audit: type=1804 audit(188.002:40): pid=7517 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.879" name="/newroot/53/file0/file1" dev="loop6" ino=4422 res=1 errno=0 [ 188.109369][ T6515] XFS (loop6): Unmounting Filesystem [ 188.181057][ T23] Bluetooth: hci5: command 0x1003 tx timeout [ 188.193506][ T4190] Bluetooth: hci5: sending frame failed (-49) [ 188.267868][ T7550] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 188.289478][ T7550] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 188.489605][ T7561] loop2: detected capacity change from 0 to 256 [ 188.536219][ T7561] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 188.760667][ T7544] loop1: detected capacity change from 0 to 32768 [ 188.811335][ T7544] XFS: attr2 mount option is deprecated. [ 188.964014][ T7544] XFS (loop1): Mounting V5 Filesystem [ 189.103132][ T7565] loop2: detected capacity change from 0 to 40427 [ 189.135622][ T7565] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x1ffff [ 189.144509][ T7565] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x2 [ 189.154810][ T7565] F2FS-fs (loop2): invalid crc value [ 189.215466][ T7565] F2FS-fs (loop2): Found nat_bits in checkpoint [ 189.271854][ T7565] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 189.276737][ T7544] XFS (loop1): Ending clean mount [ 189.308633][ T7544] XFS (loop1): Quotacheck needed: Please wait. [ 189.372584][ T4193] attempt to access beyond end of device [ 189.372584][ T4193] loop2: rw=2049, want=45104, limit=40427 [ 189.408787][ T7580] loop5: detected capacity change from 0 to 8192 [ 189.421300][ T7544] XFS (loop1): Quotacheck: Done. [ 189.510152][ T7580] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal [ 189.552646][ T4186] XFS (loop1): Unmounting Filesystem [ 189.590641][ T7580] REISERFS (device loop5): using ordered data mode [ 189.607274][ T7580] reiserfs: using flush barriers [ 189.618185][ T7580] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 189.667637][ T7580] REISERFS (device loop5): checking transaction log (loop5) [ 189.671514][ T7585] netlink: 104 bytes leftover after parsing attributes in process `syz.6.901'. [ 189.727414][ T7585] netlink: 104 bytes leftover after parsing attributes in process `syz.6.901'. [ 189.764156][ T7580] REISERFS (device loop5): Using r5 hash to sort names [ 189.765273][ T7585] netlink: 104 bytes leftover after parsing attributes in process `syz.6.901'. [ 189.783487][ T7580] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 190.236806][ T26] audit: type=1326 audit(190.202:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7596 comm="syz.1.906" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa5228af799 code=0x0 [ 190.262429][ T23] Bluetooth: hci5: command 0x1001 tx timeout [ 190.268543][ T4190] Bluetooth: hci5: sending frame failed (-49) [ 190.450455][ T6472] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 190.517669][ T7613] loop6: detected capacity change from 0 to 2048 [ 190.562228][ T7613] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024) [ 190.579266][ T7614] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 191.004108][ T6472] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 191.015146][ T6472] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.026779][ T6472] usb 6-1: Product: syz [ 191.034791][ T6472] usb 6-1: Manufacturer: syz [ 191.039661][ T6472] usb 6-1: SerialNumber: syz [ 191.054444][ T6472] usb 6-1: config 0 descriptor?? [ 191.312510][ T7646] loop6: detected capacity change from 0 to 256 [ 191.556476][ T6472] usb 6-1: atusb_control_msg: req 0x21 val 0x0 idx 0x1e, error -32 [ 191.565540][ T6472] usb 6-1: Firmware version (0.0) predates our first public release. [ 191.586664][ T6472] usb 6-1: Please update to version 0.2 or newer [ 191.630777][ T6472] usb 6-1: Firmware: build ìm~ëÁ [ 191.636066][ T6472] usb 6-1: atusb_probe: initialization failed, error = -32 [ 191.644244][ T6472] atusb: probe of 6-1:0.0 failed with error -32 [ 192.100542][ T7170] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 192.340679][ T23] Bluetooth: hci5: command 0x1009 tx timeout [ 192.350493][ T7170] usb 7-1: Using ep0 maxpacket: 16 [ 192.467763][ T7679] loop1: detected capacity change from 0 to 128 [ 192.481829][ T7170] usb 7-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 192.493308][ T7170] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.516494][ T7679] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 192.517389][ T7170] usb 7-1: config 0 descriptor?? [ 192.569889][ T7679] syz.1.937 (pid 7679) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 192.583291][ T7170] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 193.045645][ T7693] loop1: detected capacity change from 0 to 32768 [ 193.087154][ T7693] XFS (loop1): Mounting V5 Filesystem [ 193.126044][ T7693] XFS (loop1): Ending clean mount [ 193.134902][ T7693] XFS (loop1): Quotacheck needed: Please wait. [ 193.184860][ T4572] usb 6-1: USB disconnect, device number 7 [ 193.251082][ T7693] XFS (loop1): Quotacheck: Done. [ 193.369964][ T4186] XFS (loop1): Unmounting Filesystem [ 193.680588][ T7170] gspca_sonixj: reg_w1 err -71 [ 193.710496][ T7170] sonixj: probe of 7-1:0.0 failed with error -71 [ 193.720513][ T4572] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 193.729524][ T7170] usb 7-1: USB disconnect, device number 3 [ 194.000657][ T13] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 194.080651][ T4572] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 194.091405][ T4572] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 194.180546][ T4572] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 194.189984][ T4572] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 194.210186][ T4572] usb 6-1: SerialNumber: syz [ 194.360737][ T13] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 194.424530][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.431336][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.493673][ T4572] usb 6-1: 0:2 : does not exist [ 194.520708][ T7731] netlink: 16 bytes leftover after parsing attributes in process `syz.6.956'. [ 194.548130][ T13] usb 3-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 194.572936][ T4572] usb 6-1: USB disconnect, device number 8 [ 194.579778][ T13] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.605715][ T13] usb 3-1: Product: syz [ 194.618215][ T7735] loop1: detected capacity change from 0 to 512 [ 194.628472][ T13] usb 3-1: Manufacturer: syz [ 194.631646][ T7734] loop6: detected capacity change from 0 to 256 [ 194.636866][ T13] usb 3-1: SerialNumber: syz [ 194.682757][ T13] usb 3-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 194.697167][ T7735] EXT4-fs (loop1): Ignoring removed oldalloc option [ 194.708982][ T7734] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 194.710559][ T7735] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 194.734909][ T7734] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 194.748522][ T7735] EXT4-fs (loop1): 1 truncate cleaned up [ 194.762508][ T7735] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,errors=continue,inode_readahead_blks=0x0000000000004000,stripe=0x0000000000000003,bsdgroups,oldalloc,,errors=continue. Quota mode: none. [ 194.784698][ T7734] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 194.821243][ T4326] udevd[4326]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 194.927912][ T26] audit: type=1800 audit(194.892:42): pid=7735 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.957" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 195.098223][ T7715] udc-core: couldn't find an available UDC or it's busy [ 195.113353][ T13] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 195.129087][ T7715] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 195.134345][ T13] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 195.170178][ T13] usb 3-1: media controller created [ 195.224582][ T13] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 195.371320][ T13] usb 3-1: USB disconnect, device number 8 [ 195.435379][ T7750] input: syz0 as /devices/virtual/input/input11 [ 195.920248][ T7738] loop5: detected capacity change from 0 to 40427 [ 195.969002][ T7738] F2FS-fs (loop5): invalid crc value [ 196.012742][ T7738] F2FS-fs (loop5): Found nat_bits in checkpoint [ 196.207425][ T7738] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 196.324843][ T7738] F2FS-fs (loop5): Inconsistent segment (8) type [1, 0] in SSA and SIT [ 196.700106][ T7796] loop0: detected capacity change from 0 to 1024 [ 197.243465][ T7811] loop5: detected capacity change from 0 to 1024 [ 197.757382][ T7817] loop6: detected capacity change from 0 to 8192 [ 197.778015][ T154] hfsplus: b-tree write err: -5, ino 3 [ 197.797705][ T7786] loop2: detected capacity change from 0 to 40427 [ 197.835461][ T7817] REISERFS (device loop6): found reiserfs format "3.5" with non-standard journal [ 197.942592][ T7817] REISERFS (device loop6): using ordered data mode [ 197.982259][ T7817] reiserfs: using flush barriers [ 198.005693][ T7786] F2FS-fs (loop2): Invalid segment/section count (31, 24 x 1) [ 198.045314][ T7786] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 198.093420][ T7826] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 198.093420][ T7826] The task syz.5.990 (7826) triggered the difference, watch for misbehavior. [ 198.118090][ T7817] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 198.179858][ T7786] F2FS-fs (loop2): invalid crc value [ 198.218329][ T7786] F2FS-fs (loop2): Ignore s_resuid=0, s_resgid=60928 w/o reserve_root [ 198.268127][ T7817] REISERFS (device loop6): checking transaction log (loop6) [ 198.305498][ T7786] F2FS-fs (loop2): Found nat_bits in checkpoint [ 198.318922][ T7817] REISERFS (device loop6): Using r5 hash to sort names [ 198.361926][ T7817] REISERFS (device loop6): Created .reiserfs_priv - reserved for xattr storage. [ 198.418077][ T7819] loop1: detected capacity change from 0 to 131072 [ 198.488697][ T7819] F2FS-fs (loop1): invalid crc value [ 198.551530][ T7786] F2FS-fs (loop2): Cannot turn on quotas: -2 on 0 [ 198.562167][ T7819] F2FS-fs (loop1): Found nat_bits in checkpoint [ 198.612118][ T7819] F2FS-fs (loop1): Cannot turn on quotas: -2 on 2 [ 198.627182][ T7819] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 198.631124][ T7786] F2FS-fs (loop2): Cannot turn on quotas: -2 on 1 [ 198.649298][ T7786] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 198.713615][ T7786] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 198.893148][ T7786] attempt to access beyond end of device [ 198.893148][ T7786] loop2: rw=10241, want=45112, limit=40427 [ 198.932051][ T7836] loop5: detected capacity change from 0 to 512 [ 199.569603][ T7821] loop0: detected capacity change from 0 to 32768 [ 199.725203][ T7821] XFS (loop0): Mounting V5 Filesystem [ 199.912742][ T7821] XFS (loop0): Ending clean mount [ 200.138451][ T4189] XFS (loop0): Unmounting Filesystem [ 200.301639][ T7876] netlink: 'syz.6.1004': attribute type 7 has an invalid length. [ 200.368587][ T7876] netlink: 'syz.6.1004': attribute type 7 has an invalid length. [ 200.504579][ T7882] ntfs: (device nullb0): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 200.549937][ T7882] ntfs: (device nullb0): read_ntfs_boot_sector(): Mount option errors=recover not used. Aborting without trying to recover. [ 200.570831][ T7882] ntfs: (device nullb0): ntfs_fill_super(): Not an NTFS volume. [ 200.782658][ T7893] loop6: detected capacity change from 0 to 128 [ 200.841949][ T7893] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 200.915034][ T7893] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 201.052705][ T5029] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 201.741050][ T7894] loop5: detected capacity change from 0 to 131072 [ 201.832410][ T7894] F2FS-fs (loop5): invalid crc value [ 201.842627][ T7921] overlayfs: upper fs needs to support d_type. [ 201.891442][ T7894] F2FS-fs (loop5): Found nat_bits in checkpoint [ 201.935325][ T7894] F2FS-fs (loop5): Cannot turn on quotas: -2 on 2 [ 201.969820][ T7894] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 202.525394][ T7969] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1024'. [ 202.586540][ T7929] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 202.913245][ T7965] loop0: detected capacity change from 0 to 65536 [ 203.078125][ T7965] XFS (loop0): Mounting V5 Filesystem [ 203.126561][ T7965] XFS (loop0): Ending clean mount [ 203.133143][ T7965] XFS (loop0): Quotacheck needed: Please wait. [ 203.318354][ T7965] XFS (loop0): Quotacheck: Done. [ 203.662239][ T4189] XFS (loop0): Unmounting Filesystem [ 203.880652][ T7967] loop6: detected capacity change from 0 to 32768 [ 204.138517][ T8002] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1035'. [ 204.226149][ T7967] jfs_rename did not expect dtDelete to return rc = -116 [ 204.276111][ T7967] ERROR: (device loop6): jfs_rename: [ 204.276111][ T7967] [ 204.371282][ T7967] ERROR: (device loop6): remounting filesystem as read-only [ 204.826320][ T8021] loop1: detected capacity change from 0 to 512 [ 204.953964][ T8027] loop0: detected capacity change from 0 to 512 [ 205.045774][ T8021] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 205.081163][ T8021] EXT4-fs error (device loop1): ext4_map_blocks:629: inode #2: block 18: comm syz.1.1044: lblock 23 mapped to illegal pblock 18 (length 1) [ 205.184797][ T8034] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 3: comm syz.1.1044: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1 [ 205.230484][ T4572] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 205.276367][ T8021] EXT4-fs error (device loop1): ext4_map_blocks:629: inode #2: block 18: comm syz.1.1044: lblock 23 mapped to illegal pblock 18 (length 1) [ 205.298272][ T8038] loop6: detected capacity change from 0 to 256 [ 205.339079][ T8034] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 12: comm syz.1.1044: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 205.371088][ T8034] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 13: comm syz.1.1044: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 205.481720][ T8034] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 14: comm syz.1.1044: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 205.486772][ T8038] exFAT-fs (loop6): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 205.600682][ T4572] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 205.638073][ T4572] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 205.741141][ T4572] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 205.763877][ T4572] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 205.798170][ T4572] usb 6-1: Manufacturer: syz [ 205.814519][ T23] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 205.822778][ T4572] usb 6-1: config 0 descriptor?? [ 206.050238][ T8049] loop1: detected capacity change from 0 to 64 [ 206.230480][ T7170] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 206.257997][ T8049] overlayfs: upper fs needs to support d_type. [ 206.260666][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 206.280210][ T8049] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 206.287662][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 206.298780][ T8049] overlayfs: failed to set xattr on upper [ 206.304003][ T23] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 206.318117][ T8049] overlayfs: ...falling back to index=off,metacopy=off. [ 206.320728][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.343887][ T23] usb 1-1: config 0 descriptor?? [ 206.418199][ T4186] Trying to free block not in datazone [ 206.537686][ T8057] loop1: detected capacity change from 0 to 64 [ 206.579417][ T8057] hfs: unable to locate alternate MDB [ 206.589623][ T8057] hfs: continuing without an alternate MDB [ 206.631999][ T7170] usb 7-1: config 2 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 206.659367][ T7170] usb 7-1: config 2 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 206.678174][ T7170] usb 7-1: config 2 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 7 [ 206.716801][ T7170] usb 7-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 206.728680][ T7170] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.760989][ T8045] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 206.788427][ T8055] loop2: detected capacity change from 0 to 32768 [ 206.790600][ T4572] uclogic 0003:256C:006D.000C: interface is invalid, ignoring [ 206.819643][ T8059] loop1: detected capacity change from 0 to 22 [ 206.843475][ T23] playstation 0003:054C:0DF2.000D: unknown main item tag 0x0 [ 206.863329][ T23] playstation 0003:054C:0DF2.000D: unknown main item tag 0x0 [ 206.871154][ T23] playstation 0003:054C:0DF2.000D: unknown main item tag 0x0 [ 206.879317][ T23] playstation 0003:054C:0DF2.000D: unknown main item tag 0x0 [ 206.888090][ T8059] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 206.910644][ T23] playstation 0003:054C:0DF2.000D: unknown main item tag 0x0 [ 206.934884][ T23] playstation 0003:054C:0DF2.000D: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.0-1/input0 [ 206.953193][ T8055] XFS (loop2): Mounting V5 Filesystem [ 206.990194][ T8059] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 207.018896][ T8045] udc-core: couldn't find an available UDC or it's busy [ 207.040596][ T4259] usb 6-1: USB disconnect, device number 9 [ 207.090573][ T8045] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 207.194338][ T8059] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 207.240587][ T7170] usbhid 7-1:2.0: can't add hid device: -71 [ 207.258278][ T7170] usbhid: probe of 7-1:2.0 failed with error -71 [ 207.280917][ T7170] usb 7-1: USB disconnect, device number 4 [ 207.385479][ T8055] XFS (loop2): Ending clean mount [ 207.414718][ T8055] XFS (loop2): Quotacheck needed: Please wait. [ 207.486847][ T8055] XFS (loop2): Quotacheck: Done. [ 207.580578][ T23] playstation 0003:054C:0DF2.000D: Failed to retrieve feature with reportID 5: -71 [ 207.624947][ T23] playstation 0003:054C:0DF2.000D: Failed to retrieve DualSense calibration info: -71 [ 207.641383][ T4193] XFS (loop2): Unmounting Filesystem [ 207.667137][ T23] playstation 0003:054C:0DF2.000D: Failed to get calibration data from DualSense [ 207.703371][ T23] playstation 0003:054C:0DF2.000D: Failed to create dualsense. [ 207.739063][ T23] playstation: probe of 0003:054C:0DF2.000D failed with error -71 [ 207.772872][ T7170] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 207.807308][ T23] usb 1-1: USB disconnect, device number 13 [ 207.907407][ T8078] fido_id[8078]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 207.950530][ T13] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 208.050443][ T7170] usb 7-1: Using ep0 maxpacket: 32 [ 208.076409][ T8082] loop1: detected capacity change from 0 to 1024 [ 208.126325][ T8082] hfsplus: inconsistency in B*Tree (-1,0,1,1,0) [ 208.181970][ T8082] hfsplus: failed to load root directory [ 208.192614][ T7170] usb 7-1: config 2 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 208.214101][ T7170] usb 7-1: config 2 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 7 [ 208.265106][ T7170] usb 7-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 208.280529][ T7170] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.361176][ T13] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 208.380526][ T13] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 208.400418][ T13] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 208.447211][ T13] usb 6-1: New USB device found, idVendor=04b4, idProduct=0001, bcdDevice= 0.00 [ 208.473754][ T13] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.495671][ T13] usb 6-1: config 0 descriptor?? [ 208.514217][ T8082] 9pnet: p9_errstr2errno: server reported unknown error õ1 g;-‡~ [ 208.825922][ T26] audit: type=1326 audit(208.792:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8098 comm="syz.1.1068" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa5228af799 code=0x0 [ 208.847926][ T7170] hid-thrustmaster 0003:044F:B65D.000E: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.6-1/input0 [ 208.881355][ T7170] hid-thrustmaster 0003:044F:B65D.000E: setup data couldn't be sent [ 208.889758][ T8101] loop2: detected capacity change from 0 to 128 [ 208.946460][ T8101] FAT-fs (loop2): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 208.984745][ T13] cypress 0003:04B4:0001.000F: hidraw1: USB HID v0.06 Device [HID 04b4:0001] on usb-dummy_hcd.5-1/input0 [ 209.082369][ T13] usb 7-1: USB disconnect, device number 5 [ 209.090473][ C1] hid-thrustmaster 0003:044F:B65D.000E: URB to get model id failed with error -71 [ 209.111066][ T8101] FAT-fs (loop2): error, invalid FAT chain (i_pos 548, last_block 8) [ 209.125704][ T8103] fido_id[8103]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 209.146465][ T8101] FAT-fs (loop2): Filesystem has been set read-only [ 209.197127][ T8101] FAT-fs (loop2): error, corrupted file size (i_pos 548, 522) [ 209.217843][ T4574] usb 6-1: USB disconnect, device number 10 [ 209.253251][ T8092] loop0: detected capacity change from 0 to 32768 [ 209.336275][ T8092] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.1066 (8092) [ 209.422490][ T8092] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 209.435913][ T8092] BTRFS info (device loop0): setting nodatacow, compression disabled [ 209.457465][ T8092] BTRFS info (device loop0): force clearing of disk cache [ 209.479670][ T8092] BTRFS info (device loop0): enabling ssd optimizations [ 209.499299][ T8092] BTRFS info (device loop0): using spread ssd allocation scheme [ 209.519771][ T8092] BTRFS info (device loop0): turning off barriers [ 209.548710][ T8092] BTRFS info (device loop0): disabling free space tree [ 209.560610][ T8092] BTRFS info (device loop0): not using ssd optimizations [ 209.567799][ T8092] BTRFS info (device loop0): not using spread ssd allocation scheme [ 209.590437][ T8092] BTRFS info (device loop0): has skinny extents [ 209.868094][ T8092] BTRFS info (device loop0): clearing free space tree [ 209.876263][ T8092] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 209.908228][ T8092] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 210.248437][ T8107] loop2: detected capacity change from 0 to 32768 [ 210.293281][ T8107] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 210.317442][ T8107] JBD2: Ignoring recovery information on journal [ 210.389515][ T8107] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 210.583264][ T8140] loop6: detected capacity change from 0 to 1024 [ 210.664378][ T8129] loop1: detected capacity change from 0 to 32768 [ 210.719257][ T8129] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.1082 (8129) [ 210.750564][ T8140] loop6: detected capacity change from 1024 to 64 [ 210.787569][ T8141] attempt to access beyond end of device [ 210.787569][ T8141] loop6: rw=0, want=292, limit=64 [ 210.842794][ T8141] Buffer I/O error on dev loop6, logical block 72, async page read [ 210.902680][ T8141] attempt to access beyond end of device [ 210.902680][ T8141] loop6: rw=0, want=296, limit=64 [ 210.934154][ T8141] Buffer I/O error on dev loop6, logical block 73, async page read [ 211.019150][ T8129] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 211.034934][ T4193] ocfs2: Unmounting device (7,2) on (node local) [ 211.086052][ T8129] BTRFS info (device loop1): setting nodatasum [ 211.089683][ T6515] hfsplus: invalid file type 0174377 for inode 21 [ 211.110614][ T8129] BTRFS info (device loop1): using free space tree [ 211.117265][ T8129] BTRFS info (device loop1): has skinny extents [ 211.120992][ T6515] hfsplus: invalid file type 0174377 for inode 21 [ 211.443795][ T8129] BTRFS info (device loop1): enabling ssd optimizations [ 211.613049][ T7929] attempt to access beyond end of device [ 211.613049][ T7929] loop6: rw=1, want=212, limit=64 [ 211.680397][ T7929] Buffer I/O error on dev loop6, logical block 52, lost async page write [ 211.699813][ T7924] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.777395][ T7929] attempt to access beyond end of device [ 211.777395][ T7929] loop6: rw=1, want=216, limit=64 [ 211.796683][ T8168] loop2: detected capacity change from 0 to 32768 [ 211.829346][ T7929] Buffer I/O error on dev loop6, logical block 53, lost async page write [ 211.846917][ T7939] attempt to access beyond end of device [ 211.846917][ T7939] loop6: rw=2049, want=204, limit=64 [ 211.874901][ T7939] Buffer I/O error on dev loop6, logical block 50, lost async page write [ 211.910463][ T7939] attempt to access beyond end of device [ 211.910463][ T7939] loop6: rw=2049, want=208, limit=64 [ 212.036630][ T7939] Buffer I/O error on dev loop6, logical block 51, lost async page write [ 212.049847][ T26] audit: type=1800 audit(212.002:44): pid=8168 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1075" name="file1" dev="loop2" ino=7 res=0 errno=0 [ 212.096179][ T7939] attempt to access beyond end of device [ 212.096179][ T7939] loop6: rw=2049, want=212, limit=64 [ 212.141727][ T7939] Buffer I/O error on dev loop6, logical block 52, lost async page write [ 212.184115][ T7939] attempt to access beyond end of device [ 212.184115][ T7939] loop6: rw=2049, want=216, limit=64 [ 212.237785][ T7939] Buffer I/O error on dev loop6, logical block 53, lost async page write [ 212.268046][ T6515] attempt to access beyond end of device [ 212.268046][ T6515] loop6: rw=2049, want=1023, limit=64 [ 212.437222][ T7924] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.645195][ T7924] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.755554][ T7924] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.070461][ T1326] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 213.330551][ T1326] usb 3-1: Using ep0 maxpacket: 16 [ 213.454935][ T1326] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 213.502249][ T8184] loop5: detected capacity change from 0 to 32768 [ 213.545530][ T8184] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 scanned by syz.5.1086 (8184) [ 213.610744][ T8196] chnl_net:caif_netlink_parms(): no params data found [ 213.630789][ T1326] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 213.643235][ T8184] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 213.645732][ T1326] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.662036][ T1326] usb 3-1: Product: syz [ 213.666411][ T1326] usb 3-1: Manufacturer: syz [ 213.674956][ T1326] usb 3-1: SerialNumber: syz [ 213.688904][ T8184] BTRFS info (device loop5): setting nodatacow, compression disabled [ 213.695603][ T1326] usb 3-1: config 0 descriptor?? [ 213.726281][ T8184] BTRFS info (device loop5): force clearing of disk cache [ 213.752068][ T1326] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 213.781169][ T1326] usb 3-1: Detected FT232RL [ 213.793327][ T8184] BTRFS info (device loop5): enabling ssd optimizations [ 213.812892][ T8184] BTRFS info (device loop5): using spread ssd allocation scheme [ 213.859505][ T8184] BTRFS info (device loop5): turning off barriers [ 213.886930][ T8184] BTRFS info (device loop5): disabling free space tree [ 213.910519][ T8184] BTRFS info (device loop5): not using ssd optimizations [ 213.917776][ T8184] BTRFS info (device loop5): not using spread ssd allocation scheme [ 213.917833][ T8196] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.926520][ T8184] BTRFS info (device loop5): has skinny extents [ 213.963885][ T8184] BTRFS info (device loop5): clearing free space tree [ 213.970600][ T1326] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 213.971122][ T8184] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 213.983204][ T8196] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.987525][ T8184] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 214.015544][ T8196] device bridge_slave_0 entered promiscuous mode [ 214.089087][ T8196] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.090527][ T4563] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 214.101913][ T8196] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.126316][ T8196] device bridge_slave_1 entered promiscuous mode [ 214.235936][ T1326] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 214.284948][ T8196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 214.384719][ T4563] usb 1-1: Using ep0 maxpacket: 16 [ 214.729238][ T4563] usb 1-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 214.743966][ T4563] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.752830][ T4563] usb 1-1: Product: syz [ 214.757004][ T4563] usb 1-1: Manufacturer: syz [ 214.762168][ T4563] usb 1-1: SerialNumber: syz [ 214.779612][ T4562] usb 3-1: USB disconnect, device number 9 [ 214.820507][ T8196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 214.842234][ T4562] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 214.855371][ T4562] ftdi_sio 3-1:0.0: device disconnected [ 214.987891][ T7924] device hsr_slave_0 left promiscuous mode [ 215.020125][ T7924] device hsr_slave_1 left promiscuous mode [ 215.028584][ T4563] usb 1-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 215.066786][ T4563] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 215.083126][ T7924] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 215.096675][ T7924] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 215.107363][ T4563] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 215.129141][ T7924] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 215.134676][ T4563] usb 1-1: media controller created [ 215.148984][ T7924] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 215.170015][ T7924] device bridge_slave_1 left promiscuous mode [ 215.177482][ T4563] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 215.196670][ T7924] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.220983][ T7170] Bluetooth: hci2: command 0x0409 tx timeout [ 215.239559][ T8269] loop2: detected capacity change from 0 to 16 [ 215.252475][ T7924] device bridge_slave_0 left promiscuous mode [ 215.261189][ T7924] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.287266][ T8269] erofs: (device loop2): mounted with root inode @ nid 36. [ 215.310243][ T7924] device veth1_macvtap left promiscuous mode [ 215.332244][ T7924] device veth0_macvtap left promiscuous mode [ 215.351894][ T7924] device veth1_vlan left promiscuous mode [ 215.381699][ T7924] device veth0_vlan left promiscuous mode [ 215.480530][ T4563] zl10353_read_register: readreg error (reg=127, ret==-71) [ 215.565711][ T4563] dvb_usb_gl861: probe of 1-1:157.0 failed with error -5 [ 215.618888][ T4563] usb 1-1: USB disconnect, device number 14 [ 215.646450][ T8279] loop5: detected capacity change from 0 to 128 [ 215.679065][ T8279] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 215.809954][ T5955] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 216.057601][ T8283] loop1: detected capacity change from 0 to 1024 [ 216.101407][ T7924] team0 (unregistering): Port device team_slave_1 removed [ 216.122535][ T7924] team0 (unregistering): Port device team_slave_0 removed [ 216.177914][ T7924] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 216.203113][ T8283] EXT4-fs (loop1): Ignoring removed orlov option [ 216.214136][ T8283] EXT4-fs (loop1): inline encryption not supported [ 216.228952][ T7924] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 216.235130][ T8287] loop5: detected capacity change from 0 to 256 [ 216.269456][ T8283] EXT4-fs (loop1): mounted filesystem without journal. Opts: orlov,noauto_da_alloc,inlinecrypt,dioread_lock,data_err=ignore,barrier=0x0000000000000007,data_err=ignore,grpquota,noblock_validity,user_xattr,resuid=0x0000000000000000,errors=remount-ro,. Quota mode: writeback. [ 216.283059][ T8275] loop2: detected capacity change from 0 to 32768 [ 216.331415][ T8287] exfat: Deprecated parameter 'utf8' [ 216.386444][ T8287] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe3865569, utbl_chksum : 0xe619d30d) [ 216.432240][ T8275] jfs_rename did not expect dtDelete to return rc = -116 [ 216.439590][ T8275] ERROR: (device loop2): jfs_rename: [ 216.439590][ T8275] [ 216.457972][ T8275] ERROR: (device loop2): remounting filesystem as read-only [ 216.613245][ T7924] bond0 (unregistering): Released all slaves [ 216.807345][ T8297] loop1: detected capacity change from 0 to 8192 [ 216.851955][ T8297] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 216.865850][ T8196] team0: Port device team_slave_0 added [ 216.902009][ T8196] team0: Port device team_slave_1 added [ 216.969745][ T8196] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 216.993614][ T8196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.105542][ T8196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 217.147586][ T8196] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 217.167132][ T8196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.223336][ T8196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 217.303819][ T5095] Bluetooth: hci2: command 0x041b tx timeout [ 217.328634][ T8196] device hsr_slave_0 entered promiscuous mode [ 217.341096][ T8196] device hsr_slave_1 entered promiscuous mode [ 217.352518][ T8196] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 217.369203][ T8196] Cannot create hsr debugfs directory [ 217.760735][ T8312] loop0: detected capacity change from 0 to 4096 [ 217.838788][ T8320] 9pnet: p9_errstr2errno: server reported unknown error ÿÿþ [ 217.883590][ T8323] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 217.885154][ T8196] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 218.021900][ T8196] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 218.070505][ T8196] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 218.188192][ T8331] loop2: detected capacity change from 0 to 1024 [ 218.201968][ T8196] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 218.335071][ T8335] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 218.401295][ T8331] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,noquota,delalloc,journal_dev=0x0000000000000009,nodioread_nolock,,errors=continue. Quota mode: none. [ 218.658190][ T8196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 218.708137][ T8342] loop0: detected capacity change from 0 to 512 [ 218.740908][ T8196] 8021q: adding VLAN 0 to HW filter on device team0 [ 218.758753][ T7933] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 218.787787][ T7933] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 218.835869][ T7931] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 218.856626][ T7931] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 218.926456][ T7931] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.933814][ T7931] bridge0: port 1(bridge_slave_0) entered forwarding state [ 219.113229][ T7931] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 219.182013][ T7931] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 219.303957][ T7931] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 219.380629][ T4227] Bluetooth: hci2: command 0x040f tx timeout [ 219.410943][ T7931] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.418269][ T7931] bridge0: port 2(bridge_slave_1) entered forwarding state [ 219.471952][ T8347] loop2: detected capacity change from 0 to 65536 [ 219.509507][ T7931] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 219.531874][ T7931] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 219.557720][ T7931] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 219.591785][ T7931] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 219.685397][ T8196] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 219.696317][ T8196] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 219.760585][ T7931] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 219.775204][ T8347] XFS (loop2): Mounting V5 Filesystem [ 219.867881][ T7931] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 219.961519][ T8327] loop1: detected capacity change from 0 to 40427 [ 219.982662][ T7931] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 219.992293][ T7931] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 219.999750][ T8347] XFS (loop2): Ending clean mount [ 220.007673][ T8347] XFS (loop2): Quotacheck needed: Please wait. [ 220.013141][ T7931] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 220.048871][ T8327] F2FS-fs (loop1): Invalid segment/section count (31, 24 x 1) [ 220.063251][ T7931] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 220.070563][ T8327] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 220.072401][ T7931] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 220.091166][ T7931] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 220.129437][ T8327] F2FS-fs (loop1): invalid crc value [ 220.156058][ T8327] F2FS-fs (loop1): Ignore s_resuid=0, s_resgid=60928 w/o reserve_root [ 220.242121][ T8327] F2FS-fs (loop1): Found nat_bits in checkpoint [ 220.248901][ T8347] XFS (loop2): Quotacheck: Done. [ 220.290618][ T4259] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 220.334778][ T7929] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 220.374377][ T7929] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 220.414942][ T8196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 220.463649][ T4193] XFS (loop2): Unmounting Filesystem [ 220.514570][ T8327] F2FS-fs (loop1): Cannot turn on quotas: -2 on 0 [ 220.582642][ T8327] F2FS-fs (loop1): Cannot turn on quotas: -2 on 1 [ 220.668400][ T8327] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 220.686404][ T8327] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 220.726626][ T4259] usb 6-1: config 1 interface 0 has no altsetting 0 [ 220.972175][ T8327] attempt to access beyond end of device [ 220.972175][ T8327] loop1: rw=10241, want=45112, limit=40427 [ 221.040727][ T4259] usb 6-1: string descriptor 0 read error: -22 [ 221.047008][ T4259] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.40 [ 221.067111][ T4259] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.226089][ T5955] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 221.259827][ T5955] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 221.327063][ T5955] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 221.345966][ T5955] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 221.395020][ T5955] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 221.428389][ T5955] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 221.459209][ T8196] device veth0_vlan entered promiscuous mode [ 221.465550][ T7170] Bluetooth: hci2: command 0x0419 tx timeout [ 221.503298][ T8196] device veth1_vlan entered promiscuous mode [ 221.587150][ T7933] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 221.608577][ T7933] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 221.644174][ T8196] device veth0_macvtap entered promiscuous mode [ 221.676063][ T8196] device veth1_macvtap entered promiscuous mode [ 221.742858][ T4259] lua 0003:1E7D:2C2E.0010: unknown main item tag 0x6 [ 221.749801][ T4259] lua 0003:1E7D:2C2E.0010: item 0 0 0 8 parsing failed [ 221.759895][ T8196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.786098][ T4259] lua 0003:1E7D:2C2E.0010: parse failed [ 221.797512][ T8196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.830488][ T4259] lua: probe of 0003:1E7D:2C2E.0010 failed with error -22 [ 221.839913][ T8196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.881468][ T8196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.898147][ T8196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.908907][ T8196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.925430][ T8196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.938394][ T8196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.964325][ T7170] usb 6-1: USB disconnect, device number 11 [ 221.998638][ T8196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 222.053575][ T7933] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 222.069843][ T7933] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 222.098939][ T7933] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 222.153080][ T7933] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 222.184290][ T8196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.224643][ T8196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.243325][ T8418] loop0: detected capacity change from 0 to 4096 [ 222.255189][ T8196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.288744][ T8196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.319569][ T8196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.340704][ T8196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.360901][ T8419] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 222.380577][ T8196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.432439][ T8196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.457920][ T26] audit: type=1800 audit(222.422:45): pid=8418 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1130" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 222.488786][ T8196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 222.538144][ T7939] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 222.557650][ T7939] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 222.588007][ T8196] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.631947][ T8196] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.633829][ T8413] loop1: detected capacity change from 0 to 32768 [ 222.676762][ T8196] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.724482][ T8413] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 222.732960][ T8196] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.753616][ T8413] JBD2: Ignoring recovery information on journal [ 222.922205][ T7935] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.936907][ T8413] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 222.970389][ T7935] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.977938][ T7935] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.993670][ T7933] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 223.011172][ T7935] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.019573][ T7933] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 223.233556][ T4186] ocfs2: Unmounting device (7,1) on (node local) [ 223.804745][ T8431] loop7: detected capacity change from 0 to 32768 [ 223.927646][ T8431] XFS (loop7): Mounting V5 Filesystem [ 223.965663][ T8431] XFS (loop7): Ending clean mount [ 224.102202][ T8196] XFS (loop7): Unmounting Filesystem [ 224.187195][ T8462] device syzkaller1 entered promiscuous mode [ 224.390486][ T8255] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 224.784195][ T8255] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 224.807334][ T8255] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 224.826351][ T8255] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 224.843622][ T8255] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.871201][ T8466] loop1: detected capacity change from 0 to 32768 [ 224.984720][ T26] audit: type=1800 audit(224.952:46): pid=8466 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1137" name="file1" dev="loop1" ino=7 res=0 errno=0 [ 225.390659][ T5088] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 225.791054][ T5088] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 225.802148][ T5088] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.835361][ T5088] usb 1-1: config 0 descriptor?? [ 225.995293][ T8485] loop5: detected capacity change from 0 to 32768 [ 226.105277][ T8485] XFS (loop5): Mounting V5 Filesystem [ 226.139025][ T8485] XFS (loop5): Ending clean mount [ 226.315735][ T4957] XFS (loop5): Unmounting Filesystem [ 226.600609][ T8255] aiptek 3-1:17.0: Aiptek using 400 ms programming speed [ 226.609360][ T8255] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.0/input/input12 [ 226.640262][ T8255] input: failed to attach handler kbd to device input12, error: -5 [ 226.693497][ T8255] usb 3-1: USB disconnect, device number 10 [ 227.230614][ T5088] usb 1-1: Cannot set autoneg [ 227.235930][ T5088] MOSCHIP usb-ethernet driver: probe of 1-1:0.0 failed with error -71 [ 227.265966][ T5088] usb 1-1: USB disconnect, device number 15 [ 228.167425][ T8571] UBIFS error (pid: 8571): cannot open "./file0", error -22 [ 228.209130][ T8575] loop5: detected capacity change from 0 to 128 [ 228.299205][ T26] audit: type=1800 audit(228.262:47): pid=8575 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1160" name=6F73782E20202030202020202020206161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 dev="loop5" ino=1048645 res=0 errno=0 [ 228.519800][ T8477] Set syz1 is full, maxelem 65536 reached [ 228.610139][ T8588] loop1: detected capacity change from 0 to 1024 [ 228.767635][ T8594] loop5: detected capacity change from 0 to 256 [ 228.781094][ T8588] EXT4-fs (loop1): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,errors=remount-ro,auto_da_alloc,nodioread_nolock,. Quota mode: none. [ 228.801242][ T8594] exfat: Unknown parameter 'zero_size_dir' [ 228.986940][ T8588] EXT4-fs error (device loop1): ext4_map_blocks:739: inode #15: block 3: comm syz.1.1165: lblock 3 mapped to illegal pblock 3 (length 3) [ 229.075347][ T8588] EXT4-fs (loop1): Remounting filesystem read-only [ 229.089836][ T8603] EXT4-fs error (device loop1): ext4_map_blocks:739: inode #15: block 8: comm syz.1.1165: lblock 8 mapped to illegal pblock 8 (length 8) [ 229.171030][ T8603] EXT4-fs (loop1): Remounting filesystem read-only [ 229.373664][ T8617] loop2: detected capacity change from 0 to 128 [ 229.470261][ T8617] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 229.550943][ T8594] loop5: detected capacity change from 0 to 32768 [ 229.654047][ T8594] XFS (loop5): Mounting V5 Filesystem [ 229.825203][ T8594] XFS (loop5): Ending clean mount [ 229.971333][ T8594] cifs: Unknown parameter 'inode32' [ 230.049057][ T4957] XFS (loop5): Unmounting Filesystem [ 230.336146][ T7170] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 230.343987][ T5088] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 230.415023][ T8636] loop0: detected capacity change from 0 to 32768 [ 230.495727][ T8644] loop1: detected capacity change from 0 to 8192 [ 230.551192][ T8644] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 230.570660][ T8644] REISERFS (device loop1): using ordered data mode [ 230.578412][ T8644] reiserfs: using flush barriers [ 230.581419][ T8636] XFS (loop0): Mounting V5 Filesystem [ 230.612399][ T8644] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 230.630552][ T5088] usb 8-1: Using ep0 maxpacket: 16 [ 230.720790][ T8644] REISERFS (device loop1): checking transaction log (loop1) [ 230.729747][ T8636] XFS (loop0): Ending clean mount [ 230.746477][ T8636] XFS (loop0): Quotacheck needed: Please wait. [ 230.753310][ T5088] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 230.764941][ T5088] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 230.770095][ T8644] REISERFS (device loop1): Using r5 hash to sort names [ 230.774901][ T5088] usb 8-1: config 0 interface 0 has no altsetting 0 [ 230.774943][ T5088] usb 8-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 230.774969][ T5088] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.816341][ T5088] usb 8-1: config 0 descriptor?? [ 230.841195][ T8644] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 230.920034][ T8636] XFS (loop0): Quotacheck: Done. [ 230.930844][ T7170] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 230.942189][ T7170] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.957369][ T7170] usb 3-1: Product: syz [ 230.967121][ T7170] usb 3-1: Manufacturer: syz [ 230.980714][ T7170] usb 3-1: SerialNumber: syz [ 231.001766][ T7170] usb 3-1: config 0 descriptor?? [ 231.021208][ T8644] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 3 0(1) DIR], item_len 35, item_location 3633, free_space(entry_count) 2 [ 231.086293][ T4189] XFS (loop0): Unmounting Filesystem [ 231.090517][ T8644] REISERFS error (device loop1): vs-5150 search_by_key: invalid format found in block 532. Fsck? [ 231.125136][ T8644] REISERFS (device loop1): Remounting filesystem read-only [ 231.530496][ T7170] usb 3-1: atusb_control_msg: req 0x21 val 0x0 idx 0x1e, error -32 [ 231.530618][ T7170] usb 3-1: Firmware version (0.0) predates our first public release. [ 231.530647][ T7170] usb 3-1: Please update to version 0.2 or newer [ 231.574694][ T8641] loop7: detected capacity change from 0 to 512 [ 231.588222][ T7170] usb 3-1: Firmware: build ìm~ëÁ [ 231.588263][ T7170] usb 3-1: atusb_probe: initialization failed, error = -32 [ 231.588372][ T7170] atusb: probe of 3-1:0.0 failed with error -32 [ 231.640032][ T8672] loop0: detected capacity change from 0 to 1024 [ 231.694612][ T4562] usb 8-1: USB disconnect, device number 2 [ 231.738788][ T8662] loop5: detected capacity change from 0 to 32768 [ 231.834057][ T8672] EXT4-fs (loop0): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,errors=remount-ro,auto_da_alloc,nodioread_nolock,. Quota mode: none. [ 231.919333][ T8672] EXT4-fs error (device loop0): ext4_map_blocks:739: inode #15: block 3: comm syz.0.1186: lblock 3 mapped to illegal pblock 3 (length 3) [ 231.967135][ T8672] EXT4-fs (loop0): Remounting filesystem read-only [ 231.980955][ T8662] XFS (loop5): Mounting V5 Filesystem [ 232.053091][ T8662] XFS (loop5): Ending clean mount [ 232.184303][ T4957] XFS (loop5): Unmounting Filesystem [ 232.374894][ T8699] device veth0 entered promiscuous mode [ 232.400214][ T8699] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1194'. [ 232.655971][ T7170] libceph: connect (1)[c::]:6789 error -101 [ 232.667683][ T7170] libceph: mon0 (1)[c::]:6789 connect error [ 232.971002][ T7170] libceph: connect (1)[c::]:6789 error -101 [ 232.982779][ T7170] libceph: mon0 (1)[c::]:6789 connect error [ 233.111429][ T7170] usb 3-1: USB disconnect, device number 11 [ 233.247321][ T8736] set_capacity_and_notify: 1 callbacks suppressed [ 233.247339][ T8736] loop2: detected capacity change from 0 to 256 [ 233.307561][ T8738] loop1: detected capacity change from 0 to 256 [ 233.330545][ T4567] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 233.379903][ T8706] ceph: No mds server is up or the cluster is laggy [ 233.416642][ T8738] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x395e47cf, utbl_chksum : 0xe619d30d) [ 233.439603][ T26] audit: type=1800 audit(233.402:48): pid=8738 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1205" name="file2" dev="loop1" ino=1048648 res=0 errno=0 [ 233.448935][ T8738] exFAT-fs (loop1): hint_cluster is invalid (17) [ 233.470614][ T8738] exFAT-fs (loop1): error, invalid access to FAT (entry 0xffffffff) [ 233.478782][ T8738] exFAT-fs (loop1): Filesystem has been set read-only [ 233.491447][ T8738] exFAT-fs (loop1): error, invalid access to FAT (entry 0xffffffff) [ 233.536721][ T7170] libceph: connect (1)[c::]:6789 error -101 [ 233.542989][ T7170] libceph: mon0 (1)[c::]:6789 connect error [ 233.684134][ T8742] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 233.710654][ T4567] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 233.731878][ T144] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 233.750466][ T4567] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 233.810411][ T4567] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 234.000672][ T4567] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 234.009861][ T4567] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 234.052745][ T4567] usb 6-1: Product: syz [ 234.056968][ T4567] usb 6-1: Manufacturer: syz [ 234.078068][ T4567] usb 6-1: SerialNumber: syz [ 234.176153][ T8740] loop2: detected capacity change from 0 to 32768 [ 234.229256][ T26] audit: type=1800 audit(234.192:49): pid=8740 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1218" name="file1" dev="loop2" ino=7 res=0 errno=0 [ 234.354162][ T4567] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 12 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 234.437466][ T8757] device veth0 entered promiscuous mode [ 234.472011][ T8757] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1211'. [ 234.642733][ T8255] usb 6-1: USB disconnect, device number 12 [ 234.661679][ T8731] usblp0: removed [ 234.738091][ T275] ================================================================== [ 234.747016][ T275] BUG: KASAN: use-after-free in jfs_lazycommit+0x761/0xb40 [ 234.754501][ T275] Read of size 4 at addr ffff88807a31cc94 by task jfsCommit/275 [ 234.762167][ T275] [ 234.764503][ T275] CPU: 0 PID: 275 Comm: jfsCommit Not tainted syzkaller #0 [ 234.771788][ T275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 234.781851][ T275] Call Trace: [ 234.785136][ T275] [ 234.788068][ T275] dump_stack_lvl+0x188/0x250 [ 234.792765][ T275] ? show_regs_print_info+0x20/0x20 [ 234.798010][ T275] ? load_image+0x400/0x400 [ 234.802552][ T275] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 234.808049][ T275] ? _raw_spin_lock_irqsave+0x8b/0x100 [ 234.813542][ T275] ? lockdep_hardirqs_off+0x70/0x100 [ 234.818879][ T275] print_address_description+0x60/0x2d0 [ 234.824479][ T275] ? jfs_lazycommit+0x761/0xb40 [ 234.829446][ T275] kasan_report+0xdf/0x130 [ 234.833919][ T275] ? jfs_lazycommit+0x761/0xb40 [ 234.839078][ T275] jfs_lazycommit+0x761/0xb40 [ 234.843799][ T275] ? txFreelock+0x5a0/0x5a0 [ 234.848334][ T275] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 234.854260][ T275] ? sched_dynamic_update+0x210/0x210 [ 234.859675][ T275] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 234.865607][ T275] ? __kthread_parkme+0x157/0x1b0 [ 234.870759][ T275] kthread+0x436/0x520 [ 234.874871][ T275] ? txFreelock+0x5a0/0x5a0 [ 234.879407][ T275] ? kthread_blkcg+0xd0/0xd0 [ 234.884034][ T275] ret_from_fork+0x1f/0x30 [ 234.888672][ T275] [ 234.891714][ T275] [ 234.894049][ T275] Allocated by task 8740: [ 234.898482][ T275] __kasan_kmalloc+0xb5/0xf0 [ 234.903103][ T275] jfs_fill_super+0xd8/0xb00 [ 234.907711][ T275] mount_bdev+0x287/0x3c0 [ 234.912041][ T275] legacy_get_tree+0xe6/0x180 [ 234.916798][ T275] vfs_get_tree+0x88/0x270 [ 234.921236][ T275] do_new_mount+0x24a/0xa40 [ 234.925760][ T275] __se_sys_mount+0x2e3/0x3d0 [ 234.930462][ T275] do_syscall_64+0x4c/0xa0 [ 234.934966][ T275] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 234.941069][ T275] [ 234.943667][ T275] Freed by task 4193: [ 234.947715][ T275] kasan_set_track+0x4b/0x70 [ 234.952430][ T275] kasan_set_free_info+0x1f/0x40 [ 234.957408][ T275] ____kasan_slab_free+0xd5/0x110 [ 234.962482][ T275] slab_free_freelist_hook+0xea/0x170 [ 234.967983][ T275] kfree+0xef/0x2a0 [ 234.971826][ T275] generic_shutdown_super+0x130/0x300 [ 234.977239][ T275] kill_block_super+0x7c/0xe0 [ 234.981951][ T275] deactivate_locked_super+0x93/0xf0 [ 234.987438][ T275] cleanup_mnt+0x42d/0x4e0 [ 234.991895][ T275] task_work_run+0x125/0x1a0 [ 234.996522][ T275] exit_to_user_mode_loop+0x10f/0x130 [ 235.002012][ T275] exit_to_user_mode_prepare+0xee/0x180 [ 235.007696][ T275] syscall_exit_to_user_mode+0x16/0x40 [ 235.013453][ T275] do_syscall_64+0x58/0xa0 [ 235.017906][ T275] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 235.023914][ T275] [ 235.026251][ T275] The buggy address belongs to the object at ffff88807a31cc00 [ 235.026251][ T275] which belongs to the cache kmalloc-256 of size 256 [ 235.040524][ T275] The buggy address is located 148 bytes inside of [ 235.040524][ T275] 256-byte region [ffff88807a31cc00, ffff88807a31cd00) [ 235.053925][ T275] The buggy address belongs to the page: [ 235.059561][ T275] page:ffffea0001e8c700 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7a31c [ 235.069710][ T275] head:ffffea0001e8c700 order:1 compound_mapcount:0 [ 235.076382][ T275] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 235.084367][ T275] raw: 00fff00000010200 ffffea000145ee00 0000000e0000000e ffff888016c41b40 [ 235.092960][ T275] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 235.101553][ T275] page dumped because: kasan: bad access detected [ 235.107957][ T275] page_owner tracks the page as allocated [ 235.113658][ T275] page last allocated via order 1, migratetype Unmovable, gfp_mask 0x152a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 8477, ts 226870023162, free_ts 226027117877 [ 235.132230][ T275] get_page_from_freelist+0x1bbd/0x1ca0 [ 235.137857][ T275] __alloc_pages+0x1ee/0x480 [ 235.142761][ T275] new_slab+0xc0/0x4b0 [ 235.146952][ T275] ___slab_alloc+0x80a/0xdd0 [ 235.151648][ T275] __kmalloc+0x1cd/0x330 [ 235.155886][ T275] hash_ip4_add+0x158a/0x1fe0 [ 235.160591][ T275] hash_ip4_uadt+0x680/0x8a0 [ 235.165203][ T275] call_ad+0x359/0xa00 [ 235.169349][ T275] ip_set_ad+0x816/0x9c0 [ 235.173603][ T275] nfnetlink_rcv_msg+0xbb0/0x11f0 [ 235.178795][ T275] netlink_rcv_skb+0x1f5/0x440 [ 235.183684][ T275] nfnetlink_rcv+0x2b4/0x2460 [ 235.188373][ T275] netlink_unicast+0x774/0x920 [ 235.193141][ T275] netlink_sendmsg+0x8ba/0xbe0 [ 235.197925][ T275] ____sys_sendmsg+0x5b7/0x8f0 [ 235.202688][ T275] ___sys_sendmsg+0x236/0x2e0 [ 235.207380][ T275] page last free stack trace: [ 235.212153][ T275] free_unref_page_prepare+0x637/0x6c0 [ 235.217611][ T275] free_unref_page+0x8f/0x2a0 [ 235.222327][ T275] __unfreeze_partials+0x1a5/0x200 [ 235.227507][ T275] put_cpu_partial+0x12d/0x190 [ 235.232553][ T275] qlist_free_all+0x35/0x90 [ 235.237133][ T275] kasan_quarantine_reduce+0x150/0x160 [ 235.242587][ T275] __kasan_kmalloc_large+0x16/0xa0 [ 235.247717][ T275] kmalloc_large_node+0x12e/0x190 [ 235.252733][ T275] __kmalloc_node+0x232/0x3b0 [ 235.257402][ T275] kvmalloc_node+0x84/0x130 [ 235.261989][ T275] hash_ip4_resize+0x1d6/0x18b0 [ 235.266833][ T275] call_ad+0x440/0xa00 [ 235.270907][ T275] ip_set_ad+0x816/0x9c0 [ 235.275225][ T275] nfnetlink_rcv_msg+0xbb0/0x11f0 [ 235.280258][ T275] netlink_rcv_skb+0x1f5/0x440 [ 235.285098][ T275] nfnetlink_rcv+0x2b4/0x2460 [ 235.289945][ T275] [ 235.292277][ T275] Memory state around the buggy address: [ 235.298016][ T275] ffff88807a31cb80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 235.306095][ T275] ffff88807a31cc00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 235.314263][ T275] >ffff88807a31cc80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 235.322339][ T275] ^ [ 235.326936][ T275] ffff88807a31cd00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 235.335095][ T275] ffff88807a31cd80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 235.343153][ T275] ================================================================== [ 235.351232][ T275] Disabling lock debugging due to kernel taint [ 235.357389][ T275] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 235.364787][ T275] CPU: 0 PID: 275 Comm: jfsCommit Tainted: G B syzkaller #0 [ 235.373389][ T275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 235.383937][ T275] Call Trace: [ 235.387234][ T275] [ 235.390252][ T275] dump_stack_lvl+0x188/0x250 [ 235.394956][ T275] ? show_regs_print_info+0x20/0x20 [ 235.400560][ T275] ? load_image+0x400/0x400 [ 235.405157][ T275] panic+0x2e5/0x810 [ 235.409287][ T275] ? bpf_jit_dump+0xd0/0xd0 [ 235.413891][ T275] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 235.419916][ T275] ? _raw_spin_unlock+0x40/0x40 [ 235.424798][ T275] ? jfs_lazycommit+0x761/0xb40 [ 235.429659][ T275] check_panic_on_warn+0x80/0xa0 [ 235.434678][ T275] ? jfs_lazycommit+0x761/0xb40 [ 235.439702][ T275] end_report+0x6d/0xf0 [ 235.443853][ T275] kasan_report+0x102/0x130 [ 235.448352][ T275] ? jfs_lazycommit+0x761/0xb40 [ 235.453194][ T275] jfs_lazycommit+0x761/0xb40 [ 235.457865][ T275] ? txFreelock+0x5a0/0x5a0 [ 235.462372][ T275] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 235.468583][ T275] ? sched_dynamic_update+0x210/0x210 [ 235.474079][ T275] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 235.480065][ T275] ? __kthread_parkme+0x157/0x1b0 [ 235.485203][ T275] kthread+0x436/0x520 [ 235.489608][ T275] ? txFreelock+0x5a0/0x5a0 [ 235.494126][ T275] ? kthread_blkcg+0xd0/0xd0 [ 235.498740][ T275] ret_from_fork+0x1f/0x30 [ 235.503256][ T275] [ 235.506799][ T275] Kernel Offset: disabled [ 235.511134][ T275] Rebooting in 86400 seconds..