last executing test programs: 11m2.241165796s ago: executing program 3 (id=3824): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000200), 0x41, 0x0) write$fb(r0, 0x0, 0x0) 11m1.886516468s ago: executing program 3 (id=3828): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SCROLLCONSOLE(r0, 0x541c, &(0x7f0000000000)) 11m1.55199221s ago: executing program 3 (id=3834): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x14, 0x48, 0x1, 0x0, 0x0, {0xa, 0x0, 0x6e80}}, 0x14}}, 0x0) 11m1.291569065s ago: executing program 3 (id=3836): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$nfs(&(0x7f00000001c0)='..\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x85000, 0x0) 11m1.028761513s ago: executing program 3 (id=3838): r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000080)={0x0, 0x0, 0x0}) 10m59.639579283s ago: executing program 3 (id=3850): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000004200010025bd7000fddbdf250200000061d7d580100001800c00c8000200000000000000040004"], 0x2c}, 0x1, 0x0, 0x0, 0x8800}, 0x4040) 10m58.956454968s ago: executing program 32 (id=3850): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000004200010025bd7000fddbdf250200000061d7d580100001800c00c8000200000000000000040004"], 0x2c}, 0x1, 0x0, 0x0, 0x8800}, 0x4040) 6.945675108s ago: executing program 6 (id=13236): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1018e58, &(0x7f00000005c0)={[{@nodioread_nolock}, {@noblock_validity}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@nodiscard}, {@stripe={'stripe', 0x3d, 0x4}}, {@noauto_da_alloc}]}, 0x6, 0x61f, &(0x7f0000000b00)="$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") mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) syz_mount_image$msdos(&(0x7f0000000940), &(0x7f0000001cc0)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) 5.499061273s ago: executing program 6 (id=13247): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10, &(0x7f0000000640), 0x0, 0x47c, &(0x7f00000001c0)="$eJzs3M9vFFUcAPDvzLZF+VVEROWHVNHY+KOlBZWDF43eNDHRA15MalsIslBDSyKEaDUGj4bEu/FkjP4FnvRi1JOJV70bEqLEBPSga2Z2prSlu9Cyyy7u55PM9r2dt/ved2fezJt53Q2gZw1lD0nExoj4JSIG69mlBYbqf65cOjv516Wzk0nUaq/+nuTlLl86O1kWLV+3ocgMpxHph0lRyVKzp88cm6hWp08W+dG542+Pzp4+8+TR4xNHpo9Mnxg/ePDA/rFnnh5/qiVxZnFd3vHuzK6k7/XzL08eOv/mD1/1RcT23fX1i+O4KemGheRQFvgftdzyYo+0pLLusWlROunrYENYlUpEZJurP+//g1GJqxtvMF78oKONA9oqOzeta7x6vgb8jyXR6RYAnVGe6LPr33K5RUOPrnDxufoFUBb3lWKpr+mLtCjT38b674uIQ/N/f5otUWyHfza2sUIAoOd9k41/nlhp/JfG9kXlNhdzKFsi4q6I2BoRd0fEtoi4JyIve28xnlmN+tRQZSF/7fgzvbDm4G5ANv57tpjbWjr+q4/+arXav5UitymPvz85fLQ6va/4TIajf12WH2tSx7cv/Pxxo3VDi8Z/2ZLVX44Fi3Zc6Ft2g25qYm6iVYPSi+9H7OhbKf5kYSYgiYj7I2LH6t56c5k4+tgXuxoVun78TbRgnqn2WcSj9e0/H8viLyXN5ydH74jq9L7Rcq+41o8/nXulUf03FX8LZNt//dL9f1mJwT+TxfO1s6uv49yvHzW8plzr/j+QvJbPWQ8Uz70zMTd3cixiIHkpzy95fvzqa8t8WT6Lf3jvyv1/a/GaLP6dEZHtxLsj4oGI2FO0/cGIeCgi9jaJ//vnH35r7fG3Vxb/1IrHv4X9f8vS7b/6ROXYd183qv/Gtv+BPDVcPJMf/66jcXOiOp0d1te8NwMAAMDtJ42IjZGkIwvpNB0Zqf8P/7ZYn1ZnZucePzxz6sRU/TsCW6I/Le90DRb3Q7Or7bFkvnjH+v3R8eJecXm/dH9x3/iTyp15fmRypjrV4dih121o0P8zv1U63Tqg7XxfC3rX8v6fdqgdwK3n/A+9S/+H3qX/Q+9a1P+/PHVuZ554L3/cs7BixbmAJr8cAtwenP+hd+n/0Lv0f+hd+j/0pJv5Xn93Jwa6oxmrT3ze3xXNuF4i0mZl3ohb3rDoio+l1Ymk6Y9ZtDHR6SMTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAa/wXAAD//ys68O0=") lsetxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000700)={{}, {0x1, 0x2}, [{}, {0x2, 0x3}, {0x2, 0x3}, {}], {0x4, 0x4}, [{0x8, 0x2}, {0x8, 0x3}, {0x8, 0x5}], {0x10, 0x6}, {0x20, 0x3}}, 0x5c, 0x3) chmod(&(0x7f0000000000)='./file1\x00', 0x1c4) 4.654175218s ago: executing program 6 (id=13253): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x1000000, &(0x7f0000000000), 0x1, 0x7b9, &(0x7f00000007c0)="$eJzs3d9rHNUeAPDvbJLmR3tvcuFy7+1b4EJvoHRzU2Or4EPFBxEsFPTZNmy2oWaTLdlNaULAFhF8EVR8EPSlz/6ob776A3zS/8IHaamaFis+SGR2Z5M02c2vJtloPh+YzDkzsznnO+fMzNmdYTeAQ2sw/ZOLOB4RbycR/dnyJCK6aqnOiHP17R4uLvRERCGJpaWXfkpq2zxYXCjEqtekjmaZ/0TEV29EnMytL7cyNz85VioVZ7L8cHXq6nBlbv7UlamxieJEcfrMyOjo6bNPnj2ze7H+8t38sbvvPP+/T8/99vq/b7/1dRLn4li2bnUcu2UwBrN90pXuwkc8t9uFtVnS7gqwI+mh2VE/yuN49EdHLdVC737WDADYK69FxBIAcMgkrv8AcMg0Pgd4sLhQaEzt/URif917NiJ66vE/zKb6ms7snl1P7T5o34PkkTsjSUQM7EL5gxHx4eevnOjI8mk93EsD9sONmxFxaWBw/fk/WffMwnb9f6OVS9212eCaxYft+gPt9EU6/nmq2fgvtzz+iSbjn+76sfuvxy1/8+M/d+dxy9hIOv57pv5s25rx3/JDawMdWe5vtTFfV3L5SqmYntv+HhFD0dWd5kdqmzYfuQ3d//1+q/Kz8d/H6fTzu69+lJafzle2yN3p7H70NeNj1c5vHjfwzL2b0Zcl18SfLLd/0mL8e2GLZbzw9JsftFqXxp/G25jWx7+3lm5FnGja/ittmWz4fOJwrTsMNzpFE599/35fq/JXt386peWn892PtLl7N6PWAZJkZR/U1yzHP5Csfl6zsv0yvr3V/2WrdZvH37T/jx1JXq6lj2TLro9VqzMjEUeSF9cvP73y2ka+sX0a/9B/mx//9WKb9//0PeGlLcbfeffHT3Ye/95K4x/fuP+vaf+ebPHKks0Stx9OdrQqf2vtP1pLDWVL0vbfLK6t1GtnvRkAAAAAAAAAAAAAAAAAAAAAAAAAti8XEcciyeWX07lcPl//De9/Rl+uVK5UT14uz06PR+23sgeiK9f4qsv+Vd+HOpJ9H34jf3pN/omI+EdEvNfdW8vnC+XSeLuDBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDM0Ra//5/6obvdtQMA9kxPuysAAOw7138AOHy2d/3v3bN6AAD7x/t/ADh8tnz9v7S39QAA9o/3/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOyxC+fPp9PSr4sLhTQ/fm1udrJ87dR4sTKZn5ot5Avlmav5iXJ5olTMF8pTLf/RjfqsVC5fHY3p2evD1WKlOlyZm784VZ6drl68MjU2UbxY7Nq3yAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABg6ypz85NjpVJx5i+RuLES2C7/5962xtV3MHbvqkRnHIhqHOhEdxyIauwwsfos0duGMxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAn8MfAQAA//94WBdi") mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x0, &(0x7f0000001dc0)={0xf, 0x5}, 0x20) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) 4.511872604s ago: executing program 0 (id=13255): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000040)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x4, 0x0, 0x0, 0xbff, 0x1e, 0x0, 0x2c, 0x6e}) 4.209734996s ago: executing program 0 (id=13259): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1c0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x8080c0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noxattr}]}}) 3.98208698s ago: executing program 6 (id=13261): syz_mount_image$xfs(&(0x7f0000009740), &(0x7f0000009780)='./file1\x00', 0x0, &(0x7f0000000040)={[{@nogrpid}, {@nolargeio}, {@uqnoenforce}]}, 0x1, 0x9859, &(0x7f00000097c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0/file3\x00', 0x1d0) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file3\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x2) 3.688787862s ago: executing program 0 (id=13264): syz_mount_image$nilfs2(&(0x7f0000000240), &(0x7f0000000200)='./file0\x00', 0x98, &(0x7f0000000080)={[{@discard}, {@errors_remount_ro}, {@nobarrier}, {@errors_continue}, {@errors_continue}, {@nodiscard}, {@nobarrier}]}, 0x1, 0xf76, &(0x7f0000001500)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000200)={0xf8, 0x0, 0x601, 0x0, 0x9}) 3.06543079s ago: executing program 5 (id=13269): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0x7}, {0xfff1, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_ingress={0xc}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1ff}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 2.958236552s ago: executing program 0 (id=13270): syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000240)='./bus\x00', 0x1800840, &(0x7f0000000a80)={[{@numtail}, {@fat=@nocase}, {@shortname_win95}, {@utf8no}, {@shortname_win95}, {@rodir}, {@numtail}, {@fat=@flush}, {@fat=@discard}, {@fat=@dos1xfloppy}, {@shortname_winnt}, {@iocharset={'iocharset', 0x3d, 'cp855'}}, {@shortname_mixed}, {@shortname_mixed}]}, 0x1, 0x368, &(0x7f0000000600)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x0, 0x1aa) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 2.950744488s ago: executing program 4 (id=13271): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001780)=""/4105, 0x1009}, {&(0x7f0000001700)=""/82, 0x52}], 0x2}, 0x2000) 2.81155186s ago: executing program 1 (id=13272): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x11, 0x10, &(0x7f0000002e00), &(0x7f0000001000), 0x8, 0xa0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r0, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 2.803678995s ago: executing program 5 (id=13273): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x1010000, &(0x7f0000000980)=ANY=[@ANYBLOB="73686f72746e616d653d6c6f7765722c73686f72746e616d653d6c6f7765722c756e695f786c6174653d312c696f636861727365743d63703737352c6e6f6e756d7461696c3d302c636f6465706167653d3933322c757466383d312c6e6f6e756d7461696c3d302c6e6f6e756d7461696c3d302c757466383d312c757466383d302c73686f72746e616d653d6d697865642c756e695f786c6174653d302c726f6469722c73686f72746e616d653d77696e39352c756e695f786c6174653d302c6e6f6e756d7461696c3d302c008f28b39dfeb9863f7f06105912"], 0x1, 0x36b, &(0x7f0000000500)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000002080)=""/4072, 0xfe8) 2.642326099s ago: executing program 4 (id=13274): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x81}]}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}, @NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x4}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xcc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 2.610980698s ago: executing program 1 (id=13275): syz_mount_image$minix(&(0x7f0000000300), &(0x7f0000000000)='./file2\x00', 0x0, &(0x7f00000000c0)=ANY=[], 0x81, 0x235, &(0x7f0000000700)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4808, 0x0, 0x0, 0x0, &(0x7f0000000000)) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)='./bus\x00') 2.180182161s ago: executing program 4 (id=13276): syz_mount_image$nilfs2(&(0x7f0000000180), &(0x7f0000000100)='./file0\x00', 0x3214212, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0, @ANYRES32], 0x7, 0xf08, &(0x7f0000001e40)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2001413, 0x0, 0x1, 0x0, &(0x7f0000000080)) rename(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./bus/file0\x00') 2.144849319s ago: executing program 0 (id=13277): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x20400, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$COMEDI_CMDTEST(r0, 0x8050640a, &(0x7f00000000c0)={0x8, 0x0, 0x20, 0x6, 0x0, 0x7f, 0xffffffff, 0xfffffffc, 0x1, 0x5, 0x2, 0x5, 0x0, 0x0, 0x0}) 2.043838247s ago: executing program 1 (id=13278): unshare(0x20000400) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, 0x0, 0x0) 1.740846225s ago: executing program 0 (id=13280): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000020ec13060000000000000109022400010000000009040000010300000009210000000122020009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, &(0x7f0000000080)={0x20, 0x23, 0x2, {0x2, 0x5}}, 0x0, 0x0, 0x0}, 0x0) 1.682746551s ago: executing program 5 (id=13281): syz_mount_image$udf(&(0x7f0000000000), &(0x7f00000094c0)='./file1\x00', 0x0, &(0x7f0000001940)=ANY=[], 0x1, 0xc25, &(0x7f0000002580)="$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") mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file5\x00', 0x61c0, 0x700) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file5\x00', 0x0) 1.538332913s ago: executing program 2 (id=13282): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000640), 0x2d00, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000000)=0x1) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000500)=0x42268597) 1.508664525s ago: executing program 6 (id=13283): socket$packet(0x11, 0x3, 0x300) r0 = syz_open_procfs(0x0, &(0x7f0000000fc0)='net/packet\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000200)=""/109, 0x6d}], 0x1, 0x40, 0x3) 1.448067012s ago: executing program 1 (id=13284): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.395350406s ago: executing program 4 (id=13285): syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f0000000000)={[{@noauto_da_alloc}, {@init_itable_val={'init_itable', 0x3d, 0x4004}}, {@barrier_val={'barrier', 0x3d, 0x5}}]}, 0x43, 0x4e1, &(0x7f0000000740)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x100, 0x0) open_by_handle_at(r0, &(0x7f0000000240)=@reiserfs_2={0x8, 0x2, {0xb}}, 0x0) 1.218054258s ago: executing program 2 (id=13286): r0 = getpid() r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000280)={0x1, 0x2, 0x9, 0xb6bc, r0}) 1.213127992s ago: executing program 1 (id=13287): r0 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000080)=0x2) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x9, 0x100, 0x0, {0x300, 0xbde, 0x100, 0x10000}}) 1.028715814s ago: executing program 2 (id=13288): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x4, 0xfffffffd, 0x101}) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x53, 0xffffffffffffffff, 0x6, 0x7, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="5c1c0988b2ed", 0x0, 0xc84, 0x10004, 0x2, 0x0}) 989.905157ms ago: executing program 5 (id=13289): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000000)=0x5, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x1, @remote}, 0x10) 937.90511ms ago: executing program 1 (id=13290): r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f0000000000)={&(0x7f0000000240)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000040)='`', 0x1}], 0x1}, 0x800) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000008c0)={0x0, @in={{0x2, 0x4e24, @rand_addr=0x64010100}}, 0x10, 0x7f, 0x0, 0x2, 0x35, 0x8, 0xff}, 0x9c) 658.36157ms ago: executing program 5 (id=13291): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x400, &(0x7f0000000180), 0x2, 0x786, &(0x7f0000000f80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 598.225741ms ago: executing program 2 (id=13292): r0 = add_key$user(&(0x7f0000000300), &(0x7f00000002c0)={'syz', 0x1}, &(0x7f0000000480)=':', 0x1, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000000)={r0, r0, r0}, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040eec9e2720"], 0x7) 429.409338ms ago: executing program 4 (id=13293): clock_settime(0x0, &(0x7f0000000240)={0x77359400}) clock_adjtime(0x0, &(0x7f0000000640)={0x17, 0x9, 0x380000, 0x8, 0xfffffffffffffff9, 0xfffffffffffffff7, 0x9, 0x4, 0xae, 0x6, 0x7, 0x4, 0xfffffffffffff04f, 0x7, 0x80000000, 0xfffffffffffffff8, 0xffffffffffffffff, 0x6, 0x100000000, 0x100, 0x4, 0x2, 0x4bf, 0x3, 0x8, 0x8}) clock_adjtime(0x0, &(0x7f0000000900)={0x6, 0x20000000e, 0xf, 0x0, 0xf, 0x8000000000000000, 0xa, 0x2, 0x9, 0x4, 0x5, 0x9, 0xc, 0x9, 0x7, 0x9, 0x8, 0x3, 0xb, 0xfffffffffffffffc, 0x2, 0x5, 0x7, 0x7, 0x3, 0x6}) 418.600442ms ago: executing program 2 (id=13294): syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000000)='./file2\x00', 0x804818, &(0x7f0000000100)={[{@check_relaxed}, {@check_strict}, {@hide}, {}, {@unhide}, {@nojoliet}, {@map_acorn}, {@nocompress}]}, 0x2, 0x553, &(0x7f0000000b00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r0, &(0x7f0000001400)=""/4100, 0x1004) 283.401266ms ago: executing program 6 (id=13295): syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000040)='./file0\x00', 0x2000800, &(0x7f0000000080)=ANY=[@ANYRES64=0x0, @ANYRESOCT, @ANYRES64=0x0], 0x1, 0x296, &(0x7f0000000740)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 218.921722ms ago: executing program 2 (id=13296): r0 = syz_usb_connect$hid(0x0, 0x90, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000105804165000000000000109022400010000c04009040000010300000009210900000122a00009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="0000d2"], 0x0, 0x0, 0x0, 0x0}, 0x0) 33.305942ms ago: executing program 4 (id=13297): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x100) mount(0x0, &(0x7f0000000d80)='./file0\x00', &(0x7f0000000dc0)='sysfs\x00', 0x8000, 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x10038, 0x0) 0s ago: executing program 5 (id=13298): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@ipv6_newrule={0x2c, 0x20, 0x1, 0x70bd27, 0x25dfdbfb, {0xa, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x7, 0x6}, [@FIB_RULE_POLICY=@FRA_FWMARK={0x8, 0xa, 0xff}, @FIB_RULE_POLICY=@FRA_SUPPRESS_IFGROUP={0x8, 0xd, 0x10}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24048860}, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) kernel console output (not intermixed with test programs): .827227][ T6065] udevd[6065]: incorrect cramfs checksum on /dev/loop2 [ 1115.901619][ T1914] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1115.937753][ T1966] netlink: 68 bytes leftover after parsing attributes in process `syz.2.12409'. [ 1115.937787][ T1966] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12409'. [ 1115.937861][ T1966] netlink: 20 bytes leftover after parsing attributes in process `syz.2.12409'. [ 1115.945364][ T1914] XFS (loop1): Ending clean mount [ 1116.543274][ T5836] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1117.077419][ T1992] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12420'. [ 1117.421513][ T2011] loop5: detected capacity change from 0 to 128 [ 1117.533088][ T2009] loop6: detected capacity change from 0 to 2048 [ 1117.605005][ T2009] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1117.699935][ T2009] ext4 filesystem being mounted at /1336/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1117.763405][ T2022] loop5: detected capacity change from 0 to 512 [ 1117.820412][T14929] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1117.829908][ T2022] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 1117.954519][ T2022] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1117.995529][T28189] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 1118.027362][ T2030] loop1: detected capacity change from 0 to 2048 [ 1118.132443][ T2030] EXT4-fs: Ignoring removed orlov option [ 1118.167718][ T2022] EXT4-fs error (device loop5): ext4_map_blocks:776: inode #2: block 18: comm syz.5.12434: lblock 23 mapped to illegal pblock 18 (length 1) [ 1118.196807][ T2030] EXT4-fs: Ignoring removed oldalloc option [ 1118.213291][T28189] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 1118.234135][T28189] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1118.249805][T28189] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1118.260543][T28189] usb 1-1: config 220 has no interface number 2 [ 1118.268597][T28189] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1118.329955][ T2030] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1118.360453][T28189] usb 1-1: config 220 interface 0 has no altsetting 0 [ 1118.396708][ T2046] loop4: detected capacity change from 0 to 1024 [ 1118.399327][T28189] usb 1-1: config 220 interface 76 has no altsetting 0 [ 1118.415512][ T2030] EXT4-fs error (device loop1): ext4_find_extent:939: inode #2: comm syz.1.12438: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 1118.448743][ T5827] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1118.466077][T28189] usb 1-1: config 220 interface 1 has no altsetting 0 [ 1118.504979][T28189] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1118.521011][T28189] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1118.530177][T28189] usb 1-1: Product: syz [ 1118.534547][T28189] usb 1-1: Manufacturer: syz [ 1118.539150][T28189] usb 1-1: SerialNumber: syz [ 1118.645894][ T2050] syz_tun: entered promiscuous mode [ 1118.655155][ T2050] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1118.673738][T17156] hfsplus: b-tree write err: -5, ino 25 [ 1118.681991][T17156] hfsplus: b-tree write err: -5, ino 4 [ 1118.721488][T17156] hfsplus: b-tree write err: -5, ino 2 [ 1118.730146][T17156] hfsplus: b-tree write err: -5, ino 20 [ 1118.753991][ T5836] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1118.829940][T28189] usb 1-1: selecting invalid altsetting 0 [ 1118.836276][T28189] uvcvideo 1-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1118.896297][T28189] uvcvideo 1-1:220.0: No valid video chain found. [ 1118.982757][T28189] usb 1-1: selecting invalid altsetting 0 [ 1118.988553][T28189] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 1119.116879][T28189] usb 1-1: USB disconnect, device number 111 [ 1119.267853][ T2072] netlink: 'syz.2.12457': attribute type 4 has an invalid length. [ 1119.310971][ T2072] netlink: 17 bytes leftover after parsing attributes in process `syz.2.12457'. [ 1120.290570][ T2118] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12480'. [ 1120.877874][ T2134] loop2: detected capacity change from 0 to 4096 [ 1120.907710][ T2134] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 1120.943939][ T2147] netlink: 64 bytes leftover after parsing attributes in process `syz.1.12494'. [ 1120.979250][ T2144] loop4: detected capacity change from 0 to 1764 [ 1120.991583][ T2134] ntfs3(loop2): Failed to initialize $Extend/$Reparse. [ 1121.009422][ T2147] netlink: 64 bytes leftover after parsing attributes in process `syz.1.12494'. [ 1121.246493][ T2154] openvswitch: netlink: Tunnel attr 60 out of range max 16 [ 1121.819423][ T2180] loop5: detected capacity change from 0 to 128 [ 1121.911917][ T2180] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1122.026399][ T2180] ext4 filesystem being mounted at /2102/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1122.086189][ T2187] loop6: detected capacity change from 0 to 512 [ 1122.172517][ T2159] loop4: detected capacity change from 0 to 32768 [ 1122.183094][ T2187] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1122.212793][ T5827] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1122.225904][ T2187] ext4 filesystem being mounted at /1354/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1122.598672][ T2206] overlayfs: cannot append lower layer [ 1122.637738][T14929] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1122.795835][ T2209] netlink: 'syz.2.12525': attribute type 1 has an invalid length. [ 1122.808220][ T2209] netlink: 224 bytes leftover after parsing attributes in process `syz.2.12525'. [ 1123.196050][ T2231] ceph: No source [ 1123.867767][ T30] audit: type=1326 audit(1773513759.939:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2258 comm="syz.6.12548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fd1b9c799 code=0x7ffc0000 [ 1123.937298][ T2266] netlink: 5 bytes leftover after parsing attributes in process `syz.4.12550'. [ 1123.971563][ T30] audit: type=1326 audit(1773513759.957:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2258 comm="syz.6.12548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fd1b9c799 code=0x7ffc0000 [ 1124.070538][ T30] audit: type=1326 audit(1773513759.957:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2258 comm="syz.6.12548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fd1b9c799 code=0x7ffc0000 [ 1124.164077][ T30] audit: type=1326 audit(1773513759.967:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2258 comm="syz.6.12548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f7fd1b9c799 code=0x7ffc0000 [ 1124.256016][ T30] audit: type=1326 audit(1773513759.967:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2258 comm="syz.6.12548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fd1b9c799 code=0x7ffc0000 [ 1124.288330][ T30] audit: type=1326 audit(1773513759.967:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2258 comm="syz.6.12548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fd1b9c799 code=0x7ffc0000 [ 1124.409585][ T30] audit: type=1326 audit(1773513759.967:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2258 comm="syz.6.12548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fd1b9c799 code=0x7ffc0000 [ 1124.483851][ T30] audit: type=1326 audit(1773513759.967:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2258 comm="syz.6.12548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f7fd1b9c799 code=0x7ffc0000 [ 1124.581057][ T30] audit: type=1326 audit(1773513759.967:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2258 comm="syz.6.12548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f7fd1b9c799 code=0x7ffc0000 [ 1124.734601][ T2287] loop6: detected capacity change from 0 to 4096 [ 1124.751660][ T2287] EXT4-fs (loop6): Test dummy encryption mode enabled [ 1124.783441][ T2287] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 1124.812702][ T2287] System zones: 0-5 [ 1124.833746][ T2287] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1124.966392][ T2257] loop1: detected capacity change from 0 to 32768 [ 1125.011788][ T2300] netlink: 60 bytes leftover after parsing attributes in process `syz.4.12568'. [ 1125.021328][ T2257] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.12549 (2257) [ 1125.096192][ T2257] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1125.125352][ T2300] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1125.149180][ T2257] BTRFS info (device loop1): using xxhash64 checksum algorithm [ 1125.156823][ T2257] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 1125.161244][ T2300] bridge3: entered promiscuous mode [ 1125.178709][ T2304] netlink: 272 bytes leftover after parsing attributes in process `syz.2.12570'. [ 1125.208706][T14929] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1125.220411][ T2300] bridge3: entered allmulticast mode [ 1125.221436][ T2302] loop0: detected capacity change from 0 to 4096 [ 1125.383316][ T2257] BTRFS info (device loop1): rebuilding free space tree [ 1125.528532][ T2257] BTRFS info (device loop1): disabling free space tree [ 1125.571787][ T2257] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1125.605747][ T30] audit: type=1326 audit(1773513761.557:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2320 comm="syz.6.12571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fd1b9c799 code=0x7ffc0000 [ 1125.648298][ T2257] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1125.762614][ T2257] BTRFS info (device loop1): setting nodatasum [ 1125.781992][T19195] Bluetooth: hci0: unexpected cc 0x0402 length: 61 > 1 [ 1125.789032][T19195] Bluetooth: hci0: Ignoring error of Inquiry Cancel command [ 1125.796421][T19195] Bluetooth: hci0: unexpected event for opcode 0x0402 [ 1125.810584][ T2328] loop4: detected capacity change from 0 to 64 [ 1125.816909][ T2257] BTRFS info (device loop1): allowing degraded mounts [ 1125.896718][ T2328] MINIX-fs: bad superblock [ 1125.901846][ T2257] BTRFS info (device loop1): turning on async discard [ 1125.955319][ T2257] BTRFS info (device loop1): enabling disk space caching [ 1126.001945][ T2257] BTRFS info (device loop1): force clearing of disk cache [ 1126.034629][ T2257] BTRFS info (device loop1): force zlib compression, level 3 [ 1126.144581][ T2257] BTRFS info (device loop1): balance: start -susage=8589934849,limit=1 [ 1126.201179][ T2257] BTRFS info (device loop1): relocating block group 1048576 flags system [ 1126.403261][ T2257] BTRFS info (device loop1): balance: ended with status: 0 [ 1126.602646][ T5836] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1126.750825][ T2350] netlink: 'syz.2.12584': attribute type 3 has an invalid length. [ 1127.067143][ T2360] netlink: 16 bytes leftover after parsing attributes in process `syz.2.12589'. [ 1127.402678][ T2332] loop6: detected capacity change from 0 to 32768 [ 1127.531545][ T2370] delete_channel: no stack [ 1127.775876][ T2341] loop0: detected capacity change from 0 to 32768 [ 1127.912231][ T2378] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12597'. [ 1127.936184][ T2341] JBD2: Ignoring recovery information on journal [ 1128.124083][ T2341] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 1128.182516][ T2385] netlink: 'syz.2.12599': attribute type 1 has an invalid length. [ 1128.443892][ T2395] loop4: detected capacity change from 0 to 512 [ 1128.496618][ T2395] EXT4-fs (loop4): 1 orphan inode deleted [ 1128.496768][ T5830] ocfs2: Unmounting device (7,0) on (node local) [ 1128.507703][ T2395] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1128.522886][ T2395] ext4 filesystem being mounted at /2060/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1128.706669][ T2402] pim6reg: entered allmulticast mode [ 1128.773293][ T5821] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1129.250536][ T2426] loop0: detected capacity change from 0 to 1024 [ 1129.644584][ T2445] loop0: detected capacity change from 0 to 1764 [ 1129.812898][ T2404] loop5: detected capacity change from 0 to 32768 [ 1129.893684][ T2404] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.12608 (2404) [ 1129.948248][ T2404] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1129.991266][ T2404] BTRFS info (device loop5): using sha256 checksum algorithm [ 1130.207990][ T2404] BTRFS info (device loop5): enabling ssd optimizations [ 1130.256927][ T2404] BTRFS info (device loop5): turning on async discard [ 1130.310275][ T2404] BTRFS info (device loop5): enabling free space tree [ 1130.380689][ T2404] BTRFS warning (device loop5): get dev_stats failed, device not found [ 1130.391872][ T2492] netlink: 'syz.6.12631': attribute type 10 has an invalid length. [ 1130.442837][ T2492] dummy0: entered promiscuous mode [ 1130.478642][ T2492] team0: Port device dummy0 added [ 1130.511682][ T5827] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1130.522724][ T2497] loop4: detected capacity change from 0 to 256 [ 1130.560272][ T2497] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1130.626006][ T2497] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 1130.712625][ T2497] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 1130.744140][ T2497] exFAT-fs (loop4): failed to load alloc-bitmap [ 1130.776041][ T2497] exFAT-fs (loop4): failed to recognize exfat type [ 1130.982703][ T2513] netlink: 'syz.4.12642': attribute type 2 has an invalid length. [ 1131.038276][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 1131.114955][ T2513] : entered promiscuous mode [ 1131.186984][ T2518] netlink: 'syz.0.12644': attribute type 92 has an invalid length. [ 1131.555337][ T2532] loop1: detected capacity change from 0 to 128 [ 1131.559274][ T2539] loop6: detected capacity change from 0 to 256 [ 1131.610591][ T2532] EXT4-fs (loop1): Test dummy encryption mode enabled [ 1131.650285][ T2539] FAT-fs (loop6): Directory bread(block 64) failed [ 1131.663325][ T2539] FAT-fs (loop6): Directory bread(block 65) failed [ 1131.691890][ T2539] FAT-fs (loop6): Directory bread(block 66) failed [ 1131.721170][ T2532] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1131.739234][ T2539] FAT-fs (loop6): Directory bread(block 67) failed [ 1131.754343][ T2539] FAT-fs (loop6): Directory bread(block 68) failed [ 1131.782136][ T2532] ext4 filesystem being mounted at /2158/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1131.792621][ T2539] FAT-fs (loop6): Directory bread(block 69) failed [ 1131.792775][ T2539] FAT-fs (loop6): Directory bread(block 70) failed [ 1131.856731][ T2539] FAT-fs (loop6): Directory bread(block 71) failed [ 1131.878402][ T2539] FAT-fs (loop6): Directory bread(block 72) failed [ 1131.899384][ T2532] fscrypt: AES-256-XTS using implementation "xts-aes-vaes-avx2" [ 1131.910711][ T2539] FAT-fs (loop6): Directory bread(block 73) failed [ 1131.920024][ T2549] netlink: 'syz.2.12655': attribute type 2 has an invalid length. [ 1131.951569][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 1131.951593][ T30] audit: type=1800 audit(1773513767.497:652): pid=2532 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.12647" name="file2" dev="loop1" ino=12 res=0 errno=0 [ 1131.978126][ T2549] netlink: 119 bytes leftover after parsing attributes in process `syz.2.12655'. [ 1132.132655][ T5836] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1132.145601][ T2539] syz.6.12650: attempt to access beyond end of device [ 1132.145601][ T2539] loop6: rw=8912896, sector=1160, nr_sectors = 4 limit=256 [ 1132.210713][ T2539] syz.6.12650: attempt to access beyond end of device [ 1132.210713][ T2539] loop6: rw=8388608, sector=1160, nr_sectors = 4 limit=256 [ 1132.287271][ T30] audit: type=1800 audit(1773513767.805:653): pid=2539 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.12650" name="file0" dev="loop6" ino=1048744 res=0 errno=0 [ 1132.392236][ T2565] geneve1: entered allmulticast mode [ 1132.606454][ T2579] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1133.129101][ T2609] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12679'. [ 1133.379415][ T2622] netlink: 'syz.1.12684': attribute type 1 has an invalid length. [ 1133.451789][ T2628] loop6: detected capacity change from 0 to 8 [ 1133.775265][ T5999] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 1133.925943][ T5983] usb 1-1: new full-speed USB device number 112 using dummy_hcd [ 1133.953406][ T5999] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 1133.988317][ T5999] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1134.026081][ T5999] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 1134.050749][ T5999] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1134.080275][ T5999] usb 5-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 1134.095471][ T5999] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1134.117073][ T5999] usb 5-1: Product: syz [ 1134.148294][ T5999] usb 5-1: Manufacturer: syz [ 1134.158232][ T5999] usb 5-1: SerialNumber: syz [ 1134.166663][ T5983] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1134.194125][ T5983] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1134.222230][ T5999] usb 5-1: config 0 descriptor?? [ 1134.232398][ T5983] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1134.263852][ T5983] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1134.328601][ T5983] hub 1-1:4.0: USB hub found [ 1134.481147][ T5999] adutux 5-1:0.0: Could not retrieve serial number [ 1134.487946][ T5999] adutux 5-1:0.0: probe with driver adutux failed with error -5 [ 1134.526194][ T5983] hub 1-1:4.0: 2 ports detected [ 1134.551808][ T5983] usb 1-1: selecting invalid altsetting 1 [ 1134.567442][ T5983] hub 1-1:4.0: Using single TT (err -22) [ 1134.737394][T28189] usb 5-1: USB disconnect, device number 3 [ 1134.747028][ T5983] hub 1-1:4.0: hub_hub_status failed (err = -71) [ 1134.786627][ T5983] hub 1-1:4.0: config failed, can't get hub status (err -71) [ 1134.808898][ T2686] loop6: detected capacity change from 0 to 128 [ 1134.833757][ T2686] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 1134.880993][ T2686] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1134.892678][ T5983] usb 1-1: USB disconnect, device number 112 [ 1134.910619][ T2685] loop5: detected capacity change from 0 to 4096 [ 1134.991139][ T2687] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1135.103983][ T2685] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 1135.186403][ T2685] Remounting filesystem read-only [ 1135.284274][ T5827] NILFS (loop5): disposed unprocessed dirty file(s) when detaching log writer [ 1135.571769][ T2693] loop4: detected capacity change from 0 to 1024 [ 1135.622050][ T2682] loop2: detected capacity change from 0 to 32768 [ 1135.674114][ T2702] kAFS: unable to lookup cell 'syz0' [ 1135.682239][ T2682] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.12708 (2682) [ 1135.785420][T17181] hfsplus: b-tree write err: -5, ino 25 [ 1135.798236][ T2678] loop1: detected capacity change from 0 to 32768 [ 1135.806906][ T2705] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12717'. [ 1135.818292][T17181] hfsplus: b-tree write err: -5, ino 4 [ 1135.823896][T17181] hfsplus: b-tree write err: -5, ino 2 [ 1135.841948][ T2678] BTRFS info: device /dev/loop1 (7:1) using temp-fsid 2c4e0fbd-394e-48d9-8989-bb74c43c8480 [ 1135.863572][ T2682] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1135.936201][ T2682] BTRFS info (device loop2): using sha256 checksum algorithm [ 1135.945053][ T2678] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.12707 (2678) [ 1136.061818][ T2678] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1136.085136][ T2723] netlink: 'syz.4.12719': attribute type 3 has an invalid length. [ 1136.129364][ T2678] BTRFS info (device loop1): using sha256 checksum algorithm [ 1136.150073][ T2682] BTRFS info (device loop2): rebuilding free space tree [ 1136.215353][ T2682] BTRFS info (device loop2): enabling ssd optimizations [ 1136.255994][ T2682] BTRFS info (device loop2): using spread ssd allocation scheme [ 1136.280137][ T2682] BTRFS info (device loop2): turning on async discard [ 1136.306389][ T2682] BTRFS info (device loop2): enabling free space tree [ 1136.393591][ T2682] BTRFS info (device loop2): force clearing of disk cache [ 1136.423933][ T2678] BTRFS info (device loop1): enabling ssd optimizations [ 1136.471887][ T2678] BTRFS info (device loop1): turning on async discard [ 1136.478730][ T2678] BTRFS info (device loop1): enabling free space tree [ 1136.511245][ T2758] openvswitch: netlink: Message has 4 unknown bytes. [ 1136.707833][ T5823] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1136.843385][ T5836] BTRFS info (device loop1): last unmount of filesystem 2c4e0fbd-394e-48d9-8989-bb74c43c8480 [ 1137.158583][ T2773] loop0: detected capacity change from 0 to 4096 [ 1137.231703][ T2778] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 1137.271977][ T2773] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 1137.569392][ T2773] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 1137.594412][ T2773] ntfs3(loop0): ino=19, mi_enum_attr [ 1137.707341][ T2773] ntfs3(loop0): failed to convert "c46c" to cp737 [ 1137.750315][ T2773] ntfs3(loop0): ino=20, mi_enum_attr [ 1138.031243][ T2806] loop2: detected capacity change from 0 to 256 [ 1138.063580][ T2806] exfat: Deprecated parameter 'utf8' [ 1138.145817][ T2806] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 1138.305218][ T2818] netlink: 'syz.5.12747': attribute type 89 has an invalid length. [ 1138.561352][ T2824] loop2: detected capacity change from 0 to 512 [ 1138.581910][ C0] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 1138.650214][ T2824] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1138.708111][ T2824] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.12750: bad orphan inode 131083 [ 1138.766948][ T2824] loop2: lost filesystem error report for type 5 error -117 [ 1138.767256][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 1138.781321][ C1] EXT4-fs (loop2): initial error at time 1773513773: ext4_orphan_get:1417 [ 1138.781339][ T30] audit: type=1326 audit(1773513773.867:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2799 comm="syz.1.12742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52a539c799 code=0x7fc00000 [ 1138.781352][ C1] [ 1138.781406][ T30] audit: type=1326 audit(1773513773.867:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2799 comm="syz.1.12742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f52a539c799 code=0x7fc00000 [ 1138.789915][ C1] EXT4-fs (loop2): last error at time 1773513773: ext4_orphan_get:1417 [ 1138.800679][ T2838] sock: sock_timestamping_bind_phc: sock not bind to device [ 1138.854250][ T30] audit: type=1326 audit(1773513773.867:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2799 comm="syz.1.12742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52a539c799 code=0x7fc00000 [ 1138.877944][ T30] audit: type=1326 audit(1773513773.867:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2799 comm="syz.1.12742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52a539c799 code=0x7fc00000 [ 1138.908464][ T2824] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1138.926021][ T30] audit: type=1326 audit(1773513773.867:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2799 comm="syz.1.12742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52a539c799 code=0x7fc00000 [ 1138.961056][ T2836] loop6: detected capacity change from 0 to 128 [ 1139.031185][ T30] audit: type=1326 audit(1773513773.867:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2799 comm="syz.1.12742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52a539c799 code=0x7fc00000 [ 1139.134452][ T30] audit: type=1326 audit(1773513773.867:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2799 comm="syz.1.12742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52a539c799 code=0x7fc00000 [ 1139.173211][ T2793] loop4: detected capacity change from 0 to 32768 [ 1139.221827][ T2793] ocfs2: Slot 0 on device (7,4) was already allocated to this node! [ 1139.252410][ T5823] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1139.274358][ T2793] JBD2: Ignoring recovery information on journal [ 1139.365946][ T30] audit: type=1326 audit(1773513773.867:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2799 comm="syz.1.12742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52a539c799 code=0x7fc00000 [ 1139.471655][ T30] audit: type=1326 audit(1773513773.867:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2799 comm="syz.1.12742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52a539c799 code=0x7fc00000 [ 1139.505442][ T2793] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 1139.621826][ T30] audit: type=1326 audit(1773513773.867:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2799 comm="syz.1.12742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52a539c799 code=0x7fc00000 [ 1139.811640][ T2871] tipc: Started in network mode [ 1139.873404][ T2871] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 1139.899004][ T5821] ocfs2: Unmounting device (7,4) on (node local) [ 1139.917393][ T2871] tipc: Enabling of bearer rejected, failed to enable media [ 1140.231569][ T2885] loop2: detected capacity change from 0 to 1024 [ 1140.290190][ T2885] EXT4-fs: Ignoring removed orlov option [ 1140.457972][ T2885] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1140.471180][ T2889] loop4: detected capacity change from 0 to 4096 [ 1140.636549][ T2906] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1140.667768][ T2899] loop1: detected capacity change from 0 to 2048 [ 1140.707652][ T2899] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1140.738838][ T2889] NILFS (loop4): nilfs_sufile_do_free: segment 9 is already clean [ 1140.746230][ T2899] NILFS (loop1): mounting unchecked fs [ 1140.752555][ T5823] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1140.787305][ T2889] NILFS (loop4): nilfs_sufile_do_free: segment 6 is already clean [ 1140.840688][ T2899] NILFS (loop1): recovery complete [ 1140.894765][ T2914] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1140.978106][ T2916] loop6: detected capacity change from 0 to 1024 [ 1141.050976][ T2920] loop5: detected capacity change from 0 to 2048 [ 1141.060485][ T2916] EXT4-fs: Ignoring removed orlov option [ 1141.127787][ T2916] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1141.221958][ T2925] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1141.271407][ T2920] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 1141.273217][ T2930] loop4: detected capacity change from 0 to 256 [ 1141.334445][ T2930] exfat: Deprecated parameter 'namecase' [ 1141.353520][ T2920] Remounting filesystem read-only [ 1141.451446][ T2930] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 1141.557206][ T2937] netlink: 'syz.1.12792': attribute type 10 has an invalid length. [ 1141.645254][T14929] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1141.745148][ T2940] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12793'. [ 1142.276556][ T2961] loop2: detected capacity change from 0 to 256 [ 1142.341050][ T2961] FAT-fs (loop2): Directory bread(block 64) failed [ 1142.347704][ T2961] FAT-fs (loop2): Directory bread(block 65) failed [ 1142.380336][ T2961] FAT-fs (loop2): Directory bread(block 66) failed [ 1142.426360][ T2961] FAT-fs (loop2): Directory bread(block 67) failed [ 1142.433426][ T2961] FAT-fs (loop2): Directory bread(block 68) failed [ 1142.452961][ T2966] comedi comedi3: pcl818: I/O port conflict (0x4f23,16) [ 1142.476236][ T2961] FAT-fs (loop2): Directory bread(block 69) failed [ 1142.508780][ T2961] FAT-fs (loop2): Directory bread(block 70) failed [ 1142.530494][ T2961] FAT-fs (loop2): Directory bread(block 71) failed [ 1142.537239][ T2961] FAT-fs (loop2): Directory bread(block 72) failed [ 1142.597055][ T2961] FAT-fs (loop2): Directory bread(block 73) failed [ 1142.904871][ T6017] usb 6-1: new high-speed USB device number 121 using dummy_hcd [ 1142.979518][ T5921] kernel read not supported for file /video9 (pid: 5921 comm: kworker/1:4) [ 1143.087673][ T6017] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1143.140129][ T6017] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1143.150209][ T6017] usb 6-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 1143.210020][ T6017] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1143.244309][ T2995] loop4: detected capacity change from 0 to 256 [ 1143.260629][ T6017] usb 6-1: config 0 descriptor?? [ 1143.354737][ T2995] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66dc59, utbl_chksum : 0xe619d30d) [ 1143.453303][ T2995] exFAT-fs (loop4): error, data valid size is invalid(-281474976706560) [ 1143.510496][ T2995] exFAT-fs (loop4): error, data valid size is invalid(-281474976706560) [ 1143.515933][ T3002] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12823'. [ 1143.723013][ T6017] holtek_kbd 0003:04D9:A055.0001: unknown main item tag 0x0 [ 1143.763963][ T6017] holtek_kbd 0003:04D9:A055.0001: unknown main item tag 0x0 [ 1143.788899][ T6017] holtek_kbd 0003:04D9:A055.0001: unknown main item tag 0x0 [ 1143.833915][ T6017] holtek_kbd 0003:04D9:A055.0001: unknown main item tag 0x0 [ 1143.849809][ T6017] holtek_kbd 0003:04D9:A055.0001: unknown main item tag 0x0 [ 1143.890780][ T6017] holtek_kbd 0003:04D9:A055.0001: unknown main item tag 0x0 [ 1143.935457][ T6017] holtek_kbd 0003:04D9:A055.0001: unknown main item tag 0x0 [ 1143.975592][ T3012] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1143.985851][ T6017] holtek_kbd 0003:04D9:A055.0001: hidraw0: USB HID v10.00 Device [HID 04d9:a055] on usb-dummy_hcd.5-1/input0 [ 1144.026049][ T6017] usb 6-1: USB disconnect, device number 121 [ 1144.097786][ T3012] EXT4-fs error (device loop1): ext4_ext_precache:631: inode #2: comm syz.1.12828: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 1144.291030][ T5836] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1144.322315][ T3031] set_capacity_and_notify: 1 callbacks suppressed [ 1144.322338][ T3031] loop0: detected capacity change from 0 to 256 [ 1144.359383][ T3020] fido_id[3020]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1144.359981][ T3031] exfat: Deprecated parameter 'utf8' [ 1144.395145][ T3033] loop4: detected capacity change from 0 to 1024 [ 1144.412410][ T3031] exfat: Deprecated parameter 'namecase' [ 1144.459981][ T3031] exfat: Deprecated parameter 'namecase' [ 1144.500170][ T3036] hfsplus: inconsistency in B*Tree (1,0,1,0,2) [ 1144.565965][ T3031] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x200001de, utbl_chksum : 0xe619d30d) [ 1145.135420][ T3053] netlink: 'syz.4.12843': attribute type 2 has an invalid length. [ 1146.270782][ T3091] netlink: 40 bytes leftover after parsing attributes in process `syz.6.12862'. [ 1146.380780][ T3093] loop0: detected capacity change from 0 to 512 [ 1146.452913][ T3093] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1146.464121][ T3095] loop1: detected capacity change from 0 to 4096 [ 1146.495520][ T3097] loop6: detected capacity change from 0 to 256 [ 1146.519882][ T3093] EXT4-fs (loop0): 1 truncate cleaned up [ 1146.527536][ T3093] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1146.625543][ T3101] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1146.808459][ T3082] loop4: detected capacity change from 0 to 32768 [ 1146.836904][ T3082] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.12858 (3082) [ 1146.855268][ T5830] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1146.876328][ T3103] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 1146.980935][ T3082] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1147.051297][ T3082] BTRFS info (device loop4): using sha256 checksum algorithm [ 1147.291911][ T3082] BTRFS info (device loop4): enabling ssd optimizations [ 1147.351914][ T3082] BTRFS info (device loop4): turning on async discard [ 1147.400310][ T3082] BTRFS info (device loop4): enabling free space tree [ 1147.630321][ T5821] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1147.702681][ T3143] loop6: detected capacity change from 0 to 16 [ 1147.791853][ T3143] erofs (device loop6): mounted with root inode @ nid 36. [ 1147.919912][ T3143] erofs (device loop6): invalid de[0].nameoff 0 @ nid 36 [ 1148.108109][ T3152] xt_policy: too many policy elements [ 1148.299722][ T3112] loop0: detected capacity change from 0 to 32768 [ 1148.443519][ T3112] ERROR: (device loop0): diAllocAG: free inode not found in summary map [ 1148.443519][ T3112] [ 1148.510860][ T3112] ERROR: (device loop0): remounting filesystem as read-only [ 1148.543276][ T3112] ialloc: diAlloc returned -5! [ 1149.574801][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 1149.574825][ T30] audit: type=1326 audit(1773513783.978:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3198 comm="syz.1.12901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52a539c799 code=0x7ffc0000 [ 1149.711791][ T3203] loop4: detected capacity change from 0 to 64 [ 1149.730107][ T30] audit: type=1326 audit(1773513783.978:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3198 comm="syz.1.12901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52a539c799 code=0x7ffc0000 [ 1149.792504][ T3206] Bluetooth: MGMT ver 1.23 [ 1149.840035][ T30] audit: type=1326 audit(1773513784.006:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3198 comm="syz.1.12901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52a539c799 code=0x7ffc0000 [ 1149.902718][ T3209] netlink: 'syz.1.12906': attribute type 1 has an invalid length. [ 1149.973490][ T30] audit: type=1326 audit(1773513784.006:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3198 comm="syz.1.12901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52a539c799 code=0x7ffc0000 [ 1150.058890][ T30] audit: type=1326 audit(1773513784.034:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3198 comm="syz.1.12901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f52a539c799 code=0x7ffc0000 [ 1150.145122][ T3172] loop5: detected capacity change from 0 to 32768 [ 1150.162086][ T30] audit: type=1326 audit(1773513784.034:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3198 comm="syz.1.12901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52a539c799 code=0x7ffc0000 [ 1150.197464][ T3215] netlink: 32 bytes leftover after parsing attributes in process `syz.4.12908'. [ 1150.217176][ T30] audit: type=1326 audit(1773513784.034:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3198 comm="syz.1.12901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52a539c799 code=0x7ffc0000 [ 1150.241463][ T30] audit: type=1326 audit(1773513784.034:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3198 comm="syz.1.12901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52a539c799 code=0x7ffc0000 [ 1150.313331][ T30] audit: type=1326 audit(1773513784.034:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3198 comm="syz.1.12901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52a539c799 code=0x7ffc0000 [ 1150.337838][ T30] audit: type=1326 audit(1773513784.044:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3198 comm="syz.1.12901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=442 compat=0 ip=0x7f52a539c799 code=0x7ffc0000 [ 1150.339744][ T3181] loop6: detected capacity change from 0 to 32768 [ 1150.386275][ T3217] loop1: detected capacity change from 0 to 4096 [ 1150.397822][ T3172] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1150.442610][ T3181] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.12894 (3181) [ 1150.490328][ T3230] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1150.591229][ T3172] XFS (loop5): Ending clean mount [ 1150.606547][ T3181] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1150.638583][ T3172] XFS (loop5): Quotacheck needed: Please wait. [ 1150.705455][ T3181] BTRFS info (device loop6): using sha256 checksum algorithm [ 1150.899659][ T3172] XFS (loop5): Quotacheck: Done. [ 1150.979532][ T3181] BTRFS info (device loop6): rebuilding free space tree [ 1151.101023][ T3181] BTRFS info (device loop6): enabling ssd optimizations [ 1151.126138][ T3181] BTRFS info (device loop6): using spread ssd allocation scheme [ 1151.134154][ T3181] BTRFS info (device loop6): turning on async discard [ 1151.191114][ T3181] BTRFS info (device loop6): enabling free space tree [ 1151.197962][ T3181] BTRFS info (device loop6): force clearing of disk cache [ 1151.198625][ T5827] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1151.220700][ T3243] loop4: detected capacity change from 0 to 8192 [ 1151.554798][ T24] kernel read not supported for file /4427/attr/keycreate (pid: 24 comm: kworker/1:0) [ 1151.569077][T14929] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1152.098545][ T5999] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 1152.151153][ T3281] autofs: Bad value for 'fd' [ 1152.345786][ T5999] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1152.353866][ T5999] usb 2-1: config 0 has no interface number 0 [ 1152.409291][ T5999] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1152.451355][ T5999] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1152.503842][ T5999] usb 2-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 1152.526770][ T5999] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1152.572918][ T5999] usb 2-1: config 0 descriptor?? [ 1152.675840][ T5983] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 1152.849124][ T5983] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1152.879764][ T5983] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1152.932821][ T5983] usb 1-1: config 0 descriptor?? [ 1152.947365][ T5983] cp210x 1-1:0.0: cp210x converter detected [ 1153.025519][ T5999] prodikeys 0003:041E:2801.0002: item fetching failed at offset 3/7 [ 1153.060207][ T5999] prodikeys 0003:041E:2801.0002: hid parse failed [ 1153.081156][ T5999] prodikeys 0003:041E:2801.0002: probe with driver prodikeys failed with error -22 [ 1153.165892][ T3292] loop2: detected capacity change from 0 to 32768 [ 1153.181138][ T3287] loop5: detected capacity change from 0 to 32768 [ 1153.195268][ T3292] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.12932 (3292) [ 1153.250594][ T24] usb 2-1: USB disconnect, device number 105 [ 1153.264033][ T3287] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 1153.282961][ T3292] BTRFS info (device loop2 state S): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1153.310061][ T3292] BTRFS info (device loop2 state S): using crc32c checksum algorithm [ 1153.379586][ T3289] loop6: detected capacity change from 0 to 32768 [ 1153.422975][ T36] BTRFS warning (device loop2 state ES): checksum verify failed on logical 1052672 mirror 1 wanted 0x37e030f7 found 0xf6479a7e level 0, ignored [ 1153.459448][ T36] BTRFS warning (device loop2 state ES): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0xbeadaddc level 0, ignored [ 1153.467209][ T3289] debugfs: 'B1DE653C5FFC4D88B33B244AAB9EB3E9' already exists in 'ocfs2' [ 1153.545024][ T36] BTRFS warning (device loop2 state ES): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0x32c165c1 level 0, ignored [ 1153.606038][ T5983] cp210x 1-1:0.0: failed to get vendor val 0x3711 size 2: -71 [ 1153.613575][ T5983] cp210x 1-1:0.0: GPIO initialisation failed: -71 [ 1153.622953][ T3289] JBD2: Ignoring recovery information on journal [ 1153.646535][ T3292] BTRFS error (device loop2 state ECS): logical 6881280 len 1638400 found bg but no related chunk [ 1153.703456][ T5983] usb 1-1: cp210x converter now attached to ttyUSB0 [ 1153.733777][ T3292] BTRFS info (device loop2 state ECS): enabling ssd optimizations [ 1153.765846][ T5983] usb 1-1: USB disconnect, device number 113 [ 1153.774628][ T3289] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 1153.788401][ T3292] BTRFS info (device loop2 state ECS): disabling log replay at mount time [ 1153.796942][ T3292] BTRFS info (device loop2 state ECS): enabling free space tree [ 1153.828642][ T3292] BTRFS info (device loop2 state ECS): ignoring bad roots [ 1153.836377][ T3292] BTRFS info (device loop2 state ECS): ignoring data csums [ 1153.847687][ T5827] ocfs2: Unmounting device (7,5) on (node local) [ 1153.854282][ T5983] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1153.893714][ T5983] cp210x 1-1:0.0: device disconnected [ 1153.910736][ T3292] BTRFS info (device loop2 state ECS): ignoring meta csums [ 1153.965649][ T3292] BTRFS info (device loop2 state ECS): ignoring unknown super block flags [ 1154.032907][ T36] BTRFS warning (device loop2 state ECS): checksum verify failed on logical 5308416 mirror 1 wanted 0xe1d58233 found 0x0e76b713 level 0, ignored [ 1154.104612][ T3328] loop1: detected capacity change from 0 to 128 [ 1154.216786][ T3328] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 1154.322302][ T3328] System zones: 1-3, 19-19, 35-36 [ 1154.359311][ T5823] BTRFS info (device loop2 state ECS): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1154.433980][T14929] ocfs2: Unmounting device (7,6) on (node local) [ 1154.440511][ T3336] loop0: detected capacity change from 0 to 128 [ 1154.447949][ T3328] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 1154.469026][ T3328] ext4 filesystem being mounted at /2208/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1154.524866][ T3336] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1154.625979][ T3336] ext4 filesystem being mounted at /2129/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1154.820993][ T5836] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1154.835379][ T3341] netlink: 60 bytes leftover after parsing attributes in process `syz.6.12945'. [ 1154.907422][ T5830] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1154.946966][ T3344] netlink: 60 bytes leftover after parsing attributes in process `syz.6.12945'. [ 1155.097190][ T3351] loop1: detected capacity change from 0 to 256 [ 1155.173411][ T3351] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xf3da6b1f, utbl_chksum : 0xe619d30d) [ 1155.250790][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 1155.250815][ T30] audit: type=1800 audit(1773513789.282:688): pid=3351 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.12949" name="bus" dev="loop1" ino=1048756 res=0 errno=0 [ 1155.574051][ T3368] loop1: detected capacity change from 0 to 512 [ 1155.661957][ T3368] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1155.776088][ T6113] udevd[6113]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 1155.788093][ T3368] ext4 filesystem being mounted at /2210/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1155.868191][ T3368] EXT4-fs error (device loop1): ext4_resize_begin:60: comm syz.1.12957: resize_inode disabled but reserved GDT blocks non-zero [ 1156.023553][ T6113] udevd[6113]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 1156.089826][ T6065] udevd[6065]: symlink '../../loop2' '/dev/disk/by-diskseq/3130.tmp-b7:2' failed: Read-only file system [ 1156.173199][ T5836] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1156.213936][ T6113] udevd[6113]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 1156.297481][ T6065] udevd[6065]: symlink '../../loop2' '/dev/disk/by-diskseq/3130.tmp-b7:2' failed: Read-only file system [ 1156.358619][ T6113] udevd[6113]: symlink '../../loop1' '/dev/disk/by-diskseq/3129.tmp-b7:1' failed: Read-only file system [ 1156.421520][ T6065] udevd[6065]: symlink '../../loop1' '/dev/disk/by-diskseq/3129.tmp-b7:1' failed: Read-only file system [ 1156.444547][ T6065] udevd[6065]: symlink '../../loop1' '/dev/disk/by-diskseq/3129.tmp-b7:1' failed: Read-only file system [ 1156.597518][ T3400] loop1: detected capacity change from 0 to 4096 [ 1156.625158][ T3410] loop0: detected capacity change from 0 to 512 [ 1156.632452][ T3400] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1156.662986][ T3410] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1156.674954][ T3400] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 4096) [ 1156.769673][ T3410] EXT4-fs (loop0): 1 truncate cleaned up [ 1156.786910][ T3416] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1156.818345][ T3410] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1156.867542][ T3410] EXT4-fs warning (device loop0): ext4_group_extend:1885: will only finish group (8193 blocks, 7937 new) [ 1156.906662][ T5893] udevd[5893]: symlink '../../loop0' '/dev/disk/by-diskseq/3133.tmp-b7:0' failed: Read-only file system [ 1156.931564][ T3410] EXT4-fs warning (device loop0): ext4_group_extend:1890: can't read last block, resize aborted [ 1156.994225][ T5893] udevd[5893]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 1157.178750][ T5830] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1157.245964][ T3424] tipc: Started in network mode [ 1157.250923][ T3424] tipc: Node identity fe80000000000000000000000000002, cluster identity 4711 [ 1157.301434][ T3428] loop1: detected capacity change from 0 to 64 [ 1157.316660][ T3424] tipc: Enabling of bearer rejected, failed to enable media [ 1157.426139][ T3428] syz.1.12978: attempt to access beyond end of device [ 1157.426139][ T3428] loop1: rw=2049, sector=4207, nr_sectors = 88 limit=64 [ 1157.627770][T17170] kworker/u8:12: attempt to access beyond end of device [ 1157.627770][T17170] loop1: rw=8388609, sector=4172, nr_sectors = 1 limit=64 [ 1157.685368][T17170] Buffer I/O error on dev loop1, logical block 4172, lost async page write [ 1157.697763][ T3404] loop2: detected capacity change from 0 to 40427 [ 1157.708598][T17170] kworker/u8:12: attempt to access beyond end of device [ 1157.708598][T17170] loop1: rw=1, sector=4173, nr_sectors = 16 limit=64 [ 1157.743272][T17170] kworker/u8:12: attempt to access beyond end of device [ 1157.743272][T17170] loop1: rw=8388609, sector=4189, nr_sectors = 1 limit=64 [ 1157.762347][ T3404] F2FS-fs (loop2): build fault injection rate: 174 [ 1157.779829][ T3404] F2FS-fs (loop2): build fault injection type: 0x3bfe8c [ 1157.801616][T17170] Buffer I/O error on dev loop1, logical block 4189, lost async page write [ 1157.824565][ T3404] F2FS-fs (loop2): invalid crc value [ 1157.852948][T17170] kworker/u8:12: attempt to access beyond end of device [ 1157.852948][T17170] loop1: rw=8388609, sector=4190, nr_sectors = 1 limit=64 [ 1157.892762][T17170] Buffer I/O error on dev loop1, logical block 4190, lost async page write [ 1157.935612][T17170] kworker/u8:12: attempt to access beyond end of device [ 1157.935612][T17170] loop1: rw=8388609, sector=4191, nr_sectors = 1 limit=64 [ 1157.961655][T17170] Buffer I/O error on dev loop1, logical block 4191, lost async page write [ 1157.978815][T17170] kworker/u8:12: attempt to access beyond end of device [ 1157.978815][T17170] loop1: rw=8388609, sector=4192, nr_sectors = 1 limit=64 [ 1158.044794][T17170] Buffer I/O error on dev loop1, logical block 4192, lost async page write [ 1158.092491][T17170] kworker/u8:12: attempt to access beyond end of device [ 1158.092491][T17170] loop1: rw=8388609, sector=4193, nr_sectors = 1 limit=64 [ 1158.164258][T17170] Buffer I/O error on dev loop1, logical block 4193, lost async page write [ 1158.200229][T17170] kworker/u8:12: attempt to access beyond end of device [ 1158.200229][T17170] loop1: rw=8388609, sector=4196, nr_sectors = 1 limit=64 [ 1158.220813][ T3404] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1158.240773][T17170] Buffer I/O error on dev loop1, logical block 4196, lost async page write [ 1158.259852][T17170] kworker/u8:12: attempt to access beyond end of device [ 1158.259852][T17170] loop1: rw=8388609, sector=4197, nr_sectors = 1 limit=64 [ 1158.302301][ T3404] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1158.331111][T17170] Buffer I/O error on dev loop1, logical block 4197, lost async page write [ 1158.383420][ T30] audit: type=1326 audit(1773513792.210:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3459 comm="syz.5.12995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e0039c799 code=0x7ffc0000 [ 1158.427402][T17170] Buffer I/O error on dev loop1, logical block 4198, lost async page write [ 1158.458394][ T30] audit: type=1326 audit(1773513792.219:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3459 comm="syz.5.12995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e0039c799 code=0x7ffc0000 [ 1158.486732][ T30] audit: type=1326 audit(1773513792.229:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3459 comm="syz.5.12995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f8e0039c799 code=0x7ffc0000 [ 1158.507978][ T3455] loop0: detected capacity change from 0 to 4096 [ 1158.510301][ T30] audit: type=1326 audit(1773513792.229:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3459 comm="syz.5.12995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e0039c799 code=0x7ffc0000 [ 1158.538686][ T30] audit: type=1326 audit(1773513792.229:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3459 comm="syz.5.12995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e0039c799 code=0x7ffc0000 [ 1158.562038][ T30] audit: type=1326 audit(1773513792.229:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3459 comm="syz.5.12995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=197 compat=0 ip=0x7f8e0039c799 code=0x7ffc0000 [ 1158.610818][ T3455] ntfs3(loop0): Different NTFS sector size (2048) and media sector size (512). [ 1158.657458][ T30] audit: type=1326 audit(1773513792.229:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3459 comm="syz.5.12995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e0039c799 code=0x7ffc0000 [ 1158.734607][ T30] audit: type=1326 audit(1773513792.229:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3459 comm="syz.5.12995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e0039c799 code=0x7ffc0000 [ 1159.096604][ T30] audit: type=1800 audit(1773513792.874:697): pid=3455 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.12992" name="file1" dev="loop0" ino=30 res=0 errno=0 [ 1159.133319][ T3455] Invalid ELF header len 10 [ 1159.470856][ T3483] loop5: detected capacity change from 0 to 4096 [ 1159.517007][ T3483] ntfs3(loop5): Different NTFS sector size (2048) and media sector size (512). [ 1159.649016][ T3483] ntfs3(loop5): Failed to initialize $Extend/$ObjId. [ 1159.747298][ T3483] ntfs3(loop5): ino=1e, "file1" The size of extended attributes must not exceed 64KiB [ 1160.063120][ T5983] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 1160.196932][ T3512] tipc: Started in network mode [ 1160.230921][ T3512] tipc: Node identity ff010000000000000000000000000001, cluster identity 4711 [ 1160.255418][ T5983] usb 2-1: Using ep0 maxpacket: 16 [ 1160.260248][ T3512] tipc: Enabling of bearer rejected, failed to enable media [ 1160.270621][ T5983] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1160.302560][ T5983] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1160.312827][ T1204] usb 6-1: new high-speed USB device number 122 using dummy_hcd [ 1160.338325][ T5983] usb 2-1: New USB device found, idVendor=1532, idProduct=011b, bcdDevice= 0.00 [ 1160.362854][ T5983] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1160.385330][ T5983] usb 2-1: config 0 descriptor?? [ 1160.469703][ T5999] usb 7-1: new full-speed USB device number 29 using dummy_hcd [ 1160.514461][ T1204] usb 6-1: Using ep0 maxpacket: 32 [ 1160.522499][ T1204] usb 6-1: config index 0 descriptor too short (expected 164, got 36) [ 1160.541125][ T3524] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13025'. [ 1160.543259][ T1204] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1160.568526][ T1204] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1160.579849][ T1204] usb 6-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 1160.589897][ T1204] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1160.605926][ T1204] usb 6-1: config 0 descriptor?? [ 1160.647501][ T5999] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1160.659574][ T5999] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 1160.679358][ T5999] usb 7-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 1160.692691][ T5999] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1160.702167][ T5999] usb 7-1: Product: syz [ 1160.707373][ T5999] usb 7-1: Manufacturer: syz [ 1160.714508][ T5999] usb 7-1: SerialNumber: syz [ 1160.738308][ T5999] usb 7-1: config 0 descriptor?? [ 1160.744662][ T3516] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 1160.761807][ T3529] loop2: detected capacity change from 0 to 4096 [ 1160.796663][ T3529] ntfs3(loop2): Different NTFS sector size (2048) and media sector size (512). [ 1160.855620][ T5983] razer 0003:1532:011B.0003: unbalanced collection at end of report description [ 1160.923282][ T5983] razer 0003:1532:011B.0003: probe with driver razer failed with error -22 [ 1160.983265][ T5999] powermate: unknown product id 0240 [ 1161.011311][ T5999] powermate: Expected payload of 3--6 bytes, found 64 bytes! [ 1161.060230][ T5999] input: Griffin SoundKnob as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input60 [ 1161.096414][ T1204] logitech 0003:046D:C29C.0004: hidraw0: USB HID v0.00 Device [HID 046d:c29c] on usb-dummy_hcd.5-1/input0 [ 1161.124457][ T6017] usb 2-1: USB disconnect, device number 106 [ 1161.215244][ T6113] udevd[6113]: symlink '../../loop2' '/dev/disk/by-diskseq/3144.tmp-b7:2' failed: Read-only file system [ 1161.290708][ T1204] logitech 0003:046D:C29C.0004: no inputs found [ 1161.309293][ T6068] udevd[6068]: symlink '../../loop0' '/dev/disk/by-diskseq/3141.tmp-b7:0' failed: Read-only file system [ 1161.329141][ T6113] udevd[6113]: symlink '../../loop2' '/dev/disk/by-diskseq/3144.tmp-b7:2' failed: Read-only file system [ 1161.384675][ T1204] usb 6-1: USB disconnect, device number 122 [ 1161.437014][ C0] powermate: config urb returned -71 [ 1161.442701][ C0] powermate: config urb returned -71 [ 1161.448211][ C0] powermate: config urb returned -71 [ 1161.459776][ T5983] usb 7-1: USB disconnect, device number 29 [ 1161.465777][ C0] powermate 7-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 1161.477673][ T6113] udevd[6113]: symlink '../../loop2' '/dev/disk/by-diskseq/3144.tmp-b7:2' failed: Read-only file system [ 1161.528440][ T3538] fido_id[3538]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1161.551014][ T3542] loop2: detected capacity change from 0 to 512 [ 1161.606384][ T3542] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1161.641563][ T3542] ext4 filesystem being mounted at /2210/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1161.717273][ T3542] EXT4-fs error (device loop2): ext4_search_dir:1474: inode #2: block 3: comm syz.2.13033: bad entry in directory: directory entry overrun - offset=16444, inode=113, rec_len=2048, size=2048 fake=0 [ 1161.757774][ T5893] udevd[5893]: symlink '../../loop2' '/dev/disk/by-diskseq/3146.tmp-b7:2' failed: Read-only file system [ 1161.798195][ T5893] udevd[5893]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 1161.821779][ T6065] udevd[6065]: symlink '../../loop1' '/dev/disk/by-diskseq/3139.tmp-b7:1' failed: Read-only file system [ 1161.947706][ T5823] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1161.979017][ T6065] udevd[6065]: symlink '../../loop5' '/dev/disk/by-diskseq/3143.tmp-b7:5' failed: Read-only file system [ 1162.000654][ T6113] udevd[6113]: symlink '../../loop2' '/dev/disk/by-diskseq/3146.tmp-b7:2' failed: Read-only file system [ 1162.055308][ T6113] udevd[6113]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 1162.103967][ T3551] sp0: Synchronizing with TNC [ 1162.208511][ T3556] loop1: detected capacity change from 0 to 512 [ 1162.301617][ T3556] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0007-000000000000 r/w without journal. Quota mode: writeback. [ 1162.333414][ T3540] loop0: detected capacity change from 0 to 32768 [ 1162.342094][ T3556] ext4 filesystem being mounted at /2219/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1162.679361][ T5836] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0007-000000000000. [ 1162.848090][ T3577] netlink: 104 bytes leftover after parsing attributes in process `syz.2.13048'. [ 1162.916714][ T3580] loop1: detected capacity change from 0 to 16 [ 1162.932253][ T3582] loop0: detected capacity change from 0 to 64 [ 1162.941170][ T3580] erofs (device loop1): mounted with root inode @ nid 36. [ 1162.984922][ T30] audit: type=1800 audit(1773513796.522:698): pid=3580 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.13046" name="file1" dev="loop1" ino=86 res=0 errno=0 [ 1163.111113][ T5983] usb 7-1: new full-speed USB device number 30 using dummy_hcd [ 1163.319959][ T5983] usb 7-1: config 0 has an invalid interface number: 102 but max is 8 [ 1163.354585][ T5983] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1163.389139][ T5983] usb 7-1: config 0 has no interface number 0 [ 1163.398523][ T5983] usb 7-1: too many endpoints for config 0 interface 102 altsetting 102: 102, using maximum allowed: 30 [ 1163.438811][ T3596] loop2: detected capacity change from 0 to 512 [ 1163.447407][ T5983] usb 7-1: config 0 interface 102 altsetting 102 has 0 endpoint descriptors, different from the interface descriptor's value: 102 [ 1163.506776][ T3596] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1163.527808][ T5983] usb 7-1: config 0 interface 102 has no altsetting 0 [ 1163.542586][ T3596] ext4 filesystem being mounted at /2215/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1163.560207][ T5983] usb 7-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 1163.582269][ T5983] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1163.596898][ T5983] usb 7-1: Product: syz [ 1163.601123][ T5983] usb 7-1: Manufacturer: syz [ 1163.606283][ T5983] usb 7-1: SerialNumber: syz [ 1163.615027][ T5983] usb 7-1: config 0 descriptor?? [ 1163.891260][ T5983] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 1163.901888][ T5823] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1163.921897][ T5983] pctv452e: pctv452e_power_ctrl: 1 [ 1163.921897][ T5983] [ 1163.961294][ T5983] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 1163.961294][ T5983] [ 1163.990839][ T5983] dvb-usb: bulk message failed: -22 (5/0) [ 1164.019633][ T5983] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1164.077217][ T5983] dvb-usb: Technotrend TT Connect S2-3600 error while loading driver (-19) [ 1164.136898][ T5983] usb 7-1: USB disconnect, device number 30 [ 1164.179346][ T3615] loop4: detected capacity change from 0 to 2048 [ 1164.206739][ T3615] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 1164.241044][ T30] audit: type=1400 audit(1773513797.701:699): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=3618 comm="syz.1.13067" [ 1164.246664][ T3615] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 1164.273679][ T3615] UDF-fs: Scanning with blocksize 512 failed [ 1164.286386][ T3615] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1164.327797][ T3621] loop0: detected capacity change from 0 to 16 [ 1164.374545][ T3621] erofs (device loop0): mounted with root inode @ nid 36. [ 1164.429857][ T30] audit: type=1800 audit(1773513797.878:700): pid=3615 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.13065" name="file2" dev="loop4" ino=839 res=0 errno=0 [ 1164.636639][ T3625] loop0: detected capacity change from 0 to 1024 [ 1164.726205][ T3625] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1164.847175][ T3627] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1164.904586][ T3625] EXT4-fs error (device loop0): ext4_generic_delete_entry:2666: inode #12: block 7: comm syz.0.13070: bad entry in directory: rec_len is smaller than minimal - offset=16, inode=14, rec_len=8, size=56 fake=0 [ 1165.034185][ T3625] EXT4-fs error (device loop0) in ext4_delete_inline_entry:1697: Corrupt filesystem [ 1165.223841][ T5830] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1165.368820][ T3642] sp0: Synchronizing with TNC [ 1165.593296][ T3651] exfat: Deprecated parameter 'namecase' [ 1165.599204][ T3651] exfat: Deprecated parameter 'namecase' [ 1165.611931][ T3649] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1165.662149][ T3651] exfat: Deprecated parameter 'utf8' [ 1165.685981][ T3655] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1165.706102][ T3651] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 1165.777700][ T3651] exFAT-fs (loop2): error, invalid access to FAT (entry 0x00000005) bogus content (0x02ffffff) [ 1165.837771][ T3651] exFAT-fs (loop2): Filesystem has been set read-only [ 1165.844833][ T3651] exFAT-fs (loop2): failed to count the number of clusters in root [ 1165.856953][ T3651] exFAT-fs (loop2): failed to recognize exfat type [ 1165.867402][ T3623] JBD2: Ignoring recovery information on journal [ 1165.985713][ T24] usb 7-1: new full-speed USB device number 31 using dummy_hcd [ 1166.089812][ T3623] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 1166.161642][ T3667] set_capacity_and_notify: 6 callbacks suppressed [ 1166.161666][ T3667] loop4: detected capacity change from 0 to 1024 [ 1166.181548][ T24] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1166.248502][ T24] usb 7-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1166.258570][ T3667] hfsplus: bad catalog entry type [ 1166.299107][ T24] usb 7-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1166.321631][ T30] audit: type=1804 audit(1773513799.637:701): pid=3623 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.13069" name="/newroot/2225/file1/file1" dev="loop1" ino=17058 res=1 errno=0 [ 1166.368285][ T24] usb 7-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1166.445837][ T24] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1166.467513][ T24] usb 7-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 1166.476905][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1166.492623][ T3671] loop0: detected capacity change from 0 to 1024 [ 1166.499443][T17170] hfsplus: b-tree write err: -5, ino 25 [ 1166.508879][T17170] hfsplus: b-tree write err: -5, ino 4 [ 1166.521258][ T24] usb 7-1: config 0 descriptor?? [ 1166.559989][T17170] hfsplus: b-tree write err: -5, ino 2 [ 1166.563314][ T3671] EXT4-fs (loop0): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 1166.596324][ T5836] ocfs2: Unmounting device (7,1) on (node local) [ 1166.613698][ T3675] loop2: detected capacity change from 0 to 1024 [ 1166.632661][ T6065] udevd[6065]: symlink '../../loop1' '/dev/disk/by-diskseq/3171.tmp-b7:1' failed: Read-only file system [ 1166.646698][ T3675] EXT4-fs: Ignoring removed nobh option [ 1166.655863][ T6065] udevd[6065]: symlink '../../loop1' '/dev/disk/by-uuid/b1de653c-5ffc-4d88-b33b-244aab9eb3e9.tmp-b7:1' failed: Read-only file system [ 1166.675954][ T6113] udevd[6113]: symlink '../../loop0' '/dev/disk/by-diskseq/3176.tmp-b7:0' failed: Read-only file system [ 1166.677879][ T3671] EXT4-fs error (device loop0): ext4_map_blocks:776: inode #3: block 2: comm syz.0.13087: lblock 2 mapped to illegal pblock 2 (length 1) [ 1166.706918][ T6113] udevd[6113]: symlink '../../loop0' '/dev/disk/by-label/syzkal\xff\xff\xff\xff\xff\xff\xff\x7f.tmp-b7:0' failed: Read-only file system [ 1166.730649][ T6061] udevd[6061]: symlink '../../loop4' '/dev/disk/by-diskseq/3175.tmp-b7:4' failed: Read-only file system [ 1166.738838][ T3675] EXT4-fs: inline encryption not supported [ 1166.771403][ T3671] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1166.777163][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 1166.793080][ C0] EXT4-fs (loop0): initial error at time 1773513800: ext4_map_blocks:776: inode 3: block 2 [ 1166.803209][ C0] EXT4-fs (loop0): last error at time 1773513800: ext4_map_blocks:776: inode 3: block 2 [ 1166.813502][ T3671] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 1166.822694][ T3671] EXT4-fs error (device loop0): ext4_map_blocks:776: inode #3: block 48: comm syz.0.13087: lblock 0 mapped to illegal pblock 48 (length 1) [ 1166.838326][ T3671] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1166.841781][ T3671] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 1166.866084][ T3675] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1166.891555][ T3671] EXT4-fs error (device loop0): ext4_acquire_dquot:7001: comm syz.0.13087: Failed to acquire dquot type 0 [ 1166.943436][ T6113] udevd[6113]: symlink '../../loop4' '/dev/disk/by-diskseq/3175.tmp-b7:4' failed: Read-only file system [ 1166.960178][ T3671] loop0: lost filesystem error report for type 5 error -117 [ 1166.996704][ T6061] udevd[6061]: symlink '../../loop5' '/dev/disk/by-diskseq/3172.tmp-b7:5' failed: Read-only file system [ 1166.996992][ T24] corsair-psu 0003:1B1C:1C09.0005: unknown main item tag 0x0 [ 1167.025625][ T24] corsair-psu 0003:1B1C:1C09.0005: unknown main item tag 0x0 [ 1167.033321][ T24] corsair-psu 0003:1B1C:1C09.0005: unknown main item tag 0x0 [ 1167.041428][ T24] corsair-psu 0003:1B1C:1C09.0005: unknown main item tag 0x0 [ 1167.049155][ T24] corsair-psu 0003:1B1C:1C09.0005: unknown main item tag 0x0 [ 1167.058533][ T3671] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 1167.073322][ T3686] loop4: detected capacity change from 0 to 256 [ 1167.092605][ T3671] loop0: lost filesystem error report for type 5 error -117 [ 1167.094099][ T5893] udevd[5893]: symlink '../../loop2' '/dev/disk/by-diskseq/3178.tmp-b7:2' failed: Read-only file system [ 1167.097622][ T3671] EXT4-fs error (device loop0): ext4_evict_inode:255: inode #11: comm syz.0.13087: mark_inode_dirty error [ 1167.154310][ T5893] udevd[5893]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 1167.181691][ T3686] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe3865569, utbl_chksum : 0xe619d30d) [ 1167.203298][ T3671] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1167.206856][ T3671] EXT4-fs warning (device loop0): ext4_evict_inode:258: couldn't mark inode dirty (err -117) [ 1167.232339][ T24] corsair-psu 0003:1B1C:1C09.0005: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.6-1/input0 [ 1167.233455][ T3688] loop5: detected capacity change from 0 to 512 [ 1167.250585][ T6113] udevd[6113]: symlink '../../loop4' '/dev/disk/by-diskseq/3177.tmp-b7:4' failed: Read-only file system [ 1167.280135][ T3671] EXT4-fs (loop0): 1 orphan inode deleted [ 1167.312209][T15006] EXT4-fs error (device loop0): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 1167.339750][ T24] corsair-psu 0003:1B1C:1C09.0005: unable to initialize device (-38) [ 1167.343605][ T3688] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (47215!=33349) [ 1167.354427][T15006] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1167.369279][T15006] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 1167.388816][T15006] EXT4-fs error (device loop0): ext4_release_dquot:7037: comm kworker/u8:1: Failed to release dquot type 0 [ 1167.406533][T15006] loop0: lost filesystem error report for type 5 error -117 [ 1167.420777][ T3671] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1167.421561][ T24] corsair-psu 0003:1B1C:1C09.0005: probe with driver corsair-psu failed with error -38 [ 1167.442726][ T5823] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1167.455855][ T24] usb 7-1: USB disconnect, device number 31 [ 1167.524720][ T3688] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842e02c, mo2=0002] [ 1167.533316][ T3688] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1167.539998][ T3688] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.13094: bad orphan inode 3 [ 1167.550687][ T3688] loop5: lost filesystem error report for type 5 error -117 [ 1167.557054][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 1167.570977][ C1] EXT4-fs (loop5): initial error at time 1773513800: ext4_orphan_get:1417 [ 1167.579572][ C1] EXT4-fs (loop5): last error at time 1773513800: ext4_orphan_get:1417 [ 1167.666345][ T3688] EXT4-fs (loop5): Remounting filesystem read-only [ 1167.714230][ T3688] EXT4-fs (loop5): mounted filesystem ff0f0000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 1167.758360][ T3695] loop4: detected capacity change from 0 to 512 [ 1167.766329][ T3691] fido_id[3691]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 1167.824752][ T36] EXT4-fs error (device loop0): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 1167.855062][ T5830] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1167.856123][ T3695] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 1167.880355][ T3688] EXT4-fs warning (device loop5): dx_probe:861: inode #2: comm syz.5.13094: dx entry: limit 0 != root limit 125 [ 1167.892768][ T36] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1167.897739][ T36] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 1167.916601][ T36] EXT4-fs error (device loop0): ext4_release_dquot:7037: comm kworker/u8:2: Failed to release dquot type 0 [ 1167.928229][ T36] loop0: lost filesystem error report for type 5 error -117 [ 1167.942019][ T3688] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.13094: Corrupt directory, running e2fsck is recommended [ 1167.946777][ T5830] EXT4-fs error (device loop0): __ext4_get_inode_loc:4782: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 1167.954967][ T3695] ext4 filesystem being mounted at /2155/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1168.035494][ T5830] loop0: lost filesystem error report for type 5 error -117 [ 1168.035901][ T5830] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 1168.120549][ T5830] loop0: lost filesystem error report for type 5 error -117 [ 1168.123714][ T5830] EXT4-fs error (device loop0): ext4_quota_off:7285: inode #3: comm syz-executor: mark_inode_dirty error [ 1168.194495][ T5830] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1168.243030][ T3695] EXT4-fs warning (device loop4): ext4_group_add:1715: Can't resize non-sparse filesystem further [ 1168.273550][ T5827] EXT4-fs (loop5): unmounting filesystem ff0f0000-0000-0000-0000-000000000007. [ 1168.475148][ T5821] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 1168.701620][ T5999] usb 6-1: new full-speed USB device number 123 using dummy_hcd [ 1168.820321][ T3727] loop4: detected capacity change from 0 to 2048 [ 1168.871834][ T3731] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1168.874470][ T5999] usb 6-1: too many endpoints for config 0 interface 0 altsetting 2: 254, using maximum allowed: 30 [ 1168.928663][ T5999] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1168.964218][ T5999] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1168.991527][ T3730] loop6: detected capacity change from 0 to 4096 [ 1168.999687][ T5999] usb 6-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 1169.031000][ T5999] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1169.082765][ T3730] ntfs3(loop6): ino=b, mi_enum_attr [ 1169.092155][ T5999] usb 6-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 1169.096699][ T3730] ntfs3(loop6): Mark volume as dirty due to NTFS errors [ 1169.129049][ T5999] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1169.148242][ T3730] ntfs3(loop6): Failed to load $Extend (-22). [ 1169.167474][ T5999] usb 6-1: config 0 descriptor?? [ 1169.180291][ T3730] ntfs3(loop6): Failed to initialize $Extend. [ 1169.268805][ T3730] ntfs3(loop6): ino=21, "cgroup.stat" mmap(write) compressed not supported [ 1169.644010][ T5999] ryos 0003:1E7D:3138.0006: ignoring exceeding usage max [ 1169.665772][ T5999] ryos 0003:1E7D:3138.0006: unbalanced delimiter at end of report description [ 1169.683120][ T3749] loop6: detected capacity change from 0 to 2048 [ 1169.685233][ T5999] ryos 0003:1E7D:3138.0006: parse failed [ 1169.715386][ T5999] ryos 0003:1E7D:3138.0006: probe with driver ryos failed with error -22 [ 1169.726330][ T3749] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1169.780842][ T30] audit: type=1800 audit(1773513802.873:702): pid=3749 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.13119" name="file1" dev="loop6" ino=1415 res=0 errno=0 [ 1170.021821][ T5921] usb 6-1: USB disconnect, device number 123 [ 1170.080497][ T3760] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13126'. [ 1170.098826][ T3760] bond_slave_0: Caught tx_queue_len zero misconfig [ 1170.123115][ T24] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 1170.305177][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 1170.312587][ T24] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 1170.338108][ T24] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1170.358056][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1170.376015][ T24] usb 5-1: Product: syz [ 1170.387735][ T24] usb 5-1: Manufacturer: syz [ 1170.400848][ T24] usb 5-1: SerialNumber: syz [ 1170.418074][ T24] usb 5-1: config 0 descriptor?? [ 1170.436789][ T24] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1170.456137][ T24] usb 5-1: setting power ON [ 1170.461236][ T24] dvb-usb: bulk message failed: -22 (2/0) [ 1170.482209][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1170.507194][ T24] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1170.525571][ T24] usb 5-1: media controller created [ 1170.565368][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1170.617733][ T24] usb 5-1: selecting invalid altsetting 6 [ 1170.624281][ T24] usb 5-1: digital interface selection failed (-22) [ 1170.646924][ T24] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1170.666347][ T24] usb 5-1: setting power OFF [ 1170.683875][ T3750] loop2: detected capacity change from 0 to 40427 [ 1170.692584][ T24] dvb-usb: bulk message failed: -22 (2/0) [ 1170.702821][ T24] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1170.714638][ T3750] F2FS-fs: heap/no_heap options were deprecated [ 1170.721073][ T24] (NULL device *): no alternate interface [ 1170.727463][ T3750] F2FS-fs (loop2): build fault injection rate: 16 [ 1170.749950][ T3750] F2FS-fs (loop2): build fault injection type: 0x3bfe8c [ 1170.772417][ T3750] F2FS-fs (loop2): invalid crc value [ 1170.810186][ T24] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1170.821518][ T3750] F2FS-fs (loop2): inject page alloc in f2fs_grab_cache_folio of build_sit_entries+0x26c/0x1f10 [ 1170.847223][ C0] F2FS-fs (loop2): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60 [ 1170.870282][ T24] usb 5-1: USB disconnect, device number 4 [ 1171.017015][ T3750] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1171.060212][ T3750] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1171.130437][ T3750] bio_check_eod: 2 callbacks suppressed [ 1171.130460][ T3750] syz.2.13121: attempt to access beyond end of device [ 1171.130460][ T3750] loop2: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 1171.183516][ T3750] F2FS-fs (loop2): inject read IO error in f2fs_read_end_io of f2fs_get_read_data_folio+0x9f5/0xb70 [ 1171.438581][ T3792] ptrace attach of "./syz-executor exec"[5830] was attempted by ""[3792] [ 1171.488155][ C1] F2FS-fs (loop2): inject write IO error in f2fs_write_end_io of blk_update_request+0x57e/0xe60 [ 1171.499002][ C1] CPU: 1 UID: 0 PID: 5804 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 1171.499044][ C1] Tainted: [L]=SOFTLOCKUP [ 1171.499054][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1171.499071][ C1] Call Trace: [ 1171.499083][ C1] [ 1171.499094][ C1] dump_stack_lvl+0xe8/0x150 [ 1171.499140][ C1] f2fs_handle_critical_error+0x37c/0x540 [ 1171.499183][ C1] f2fs_write_end_io+0xcdb/0xff0 [ 1171.499224][ C1] ? blk_update_request+0x57e/0xe60 [ 1171.499267][ C1] blk_update_request+0x57e/0xe60 [ 1171.499308][ C1] blk_mq_end_request+0x3e/0x70 [ 1171.499334][ C1] blk_done_softirq+0x10a/0x160 [ 1171.499376][ C1] handle_softirqs+0x22a/0x870 [ 1171.499418][ C1] ? do_softirq+0x76/0xd0 [ 1171.499459][ C1] ? tcp_sendmsg+0x21/0x50 [ 1171.499493][ C1] do_softirq+0x76/0xd0 [ 1171.499526][ C1] [ 1171.499536][ C1] [ 1171.499546][ C1] __local_bh_enable_ip+0xf8/0x130 [ 1171.499581][ C1] tcp_sendmsg+0x21/0x50 [ 1171.499612][ C1] ? __pfx_inet_sendmsg+0x10/0x10 [ 1171.499642][ C1] sock_write_iter+0x406/0x4f0 [ 1171.499684][ C1] ? __pfx_sock_write_iter+0x10/0x10 [ 1171.499730][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1171.499763][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1171.499794][ C1] ? security_file_permission+0x75/0x260 [ 1171.499837][ C1] vfs_write+0x61d/0xb90 [ 1171.499877][ C1] ? __pfx_vfs_write+0x10/0x10 [ 1171.499917][ C1] ? __pfx_set_user_sigmask+0x10/0x10 [ 1171.499966][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1171.500002][ C1] ksys_write+0x150/0x270 [ 1171.500033][ C1] ? __pfx_ksys_write+0x10/0x10 [ 1171.500076][ C1] do_syscall_64+0x14d/0xf80 [ 1171.500107][ C1] ? trace_irq_disable+0x3b/0x150 [ 1171.500146][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1171.500180][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1171.500206][ C1] RIP: 0033:0x7fab7a957917 [ 1171.500231][ C1] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1171.500253][ C1] RSP: 002b:00007ffefbacbef0 EFLAGS: 00000202 ORIG_RAX: 0000000000000001 [ 1171.500281][ C1] RAX: ffffffffffffffda RBX: 000055558a11d540 RCX: 00007fab7a957917 [ 1171.500301][ C1] RDX: 0000000000004d98 RSI: 00007fab77bfb268 RDI: 0000000000000003 [ 1171.500318][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1171.500334][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000004d98 [ 1171.500351][ C1] R13: 000055558a132090 R14: 00007ffefbacc490 R15: 00007fab77bfb268 [ 1171.500390][ C1] [ 1171.500401][ C1] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 1171.534759][ T3797] vcan1: entered promiscuous mode [ 1171.537309][ C1] CPU: 1 UID: 0 PID: 5804 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 1171.537345][ C1] Tainted: [L]=SOFTLOCKUP [ 1171.537355][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1171.537370][ C1] Call Trace: [ 1171.537382][ C1] [ 1171.537393][ C1] dump_stack_lvl+0xe8/0x150 [ 1171.537438][ C1] f2fs_handle_critical_error+0x37c/0x540 [ 1171.537481][ C1] f2fs_write_end_io+0xcdb/0xff0 [ 1171.537540][ C1] blk_update_request+0x57e/0xe60 [ 1171.537583][ C1] blk_mq_end_request+0x3e/0x70 [ 1171.537610][ C1] blk_done_softirq+0x10a/0x160 [ 1171.537652][ C1] handle_softirqs+0x22a/0x870 [ 1171.537692][ C1] ? do_softirq+0x76/0xd0 [ 1171.537732][ C1] ? tcp_sendmsg+0x21/0x50 [ 1171.537765][ C1] do_softirq+0x76/0xd0 [ 1171.537798][ C1] [ 1171.537807][ C1] [ 1171.537817][ C1] __local_bh_enable_ip+0xf8/0x130 [ 1171.537852][ C1] tcp_sendmsg+0x21/0x50 [ 1171.537890][ C1] ? __pfx_inet_sendmsg+0x10/0x10 [ 1171.537919][ C1] sock_write_iter+0x406/0x4f0 [ 1171.537959][ C1] ? __pfx_sock_write_iter+0x10/0x10 [ 1171.538006][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1171.538036][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1171.538066][ C1] ? security_file_permission+0x75/0x260 [ 1171.538107][ C1] vfs_write+0x61d/0xb90 [ 1171.538146][ C1] ? __pfx_vfs_write+0x10/0x10 [ 1171.538178][ C1] ? __pfx_set_user_sigmask+0x10/0x10 [ 1171.538226][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1171.538262][ C1] ksys_write+0x150/0x270 [ 1171.538293][ C1] ? __pfx_ksys_write+0x10/0x10 [ 1171.538335][ C1] do_syscall_64+0x14d/0xf80 [ 1171.538365][ C1] ? trace_irq_disable+0x3b/0x150 [ 1171.538403][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1171.538436][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1171.538462][ C1] RIP: 0033:0x7fab7a957917 [ 1171.538486][ C1] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1171.538507][ C1] RSP: 002b:00007ffefbacbef0 EFLAGS: 00000202 ORIG_RAX: 0000000000000001 [ 1171.538534][ C1] RAX: ffffffffffffffda RBX: 000055558a11d540 RCX: 00007fab7a957917 [ 1171.538552][ C1] RDX: 0000000000004d98 RSI: 00007fab77bfb268 RDI: 0000000000000003 [ 1171.538569][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1171.538585][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000004d98 [ 1171.538601][ C1] R13: 000055558a132090 R14: 00007ffefbacc490 R15: 00007fab77bfb268 [ 1171.538639][ C1] [ 1171.538649][ C1] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 1171.934376][ T3799] netlink: 40 bytes leftover after parsing attributes in process `syz.6.13144'. [ 1171.938262][ C1] CPU: 1 UID: 0 PID: 5804 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 1171.938300][ C1] Tainted: [L]=SOFTLOCKUP [ 1171.938310][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1171.938328][ C1] Call Trace: [ 1171.938342][ C1] [ 1171.938355][ C1] dump_stack_lvl+0xe8/0x150 [ 1171.938402][ C1] f2fs_handle_critical_error+0x37c/0x540 [ 1171.938447][ C1] f2fs_write_end_io+0xcdb/0xff0 [ 1171.938509][ C1] blk_update_request+0x57e/0xe60 [ 1171.938554][ C1] blk_mq_end_request+0x3e/0x70 [ 1171.938581][ C1] blk_done_softirq+0x10a/0x160 [ 1171.938624][ C1] handle_softirqs+0x22a/0x870 [ 1171.938666][ C1] ? do_softirq+0x76/0xd0 [ 1171.938708][ C1] ? tcp_sendmsg+0x21/0x50 [ 1171.938742][ C1] do_softirq+0x76/0xd0 [ 1171.938776][ C1] [ 1171.938786][ C1] [ 1171.938797][ C1] __local_bh_enable_ip+0xf8/0x130 [ 1171.938833][ C1] tcp_sendmsg+0x21/0x50 [ 1171.938866][ C1] ? __pfx_inet_sendmsg+0x10/0x10 [ 1171.938897][ C1] sock_write_iter+0x406/0x4f0 [ 1171.938938][ C1] ? __pfx_sock_write_iter+0x10/0x10 [ 1171.938987][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1171.939020][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1171.939051][ C1] ? security_file_permission+0x75/0x260 [ 1171.939095][ C1] vfs_write+0x61d/0xb90 [ 1171.939138][ C1] ? __pfx_vfs_write+0x10/0x10 [ 1171.939170][ C1] ? __pfx_set_user_sigmask+0x10/0x10 [ 1171.939231][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1171.939267][ C1] ksys_write+0x150/0x270 [ 1171.939301][ C1] ? __pfx_ksys_write+0x10/0x10 [ 1171.939345][ C1] do_syscall_64+0x14d/0xf80 [ 1171.939379][ C1] ? trace_irq_disable+0x3b/0x150 [ 1171.939420][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1171.939454][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1171.939482][ C1] RIP: 0033:0x7fab7a957917 [ 1171.939510][ C1] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1171.939532][ C1] RSP: 002b:00007ffefbacbef0 EFLAGS: 00000202 ORIG_RAX: 0000000000000001 [ 1171.939560][ C1] RAX: ffffffffffffffda RBX: 000055558a11d540 RCX: 00007fab7a957917 [ 1171.939580][ C1] RDX: 0000000000004d98 RSI: 00007fab77bfb268 RDI: 0000000000000003 [ 1171.939597][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1171.939613][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000004d98 [ 1171.939630][ C1] R13: 000055558a132090 R14: 00007ffefbacc490 R15: 00007fab77bfb268 [ 1171.939670][ C1] [ 1171.939682][ C1] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 1172.311101][ C1] CPU: 1 UID: 0 PID: 5804 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 1172.311133][ C1] Tainted: [L]=SOFTLOCKUP [ 1172.311147][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1172.311161][ C1] Call Trace: [ 1172.311172][ C1] [ 1172.311182][ C1] dump_stack_lvl+0xe8/0x150 [ 1172.311220][ C1] f2fs_handle_critical_error+0x37c/0x540 [ 1172.311260][ C1] f2fs_write_end_io+0xcdb/0xff0 [ 1172.311328][ C1] blk_update_request+0x57e/0xe60 [ 1172.311364][ C1] blk_mq_end_request+0x3e/0x70 [ 1172.311385][ C1] blk_done_softirq+0x10a/0x160 [ 1172.311418][ C1] handle_softirqs+0x22a/0x870 [ 1172.311450][ C1] ? do_softirq+0x76/0xd0 [ 1172.311492][ C1] ? tcp_sendmsg+0x21/0x50 [ 1172.311521][ C1] do_softirq+0x76/0xd0 [ 1172.311553][ C1] [ 1172.311560][ C1] [ 1172.311568][ C1] __local_bh_enable_ip+0xf8/0x130 [ 1172.311598][ C1] tcp_sendmsg+0x21/0x50 [ 1172.311623][ C1] ? __pfx_inet_sendmsg+0x10/0x10 [ 1172.311646][ C1] sock_write_iter+0x406/0x4f0 [ 1172.311684][ C1] ? __pfx_sock_write_iter+0x10/0x10 [ 1172.311720][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1172.311744][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1172.311767][ C1] ? security_file_permission+0x75/0x260 [ 1172.311800][ C1] vfs_write+0x61d/0xb90 [ 1172.311831][ C1] ? __pfx_vfs_write+0x10/0x10 [ 1172.311855][ C1] ? __pfx_set_user_sigmask+0x10/0x10 [ 1172.311894][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1172.311923][ C1] ksys_write+0x150/0x270 [ 1172.311950][ C1] ? __pfx_ksys_write+0x10/0x10 [ 1172.311987][ C1] do_syscall_64+0x14d/0xf80 [ 1172.312020][ C1] ? trace_irq_disable+0x3b/0x150 [ 1172.312063][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1172.312095][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1172.312116][ C1] RIP: 0033:0x7fab7a957917 [ 1172.312136][ C1] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1172.312163][ C1] RSP: 002b:00007ffefbacbef0 EFLAGS: 00000202 ORIG_RAX: 0000000000000001 [ 1172.312185][ C1] RAX: ffffffffffffffda RBX: 000055558a11d540 RCX: 00007fab7a957917 [ 1172.312201][ C1] RDX: 0000000000004d98 RSI: 00007fab77bfb268 RDI: 0000000000000003 [ 1172.312214][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1172.312226][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000004d98 [ 1172.312238][ C1] R13: 000055558a132090 R14: 00007ffefbacc490 R15: 00007fab77bfb268 [ 1172.312269][ C1] [ 1172.312278][ C1] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 1172.575440][ C1] CPU: 1 UID: 0 PID: 5804 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 1172.575480][ C1] Tainted: [L]=SOFTLOCKUP [ 1172.575491][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1172.575508][ C1] Call Trace: [ 1172.575520][ C1] [ 1172.575533][ C1] dump_stack_lvl+0xe8/0x150 [ 1172.575573][ C1] f2fs_handle_critical_error+0x37c/0x540 [ 1172.575606][ C1] f2fs_write_end_io+0xcdb/0xff0 [ 1172.575651][ C1] blk_update_request+0x57e/0xe60 [ 1172.575683][ C1] blk_mq_end_request+0x3e/0x70 [ 1172.575702][ C1] blk_done_softirq+0x10a/0x160 [ 1172.575734][ C1] handle_softirqs+0x22a/0x870 [ 1172.575764][ C1] ? do_softirq+0x76/0xd0 [ 1172.575794][ C1] ? tcp_sendmsg+0x21/0x50 [ 1172.575819][ C1] do_softirq+0x76/0xd0 [ 1172.575844][ C1] [ 1172.575851][ C1] [ 1172.575859][ C1] __local_bh_enable_ip+0xf8/0x130 [ 1172.575885][ C1] tcp_sendmsg+0x21/0x50 [ 1172.575909][ C1] ? __pfx_inet_sendmsg+0x10/0x10 [ 1172.575933][ C1] sock_write_iter+0x406/0x4f0 [ 1172.575963][ C1] ? __pfx_sock_write_iter+0x10/0x10 [ 1172.575997][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1172.576022][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1172.576045][ C1] ? security_file_permission+0x75/0x260 [ 1172.576077][ C1] vfs_write+0x61d/0xb90 [ 1172.576107][ C1] ? __pfx_vfs_write+0x10/0x10 [ 1172.576131][ C1] ? __pfx_set_user_sigmask+0x10/0x10 [ 1172.576166][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1172.576199][ C1] ksys_write+0x150/0x270 [ 1172.576223][ C1] ? __pfx_ksys_write+0x10/0x10 [ 1172.576255][ C1] do_syscall_64+0x14d/0xf80 [ 1172.576278][ C1] ? trace_irq_disable+0x3b/0x150 [ 1172.576307][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1172.576331][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1172.576352][ C1] RIP: 0033:0x7fab7a957917 [ 1172.576372][ C1] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1172.576388][ C1] RSP: 002b:00007ffefbacbef0 EFLAGS: 00000202 ORIG_RAX: 0000000000000001 [ 1172.576409][ C1] RAX: ffffffffffffffda RBX: 000055558a11d540 RCX: 00007fab7a957917 [ 1172.576423][ C1] RDX: 0000000000004d98 RSI: 00007fab77bfb268 RDI: 0000000000000003 [ 1172.576436][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1172.576448][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000004d98 [ 1172.576460][ C1] R13: 000055558a132090 R14: 00007ffefbacc490 R15: 00007fab77bfb268 [ 1172.576489][ C1] [ 1172.576498][ C1] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 1172.838982][ T5823] F2FS-fs (loop2): do_checkpoint failed err:-5, stop checkpoint [ 1172.963549][ T6065] udevd[6065]: symlink '../../loop2' '/dev/disk/by-diskseq/3194.tmp-b7:2' failed: Read-only file system [ 1173.019170][ T6065] udevd[6065]: symlink '../../loop2' '/dev/disk/by-diskseq/3194.tmp-b7:2' failed: Read-only file system [ 1173.079078][ T6113] udevd[6113]: symlink '../../loop6' '/dev/disk/by-diskseq/3193.tmp-b7:6' failed: Read-only file system [ 1173.169055][ T6065] udevd[6065]: symlink '../../loop2' '/dev/disk/by-diskseq/3195.tmp-b7:2' failed: Read-only file system [ 1173.196010][ T6113] udevd[6113]: symlink '../../loop5' '/dev/disk/by-diskseq/3186.tmp-b7:5' failed: Read-only file system [ 1173.218989][ T3807] loop6: detected capacity change from 0 to 512 [ 1173.230479][ T5893] udevd[5893]: symlink '../../loop1' '/dev/disk/by-diskseq/3179.tmp-b7:1' failed: Read-only file system [ 1173.267177][ T3807] UDF-fs: warning (device loop6): udf_load_vrs: No VRS found [ 1173.269797][ T6113] udevd[6113]: symlink '../../loop0' '/dev/disk/by-diskseq/3185.tmp-b7:0' failed: Read-only file system [ 1173.274612][ T3807] UDF-fs: Scanning with blocksize 512 failed [ 1173.296489][ T6065] udevd[6065]: symlink '../../loop4' '/dev/disk/by-diskseq/3190.tmp-b7:4' failed: Read-only file system [ 1173.310096][ T3807] UDF-fs: warning (device loop6): udf_load_vrs: No VRS found [ 1173.317696][ T3807] UDF-fs: Scanning with blocksize 1024 failed [ 1173.386590][ T3807] UDF-fs: warning (device loop6): udf_load_vrs: No VRS found [ 1173.399592][ T6065] udevd[6065]: symlink '../../loop1' '/dev/disk/by-diskseq/3179.tmp-b7:1' failed: Read-only file system [ 1173.407700][ T3807] UDF-fs: Scanning with blocksize 2048 failed [ 1173.417210][ T24] usb 6-1: new low-speed USB device number 124 using dummy_hcd [ 1173.465408][ T6113] udevd[6113]: symlink '../../loop4' '/dev/disk/by-diskseq/3190.tmp-b7:4' failed: Read-only file system [ 1173.484129][ T3807] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 1173.603595][ T24] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1173.612250][ T3807] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1173.631704][ T24] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1173.662891][ T24] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1173.699001][ T24] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1173.747377][ T24] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1173.771869][ T3825] loop1: detected capacity change from 0 to 256 [ 1173.783315][ T24] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1173.797650][ T24] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1173.838465][ T24] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1173.851825][ T24] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1173.867431][ T24] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1173.876955][ T5983] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 1173.940971][ T24] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1173.961705][ T24] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1173.993333][ T5983] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz1 [ 1174.039720][ T24] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1174.089230][ T24] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1174.164136][ T24] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1174.221221][ T24] usb 6-1: string descriptor 0 read error: -22 [ 1174.240929][ T24] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1174.291626][ T3834] fido_id[3834]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1174.300144][ T3835] loop6: detected capacity change from 0 to 4096 [ 1174.313591][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1174.370245][ T24] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1174.597810][ T24] usb 6-1: USB disconnect, device number 124 [ 1174.623443][ T3850] loop2: detected capacity change from 0 to 1024 [ 1174.667502][ T3850] EXT4-fs: Ignoring removed bh option [ 1174.745080][ T3850] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1174.985066][ T3863] loop0: detected capacity change from 0 to 2048 [ 1175.012810][ T5823] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1175.065587][ T3863] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1175.128254][ T3867] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13175'. [ 1175.177562][ T3867] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13175'. [ 1175.407310][ T3878] loop6: detected capacity change from 0 to 128 [ 1175.597506][ T3879] loop0: detected capacity change from 0 to 4096 [ 1175.707038][ T3886] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1175.745355][ T3888] loop2: detected capacity change from 0 to 8 [ 1175.757357][ T30] audit: type=1800 audit(1773513808.476:703): pid=3879 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.13178" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 1175.784930][ T3888] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 1175.785575][ T3879] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 1175.854216][ T3888] cramfs: Error -5 while decompressing! [ 1175.891559][ T3879] Remounting filesystem read-only [ 1175.893586][ T3888] cramfs: ffffffff9a3b0d22(26)->ffff888047b81000(4096) [ 1175.918221][ T3879] NILFS (loop0): DAT doesn't have a block to manage vblocknr = 524288 [ 1175.929631][ T3888] cramfs: Error -3 while decompressing! [ 1175.935221][ T3888] cramfs: ffffffff9a3b0d3c(16)->ffff888047b80000(4096) [ 1175.972890][ T3879] NILFS error (device loop0): nilfs_bmap_truncate: broken bmap (inode number=15) [ 1176.002865][ T3888] cramfs: Error -5 while decompressing! [ 1176.017118][ T3888] cramfs: ffffffff9a3b0d22(26)->ffff888047b81000(4096) [ 1176.035071][ T3879] NILFS (loop0): error -5 truncating bmap (ino=15) [ 1176.079039][ T30] audit: type=1800 audit(1773513808.776:704): pid=3888 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.13184" name="file2" dev="loop2" ino=348 res=0 errno=0 [ 1176.291825][ T5830] NILFS (loop0): disposed unprocessed dirty file(s) when detaching log writer [ 1176.401509][ T5983] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 1176.578499][ T3875] loop5: detected capacity change from 0 to 32768 [ 1176.590793][ T5983] usb 2-1: Using ep0 maxpacket: 16 [ 1176.609070][ T3875] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.13179 (3875) [ 1176.615170][ T5983] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1176.642319][ T5983] usb 2-1: config 0 has no interface number 0 [ 1176.657168][ T5983] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1176.658797][ T3875] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1176.675382][ T5983] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1176.689288][ T24] usb 7-1: new full-speed USB device number 32 using dummy_hcd [ 1176.700238][ T5983] usb 2-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 1176.716507][ T5983] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1176.725171][ T3875] BTRFS info (device loop5): using sha256 checksum algorithm [ 1176.768763][ T5983] usb 2-1: config 0 descriptor?? [ 1176.840188][ T3875] BTRFS info (device loop5): enabling ssd optimizations [ 1176.856373][ T3875] BTRFS info (device loop5): turning on async discard [ 1176.870801][ T24] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1176.880441][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1176.896760][ T3875] BTRFS info (device loop5): enabling free space tree [ 1176.916653][ T24] usb 7-1: config 0 descriptor?? [ 1176.924093][ T3875] BTRFS info (device loop5): enabling auto defrag [ 1176.942384][ T24] cp210x 7-1:0.0: cp210x converter detected [ 1176.954318][ T3875] BTRFS info (device loop5): max_inline set to 4096 [ 1177.103949][ T5921] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 1177.246610][ T5827] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1177.255771][ T3935] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13200'. [ 1177.279205][ T5921] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1177.301795][ T5921] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1177.348947][ T5921] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1177.392724][ T5921] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1177.446688][ T24] usb 7-1: cp210x converter now attached to ttyUSB0 [ 1177.457671][ T5983] uclogic 0003:28BD:0071.0008: failed retrieving string descriptor #100: -71 [ 1177.496938][ T5983] uclogic 0003:28BD:0071.0008: failed retrieving pen parameters: -71 [ 1177.522252][ T5921] usb 1-1: config 0 descriptor?? [ 1177.525841][ T5983] uclogic 0003:28BD:0071.0008: pen probing failed: -71 [ 1177.562052][ T3938] loop2: detected capacity change from 0 to 1024 [ 1177.568939][ T5983] uclogic 0003:28BD:0071.0008: failed probing parameters: -71 [ 1177.616301][ T3938] EXT4-fs: Ignoring removed nobh option [ 1177.623493][ T5983] uclogic 0003:28BD:0071.0008: probe with driver uclogic failed with error -71 [ 1177.664731][ T24] usb 7-1: USB disconnect, device number 32 [ 1177.684069][ T3938] EXT4-fs: inline encryption not supported [ 1177.696753][ T24] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1177.712690][ T5983] usb 2-1: USB disconnect, device number 107 [ 1177.790848][ T24] cp210x 7-1:0.0: device disconnected [ 1177.893815][ T3938] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1178.013282][ T5921] pyra 0003:1E7D:2CF6.0009: unknown main item tag 0x2 [ 1178.061238][ T5823] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1178.077603][ T3947] vivid-008: disconnect [ 1178.081366][ T5921] pyra 0003:1E7D:2CF6.0009: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.0-1/input0 [ 1178.093685][ T3946] vivid-008: reconnect [ 1178.218045][ T5921] pyra 0003:1E7D:2CF6.0009: couldn't init struct pyra_device [ 1178.244050][ T5921] pyra 0003:1E7D:2CF6.0009: couldn't install mouse [ 1178.314335][ T5921] pyra 0003:1E7D:2CF6.0009: probe with driver pyra failed with error -71 [ 1178.338513][ T5893] udevd[5893]: symlink '../../loop2' '/dev/disk/by-diskseq/3213.tmp-b7:2' failed: Read-only file system [ 1178.399947][ T5921] usb 1-1: USB disconnect, device number 114 [ 1178.452593][ T6113] udevd[6113]: symlink '../../loop2' '/dev/disk/by-diskseq/3213.tmp-b7:2' failed: Read-only file system [ 1178.487775][ T6061] udevd[6061]: symlink '../../loop4' '/dev/disk/by-diskseq/3190.tmp-b7:4' failed: Read-only file system [ 1178.512998][ T6068] udevd[6068]: symlink '../../loop6' '/dev/disk/by-diskseq/3209.tmp-b7:6' failed: Read-only file system [ 1178.564335][ T5979] udevd[5979]: symlink '../../loop1' '/dev/disk/by-diskseq/3199.tmp-b7:1' failed: Read-only file system [ 1178.584463][ T6113] udevd[6113]: symlink '../../loop2' '/dev/disk/by-diskseq/3215.tmp-b7:2' failed: Read-only file system [ 1178.637647][ T6061] udevd[6061]: symlink '../../loop4' '/dev/disk/by-diskseq/3190.tmp-b7:4' failed: Read-only file system [ 1178.705368][ T5893] udevd[5893]: symlink '../../loop6' '/dev/disk/by-diskseq/3209.tmp-b7:6' failed: Read-only file system [ 1178.734506][ T6065] udevd[6065]: symlink '../../loop5' '/dev/disk/by-diskseq/3212.tmp-b7:5' failed: Read-only file system [ 1178.755431][ T6113] udevd[6113]: symlink '../../loop2' '/dev/disk/by-diskseq/3215.tmp-b7:2' failed: Read-only file system [ 1178.792596][ T3940] loop5: detected capacity change from 0 to 32768 [ 1178.850304][ T3963] team0: Port device syz_tun added [ 1178.889681][ T3940] read_mapping_page failed! [ 1178.919217][ T3940] ERROR: (device loop5): txCommit: [ 1178.919217][ T3940] [ 1179.470708][ T3987] loop1: detected capacity change from 0 to 128 [ 1179.507531][ T3987] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1179.552732][ T3991] vivid-000: disconnect [ 1179.572267][ T3988] vivid-000: reconnect [ 1179.579708][ T3987] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1179.747700][T17170] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1180.000436][ T4007] loop5: detected capacity change from 0 to 16 [ 1180.143409][ T3999] loop4: detected capacity change from 0 to 8192 [ 1180.217512][ T4014] loop6: detected capacity change from 0 to 1024 [ 1180.262789][ T4014] EXT4-fs (loop6): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 1180.282578][ T4013] netlink: 28 bytes leftover after parsing attributes in process `syz.2.13234'. [ 1180.359793][ T4014] EXT4-fs error (device loop6): ext4_map_blocks:776: inode #3: block 2: comm syz.6.13236: lblock 2 mapped to illegal pblock 2 (length 1) [ 1180.403197][ T4011] loop0: detected capacity change from 0 to 4096 [ 1180.417082][ T4014] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1180.417841][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 1180.433810][ C1] EXT4-fs (loop6): initial error at time 1773513812: ext4_map_blocks:776: inode 3: block 2 [ 1180.443919][ C1] EXT4-fs (loop6): last error at time 1773513812: ext4_map_blocks:776: inode 3: block 2 [ 1180.468271][ T4014] Quota error (device loop6): qtree_write_dquot: dquota write failed [ 1180.477020][ T4011] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512). [ 1180.524959][ T4014] EXT4-fs error (device loop6): ext4_map_blocks:776: inode #3: block 48: comm syz.6.13236: lblock 0 mapped to illegal pblock 48 (length 1) [ 1180.550203][ T4014] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1180.557013][ T4014] Quota error (device loop6): v2_write_file_info: Can't write info structure [ 1180.626068][ T4014] EXT4-fs error (device loop6): ext4_acquire_dquot:7001: comm syz.6.13236: Failed to acquire dquot type 0 [ 1180.664166][ T5900] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 1180.672230][ T4014] loop6: lost filesystem error report for type 5 error -117 [ 1180.672634][ T4014] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 1180.728065][ T4011] ntfs3(loop0): ino=1d, mi_enum_attr [ 1180.738768][ T4014] loop6: lost filesystem error report for type 5 error -117 [ 1180.739415][ T4011] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 1180.760238][ T4014] EXT4-fs error (device loop6): ext4_evict_inode:255: inode #11: comm syz.6.13236: mark_inode_dirty error [ 1180.813723][ T4011] ntfs3(loop0): ino=1d, mi_enum_attr [ 1180.817049][ T4014] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1180.825332][ T4014] EXT4-fs warning (device loop6): ext4_evict_inode:258: couldn't mark inode dirty (err -117) [ 1180.845732][ T4011] ntfs3(loop0): ino=1d, "file1" mi_enum_attr [ 1180.877925][ T5900] usb 2-1: Using ep0 maxpacket: 16 [ 1180.887065][ T5900] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1180.918246][ T5900] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1180.939750][ T4014] EXT4-fs (loop6): 1 orphan inode deleted [ 1180.952822][T17181] EXT4-fs error (device loop6): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:16: lblock 1 mapped to illegal pblock 1 (length 1) [ 1180.988976][ T5900] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1181.013486][ T4014] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1181.040357][T17181] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1181.048145][T17181] Quota error (device loop6): remove_tree: Can't read quota data block 1 [ 1181.048649][ T5900] usb 2-1: New USB device found, idVendor=04b4, idProduct=ed81, bcdDevice= 0.00 [ 1181.085238][ T5900] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1181.093612][T17181] EXT4-fs error (device loop6): ext4_release_dquot:7037: comm kworker/u8:16: Failed to release dquot type 0 [ 1181.107372][ T5900] usb 2-1: config 0 descriptor?? [ 1181.188881][ T4014] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 1181.237616][ T4028] EXT4-fs (loop6): warning: mounting fs with errors, running e2fsck is recommended [ 1181.273976][ T4028] EXT4-fs error (device loop6): ext4_map_blocks:776: inode #3: block 48: comm syz.6.13236: lblock 0 mapped to illegal pblock 48 (length 1) [ 1181.327070][ T4028] Quota error (device loop6): v2_read_header: Failed header read: expected=8 got=-117 [ 1181.404208][ T4028] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 1181.554581][T14929] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1181.597244][ T5900] cypress 0003:04B4:ED81.000A: unknown main item tag 0x0 [ 1181.636662][ T5900] cypress 0003:04B4:ED81.000A: unknown main item tag 0x0 [ 1181.653033][ T4024] loop5: detected capacity change from 0 to 32768 [ 1181.668883][ T5900] cypress 0003:04B4:ED81.000A: unknown main item tag 0x0 [ 1181.677297][ T5900] cypress 0003:04B4:ED81.000A: unknown main item tag 0x0 [ 1181.707254][ T5900] cypress 0003:04B4:ED81.000A: unknown main item tag 0x0 [ 1181.724194][ T4024] ERROR: (device loop5): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 4 [ 1181.724194][ T4024] [ 1181.751830][ T5900] cypress 0003:04B4:ED81.000A: unknown main item tag 0x0 [ 1181.777216][ T5900] cypress 0003:04B4:ED81.000A: unknown main item tag 0x0 [ 1181.784304][ T5900] cypress 0003:04B4:ED81.000A: unknown main item tag 0x0 [ 1181.796978][ T4024] ERROR: (device loop5): remounting filesystem as read-only [ 1181.821476][ T4039] loop6: detected capacity change from 0 to 512 [ 1181.839381][ T5900] cypress 0003:04B4:ED81.000A: unknown main item tag 0x0 [ 1181.863831][ T5900] cypress 0003:04B4:ED81.000A: unknown main item tag 0x0 [ 1181.876443][ T4039] EXT4-fs error (device loop6): ext4_orphan_get:1391: inode #15: comm syz.6.13247: inode has both inline data and extents flags [ 1181.893754][ T4039] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1181.903845][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 1181.918368][ T4039] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.13247: couldn't read orphan inode 15 (err -117) [ 1181.919510][ C1] EXT4-fs (loop6): initial error at time 1773513814: ext4_orphan_get:1391: inode 15 [ 1181.940939][ C1] EXT4-fs (loop6): last error at time 1773513814: ext4_orphan_get:1391: inode 15 [ 1181.964675][ T4039] loop6: lost filesystem error report for type 5 error -117 [ 1181.977086][ T5900] cypress 0003:04B4:ED81.000A: hidraw0: USB HID v0.00 Device [HID 04b4:ed81] on usb-dummy_hcd.1-1/input0 [ 1182.067854][ T4027] loop4: detected capacity change from 0 to 32768 [ 1182.109108][ T4039] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1182.163698][ T4027] XFS (loop4): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1182.192874][ T5900] usb 2-1: USB disconnect, device number 108 [ 1182.380833][ T4027] XFS (loop4): Ending clean mount [ 1182.439239][T14929] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1182.532729][ T4048] fido_id[4048]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1182.665873][ T5821] XFS (loop4): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1182.704901][ T4067] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 1182.733764][ T4064] loop6: detected capacity change from 0 to 2048 [ 1182.822844][ T4064] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1182.901210][ T4072] netlink: 43 bytes leftover after parsing attributes in process `syz.2.13258'. [ 1183.073811][T14929] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1183.374826][ T4053] ERROR: (device loop5): dbAlloc: the hint is outside the map [ 1183.374826][ T4053] [ 1183.412144][ T4082] comedi comedi3: comedi_parport: I/O port conflict (0x4f27,3) [ 1183.422681][ T4053] read_mapping_page failed! [ 1183.474348][ T4053] ERROR: (device loop5): txCommit: [ 1183.474348][ T4053] [ 1183.482234][ T5999] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 1183.661937][ T4084] NILFS (loop0): mounting unchecked fs [ 1183.688049][ T4084] NILFS (loop0): invalid segment: Sequence number mismatch [ 1183.703248][ T5999] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1183.727191][ T4084] NILFS (loop0): trying rollback from an earlier position [ 1183.737194][ T5999] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1183.750408][ T6113] udevd[6113]: symlink '../../loop5' '/dev/disk/by-diskseq/3236.tmp-b7:5' failed: Read-only file system [ 1183.786812][ T5999] usb 3-1: config 0 descriptor?? [ 1183.803023][ T5893] udevd[5893]: symlink '../../loop4' '/dev/disk/by-diskseq/3234.tmp-b7:4' failed: Read-only file system [ 1183.808331][ T4084] NILFS (loop0): recovery complete [ 1183.816549][ T5999] cp210x 3-1:0.0: cp210x converter detected [ 1183.845065][ T6113] udevd[6113]: symlink '../../loop5' '/dev/disk/by-uuid/45b0d9a3-5e0b-4fd0-ae05-2ff6b274033b.tmp-b7:5' failed: Read-only file system [ 1183.875724][ T6061] udevd[6061]: symlink '../../loop1' '/dev/disk/by-diskseq/3219.tmp-b7:1' failed: Read-only file system [ 1183.902195][ T4092] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13267'. [ 1183.918518][ T4093] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1183.935284][ T4092] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13267'. [ 1184.063631][ T6065] udevd[6065]: symlink '../../loop0' '/dev/disk/by-diskseq/3237.tmp-b7:0' failed: Read-only file system [ 1184.103920][ T6065] udevd[6065]: symlink '../../loop0' '/dev/disk/by-uuid/ab2f6cf2-a99d-4328-b186-08168e7a6b7e.tmp-b7:0' failed: Read-only file system [ 1184.132668][ T5893] udevd[5893]: symlink '../../loop4' '/dev/disk/by-diskseq/3234.tmp-b7:4' failed: Read-only file system [ 1184.253245][ T5893] udevd[5893]: symlink '../../loop1' '/dev/disk/by-diskseq/3219.tmp-b7:1' failed: Read-only file system [ 1184.306032][ T4101] set_capacity_and_notify: 2 callbacks suppressed [ 1184.306056][ T4101] loop0: detected capacity change from 0 to 256 [ 1184.409413][ T4105] loop5: detected capacity change from 0 to 256 [ 1184.448124][ T6065] udevd[6065]: symlink '../../loop0' '/dev/disk/by-diskseq/3237.tmp-b7:0' failed: Read-only file system [ 1184.467838][ T5999] cp210x 3-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 1184.495793][ T4101] FAT-fs (loop0): Directory bread(block 64) failed [ 1184.509599][ T4101] FAT-fs (loop0): Directory bread(block 65) failed [ 1184.527705][ T5999] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 1184.546269][ T4101] FAT-fs (loop0): Directory bread(block 66) failed [ 1184.567729][ T5999] usb 3-1: cp210x converter now attached to ttyUSB0 [ 1184.583669][ T4105] FAT-fs (loop5): Directory bread(block 64) failed [ 1184.591932][ T4109] loop1: detected capacity change from 0 to 64 [ 1184.598649][ T4101] FAT-fs (loop0): Directory bread(block 67) failed [ 1184.598775][ T4101] FAT-fs (loop0): Directory bread(block 68) failed [ 1184.598804][ T4101] FAT-fs (loop0): Directory bread(block 69) failed [ 1184.598887][ T4101] FAT-fs (loop0): Directory bread(block 70) failed [ 1184.598926][ T4101] FAT-fs (loop0): Directory bread(block 71) failed [ 1184.599011][ T4101] FAT-fs (loop0): Directory bread(block 72) failed [ 1184.599039][ T4101] FAT-fs (loop0): Directory bread(block 73) failed [ 1184.608192][ T6065] udevd[6065]: symlink '../../loop5' '/dev/disk/by-diskseq/3236.tmp-b7:5' failed: Read-only file system [ 1184.664305][ T4105] FAT-fs (loop5): Directory bread(block 65) failed [ 1184.672529][ T5999] usb 3-1: USB disconnect, device number 118 [ 1184.680693][ T4105] FAT-fs (loop5): Directory bread(block 66) failed [ 1184.689583][ T4109] minix: block size(59136) > page size(4096) not supported by filesystem [ 1184.702384][ T4105] FAT-fs (loop5): Directory bread(block 67) failed [ 1184.744887][ T4105] FAT-fs (loop5): Directory bread(block 68) failed [ 1184.762761][ T5999] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1184.790582][ T4105] FAT-fs (loop5): Directory bread(block 69) failed [ 1184.800094][ T4081] loop6: detected capacity change from 0 to 32768 [ 1184.800546][ T5999] cp210x 3-1:0.0: device disconnected [ 1184.832364][ T4105] FAT-fs (loop5): Directory bread(block 70) failed [ 1184.861184][ T4105] FAT-fs (loop5): Directory bread(block 71) failed [ 1184.881013][ T4081] XFS (loop6): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1184.897425][ T4105] FAT-fs (loop5): Directory bread(block 72) failed [ 1184.904507][ T4105] FAT-fs (loop5): Directory bread(block 73) failed [ 1185.040864][ T4081] XFS (loop6): Ending clean mount [ 1185.060744][ T4117] loop4: detected capacity change from 0 to 4096 [ 1185.116854][ T4081] XFS (loop6): Quotacheck needed: Please wait. [ 1185.146226][ T4122] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1185.258942][ T4081] XFS (loop6): Quotacheck: Done. [ 1185.395115][ T4117] NILFS error (device loop4): nilfs_dotdot: directory #12 missing '.' [ 1185.473032][ T4117] Remounting filesystem read-only [ 1185.562951][T14929] XFS (loop6): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1185.679157][ T5900] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 1185.693245][ T4130] loop5: detected capacity change from 0 to 2048 [ 1185.782885][ T4130] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1185.874372][ T4136] loop4: detected capacity change from 0 to 512 [ 1185.902289][ T5900] usb 1-1: Using ep0 maxpacket: 32 [ 1185.937161][ T5900] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1185.983460][ T5900] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1186.041421][ T4136] EXT4-fs error (device loop4): ext4_get_branch:178: inode #11: block 4294967295: comm syz.4.13285: invalid block [ 1186.062615][ T5900] usb 1-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 1186.115984][ T5900] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1186.140140][ T4136] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1186.148040][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 1186.163994][ C1] EXT4-fs (loop4): initial error at time 1773513818: ext4_get_branch:178: inode 11: block 4294967295 [ 1186.175161][ C1] EXT4-fs (loop4): last error at time 1773513818: ext4_get_branch:178: inode 11: block 4294967295 [ 1186.188827][ T4136] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.13285: invalid indirect mapped block 4294967295 (level 1) [ 1186.191873][ T5900] usb 1-1: config 0 descriptor?? [ 1186.215996][ T4136] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1186.251619][ T4136] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.13285: invalid indirect mapped block 4294967295 (level 1) [ 1186.363786][ T4136] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1186.367011][ T4136] EXT4-fs (loop4): 2 truncates cleaned up [ 1186.439501][ T4136] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1186.497299][ T4151] loop5: detected capacity change from 0 to 2048 [ 1186.532657][ T4136] EXT4-fs error (device loop4): ext4_get_parent:1832: inode #11: comm syz.4.13285: bad parent inode number: 3 [ 1186.538685][T19195] Bluetooth: hci1: unexpected event for opcode 0x2027 [ 1186.577223][ T4151] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1186.609158][ T5821] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1186.660934][ T4159] loop2: detected capacity change from 0 to 164 [ 1186.708027][ T5900] zydacron 0003:13EC:0006.000B: item fetching failed at offset 0/2 [ 1186.747458][ T5900] zydacron 0003:13EC:0006.000B: parse failed [ 1186.779202][ T5900] zydacron 0003:13EC:0006.000B: probe with driver zydacron failed with error -22 [ 1186.893619][ T4163] loop6: detected capacity change from 0 to 512 [ 1186.946324][ T4163] FAT-fs (loop6): Directory bread(block 199916) failed [ 1187.000373][ T4163] FAT-fs (loop6): Directory bread(block 199917) failed [ 1187.023799][ T5900] usb 1-1: USB disconnect, device number 115 [ 1187.033828][T17156] [ 1187.036214][T17156] ====================================================== [ 1187.043262][T17156] WARNING: possible circular locking dependency detected [ 1187.050510][T17156] syzkaller #0 Tainted: G L [ 1187.056596][T17156] ------------------------------------------------------ [ 1187.060077][ T4163] FAT-fs (loop6): Directory bread(block 199918) failed [ 1187.063764][T17156] kworker/u8:3/17156 is trying to acquire lock: [ 1187.063784][T17156] ffff888076dac3f0 ( [ 1187.075840][ T4163] FAT-fs (loop6): Directory bread(block 199919) failed [ 1187.077170][T17156] &ei->xattr_sem){++++}-{4:4}, at: ext4_destroy_inline_data+0x28/0xe0 [ 1187.082569][ T4163] FAT-fs (loop6): Directory bread(block 199920) failed [ 1187.087922][T17156] [ 1187.087922][T17156] but task is already holding lock: [ 1187.087937][T17156] ffff88801f7b0b98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x205/0x3b0 [ 1187.096926][ T4163] FAT-fs (loop6): Directory bread(block 199921) failed [ 1187.103076][T17156] [ 1187.103076][T17156] which lock already depends on the new lock. [ 1187.103076][T17156] [ 1187.103094][T17156] [ 1187.103094][T17156] the existing dependency chain (in reverse order) is: [ 1187.103104][T17156] [ 1187.103104][T17156] -> #1 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 1187.103169][T17156] percpu_down_read_internal+0x48/0x1c0 [ 1187.161127][T17156] ext4_writepages+0x205/0x3b0 [ 1187.166432][T17156] do_writepages+0x32e/0x550 [ 1187.171547][T17156] __writeback_single_inode+0x133/0x11a0 [ 1187.177706][T17156] writeback_single_inode+0x4ac/0xdc0 [ 1187.183602][T17156] write_inode_now+0x1c2/0x290 [ 1187.188924][T17156] iput+0x8c1/0xe80 [ 1187.193296][T17156] ext4_xattr_block_set+0x1fd4/0x2ad0 [ 1187.199204][T17156] ext4_expand_extra_isize_ea+0x12cf/0x1ea0 [ 1187.205802][T17156] __ext4_expand_extra_isize+0x30d/0x400 [ 1187.211958][T17156] __ext4_mark_inode_dirty+0x45c/0x730 [ 1187.217949][T17156] ext4_evict_inode+0x7a1/0xeb0 [ 1187.223433][T17156] evict+0x61e/0xb10 [ 1187.228040][T17156] ext4_orphan_cleanup+0xc38/0x1470 [ 1187.233903][T17156] ext4_fill_super+0x59ff/0x6320 [ 1187.239379][T17156] get_tree_bdev_flags+0x431/0x4f0 [ 1187.245458][T17156] vfs_get_tree+0x92/0x2a0 [ 1187.250398][T17156] do_new_mount+0x341/0xd30 [ 1187.255438][T17156] __se_sys_mount+0x31d/0x420 [ 1187.260659][T17156] do_syscall_64+0x14d/0xf80 [ 1187.265786][T17156] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1187.272203][T17156] [ 1187.272203][T17156] -> #0 (&ei->xattr_sem){++++}-{4:4}: [ 1187.280044][T17156] __lock_acquire+0x15a5/0x2cf0 [ 1187.285513][T17156] lock_acquire+0xf0/0x2e0 [ 1187.290564][T17156] down_write+0x96/0x200 [ 1187.295342][T17156] ext4_destroy_inline_data+0x28/0xe0 [ 1187.301289][T17156] ext4_do_writepages+0x51e/0x46e0 [ 1187.307022][T17156] ext4_writepages+0x241/0x3b0 [ 1187.312324][T17156] do_writepages+0x32e/0x550 [ 1187.317445][T17156] __writeback_single_inode+0x133/0x11a0 [ 1187.323618][T17156] writeback_sb_inodes+0x992/0x1a20 [ 1187.329441][T17156] wb_writeback+0x456/0xb70 [ 1187.334482][T17156] wb_workfn+0x414/0xf50 [ 1187.339338][T17156] process_scheduled_works+0xb6e/0x18c0 [ 1187.345506][T17156] worker_thread+0xa53/0xfc0 [ 1187.350644][T17156] kthread+0x388/0x470 [ 1187.355249][T17156] ret_from_fork+0x51e/0xb90 [ 1187.360377][T17156] ret_from_fork_asm+0x1a/0x30 [ 1187.365680][T17156] [ 1187.365680][T17156] other info that might help us debug this: [ 1187.365680][T17156] [ 1187.375935][T17156] Possible unsafe locking scenario: [ 1187.375935][T17156] [ 1187.383397][T17156] CPU0 CPU1 [ 1187.388848][T17156] ---- ---- [ 1187.394219][T17156] rlock(&sbi->s_writepages_rwsem); [ 1187.399855][T17156] lock(&ei->xattr_sem); [ 1187.406802][T17156] lock(&sbi->s_writepages_rwsem); [ 1187.414538][T17156] lock(&ei->xattr_sem); [ 1187.418880][T17156] [ 1187.418880][T17156] *** DEADLOCK *** [ 1187.418880][T17156] [ 1187.427468][T17156] 3 locks held by kworker/u8:3/17156: [ 1187.432932][T17156] #0: ffff88801faea148 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0 [ 1187.444201][T17156] #1: ffffc900042b7c40 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0 [ 1187.457011][T17156] #2: ffff88801f7b0b98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x205/0x3b0 [ 1187.467512][T17156] [ 1187.467512][T17156] stack backtrace: [ 1187.473404][T17156] CPU: 1 UID: 0 PID: 17156 Comm: kworker/u8:3 Tainted: G L syzkaller #0 PREEMPT(full) [ 1187.473435][T17156] Tainted: [L]=SOFTLOCKUP [ 1187.473444][T17156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1187.473463][T17156] Workqueue: writeback wb_workfn (flush-7:5) [ 1187.473501][T17156] Call Trace: [ 1187.473514][T17156] [ 1187.473527][T17156] dump_stack_lvl+0xe8/0x150 [ 1187.473563][T17156] print_circular_bug+0x2e1/0x300 [ 1187.473603][T17156] check_noncircular+0x12e/0x150 [ 1187.473643][T17156] __lock_acquire+0x15a5/0x2cf0 [ 1187.473680][T17156] ? unwind_next_frame+0xa5/0x23c0 [ 1187.473721][T17156] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1187.473749][T17156] ? __lock_acquire+0x6b5/0x2cf0 [ 1187.473781][T17156] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1187.473807][T17156] ? __lock_acquire+0x6b5/0x2cf0 [ 1187.473837][T17156] lock_acquire+0xf0/0x2e0 [ 1187.473866][T17156] ? ext4_destroy_inline_data+0x28/0xe0 [ 1187.473910][T17156] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1187.473940][T17156] down_write+0x96/0x200 [ 1187.473970][T17156] ? ext4_destroy_inline_data+0x28/0xe0 [ 1187.474004][T17156] ? __pfx_down_write+0x10/0x10 [ 1187.474039][T17156] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1187.474070][T17156] ext4_destroy_inline_data+0x28/0xe0 [ 1187.474106][T17156] ext4_do_writepages+0x51e/0x46e0 [ 1187.474132][T17156] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1187.474158][T17156] ? __lock_acquire+0x6b5/0x2cf0 [ 1187.474188][T17156] ? ret_from_fork_asm+0x1a/0x30 [ 1187.474222][T17156] ? ret_from_fork_asm+0x1a/0x30 [ 1187.474256][T17156] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1187.474281][T17156] ? arch_stack_walk+0x11b/0x150 [ 1187.474321][T17156] ? __skb_flow_dissect+0x423/0x6d20 [ 1187.474349][T17156] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1187.474378][T17156] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1187.474405][T17156] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1187.474431][T17156] ? look_up_lock_class+0x57/0x110 [ 1187.474457][T17156] ? __pfx_ext4_do_writepages+0x10/0x10 [ 1187.474482][T17156] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1187.474508][T17156] ? __lock_acquire+0x6b5/0x2cf0 [ 1187.474538][T17156] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1187.474573][T17156] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1187.474600][T17156] ? update_load_avg+0x1b0/0x1ec0 [ 1187.474632][T17156] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1187.474663][T17156] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1187.474691][T17156] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1187.474719][T17156] ext4_writepages+0x241/0x3b0 [ 1187.474750][T17156] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1187.474778][T17156] ? __pfx_ext4_writepages+0x10/0x10 [ 1187.474807][T17156] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1187.474842][T17156] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1187.474867][T17156] ? __lock_acquire+0x6b5/0x2cf0 [ 1187.474902][T17156] ? __pfx_ext4_writepages+0x10/0x10 [ 1187.474934][T17156] do_writepages+0x32e/0x550 [ 1187.474970][T17156] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1187.474995][T17156] ? reacquire_held_locks+0x104/0x190 [ 1187.475028][T17156] ? writeback_sb_inodes+0x477/0x1a20 [ 1187.475062][T17156] __writeback_single_inode+0x133/0x11a0 [ 1187.475094][T17156] ? do_raw_spin_unlock+0xf5/0x210 [ 1187.475120][T17156] writeback_sb_inodes+0x992/0x1a20 [ 1187.475164][T17156] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 1187.475193][T17156] ? do_raw_spin_lock+0x12b/0x2f0 [ 1187.475234][T17156] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1187.475260][T17156] ? rcu_is_watching+0x15/0xb0 [ 1187.475295][T17156] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1187.475325][T17156] wb_writeback+0x456/0xb70 [ 1187.475356][T17156] ? queue_io+0x271/0x4a0 [ 1187.475388][T17156] ? __pfx_wb_writeback+0x10/0x10 [ 1187.475417][T17156] ? do_raw_spin_lock+0x12b/0x2f0 [ 1187.475447][T17156] wb_workfn+0x414/0xf50 [ 1187.475472][T17156] ? look_up_lock_class+0x57/0x110 [ 1187.475502][T17156] ? __pfx_wb_workfn+0x10/0x10 [ 1187.475527][T17156] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1187.475552][T17156] ? do_raw_spin_lock+0x12b/0x2f0 [ 1187.475582][T17156] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1187.475604][T17156] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1187.475633][T17156] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1187.475661][T17156] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1187.475687][T17156] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1187.475715][T17156] ? process_scheduled_works+0xa8d/0x18c0 [ 1187.475743][T17156] ? process_scheduled_works+0xa8d/0x18c0 [ 1187.475773][T17156] process_scheduled_works+0xb6e/0x18c0 [ 1187.475818][T17156] ? __pfx_process_scheduled_works+0x10/0x10 [ 1187.475850][T17156] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1187.475880][T17156] ? assign_work+0x3d5/0x5e0 [ 1187.475910][T17156] worker_thread+0xa53/0xfc0 [ 1187.475949][T17156] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1187.475979][T17156] kthread+0x388/0x470 [ 1187.476001][T17156] ? __pfx_worker_thread+0x10/0x10 [ 1187.476029][T17156] ? __pfx_kthread+0x10/0x10 [ 1187.476051][T17156] ret_from_fork+0x51e/0xb90 [ 1187.476083][T17156] ? __pfx_ret_from_fork+0x10/0x10 [ 1187.476110][T17156] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1187.476142][T17156] ? __switch_to+0xc7d/0x1450 [ 1187.476176][T17156] ? __pfx_kthread+0x10/0x10 [ 1187.476197][T17156] ret_from_fork_asm+0x1a/0x30 [ 1187.476240][T17156] [ 1187.992485][T17156] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 1188.007736][T17156] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 1188.019979][T17156] EXT4-fs (loop5): This should not happen!! Data will be lost [ 1188.019979][T17156] [ 1188.030040][T17156] EXT4-fs (loop5): Total free blocks count 0 [ 1188.035168][ T4163] FAT-fs (loop6): Directory bread(block 199922) failed [ 1188.036392][T17156] EXT4-fs (loop5): Free/Dirty block details [ 1188.042927][ T4163] FAT-fs (loop6): Directory bread(block 199923) failed [ 1188.048768][T17156] EXT4-fs (loop5): free_blocks=4096 [ 1188.048790][T17156] EXT4-fs (loop5): dirty_blocks=512 [ 1188.069473][T17156] EXT4-fs (loop5): Block reservation details [ 1188.075532][T17156] EXT4-fs (loop5): i_reserved_data_blocks=32 [ 1188.082822][T17156] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 480 with error 28 [ 1188.163244][ T4163] FAT-fs (loop6): Directory bread(block 199916) failed [ 1188.170557][T28189] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 1188.171796][ T4169] netlink: 48 bytes leftover after parsing attributes in process `syz.5.13298'. [ 1188.187738][ T4163] FAT-fs (loop6): Directory bread(block 199917) failed [ 1188.339650][T28189] usb 3-1: Using ep0 maxpacket: 16 [ 1188.346389][T28189] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1188.357485][T28189] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1188.367332][T28189] usb 3-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 1188.376643][T28189] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1188.386661][T28189] usb 3-1: config 0 descriptor?? [ 1188.828259][T28189] kye 0003:0458:5016.000C: control desc unexpectedly large [ 1188.838207][T28189] input: HID 0458:5016 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5016.000C/input/input62 [ 1188.858183][T28189] input: HID 0458:5016 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5016.000C/input/input63 [ 1188.950635][T28189] kye 0003:0458:5016.000C: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.2-1/input0 [ 1189.044441][T28189] usb 3-1: USB disconnect, device number 119 [ 1189.604174][ T6065] udevd[6065]: symlink '../../loop2' '/dev/disk/by-diskseq/3257.tmp-b7:2' failed: Read-only file system