last executing test programs: 2m53.74352347s ago: executing program 3 (id=11): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000880)) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000080)) 2m53.244980457s ago: executing program 3 (id=12): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="14000000040000000800000006"], 0x48) r1 = socket$inet6(0xa, 0x80002, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r0, &(0x7f0000000280), &(0x7f0000000a80)=@udp6=r1}, 0x20) 2m53.040165204s ago: executing program 3 (id=15): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x777) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/filehandle\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='\x00 / 128\n\x00', 0x8) 2m52.642462988s ago: executing program 3 (id=16): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2a) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x103090, 0x0) mount$bind(&(0x7f0000001900)='.\x00', &(0x7f0000000380)='./file0/file0\x00', 0x0, 0x2a05004, 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x24000, 0x0) 2m52.313823507s ago: executing program 3 (id=20): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newqdisc={0xac, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [0x0, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], 0x0, [0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2000]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xf4240}]}]}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x1}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0xffffffe8}]}}]}, 0xac}}, 0x0) 2m50.753079876s ago: executing program 3 (id=37): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') r1 = syz_io_uring_setup(0x1333, &(0x7f0000000540)={0x0, 0x501e, 0x1000, 0x0, 0x30e}, &(0x7f0000000100), &(0x7f0000000200), &(0x7f0000000000)) mmap$IORING_OFF_SQ_RING(0x0, 0xcd48, 0x8, 0x11, r1, 0x0) preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000640)=""/4112, 0x1010}], 0x1, 0x4000, 0x0) 2m49.957875244s ago: executing program 32 (id=37): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') r1 = syz_io_uring_setup(0x1333, &(0x7f0000000540)={0x0, 0x501e, 0x1000, 0x0, 0x30e}, &(0x7f0000000100), &(0x7f0000000200), &(0x7f0000000000)) mmap$IORING_OFF_SQ_RING(0x0, 0xcd48, 0x8, 0x11, r1, 0x0) preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000640)=""/4112, 0x1010}], 0x1, 0x4000, 0x0) 2m38.78275413s ago: executing program 4 (id=38): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./tracing\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./tracing/uprobe_events\x00', 0x1, 0x0) write(r0, &(0x7f0000000040)='#', 0x1) 2m38.629415731s ago: executing program 4 (id=117): r0 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @broadcast}, {0x307, @local}, 0x48, {0x2, 0x0, @local}}) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000080)="290000001e00190f00003fffffffda060200000000e80001dd0008040d0009000d0000000005000000", 0x29}], 0x1) 2m38.508197273s ago: executing program 4 (id=119): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000000)={[{@usrjquota}, {@oldalloc}, {@jqfmt_vfsv0}, {@i_version}]}, 0xff, 0x523, &(0x7f0000000900)="$eJzs3E1oXNUeAPD/nUyapB+vee/19b3mVU2tYrCY2rTaLgSpKLhQEOtClyEfJTZtpEnBlipTkLqUgntx6daFW3VTiitBcFWXghSKdNNWEEfuzL2TyfTO5Dsh7e8HyZxz750558y55875mLkBPLIG039JPXwzInZHRKn1gMH6w707l8fu37k8FpVq9dTvSe1pd9N4JnuZ2JFFhkoRpU+S+R1NZi9eOjM6PT1xPosfnjv7weHZi5eem+rNtpw4cezokeMvjryw/EIVpJeW6+7AxzP7973+3rU3x8r59jy15nKslcEYLMpKzdNrndgm29UUTspNkW2bkBmWLD3/0+rqrrX/3dEV5Q5HV5ojpfXPHbCeqtVqtaf97kq6v1quzrtSBR4a0bvZOQA2R/5Bn45/87+ijsDDOoy7fbI+AErLfS/7i3iitjEf4HS3jG9za/GeDEbEu5U/vkj/Yp3mIQAAmn13Mu8JtvT/+usrI39euP5y+viPbA2lPyL+GRH/ioh/R8SeiPhPROyNiP9GxP9aXr8rIqod0h9siTfSb8wul26tUVELpf2/l7K1rXs/R9b/W5CB/q5arK/5aRPPZ+/JUHT3TE5NTxzpkMb3r/70Wbt9ef+vN3tM08/7glk+bpVbJujGR+dGV1DUQrevRAyUs/I3+r9JOSJprAQkEbEvIgaan1jp/Lr9TeGpZ7/a34h0Lzyuuf9bXP6aauE6WqeliiWqfhnxTL3+K9EofyxYREwWrE+eHT09cXri3EhjffJwb0z3dUrjhx+vvtVu36Ll/+bXxhpl5rXj357KWtbqpfW/PebrP/L12/ny9ycRSWO9dnb5aVz95dMHxjR51S1e/8Xn/7bknVo4H4N9ODo3d/5IxLbkjQe3j8w/N4+nj+k5nJZ/6GDr+V9Lt3aNy9+J/0dEehI/FhGPR32EmOb9QEQ8GREHO5T/xitPvd9u3xLP/7ruDomsUFr+8VhY/nrNL6j/+fX6doEkuyAU7Oo6c+Dm/YGVlj+t/2O10FC2pfj6lyy4RLTLaf5pl275a9XvHgAAAGwNpYjY2TSXtDNKpeHh+hzQnthemp6ZnTs0OXPh3Hi6L6I/ukuTU9O1+c/6fHB3ks9/9jfFR1riR7N548+7+mrx4bGZ6fFNLTmwo9bmk9JwxI1dTe0/9VvLFHOH7wkDW9UarKMBW1Sn9p924vde28DMABtq6Z//1z9a14wAG66p/bf7Wl9lBd/7ArYA438gs6TLgWsGbH1VbRkeactq/4cW+eUfsKWU4+1GeGl39ez4e1dgC9H/h0fSor/rX1Wg2lO8qzcePDh6O79gV6wsG30FaW1KIO1ZLX5wfi1eTVr5zRuyLX0Fx5zM7pbQ/n4OWT7aphWl5WWspyCtldTp5AreljSr+S1MKudnT+9d85O/mn1Xfq1Pm683pJ0WBTbyKgQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALB+/g4AAP//l8DN3Q==") mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) chdir(&(0x7f0000000080)='./file0\x00') symlink(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 2m37.952611437s ago: executing program 4 (id=124): syz_clone(0x87002100, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000007c0)='children\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000100)=""/120, 0x78}], 0x1, 0x4, 0xffffffff) 2m36.409043627s ago: executing program 4 (id=137): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x58, r0, 0x801, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x30, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee33908f8eef16f162471f4"}, @NL80211_KEY_TYPE={0x8}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac0b}]}]}, 0x58}}, 0x0) 2m35.914688644s ago: executing program 33 (id=137): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x58, r0, 0x801, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x30, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee33908f8eef16f162471f4"}, @NL80211_KEY_TYPE={0x8}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac0b}]}]}, 0x58}}, 0x0) 1m0.189202084s ago: executing program 5 (id=936): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e3000000000000000000000000800030000000000140006"], 0x58}}, 0x20008000) 59.96995831s ago: executing program 5 (id=938): unshare(0x20000400) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 59.876882824s ago: executing program 5 (id=939): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'pimreg\x00', 0x3}) ioctl$TUNSETDEBUG(r0, 0x400454c9, 0xffffffffffffffff) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10e) 59.613647057s ago: executing program 5 (id=941): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f00000013c0)={[{@jqfmt_vfsold}, {@jqfmt_vfsv0}, {@min_batch_time={'min_batch_time', 0x3d, 0x3ff}}, {@noload}, {@grpjquota_path={'grpjquota', 0x3d, '.'}}, {@noblock_validity}, {@resgid}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}, {@errors_continue}]}, 0xfa, 0x491, &(0x7f0000000f00)="$eJzs3c9vFFUcAPDvTLulgNiK+AMEqaKR+KOl5YccvGg04aCJiR4wnmpbSKVQQ2sihGj1gEdD4p149S8wnvRi1IsmXvVuSIjhAuJlzezMQGl32y3dsqX7+SS7fW/mte99Z+Z13ryZbgPoWAPZWxLxQET8GRF9efbOAgP5lxvXLoz9e+3CWBLV6jv/JLVy169dGCuLlt+3Nc9Uq0V+U516L74fMTo1NXG2yA/Nnv5oaObc+ZcmT4+enDg5cWbk6NFDB/f0HBk53JI4s7iu7/p0evfOY+9demvs+KUPfknSyOOOBXG0ykC+det6ttWVtdm2eemkO3vvLXJ7fyuX993zVrGcrojIdlel1v/7ois231rXF2980dbGAWuqWq1W652fC3NVYANLot0tANqjPNFn17/l6x4NPdaFq6/mF0BZ3DeKV76mO9I8sbey4Pq2lQYi4vjczcvZK9ZoHgIAYL4fsvHPi/XGf2k8mid6srcHi/n7/oh4KCK2R8TDEbEjIh6JqJV9LCIeX2H9C++QLB7/pFfuOrgmZOO/V4p7W3eO/9KySH9XkdtWi7+SnJicmjhQbJP9Udl0YjKZGF6ijh9f/+OrRutq479yMD5383JWfzkWLNpxpXvBBN346OzoamKe7+rnEbu668Wf1O4LRHFfb2dE7LrLOiaf7264bv7493jd+JfQ+Mc2rfpNxHP5/p+LBfGXkob3J4dfPjJyeKg3piYODJVHxWK//n7x7Ub1ryr+Fsj2/5a6x/+t+PuT3oiZc+dP1e7Xzqy8jot/fdnwmmb5+O84/o9tK47/nuTd2oKeYsUno7OzZ4cjepI3Fy8fuf3TynxZPot//776/X973N4ST0TE7ojYExFPZheFRdufioinI2LfEvH//NozH648/vqz8pUl6rkbWfzjy+3/mL//V57oOvXT98vH3xsRjfb/oVpqf7Gkmd9/zTZwNdsOAAAA7hf5M/BJOng7nQwO5s/w74gt6dT0zOwLJ6Y/PjOePyvfH5W0nOnqmzcfOlzMDZf5kQX5g8W88dddm2v5wbHpqfF2Bw8dbuui/p+mWf/P/N3V7tYBa64F99GA+5T+D51L/4fOlCzb/1v9yBGwnjj/Q+eq1/8/a1h68Ls1bQxwTzn/Q+dqov/P5V8ajwqA+5PzP3Qu/R86UsO/jU9X9Sf/LU3s+TZv61Jl/is+QmW9tHnjJyJdF83Y+Inupj/MolGisrgvV4t/xpAt2VT3u9r6awkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBl/g8AAP//RrLleA==") r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f00000000c0)='./file0\x00') 59.107642854s ago: executing program 5 (id=944): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000640)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {0x0, 0x300}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xc, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x3}]}}]}, 0x3c}, 0x1, 0x7a00}, 0x0) 57.544488743s ago: executing program 5 (id=958): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x644, 0x65, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x1, 0x2}, {0x0, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x618, 0x2, [@TCA_BPF_ACT={0x614, 0x1, [@m_bpf={0xfc, 0x11, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_NAME={0x5, 0x6, '\x00'}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x3, 0xffffffffffffffff, 0x10001, 0x6}}]}, {0x9d, 0x6, "a41f25d22b1bae1b6bfb4a42ad5ba9db462fca41280c331f630e2c9f0be1093117392575082305ebc27660464ef802792ce06133244235023f0f4882fc0a47f4d5e499a8857cd81b0e6fda422cbc53ad098872214190756df6bbd0e760248aa97e200702fd569bd27d4a70df1d4a123ffc42d2592c81751e15e260622f14aeaaca5dc8acab93651fdd1d5614d98f28fc76d402e1028d910282"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_xt={0x1f4, 0x5, 0x0, 0x0, {{0x7}, {0xe0, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0xd9, 0x6, {0x7, 'raw\x00', 0x7, 0x100, "5922b40f3b9231ba6e0c37dcda932a70335da3c7ed969269be350eede0a5fda559f5cb1d2965da3399446c574f0d7ed3b4810fc3efe0304c7bb1d3ed00a60a15519cae499f11ac626316a075637035e57ffcbd48e9b64edfcef2bcef40dc7e09e080d742bd84c2df1d8326e58c401490153b89d988036ca696f840b6fd058e9831b7d5556fc2ddb3310402db87ab3b0fb053ee9ec6a5623950d5c8c27e52368dee7c43591d3c28005b61db04d1f0e1"}}]}, {0xed, 0x6, "a5fd64840366fd7ad44f3f053221ded9ced495590e2bc8690a2765e56ded8425cb3eb0e04bbcfec50e639bf373167e617b24eccd260f28bb850873b1e2154b158987d6e585e10ffeaba32641bae47de041e1169d8e4a65b8ce3633a4469c93c5228320c572237d92a9ae6bbc2d2bd3a2d1e27de283017ecf9fca6b2cd8a119dee59702830717b694625f60f5c81f688775c5e292f76a0ffa39e1d2cabd639d1c111c01e0d2f9faa220154db33399242bca9f4fac65c74cb6264c28ac7a50037564c7b417fb61d617d212ab3243c30e0e82d9a12651b74553d539b991a302489af94626e5aac41c53b2"}, {0xc, 0x7, {0x0, 0xeb0757422c733451}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_tunnel_key={0xf0, 0x8, 0x0, 0x0, {{0xf}, {0x40, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @mcast1}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private0}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @local}]}, {0x82, 0x6, "51719d53a2b05eda58a80a40d29b01394b8749d7d9ef9f47cce75187b6f333f4bfe797fa4227bf38cf0b71e1b4888d8d1ed410a788c182ba498076ca9ab3d63a8f29175d44a2e8364296c34ac0cdb8972288ecf6515bec4861a53e1e18e54679f5666b0536d0a008aa9b3be1f5e00c4c72460249c372de16eb2cfc157145"}, {0xc}, {0xc, 0x8, {0x3, 0xddc47d017e85c037}}}}, @m_xt={0x230, 0x13, 0x0, 0x0, {{0x7}, {0xe0, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x5e, 0x6, {0x9, 'raw\x00', 0xef, 0x7, "859b467c76be5255b2d4f6101cf6d6cb72c6b46512ecba82df24523b07075e859fd68154d7171a2ca3415ec79cc8ff85b058dae9"}}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_TARG={0x2a, 0x6, {0x800, 'security\x00', 0x1, 0x7}}, @TCA_IPT_TARG={0x2a, 0x6, {0x8, 'security\x00', 0xd, 0x6ccd}}]}, {0x129, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}]}]}}]}, 0x644}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 56.981586797s ago: executing program 34 (id=958): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x644, 0x65, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x1, 0x2}, {0x0, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x618, 0x2, [@TCA_BPF_ACT={0x614, 0x1, [@m_bpf={0xfc, 0x11, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_NAME={0x5, 0x6, '\x00'}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x3, 0xffffffffffffffff, 0x10001, 0x6}}]}, {0x9d, 0x6, "a41f25d22b1bae1b6bfb4a42ad5ba9db462fca41280c331f630e2c9f0be1093117392575082305ebc27660464ef802792ce06133244235023f0f4882fc0a47f4d5e499a8857cd81b0e6fda422cbc53ad098872214190756df6bbd0e760248aa97e200702fd569bd27d4a70df1d4a123ffc42d2592c81751e15e260622f14aeaaca5dc8acab93651fdd1d5614d98f28fc76d402e1028d910282"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_xt={0x1f4, 0x5, 0x0, 0x0, {{0x7}, {0xe0, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0xd9, 0x6, {0x7, 'raw\x00', 0x7, 0x100, "5922b40f3b9231ba6e0c37dcda932a70335da3c7ed969269be350eede0a5fda559f5cb1d2965da3399446c574f0d7ed3b4810fc3efe0304c7bb1d3ed00a60a15519cae499f11ac626316a075637035e57ffcbd48e9b64edfcef2bcef40dc7e09e080d742bd84c2df1d8326e58c401490153b89d988036ca696f840b6fd058e9831b7d5556fc2ddb3310402db87ab3b0fb053ee9ec6a5623950d5c8c27e52368dee7c43591d3c28005b61db04d1f0e1"}}]}, {0xed, 0x6, "a5fd64840366fd7ad44f3f053221ded9ced495590e2bc8690a2765e56ded8425cb3eb0e04bbcfec50e639bf373167e617b24eccd260f28bb850873b1e2154b158987d6e585e10ffeaba32641bae47de041e1169d8e4a65b8ce3633a4469c93c5228320c572237d92a9ae6bbc2d2bd3a2d1e27de283017ecf9fca6b2cd8a119dee59702830717b694625f60f5c81f688775c5e292f76a0ffa39e1d2cabd639d1c111c01e0d2f9faa220154db33399242bca9f4fac65c74cb6264c28ac7a50037564c7b417fb61d617d212ab3243c30e0e82d9a12651b74553d539b991a302489af94626e5aac41c53b2"}, {0xc, 0x7, {0x0, 0xeb0757422c733451}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_tunnel_key={0xf0, 0x8, 0x0, 0x0, {{0xf}, {0x40, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @mcast1}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private0}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @local}]}, {0x82, 0x6, "51719d53a2b05eda58a80a40d29b01394b8749d7d9ef9f47cce75187b6f333f4bfe797fa4227bf38cf0b71e1b4888d8d1ed410a788c182ba498076ca9ab3d63a8f29175d44a2e8364296c34ac0cdb8972288ecf6515bec4861a53e1e18e54679f5666b0536d0a008aa9b3be1f5e00c4c72460249c372de16eb2cfc157145"}, {0xc}, {0xc, 0x8, {0x3, 0xddc47d017e85c037}}}}, @m_xt={0x230, 0x13, 0x0, 0x0, {{0x7}, {0xe0, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x5e, 0x6, {0x9, 'raw\x00', 0xef, 0x7, "859b467c76be5255b2d4f6101cf6d6cb72c6b46512ecba82df24523b07075e859fd68154d7171a2ca3415ec79cc8ff85b058dae9"}}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_TARG={0x2a, 0x6, {0x800, 'security\x00', 0x1, 0x7}}, @TCA_IPT_TARG={0x2a, 0x6, {0x8, 'security\x00', 0xd, 0x6ccd}}]}, {0x129, 0x6, "3f664d65ad79178dad4d7815e4c50308bf9a3f35e2b90387936ecd06a67777e4d51dfa578f9f5021013f0c9a057b8f82000000000000000000000000007f81188b2cda51230f1a7c6035500fcba2a0c1e8df61c1a24ebdf1b89f29be8825795496195eb50cd86bf94eb7c2f2f3cd2a74145b5e23908868d084fa1aeb5cf35b1d008b539cc91d0cb1e1304dc65d40df4446cb4725e42a047c2fc7ba3b1e387f5628b3c86a55e4972d016f00000378526b1797e51bbca47fa852a731a6d7b7678b453e7c5c4642b54dcee1032681e6853f7c2f7f8aa5667dceac0f2e9f55d94a322ff7f926c35a7b8745989c4b1c88fbc02fb1d34f0dc8917bc6a1b7ffa0d4bbddada56c96a3f61363e90cdb6db84cab4aff681e54e5af5ebafd066309a6e03c9bdba1eb03c2"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}]}]}}]}, 0x644}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 5.304980961s ago: executing program 6 (id=1346): syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000200)='./bus\x00', 0x300000a, &(0x7f0000000340)={[{@nodatacow}, {@fatal_errors_bug}, {@nodiscard}, {@clear_cache}, {@discard_async}, {@clear_cache}, {@nobarrier}, {@thread_pool={'thread_pool', 0x3d, 0x8}}, {@nospace_cache}, {@enospc_debug}, {@ssd_spread}, {@nossd}]}, 0x3, 0x55a3, &(0x7f000000e0c0)="$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") openat(0xffffffffffffff9c, 0x0, 0x40942, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200), 0xfea7) 3.638988262s ago: executing program 2 (id=1356): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f00000004c0)="df33c9f7b9a600000000e90f0000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.778179382s ago: executing program 1 (id=1360): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x14, 0x0, 0x1, 0x401, 0x21, 0x0, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x8d7f1b7f2655925c}, 0x0) unshare(0x2a020480) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={r0, 0x88, &(0x7f0000000300)}, 0x10) 2.521082788s ago: executing program 1 (id=1361): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x6, 0x8, 0x8}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 2.4715327s ago: executing program 6 (id=1362): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xfffffffc, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x4c850) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000023c0)=@newtfilter={0x4c, 0x2c, 0xf3f, 0x30bd28, 0x255fdbfd, {0x0, 0x0, 0x0, r1, {0xfff2, 0x2}, {0x0, 0xfff3}, {0xfff1, 0xd}}, [@filter_kind_options=@f_fw={{0x7}, {0x20, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'hsr0\x00'}, @TCA_FW_CLASSID={0x8, 0x1, {0xb, 0x4}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20045005}, 0x0) 2.346608973s ago: executing program 1 (id=1363): mknod$loop(&(0x7f00000001c0)='./file0\x00', 0x100000000000600d, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f8b) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0xc, 0x2, 0x803f5, 0x1, 0x800}) 2.100310269s ago: executing program 1 (id=1364): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) fcntl$setstatus(r0, 0x4, 0x2c00) read$FUSE(r0, &(0x7f0000003c00)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_WRITE(r0, &(0x7f0000005c40)={0x18, 0x0, r1, {0x100}}, 0x18) 1.937055293s ago: executing program 2 (id=1365): syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000007c0), 0xff, 0x73a, &(0x7f0000000800)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2440, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000a80)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000000)) 1.835130285s ago: executing program 1 (id=1366): syz_mount_image$udf(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x18410, &(0x7f0000000180)=ANY=[@ANYRES8=0x0, @ANYRES64=0x0], 0x1, 0x4b9, &(0x7f0000001040)="$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") truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc042, 0x0) write$P9_RXATTRCREATE(r0, &(0x7f0000000400)={0x7, 0x21, 0x1}, 0xffffffc0) 1.777987357s ago: executing program 6 (id=1367): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000000c80)=[{{&(0x7f0000000100)={0xa, 0x4e24, 0x66a5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000480)="bf", 0x1}], 0x1}}], 0x1, 0x931766f6319eed44) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000240)={0x0, 0x80000000, 0x248e}, 0x10) 1.374485166s ago: executing program 0 (id=1368): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r0, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f0000000200)=0xef, 0x4) recvmmsg(r0, &(0x7f0000006700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/31, 0x1f}, 0x11}], 0x621, 0x10162, 0x0) 1.315948078s ago: executing program 6 (id=1369): openat$capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x501, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000018c0), 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 1.19605901s ago: executing program 2 (id=1370): mkdir(&(0x7f0000000100)='./sys_mount\x00', 0x1fd) mount(0x0, &(0x7f0000000180)='./sys_mount\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys_mount/block/loop0/queue/rotational\x00', 0x40402, 0x0) write(r0, &(0x7f0000000000)="35f6fa63", 0x4) 1.181252041s ago: executing program 0 (id=1371): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000200)={[{@umask={'umask', 0x3d, 0x8}}, {@discard}, {@gid={'gid', 0x3d, 0xee00}}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'macgaelic'}}, {@errors_continue}, {@umask={'umask', 0x3d, 0x7}}, {@umask={'umask', 0x3d, 0x7}}, {@umask={'umask', 0x3d, 0x400}}, {@dmask={'dmask', 0x3d, 0x5}}]}, 0x1, 0x1534, &(0x7f0000002d00)="$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") r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r1, @ANYBLOB="0200000000008000800012000800010076746936"], 0xa0}}, 0x0) 1.180088931s ago: executing program 1 (id=1372): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x88c0, &(0x7f0000000100)={[{@dir_resv_level={'dir_resv_level', 0x3d, 0x402}}, {@dir_resv_level={'dir_resv_level', 0x3d, 0x7}}, {@noacl}, {@journal_async_commit}, {@coherency_full}, {@heartbeat_none}, {@atime_quantum={'atime_quantum', 0x3d, 0x3}}, {@acl}]}, 0xfd, 0x4421, &(0x7f0000004480)="$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") syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f0000021300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d811, 0x0, 0x1, 0x0, &(0x7f0000000140)) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') lseek(r0, 0x10001, 0x0) 862.589219ms ago: executing program 0 (id=1373): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001300)=ANY=[@ANYBLOB="38010000000101040000000000000000020000002c0001801400018008000100ac14143208000200ac1414000c00028005000100000000000600034000020000240002801400018008000100e000000108000200e00000010c00028005000100000000000800074000000000cc0006"], 0x138}}, 0x4) 861.611909ms ago: executing program 2 (id=1374): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') read$FUSE(r0, &(0x7f0000000700)={0x2020}, 0x2020) preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000600)=""/128, 0x80}], 0x1, 0x7f, 0x2) read$FUSE(r0, &(0x7f0000004780)={0x2020}, 0x2020) 733.533112ms ago: executing program 0 (id=1375): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000300)={@private=0xe1010203, @empty, 0x1}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendto(r1, &(0x7f0000000000)="340000001a00010001000000000000000220000000000000000000000800030001000000080002007f01010108000100e1010203", 0x34, 0x0, 0x0, 0x0) 597.085725ms ago: executing program 2 (id=1376): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 557.571496ms ago: executing program 0 (id=1377): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@newlink={0x58, 0x10, 0x403, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20101}, [@IFLA_LINK={0x8, 0x5, r2}, @IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}]}}}, @IFLA_BROADCAST={0xa, 0x2, @remote}]}, 0x58}, 0x1, 0xba01}, 0x8004) 491.719558ms ago: executing program 2 (id=1378): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x5, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_pidfd_open(0x0, 0x0) 214.003594ms ago: executing program 6 (id=1379): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) connect$pppl2tp(r0, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x2, 0x2, 0x1, {0xa, 0x4e23, 0x19b5, @local, 0x803ff}}}, 0x32) 70.874828ms ago: executing program 0 (id=1380): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001100)=@newtaction={0x14, 0x30, 0x12f}, 0x14}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000180)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffbf00c}, {0x6}]}, 0x10) sendmmsg$inet(r0, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) 0s ago: executing program 6 (id=1381): r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x40000) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') preadv(r1, &(0x7f00000003c0)=[{&(0x7f00000000c0)=""/181, 0xb5}], 0x1, 0x5, 0x4) kernel console output (not intermixed with test programs): .014604][ T28] audit: type=1326 audit(1788369228.771:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7588 comm="syz.5.491" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff936b9e159 code=0x7ffc0000 [ 150.085244][ T7580] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 150.106765][ T28] audit: type=1326 audit(1788369228.771:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7588 comm="syz.5.491" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff936b9e159 code=0x7ffc0000 [ 150.133834][ T7580] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 150.143208][ T7580] REISERFS (device loop1): using ordered data mode [ 150.149890][ T7580] reiserfs: using flush barriers [ 150.169024][ T28] audit: type=1326 audit(1788369228.821:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7588 comm="syz.5.491" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7ff936b9cfc7 code=0x7ffc0000 [ 150.169396][ T7580] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 150.212229][ T28] audit: type=1326 audit(1788369228.821:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7588 comm="syz.5.491" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff936b9e159 code=0x7ffc0000 [ 150.248683][ T28] audit: type=1326 audit(1788369228.821:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7588 comm="syz.5.491" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff936b9e159 code=0x7ffc0000 [ 150.277423][ T28] audit: type=1326 audit(1788369228.821:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7588 comm="syz.5.491" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7ff936b9e159 code=0x7ffc0000 [ 150.308320][ T7580] REISERFS (device loop1): checking transaction log (loop1) [ 150.365856][ T28] audit: type=1326 audit(1788369228.821:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7588 comm="syz.5.491" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff936b9e159 code=0x7ffc0000 [ 150.454297][ T28] audit: type=1326 audit(1788369228.821:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7588 comm="syz.5.491" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff936b9e159 code=0x7ffc0000 [ 150.514206][ T28] audit: type=1326 audit(1788369228.831:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7588 comm="syz.5.491" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=429 compat=0 ip=0x7ff936b9e159 code=0x7ffc0000 [ 150.585928][ T7580] REISERFS (device loop1): Using tea hash to sort names [ 150.648509][ T7580] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 150.690014][ T7580] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 150.774724][ T7580] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 5) not found (pos 2) [ 150.841123][ T7603] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 5) not found (pos 2) [ 151.012063][ T7582] loop0: detected capacity change from 0 to 32768 [ 151.247916][ T7582] UFO tlock:0xffffc900028ba3f0 [ 151.254778][ T7612] MetaData crosses page boundary!! [ 151.282581][ T7612] lblock = 610061, size = 269537280 [ 151.302441][ T7612] CPU: 0 PID: 7612 Comm: syz.0.488 Not tainted syzkaller #0 [ 151.309786][ T7612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 151.319889][ T7612] Call Trace: [ 151.323200][ T7612] [ 151.326158][ T7612] dump_stack_lvl+0x18c/0x250 [ 151.330885][ T7612] ? show_regs_print_info+0x20/0x20 [ 151.336126][ T7612] ? load_image+0x420/0x420 [ 151.340674][ T7612] ? folio_unlock+0x118/0x2f0 [ 151.345392][ T7612] __get_metapage+0xaac/0xfa0 [ 151.350117][ T7612] dtSearch+0x58d/0x21a0 [ 151.354458][ T7612] ? rcu_is_watching+0x15/0xb0 [ 151.359285][ T7612] jfs_lookup+0x1b1/0x420 [ 151.363651][ T7612] ? jfs_get_parent+0xb0/0xb0 [ 151.368357][ T7612] ? __asan_memset+0x22/0x40 [ 151.373006][ T7612] ? __lock_acquire+0x7d80/0x7d80 [ 151.378081][ T7612] ? __rwlock_init+0x150/0x150 [ 151.382889][ T7612] ? d_set_d_op+0x25f/0x370 [ 151.387425][ T7612] ? do_raw_spin_unlock+0x121/0x230 [ 151.392669][ T7612] ? _raw_spin_unlock+0x28/0x40 [ 151.397557][ T7612] ? d_alloc+0x1eb/0x250 [ 151.401870][ T7612] lookup_one_qstr_excl+0x112/0x250 [ 151.407110][ T7612] filename_create+0x246/0x450 [ 151.411917][ T7612] ? kern_path_create+0x50/0x50 [ 151.416801][ T7612] ? __virt_addr_valid+0x10c/0x380 [ 151.421949][ T7612] ? __virt_addr_valid+0x10c/0x380 [ 151.427107][ T7612] do_mkdirat+0xa9/0x450 [ 151.431395][ T7612] ? vfs_mkdir+0x470/0x470 [ 151.435853][ T7612] ? getname_flags+0x20a/0x500 [ 151.440663][ T7612] __x64_sys_mkdir+0x6e/0x80 [ 151.445288][ T7612] do_syscall_64+0x55/0xb0 [ 151.449784][ T7612] ? clear_bhb_loop+0x40/0x90 [ 151.454493][ T7612] ? clear_bhb_loop+0x40/0x90 [ 151.459209][ T7612] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 151.465154][ T7612] RIP: 0033:0x7fc7da79e159 [ 151.469608][ T7612] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 151.489247][ T7612] RSP: 002b:00007fc7db63a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 151.497696][ T7612] RAX: ffffffffffffffda RBX: 00007fc7daa26090 RCX: 00007fc7da79e159 [ 151.505703][ T7612] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000180 [ 151.513707][ T7612] RBP: 00007fc7da835024 R08: 0000000000000000 R09: 0000000000000000 [ 151.521716][ T7612] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 151.529716][ T7612] R13: 00007fc7daa26128 R14: 00007fc7daa26090 R15: 00007ffc63444a88 [ 151.537738][ T7612] [ 151.645253][ T7612] bread failed! [ 151.657079][ T7612] jfs_lookup: dtSearch returned -5 [ 151.680490][ T7623] netlink: 4 bytes leftover after parsing attributes in process `syz.1.497'. [ 152.690460][ T7629] loop1: detected capacity change from 0 to 32768 [ 152.793530][ T6204] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 152.868716][ T7650] tap0: tun_chr_ioctl cmd 1074025677 [ 152.892708][ T7650] tap0: linktype set to 780 [ 153.023733][ T6204] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 153.042960][ T6204] usb 6-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 153.081541][ T7633] loop2: detected capacity change from 0 to 40427 [ 153.083684][ T6204] usb 6-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 153.113822][ T6204] usb 6-1: config 1 interface 0 has no altsetting 0 [ 153.133521][ T6204] usb 6-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 153.142642][ T6204] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.159142][ T7633] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 153.173959][ T7633] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 153.188587][ T6204] ums-sddr09 6-1:1.0: USB Mass Storage device detected [ 153.224137][ T7633] F2FS-fs (loop2): invalid crc value [ 153.261607][ T7633] F2FS-fs (loop2): Found nat_bits in checkpoint [ 153.350002][ T7633] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 153.365309][ T7633] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 153.436682][ T6204] scsi host1: usb-storage 6-1:1.0 [ 153.666448][ T5784] usb 6-1: USB disconnect, device number 2 [ 154.736618][ T6205] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 154.933715][ T6205] usb 6-1: Using ep0 maxpacket: 8 [ 154.942094][ T6205] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 154.959389][ T6205] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.986745][ T6205] pvrusb2: Hardware description: Terratec Grabster AV400 [ 154.997872][ T7721] vivid-000: disconnect [ 155.004763][ T6205] pvrusb2: ********** [ 155.008885][ T6205] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 155.020082][ T7718] vivid-000: reconnect [ 155.030338][ T6205] pvrusb2: Important functionality might not be entirely working. [ 155.039676][ T7720] loop0: detected capacity change from 0 to 1024 [ 155.058330][ T6205] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 155.081622][ T6205] pvrusb2: ********** [ 155.117912][ T7720] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 155.177092][ T7724] loop2: detected capacity change from 0 to 1024 [ 155.204041][ T7720] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a042c118, mo2=0002] [ 155.212295][ T7720] System zones: 0-1, 3-12 [ 155.226961][ T2322] pvrusb2: Invalid write control endpoint [ 155.245271][ T7724] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 155.257956][ T7724] ext4 filesystem being mounted at /135/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 155.280683][ T7720] EXT4-fs (loop0): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 155.293855][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 155.293866][ T28] audit: type=1800 audit(1788369234.061:40): pid=7724 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.527" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 155.326444][ T7724] EXT4-fs error (device loop2): ext4_map_blocks:720: inode #15: comm syz.2.527: lblock 0 mapped to illegal pblock 0 (length 6) [ 155.344111][ T7724] EXT4-fs (loop2): Remounting filesystem read-only [ 155.413091][ T5781] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 155.482353][ T5784] usb 6-1: USB disconnect, device number 3 [ 155.503087][ T2322] pvrusb2: Invalid write control endpoint [ 155.538773][ T2322] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 155.571296][ T2322] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 155.585933][ T2322] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 155.596261][ T2322] pvrusb2: Device being rendered inoperable [ 155.606831][ T2322] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 155.619753][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 155.643493][ T2322] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 155.667191][ T2322] pvrusb2: Attached sub-driver cx25840 [ 155.673893][ T2322] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 155.685726][ T2322] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 155.904284][ T7741] loop1: detected capacity change from 0 to 512 [ 156.178669][ T7753] netlink: 'syz.5.538': attribute type 9 has an invalid length. [ 156.282228][ T7755] netlink: 12 bytes leftover after parsing attributes in process `syz.0.539'. [ 156.332707][ T7759] loop1: detected capacity change from 0 to 512 [ 156.370691][ T7759] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.399620][ T7759] ext4 filesystem being mounted at /147/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 156.455698][ T7759] netlink: 188 bytes leftover after parsing attributes in process `syz.1.540'. [ 156.465879][ T7759] netlink: 80 bytes leftover after parsing attributes in process `syz.1.540'. [ 156.477180][ T7759] netlink: 24 bytes leftover after parsing attributes in process `syz.1.540'. [ 156.512360][ T5780] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.572198][ T7768] loop0: detected capacity change from 0 to 512 [ 156.581584][ T7768] EXT4-fs: Ignoring removed bh option [ 156.624953][ T7768] EXT4-fs (loop0): Test dummy encryption mode enabled [ 156.631765][ T7768] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 156.650260][ T7768] EXT4-fs error (device loop0): ext4_orphan_get:1408: inode #15: comm syz.0.544: inode has both inline data and extents flags [ 156.667755][ T7768] EXT4-fs error (device loop0): ext4_orphan_get:1413: comm syz.0.544: couldn't read orphan inode 15 (err -117) [ 156.682133][ T7768] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 156.849469][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.895645][ T7777] bond0: entered promiscuous mode [ 156.900746][ T7777] bond_slave_0: entered promiscuous mode [ 156.924220][ T7777] bond_slave_1: entered promiscuous mode [ 156.933943][ T7777] batadv0: entered promiscuous mode [ 156.965046][ T7777] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 157.253683][ T7789] loop5: detected capacity change from 0 to 128 [ 157.273384][ T5784] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 157.296869][ T7789] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 157.324856][ T7789] ext4 filesystem being mounted at /88/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 157.392294][ T7792] loop1: detected capacity change from 0 to 256 [ 157.463542][ T5784] usb 1-1: Using ep0 maxpacket: 16 [ 157.474759][ T5784] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 157.491909][ T6335] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 157.501219][ T5784] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 157.512191][ T5784] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 157.525944][ T5784] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 157.536768][ T5784] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.577451][ T7792] FAT-fs (loop1): Directory bread(block 64) failed [ 157.592912][ T7792] FAT-fs (loop1): Directory bread(block 65) failed [ 157.600266][ T5784] usb 1-1: config 0 descriptor?? [ 157.618874][ T7792] FAT-fs (loop1): Directory bread(block 66) failed [ 157.625913][ T7792] FAT-fs (loop1): Directory bread(block 67) failed [ 157.632719][ T7792] FAT-fs (loop1): Directory bread(block 68) failed [ 157.639966][ T7792] FAT-fs (loop1): Directory bread(block 69) failed [ 157.647500][ T7792] FAT-fs (loop1): Directory bread(block 70) failed [ 157.658081][ T7792] FAT-fs (loop1): Directory bread(block 71) failed [ 157.668324][ T7792] FAT-fs (loop1): Directory bread(block 72) failed [ 157.679686][ T7792] FAT-fs (loop1): Directory bread(block 73) failed [ 157.731281][ T7794] loop2: detected capacity change from 0 to 4096 [ 157.745411][ T7794] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 157.861362][ T7792] syz.1.554: attempt to access beyond end of device [ 157.861362][ T7792] loop1: rw=2049, sector=1224, nr_sectors = 4 limit=256 [ 157.882168][ T7794] ntfs: volume version 3.1. [ 157.966649][ T7794] ntfs: (device loop2): ntfs_cluster_alloc(): Failed to allocate clusters, aborting (error -28). [ 158.049671][ T5784] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0002/input/input12 [ 158.203885][ T5784] microsoft 0003:045E:07DA.0002: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 158.273863][ T5784] usb 1-1: USB disconnect, device number 5 [ 158.341618][ T7805] fido_id[7805]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 158.452676][ T7810] netlink: 'syz.1.560': attribute type 8 has an invalid length. [ 159.029067][ T7827] loop1: detected capacity change from 0 to 256 [ 159.157370][ T7831] loop0: detected capacity change from 0 to 2048 [ 159.292737][ T7831] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.416261][ T7815] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 159.454325][ T7815] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 159.476646][ T7841] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 159.510960][ T7815] F2FS-fs (loop2): Found nat_bits in checkpoint [ 159.606770][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.783727][ T7815] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 159.790851][ T7815] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 160.073599][ T23] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 160.291991][ T23] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 160.311532][ T23] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.333894][ T23] usb 6-1: Product: syz [ 160.338152][ T23] usb 6-1: Manufacturer: syz [ 160.342821][ T23] usb 6-1: SerialNumber: syz [ 160.365109][ T23] usb 6-1: config 0 descriptor?? [ 160.806549][ T23] usb 6-1: Firmware: major: 165, minor: 173, hardware type: UNKNOWN (213) [ 160.928013][ T7876] netlink: 'syz.2.586': attribute type 8 has an invalid length. [ 160.951819][ T7879] autofs4:pid:7879:autofs_fill_super: pipe file descriptor does not contain proper ops [ 161.024170][ T23] usb 6-1: failed to fetch extended address, random address set [ 161.032001][ T23] usb 6-1: atusb_probe: initialization failed, error = -524 [ 161.064998][ T23] atusb: probe of 6-1:0.0 failed with error -524 [ 161.086362][ T23] usb 6-1: USB disconnect, device number 4 [ 161.094560][ T7883] overlayfs: workdir and upperdir must reside under the same mount [ 161.194390][ T7887] set_capacity_and_notify: 2 callbacks suppressed [ 161.194403][ T7887] loop0: detected capacity change from 0 to 128 [ 161.249468][ T7887] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 161.265113][ T7887] ext4 filesystem being mounted at /160/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 161.350554][ T7893] netlink: 24 bytes leftover after parsing attributes in process `syz.1.593'. [ 161.360316][ T7893] netlink: 'syz.1.593': attribute type 2 has an invalid length. [ 161.396964][ T7889] hub 1-0:1.0: USB hub found [ 161.423867][ T7889] hub 1-0:1.0: 1 port detected [ 161.540701][ T5775] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 162.156048][ T7921] netlink: 4 bytes leftover after parsing attributes in process `syz.2.604'. [ 162.404344][ T7929] netlink: 40 bytes leftover after parsing attributes in process `syz.5.609'. [ 162.604779][ T7937] netlink: 44 bytes leftover after parsing attributes in process `syz.2.612'. [ 162.674554][ T7940] serio: Serial port ttyS3 [ 162.958737][ T7949] loop0: detected capacity change from 0 to 4096 [ 162.968148][ T7949] EXT4-fs (loop0): Test dummy encryption mode enabled [ 163.009123][ T7949] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=8842c018, mo2=0003] [ 163.040568][ T7949] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.086853][ T7949] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 163.155421][ T7949] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 163.177259][ T7949] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 163.216034][ T7949] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c098, mo2=0003] [ 163.243479][ T7949] System zones: 0-5 [ 163.257518][ T7949] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 163.365022][ T7964] loop2: detected capacity change from 0 to 16 [ 163.388387][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.389266][ T7964] erofs: (device loop2): mounted with root inode @ nid 36. [ 163.483309][ T28] audit: type=1800 audit(1788369242.241:41): pid=7964 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.624" name="file1" dev="loop2" ino=86 res=0 errno=0 [ 163.874334][ T7974] loop5: detected capacity change from 0 to 4096 [ 164.334276][ T7995] loop2: detected capacity change from 0 to 512 [ 164.397921][ T7995] EXT4-fs error (device loop2): ext4_orphan_get:1408: inode #15: comm syz.2.640: iget: bad extended attribute block 134217728 [ 164.526045][ T7995] EXT4-fs error (device loop2): ext4_orphan_get:1413: comm syz.2.640: couldn't read orphan inode 15 (err -117) [ 164.549642][ T7995] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.657833][ T28] audit: type=1800 audit(1788369243.421:42): pid=7995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.640" name="file0" dev="loop2" ino=13 res=0 errno=0 [ 164.668634][ T7985] loop0: detected capacity change from 0 to 32768 [ 164.715036][ T7985] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.634 (7985) [ 164.740472][ T7985] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 164.772610][ T7985] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 164.783207][ T7985] BTRFS info (device loop0): use zlib compression, level 3 [ 164.792081][ T7985] BTRFS info (device loop0): turning on sync discard [ 164.801106][ T7985] BTRFS info (device loop0): using free space tree [ 164.815258][ T5781] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.956850][ T7985] BTRFS info (device loop0): enabling ssd optimizations [ 164.974049][ T6204] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 165.173848][ T6204] usb 2-1: Using ep0 maxpacket: 16 [ 165.190824][ T6204] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 165.210962][ T6204] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 165.248031][ T6204] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 165.277100][ T6204] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 165.287017][ T6204] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.304383][ T6204] usb 2-1: config 0 descriptor?? [ 165.325887][ T5775] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 165.382700][ T8031] loop2: detected capacity change from 0 to 256 [ 165.406398][ T8031] FAT-fs (loop2): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 165.586069][ T11] FAT-fs (loop2): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 165.763206][ T6204] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0003/input/input13 [ 165.883924][ T6204] microsoft 0003:045E:07DA.0003: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 166.024212][ T8039] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 166.030202][ T8039] syzkaller0: linktype set to 825 [ 166.039979][ T6204] usb 2-1: USB disconnect, device number 3 [ 166.170788][ T8041] loop5: detected capacity change from 0 to 256 [ 166.183218][ T8041] exfat: Unknown parameter 'o' [ 166.290824][ T8045] syzkaller1: tun_chr_ioctl cmd 1074812118 [ 166.513686][ T6194] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 166.577033][ T8055] loop0: detected capacity change from 0 to 512 [ 166.706956][ T8057] loop1: detected capacity change from 0 to 256 [ 166.726457][ T6194] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 166.764790][ T28] audit: type=1800 audit(1788369245.531:43): pid=8057 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.661" name="file1" dev="loop1" ino=1048617 res=0 errno=0 [ 166.786844][ T6194] usb 6-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 166.790855][ T8057] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 166.823924][ T6194] usb 6-1: config 0 interface 0 has no altsetting 0 [ 166.830638][ T6194] usb 6-1: New USB device found, idVendor=044f, idProduct=b320, bcdDevice= 0.00 [ 166.860133][ T6194] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.866392][ T8057] FAT-fs (loop1): Filesystem has been set read-only [ 166.891262][ T6194] usb 6-1: config 0 descriptor?? [ 166.906864][ T8057] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 167.336263][ T6194] input: HID 044f:b320 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:044F:B320.0004/input/input14 [ 167.543877][ T6194] thrustmaster 0003:044F:B320.0004: input,hidraw0: USB HID v0.00 Joystick [HID 044f:b320] on usb-dummy_hcd.5-1/input0 [ 167.593485][ T6194] thrustmaster 0003:044F:B320.0004: ignoring unknown output usage 00080000 [ 167.602221][ T6194] thrustmaster 0003:044F:B320.0004: can't find FF field in output reports [ 167.657779][ T6194] usb 6-1: USB disconnect, device number 5 [ 167.753664][ T8063] fido_id[8063]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 168.002349][ T8059] loop0: detected capacity change from 0 to 40427 [ 168.043559][ T8059] F2FS-fs (loop0): invalid crc value [ 168.097167][ T8059] F2FS-fs (loop0): Found nat_bits in checkpoint [ 168.274262][ T8059] F2FS-fs (loop0): Start checkpoint disabled! [ 168.313379][ T8059] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 168.398214][ T6204] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 168.521178][ T8083] loop5: detected capacity change from 0 to 4096 [ 168.605685][ T6204] usb 2-1: Using ep0 maxpacket: 32 [ 168.625307][ T6204] usb 2-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 168.644536][ T2924] kworker/u4:7: attempt to access beyond end of device [ 168.644536][ T2924] loop0: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 168.660185][ T6204] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.677631][ T8083] ntfs: volume version 3.1. [ 168.697441][ T6204] usb 2-1: config 0 descriptor?? [ 168.710380][ T2924] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 168.738123][ T6204] as10x_usb: device has been detected [ 168.753626][ T6204] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 168.762453][ T2924] kworker/u4:7: attempt to access beyond end of device [ 168.762453][ T2924] loop0: rw=2049, sector=41000, nr_sectors = 8 limit=40427 [ 168.786924][ T6204] usb 2-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 168.823502][ T2924] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 168.982340][ T6204] as10x_usb: error during firmware upload part1 [ 169.000157][ T6204] Registered device nBox DVB-T Dongle [ 169.007945][ T6204] usb 2-1: USB disconnect, device number 4 [ 169.350171][ T6204] Unregistered device nBox DVB-T Dongle [ 169.364580][ T6204] as10x_usb: device has been disconnected [ 169.841650][ T8099] loop0: detected capacity change from 0 to 512 [ 169.871196][ T8099] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 169.949038][ T8099] EXT4-fs (loop0): 1 truncate cleaned up [ 169.977207][ T8099] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.126500][ T8099] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.677: invalid indirect mapped block 4294901760 (level 0) [ 170.180802][ T8099] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.677: invalid indirect mapped block 2185560079 (level 0) [ 170.233664][ T8099] EXT4-fs error (device loop0): ext4_do_update_inode:5256: inode #13: comm syz.0.677: corrupted inode contents [ 170.263945][ T5786] Bluetooth: hci0: command tx timeout [ 170.284009][ T8099] EXT4-fs error (device loop0): ext4_dirty_inode:6144: inode #13: comm syz.0.677: mark_inode_dirty error [ 170.320351][ T8099] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.677: invalid indirect mapped block 65535 (level 2) [ 170.378889][ T8099] EXT4-fs error (device loop0): ext4_do_update_inode:5256: inode #13: comm syz.0.677: corrupted inode contents [ 170.417478][ T8099] EXT4-fs error (device loop0): ext4_truncate:4302: inode #13: comm syz.0.677: mark_inode_dirty error [ 170.455617][ T8099] EXT4-fs error (device loop0) in ext4_setattr:5683: Corrupt filesystem [ 170.493502][ T8109] EXT4-fs error (device loop0): ext4_do_update_inode:5256: inode #13: comm syz.0.677: corrupted inode contents [ 170.520054][ T8109] EXT4-fs error (device loop0): ext4_dirty_inode:6144: inode #13: comm syz.0.677: mark_inode_dirty error [ 170.712223][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.975245][ T8132] syz.5.691[8132] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 170.975471][ T8132] syz.5.691[8132] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 171.321246][ T8147] Format for adding new device is "id port_count num_queues" (uint uint unit). [ 171.961666][ T8174] loop0: detected capacity change from 0 to 512 [ 172.040728][ T8174] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 172.082836][ T8174] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #16: comm syz.0.712: invalid indirect mapped block 32768 (level 2) [ 172.114630][ T8174] EXT4-fs (loop0): Remounting filesystem read-only [ 172.143008][ T8174] EXT4-fs (loop0): 1 orphan inode deleted [ 172.164766][ T8176] loop2: detected capacity change from 0 to 4096 [ 172.181030][ T8174] EXT4-fs (loop0): 1 truncate cleaned up [ 172.194611][ T8174] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.295413][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.308593][ T8176] ntfs: volume version 3.1. [ 172.448910][ T8183] program syz.1.716 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 172.500558][ T8185] loop0: detected capacity change from 0 to 512 [ 172.983500][ T5861] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 173.149886][ T8202] loop2: detected capacity change from 0 to 512 [ 173.193902][ T8202] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 173.216670][ T5861] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 173.227215][ T5861] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.247634][ T5861] usb 1-1: Product: syz [ 173.252179][ T8202] EXT4-fs (loop2): 1 truncate cleaned up [ 173.255374][ T8202] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 173.293367][ T5861] usb 1-1: Manufacturer: syz [ 173.298051][ T5861] usb 1-1: SerialNumber: syz [ 173.313559][ T8192] loop1: detected capacity change from 0 to 32768 [ 173.334659][ T8202] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.724: invalid indirect mapped block 4294901760 (level 0) [ 173.364651][ T5861] usb 1-1: config 0 descriptor?? [ 173.373772][ T8192] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.719 (8192) [ 173.410110][ T8202] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.724: invalid indirect mapped block 2185560079 (level 0) [ 173.442332][ T8202] EXT4-fs error (device loop2): ext4_do_update_inode:5256: inode #13: comm syz.2.724: corrupted inode contents [ 173.470104][ T8202] EXT4-fs error (device loop2): ext4_dirty_inode:6144: inode #13: comm syz.2.724: mark_inode_dirty error [ 173.486131][ T8192] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 173.497925][ T8192] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 173.507089][ T8192] BTRFS info (device loop1): using free space tree [ 173.515883][ T8202] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.724: invalid indirect mapped block 65535 (level 2) [ 173.539901][ T8202] EXT4-fs error (device loop2): ext4_do_update_inode:5256: inode #13: comm syz.2.724: corrupted inode contents [ 173.555392][ T8202] EXT4-fs error (device loop2): ext4_truncate:4302: inode #13: comm syz.2.724: mark_inode_dirty error [ 173.580765][ T8202] EXT4-fs error (device loop2) in ext4_setattr:5683: Corrupt filesystem [ 173.629183][ T8192] BTRFS info (device loop1): enabling ssd optimizations [ 173.648090][ T8192] BTRFS info (device loop1): auto enabling async discard [ 173.673616][ T8209] EXT4-fs error (device loop2): ext4_do_update_inode:5256: inode #13: comm syz.2.724: corrupted inode contents [ 173.725760][ T8209] EXT4-fs error (device loop2): ext4_dirty_inode:6144: inode #13: comm syz.2.724: mark_inode_dirty error [ 173.807292][ T5861] usb 1-1: Firmware: major: 165, minor: 173, hardware type: UNKNOWN (213) [ 173.907076][ T5780] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 173.928170][ T5781] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.017239][ T5861] usb 1-1: failed to fetch extended address, random address set [ 174.065690][ T5861] usb 1-1: atusb_probe: initialization failed, error = -524 [ 174.095174][ T5861] atusb: probe of 1-1:0.0 failed with error -524 [ 174.106185][ T5861] usb 1-1: USB disconnect, device number 6 [ 174.805147][ T8251] i2c i2c-0: delete_device: Can't parse I2C address [ 174.822929][ T8249] netlink: 8 bytes leftover after parsing attributes in process `syz.1.737'. [ 175.083375][ T6204] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 175.279492][ T6204] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 175.313365][ T6204] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 175.343330][ T6204] usb 6-1: New USB device found, idVendor=0584, idProduct=0008, bcdDevice= 1.02 [ 175.365209][ T6204] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.397135][ T6204] ums-alauda 6-1:1.0: USB Mass Storage device detected [ 175.427827][ T6204] ums-alauda 6-1:1.0: This device (0584,0008,0102 S 06 P f4) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller) [ 175.427827][ T6204] Please send a copy of this message to and [ 175.474463][ T6204] scsi host1: usb-storage 6-1:1.0 [ 175.670693][ T8261] loop1: detected capacity change from 0 to 32768 [ 175.698996][ T8261] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 175.759529][ T8261] XFS (loop1): Ending clean mount [ 175.828536][ T8261] XFS (loop1): User initiated shutdown received. [ 175.844608][ T8261] XFS (loop1): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:501). Shutting down filesystem. [ 175.883376][ T8261] XFS (loop1): Please unmount the filesystem and rectify the problem(s) [ 175.933800][ T5780] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 176.084403][ T8276] loop2: detected capacity change from 0 to 4096 [ 176.100383][ T8276] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [ 176.241003][ T8276] ntfs3: loop2: Failed to initialize $Extend/$ObjId. [ 176.505313][ T12] scsi 1:0:0:0: Direct-Access Fujifilm DPC-R1 (Alauda) 0102 PQ: 0 ANSI: 0 CCS [ 176.533555][ T12] scsi 1:0:0:1: Direct-Access Fujifilm DPC-R1 (Alauda) 0102 PQ: 0 ANSI: 0 CCS [ 176.592432][ T12] sd 1:0:0:0: Attached scsi generic sg1 type 0 [ 176.601862][ T2953] sd 1:0:0:0: [sdb] Media removed, stopped polling [ 176.673012][ T12] sd 1:0:0:1: Attached scsi generic sg2 type 0 [ 176.716294][ T2953] sd 1:0:0:0: [sdb] Attached SCSI removable disk [ 176.801459][ T6194] usb 6-1: USB disconnect, device number 6 [ 176.820935][ T11] sd 1:0:0:1: [sdc] Media removed, stopped polling [ 176.903710][ T11] sd 1:0:0:1: [sdc] Attached SCSI removable disk [ 176.929010][ T7067] sd 1:0:0:1: [sdc] Test Unit Ready failed: Result: hostbyte=DID_NO_CONNECT driverbyte=DRIVER_OK [ 177.105607][ T8068] udevd[8068]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 177.253061][ T7067] udevd[7067]: inotify_add_watch(7, /dev/sdc, 10) failed: No such file or directory [ 177.321180][ T5774] udevd[5774]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 177.518062][ T5782] udevd[5782]: inotify_add_watch(7, /dev/sdc, 10) failed: No such file or directory [ 178.027845][ T8318] loop1: detected capacity change from 0 to 256 [ 178.074812][ T8318] FAT-fs (loop1): Directory bread(block 1285) failed [ 178.081617][ T8318] FAT-fs (loop1): Directory bread(block 1286) failed [ 178.123721][ T8318] FAT-fs (loop1): Directory bread(block 1287) failed [ 178.130862][ T8318] FAT-fs (loop1): Directory bread(block 1288) failed [ 178.204448][ T8318] FAT-fs (loop1): FAT read failed (blocknr 1281) [ 178.353477][ T5861] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 178.545366][ T5861] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 178.564642][ T5861] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 178.603392][ T5861] usb 3-1: New USB device found, idVendor=0584, idProduct=0008, bcdDevice= 1.02 [ 178.636785][ T5861] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.659412][ T5861] ums-alauda 3-1:1.0: USB Mass Storage device detected [ 178.674572][ T5861] ums-alauda 3-1:1.0: This device (0584,0008,0102 S 06 P f4) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller) [ 178.674572][ T5861] Please send a copy of this message to and [ 178.712828][ T5861] scsi host1: usb-storage 3-1:1.0 [ 179.415841][ T8351] loop0: detected capacity change from 0 to 32768 [ 179.425398][ T8351] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.770 (8351) [ 179.442585][ T8351] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 179.457999][ T8351] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 179.467133][ T8351] BTRFS info (device loop0): using free space tree [ 179.553865][ T8351] BTRFS info (device loop0): enabling ssd optimizations [ 179.560959][ T8351] BTRFS info (device loop0): auto enabling async discard [ 179.764399][ T5775] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 179.786873][ T11] scsi 1:0:0:0: Direct-Access Fujifilm DPC-R1 (Alauda) 0102 PQ: 0 ANSI: 0 CCS [ 179.824235][ T11] scsi 1:0:0:1: Direct-Access Fujifilm DPC-R1 (Alauda) 0102 PQ: 0 ANSI: 0 CCS [ 179.880242][ T11] scsi 1:0:0:0: Attached scsi generic sg1 type 0 [ 179.915331][ T34] sd 1:0:0:0: [sdb] Media removed, stopped polling [ 179.917793][ T11] sd 1:0:0:1: Attached scsi generic sg2 type 0 [ 180.049577][ T34] sd 1:0:0:0: [sdb] Attached SCSI removable disk [ 180.119780][ T6204] usb 3-1: USB disconnect, device number 4 [ 180.127646][ T2953] sd 1:0:0:1: [sdc] Media removed, stopped polling [ 180.139157][ T7067] sd 1:0:0:0: [sdb] Test Unit Ready failed: Result: hostbyte=DID_NO_CONNECT driverbyte=DRIVER_OK [ 180.249756][ T2953] sd 1:0:0:1: [sdc] Attached SCSI removable disk [ 180.277614][ T5925] sd 1:0:0:1: [sdc] Test Unit Ready failed: Result: hostbyte=DID_NO_CONNECT driverbyte=DRIVER_OK [ 180.342686][ T8384] loop0: detected capacity change from 0 to 1024 [ 180.404365][ T8384] EXT4-fs: Ignoring removed nomblk_io_submit option [ 180.507162][ T8384] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 180.529693][ T7067] udevd[7067]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 180.700561][ T5925] udevd[5925]: inotify_add_watch(7, /dev/sdc, 10) failed: No such file or directory [ 180.740809][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.892262][ T5782] udevd[5782]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 180.907143][ T8395] netlink: 'syz.5.783': attribute type 1 has an invalid length. [ 180.926629][ T8395] netlink: 'syz.5.783': attribute type 2 has an invalid length. [ 181.143906][ T5774] udevd[5774]: inotify_add_watch(7, /dev/sdc, 10) failed: No such file or directory [ 181.822002][ T8403] loop5: detected capacity change from 0 to 32768 [ 181.858534][ T8403] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.786 (8403) [ 181.969648][ T8403] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 182.007503][ T8403] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 182.078177][ T8403] BTRFS info (device loop5): using free space tree [ 182.272563][ T8403] BTRFS info (device loop5): enabling ssd optimizations [ 182.325566][ T8403] BTRFS info (device loop5): auto enabling async discard [ 182.623024][ T6335] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 182.977175][ T8434] loop0: detected capacity change from 0 to 32768 [ 183.045367][ T8434] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 183.076694][ T6204] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 183.150949][ T8434] XFS (loop0): Ending clean mount [ 183.336200][ T6204] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 183.351713][ T6204] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.373058][ T6204] usb 2-1: Product: syz [ 183.378283][ T6204] usb 2-1: Manufacturer: syz [ 183.386579][ T6204] usb 2-1: SerialNumber: syz [ 183.399273][ T5775] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 183.445075][ T8463] netlink: 16 bytes leftover after parsing attributes in process `syz.2.799'. [ 183.512723][ T6203] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 183.708610][ T8466] loop2: detected capacity change from 0 to 4096 [ 183.758545][ T6194] usb 2-1: USB disconnect, device number 5 [ 183.996324][ T8474] loop0: detected capacity change from 0 to 256 [ 184.014405][ T8474] exfat: Unknown parameter 'o' [ 184.073725][ T5782] blk_print_req_error: 11 callbacks suppressed [ 184.073740][ T5782] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 184.383485][ T23] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 184.468460][ T8472] loop5: detected capacity change from 0 to 32768 [ 184.493442][ T8472] XFS (loop5): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 184.563046][ T8472] XFS (loop5): Ending clean mount [ 184.583418][ T6203] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 184.591734][ T6203] ath9k_htc: Failed to initialize the device [ 184.605448][ T23] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 184.620268][ T6194] usb 2-1: ath9k_htc: USB layer deinitialized [ 184.636217][ T8472] XFS (loop5): User initiated shutdown received. [ 184.663370][ T8472] XFS (loop5): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:501). Shutting down filesystem. [ 184.665427][ T23] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 184.694136][ T8472] XFS (loop5): Please unmount the filesystem and rectify the problem(s) [ 184.733464][ T23] usb 1-1: config 0 interface 0 has no altsetting 0 [ 184.740193][ T23] usb 1-1: New USB device found, idVendor=044f, idProduct=b320, bcdDevice= 0.00 [ 184.781729][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.790607][ T6335] XFS (loop5): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 184.817773][ T23] usb 1-1: config 0 descriptor?? [ 184.993514][ T6194] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 185.002391][ T8490] loop5: detected capacity change from 0 to 1024 [ 185.027874][ T8490] EXT4-fs: Ignoring removed oldalloc option [ 185.048978][ T8490] EXT4-fs: Ignoring removed oldalloc option [ 185.066808][ T8490] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 185.098394][ T8490] EXT4-fs (loop5): stripe (4) is not aligned with cluster size (16), stripe is disabled [ 185.162532][ T8490] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 185.202558][ T6194] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 185.227437][ T6194] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 1289, setting to 1024 [ 185.249310][ T6194] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 185.260810][ T6194] usb 2-1: New USB device found, idVendor=8087, idProduct=0025, bcdDevice= 0.01 [ 185.279893][ T23] input: HID 044f:b320 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:044F:B320.0005/input/input15 [ 185.292264][ T6194] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.454195][ T23] thrustmaster 0003:044F:B320.0005: input,hidraw0: USB HID v0.00 Joystick [HID 044f:b320] on usb-dummy_hcd.0-1/input0 [ 185.500313][ T23] thrustmaster 0003:044F:B320.0005: ignoring unknown output usage 00080000 [ 185.510672][ T6335] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.552756][ T23] thrustmaster 0003:044F:B320.0005: can't find FF field in output reports [ 185.607502][ T23] usb 1-1: USB disconnect, device number 7 [ 185.714510][ T8494] fido_id[8494]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 185.777278][ T5861] usb 2-1: USB disconnect, device number 6 [ 185.785988][ T5786] Bluetooth: hci4: Reading Intel version command failed (-71) [ 186.182871][ T8504] netlink: 112 bytes leftover after parsing attributes in process `syz.5.813'. [ 186.503589][ T6204] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 186.724126][ T6204] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 186.743815][ T6204] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 186.791621][ T6204] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 186.812613][ T6204] usb 1-1: config 1 interface 0 has no altsetting 0 [ 186.822535][ T6204] usb 1-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 186.837861][ T6204] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.864848][ T6204] ums-sddr09 1-1:1.0: USB Mass Storage device detected [ 187.080760][ T6204] scsi host1: usb-storage 1-1:1.0 [ 187.314653][ T6204] usb 1-1: USB disconnect, device number 8 [ 188.106770][ T8548] jffs2: notice: (8548) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 188.331050][ T8555] loop5: detected capacity change from 0 to 1024 [ 188.426800][ T8555] hfsplus: walked past end of dir [ 188.528751][ T2953] hfsplus: bad catalog file entry [ 188.647229][ T8563] netlink: 8 bytes leftover after parsing attributes in process `syz.5.835'. [ 188.678013][ T8560] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.856221][ T8560] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.032689][ T8560] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.116381][ T8574] loop5: detected capacity change from 0 to 512 [ 189.132565][ T8574] EXT4-fs: inline encryption not supported [ 189.171795][ T8574] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 189.195777][ T8560] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.200266][ T8574] EXT4-fs error (device loop5): ext4_iget_extra_inode:4740: inode #15: comm syz.5.840: corrupted in-inode xattr: e_value size too large [ 189.245996][ T8574] EXT4-fs error (device loop5): ext4_orphan_get:1413: comm syz.5.840: couldn't read orphan inode 15 (err -117) [ 189.272179][ T8574] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 189.366271][ T6335] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.506155][ T8566] loop2: detected capacity change from 0 to 32768 [ 189.526667][ T28] audit: type=1400 audit(1788369268.291:44): apparmor="STATUS" info="failed to unpack profile capabilities" error=-71 profile="unconfined" name="foo" pid=8578 comm="syz.5.842" name="foo" offset=71 [ 189.594699][ T8566] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 189.775123][ T8566] XFS (loop2): Ending clean mount [ 189.815418][ T8566] XFS (loop2): Quotacheck needed: Please wait. [ 189.836571][ T8593] i2c-slave-eeprom 0-0001: i2c_slave_register: client slave flag not set. You might see address collisions [ 189.879949][ T8593] i2c-slave-eeprom 0-0001: i2c_slave_register: invalid address [ 189.910084][ T8566] XFS (loop2): Quotacheck: Done. [ 189.917040][ T8593] i2c-slave-eeprom: probe of 0-0001 failed with error -22 [ 189.933789][ T8593] i2c i2c-0: new_device: Instantiated device slave-24c02 at 0x01 [ 190.065631][ T5781] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 190.161710][ T8601] loop1: detected capacity change from 0 to 512 [ 190.182619][ T8601] EXT4-fs: Ignoring removed bh option [ 190.206309][ T8601] EXT4-fs (loop1): Test dummy encryption mode enabled [ 190.234684][ T8603] netlink: 260 bytes leftover after parsing attributes in process `syz.5.858'. [ 190.243989][ T8601] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 190.304929][ T8601] EXT4-fs error (device loop1): ext4_orphan_get:1408: inode #15: comm syz.1.848: inode has both inline data and extents flags [ 190.376626][ T8601] EXT4-fs error (device loop1): ext4_orphan_get:1413: comm syz.1.848: couldn't read orphan inode 15 (err -117) [ 190.417393][ T8606] netlink: 40 bytes leftover after parsing attributes in process `syz.2.849'. [ 190.437183][ T8601] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 190.555311][ T8609] loop5: detected capacity change from 0 to 512 [ 190.617907][ T5780] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.646899][ T8609] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 190.660169][ T8609] ext4 filesystem being mounted at /173/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 190.862335][ T6335] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.927241][ T8635] pimreg0: tun_chr_ioctl cmd 2147767506 [ 192.416468][ T8642] netlink: 'syz.2.862': attribute type 4 has an invalid length. [ 192.505660][ T8644] (null): rxe_set_mtu: Set mtu to 256 [ 192.535012][ T8644] lo speed is unknown, defaulting to 1000 [ 192.548993][ T8644] lo speed is unknown, defaulting to 1000 [ 192.566635][ T8644] lo speed is unknown, defaulting to 1000 [ 192.704768][ T8625] loop1: detected capacity change from 0 to 40427 [ 192.725745][ T8625] F2FS-fs (loop1): invalid crc value [ 192.765514][ T8625] F2FS-fs (loop1): Found nat_bits in checkpoint [ 192.780981][ T8651] loop5: detected capacity change from 0 to 7 [ 192.791556][ T8651] Dev loop5: unable to read RDB block 7 [ 192.807824][ T8651] loop5: AHDI p1 [ 192.815680][ T8651] loop5: partition table partially beyond EOD, truncated [ 192.984801][ T8625] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 193.048293][ T8625] F2FS-fs (loop1): access invalid blkaddr:3 [ 193.064960][ T8625] CPU: 1 PID: 8625 Comm: syz.1.854 Not tainted syzkaller #0 [ 193.072301][ T8625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 193.082391][ T8625] Call Trace: [ 193.085705][ T8625] [ 193.088732][ T8625] dump_stack_lvl+0x18c/0x250 [ 193.093581][ T8625] ? show_regs_print_info+0x20/0x20 [ 193.098828][ T8625] ? __lock_acquire+0x1336/0x7d80 [ 193.103907][ T8625] f2fs_is_valid_blkaddr+0xe6c/0x15c0 [ 193.109369][ T8625] f2fs_map_blocks+0xc20/0x4080 [ 193.114269][ T8625] ? verify_lock_unused+0x140/0x140 [ 193.119542][ T8625] ? f2fs_get_block_locked+0xe0/0xe0 [ 193.124909][ T8625] ? __might_sleep+0xe0/0xe0 [ 193.129551][ T8625] ? read_lock_is_recursive+0x20/0x20 [ 193.134946][ T8625] ? f2fs_precache_extents+0x19f/0x260 [ 193.140433][ T8625] ? down_write+0x16e/0x200 [ 193.144970][ T8625] ? down_read_killable+0x340/0x340 [ 193.150206][ T8625] ? up_write+0x1be/0x410 [ 193.154555][ T8625] ? max_file_blocks+0xb0/0x1b0 [ 193.159438][ T8625] f2fs_precache_extents+0x194/0x260 [ 193.164756][ T8625] ? f2fs_pin_file_control+0x1a0/0x1a0 [ 193.170258][ T8625] ? stack_trace_save+0xaa/0x100 [ 193.175228][ T8625] ? stack_trace_snprint+0xf0/0xf0 [ 193.180376][ T8625] ? __stack_depot_save+0x1f/0x660 [ 193.185502][ T8625] f2fs_fiemap+0x13b/0x15b0 [ 193.190042][ T8625] ? f2fs_overwrite_io+0x200/0x200 [ 193.195174][ T8625] ? __might_fault+0xaa/0x120 [ 193.199869][ T8625] ? __lock_acquire+0x7d80/0x7d80 [ 193.204911][ T8625] ? __might_fault+0xaa/0x120 [ 193.209602][ T8625] ? __might_fault+0xc6/0x120 [ 193.214286][ T8625] ? __might_fault+0xaa/0x120 [ 193.218982][ T8625] do_vfs_ioctl+0x14fe/0x1cc0 [ 193.223687][ T8625] ? __ia32_compat_sys_ioctl+0x8a0/0x8a0 [ 193.229354][ T8625] ? tomoyo_path_number_perm+0x217/0x5e0 [ 193.235010][ T8625] ? __lock_acquire+0x7d80/0x7d80 [ 193.240046][ T8625] ? slab_free_freelist_hook+0x130/0x1a0 [ 193.245696][ T8625] ? tomoyo_path_number_perm+0x4b7/0x5e0 [ 193.251342][ T8625] ? __kmem_cache_free+0xba/0x1f0 [ 193.256386][ T8625] ? tomoyo_path_number_perm+0x56b/0x5e0 [ 193.262030][ T8625] ? tomoyo_path_number_perm+0x217/0x5e0 [ 193.267675][ T8625] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 193.273181][ T8625] ? __fget_files+0x28/0x460 [ 193.277799][ T8625] ? bpf_lsm_file_ioctl+0x9/0x10 [ 193.282753][ T8625] ? security_file_ioctl+0x80/0xa0 [ 193.287891][ T8625] __se_sys_ioctl+0x83/0x170 [ 193.292588][ T8625] do_syscall_64+0x55/0xb0 [ 193.297027][ T8625] ? clear_bhb_loop+0x40/0x90 [ 193.301721][ T8625] ? clear_bhb_loop+0x40/0x90 [ 193.306415][ T8625] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 193.312340][ T8625] RIP: 0033:0x7f831899e159 [ 193.316773][ T8625] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 193.336420][ T8625] RSP: 002b:00007f831984b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 193.344860][ T8625] RAX: ffffffffffffffda RBX: 00007f8318c25fa0 RCX: 00007f831899e159 [ 193.352849][ T8625] RDX: 0000200000005880 RSI: 00000000c020660b RDI: 0000000000000004 [ 193.360827][ T8625] RBP: 00007f8318a35024 R08: 0000000000000000 R09: 0000000000000000 [ 193.368813][ T8625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 193.376792][ T8625] R13: 00007f8318c26038 R14: 00007f8318c25fa0 R15: 00007ffeda3c67e8 [ 193.384795][ T8625] [ 193.530778][ T5780] syz-executor: attempt to access beyond end of device [ 193.530778][ T5780] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 193.555026][ T8644] infiniband syz2: set down [ 193.559929][ T8644] infiniband syz2: added lo [ 193.569697][ T6204] lo speed is unknown, defaulting to 1000 [ 193.580014][ T5780] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 193.596971][ T8644] syz2: rxe_create_cq: returned err = -12 [ 193.624656][ T8656] loop0: detected capacity change from 0 to 1024 [ 193.633019][ T8644] infiniband syz2: Couldn't create ib_mad CQ [ 193.649667][ T8644] infiniband syz2: Couldn't open port 1 [ 193.677775][ T8656] EXT4-fs: Ignoring removed oldalloc option [ 193.695613][ T8656] EXT4-fs: Ignoring removed oldalloc option [ 193.712052][ T8656] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 193.748701][ T8656] EXT4-fs (loop0): stripe (4) is not aligned with cluster size (16), stripe is disabled [ 193.797009][ T8656] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 193.816006][ T8644] RDS/IB: syz2: added [ 193.830818][ T8644] smc: adding ib device syz2 with port count 1 [ 193.837595][ T8644] smc: ib device syz2 port 1 has pnetid [ 193.846063][ T6204] lo speed is unknown, defaulting to 1000 [ 193.859191][ T8644] lo speed is unknown, defaulting to 1000 [ 193.894446][ T8660] loop5: detected capacity change from 0 to 512 [ 193.986165][ T8660] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.030971][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.033825][ T8660] ext4 filesystem being mounted at /176/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 194.193550][ T6335] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.356170][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.362572][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.385089][ T8644] lo speed is unknown, defaulting to 1000 [ 194.578064][ T8673] loop5: detected capacity change from 0 to 256 [ 194.671729][ T8675] loop0: detected capacity change from 0 to 512 [ 194.751784][ T8675] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 194.793355][ T8675] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities [ 194.855070][ T8679] openvswitch: netlink: Message has 161 unknown bytes. [ 194.878520][ T8679] openvswitch: netlink: Actions may not be safe on all matching packets [ 194.956985][ T8681] loop1: detected capacity change from 0 to 1024 [ 194.989029][ T8644] lo speed is unknown, defaulting to 1000 [ 194.993731][ T8681] hfsplus: walked past end of dir [ 195.079292][ T2953] hfsplus: bad catalog file entry [ 195.488177][ T8644] lo speed is unknown, defaulting to 1000 [ 195.966438][ T8707] loop2: detected capacity change from 0 to 1024 [ 196.024995][ T8707] hfsplus: walked past end of dir [ 196.096300][ T62] hfsplus: bad catalog file entry [ 196.119852][ T8709] loop5: detected capacity change from 0 to 4096 [ 196.167802][ T8709] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 196.184270][ T8709] ntfs3: loop5: Failed to load $Bitmap (-2). [ 196.490979][ T8722] loop0: detected capacity change from 0 to 2048 [ 196.513617][ T6204] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 196.582636][ T8722] EXT4-fs error (device loop0): ext4_ext_check_inode:532: inode #2: comm syz.0.894: pblk 0 bad header/extent: eh_entries is 0 but eh_depth is > 0 - magic f30a, entries 0, max 4(4), depth 5(5) [ 196.605238][ T8722] EXT4-fs (loop0): get root inode failed [ 196.610997][ T8722] EXT4-fs (loop0): mount failed [ 196.707137][ T6204] usb 3-1: unable to get BOS descriptor or descriptor too short [ 196.722954][ T6204] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 196.739508][ T6204] usb 3-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 196.754996][ T6204] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.767474][ T6204] usb 3-1: Product: syz [ 196.771688][ T6204] usb 3-1: Manufacturer: syz [ 196.776867][ T6204] usb 3-1: SerialNumber: syz [ 197.007110][ T6204] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 197.052210][ T8739] kAFS: bad VL server IP address [ 197.208520][ T6204] usb 3-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 197.236987][ T6204] usb 3-1: found format II with max.bitrate = 4, frame size=7372 [ 197.408195][ T8745] loop0: detected capacity change from 0 to 1024 [ 197.620443][ T6204] usb 3-1: parse_audio_format_rates_v2v3(): unable to retrieve sample rate range (clock 0) [ 197.698085][ T6204] usb 3-1: USB disconnect, device number 5 [ 197.760435][ T5774] udevd[5774]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 198.049068][ T8756] loop1: detected capacity change from 0 to 16 [ 198.074169][ T8756] erofs: (device loop1): mounted with root inode @ nid 36. [ 198.094669][ T8756] erofs: (device loop1): z_erofs_read_folio: read error -117 @ 43 of nid 36 [ 198.504006][ T5786] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 198.693714][ T6204] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 198.712580][ T8770] loop2: detected capacity change from 0 to 4096 [ 198.855452][ T8775] loop1: detected capacity change from 0 to 512 [ 198.872925][ T8775] EXT4-fs: Ignoring removed nobh option [ 198.892511][ T8775] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 198.933724][ T6204] usb 1-1: New USB device found, idVendor=0c45, idProduct=6280, bcdDevice=d5.fc [ 198.957071][ T6204] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.989247][ T6204] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:6280 [ 198.999944][ T8775] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 199.043810][ T8775] EXT4-fs (loop1): 1 truncate cleaned up [ 199.078101][ T8770] overlayfs: upper fs does not support tmpfile. [ 199.096131][ T8770] overlayfs: workdir/#2 already exists [ 199.116340][ T8775] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 199.337883][ T5780] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.419304][ T6204] gspca_sn9c20x: Write register 1001 failed -71 [ 199.442753][ T6204] gspca_sn9c20x: Device initialization failed [ 199.465514][ T6204] gspca_sn9c20x: probe of 1-1:252.0 failed with error -71 [ 199.495657][ T6204] usb 1-1: USB disconnect, device number 9 [ 199.765510][ T8796] ALSA: mixer_oss: invalid OSS volume '' [ 199.775250][ T8796] ALSA: mixer_oss: invalid OSS volume 'qO' [ 199.781487][ T8796] ALSA: mixer_oss: invalid OSS volume '˜ÁG˜Ö…|&+Ú¹g‰Á^Àùˆeðê¡ÀÎ —' [ 199.788888][ T8797] netlink: 'syz.1.928': attribute type 29 has an invalid length. [ 199.804016][ T8797] netlink: 'syz.1.928': attribute type 29 has an invalid length. [ 199.837337][ T8798] netlink: 'syz.1.928': attribute type 29 has an invalid length. [ 199.855546][ T8797] netlink: 'syz.1.928': attribute type 29 has an invalid length. [ 200.131101][ T8811] set_capacity_and_notify: 1 callbacks suppressed [ 200.131116][ T8811] loop1: detected capacity change from 0 to 1024 [ 200.163746][ T6204] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 200.370459][ T6204] usb 3-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 200.402787][ T6204] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.423396][ T6204] usb 3-1: Product: syz [ 200.427605][ T6204] usb 3-1: Manufacturer: syz [ 200.432220][ T6204] usb 3-1: SerialNumber: syz [ 200.441184][ T8817] netlink: 8 bytes leftover after parsing attributes in process `syz.5.936'. [ 200.464297][ T6204] usb 3-1: config 0 descriptor?? [ 200.479744][ T6204] i2c-tiny-usb 3-1:0.0: version 6d.cc found at bus 003 address 006 [ 200.749920][ T8823] pimreg: tun_chr_ioctl cmd 1074025677 [ 200.763510][ T8823] pimreg: linktype set to 270 [ 200.783330][ T8806] loop0: detected capacity change from 0 to 32768 [ 200.800324][ T8825] loop1: detected capacity change from 0 to 1024 [ 200.817613][ T8806] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 200.834365][ T8825] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 200.870443][ T8825] EXT4-fs (loop1): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 200.884356][ T6204] (null): failure reading functionality [ 200.916604][ T6204] i2c i2c-1: connected i2c-tiny-usb device [ 200.935260][ T8825] EXT4-fs error (device loop1): ext4_map_blocks:610: inode #3: block 2: comm syz.1.940: lblock 2 mapped to illegal pblock 2 (length 1) [ 200.982530][ T8806] XFS (loop0): Ending clean mount [ 201.031514][ T8836] loop5: detected capacity change from 0 to 512 [ 201.056849][ T8825] EXT4-fs (loop1): Remounting filesystem read-only [ 201.071798][ T8825] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 201.101156][ T6204] usb 3-1: USB disconnect, device number 6 [ 201.121525][ T8825] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 201.132994][ T8836] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -13 [ 201.157081][ T8836] EXT4-fs error (device loop5): ext4_orphan_get:1408: comm syz.5.941: inode #15: comm syz.5.941: iget: illegal inode # [ 201.175709][ T8825] EXT4-fs (loop1): 1 orphan inode deleted [ 201.189409][ T5775] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 201.214230][ T8825] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 201.247781][ T8836] EXT4-fs error (device loop5): ext4_orphan_get:1413: comm syz.5.941: couldn't read orphan inode 15 (err -117) [ 201.277840][ T5780] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.282453][ T8836] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.488915][ T6335] EXT4-fs error (device loop5): ext4_readdir:263: inode #11: block 18: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 201.556247][ T6335] EXT4-fs error (device loop5): ext4_empty_dir:3177: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 201.604264][ T6335] EXT4-fs error (device loop5): ext4_readdir:263: inode #11: block 18: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 201.648094][ T6335] EXT4-fs error (device loop5): ext4_empty_dir:3177: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 201.698096][ T6335] EXT4-fs error (device loop5): ext4_readdir:263: inode #11: block 18: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 201.755167][ T6335] EXT4-fs error (device loop5): ext4_empty_dir:3177: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 201.810388][ T6335] EXT4-fs error (device loop5): ext4_readdir:263: inode #11: block 18: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 201.872204][ T6335] EXT4-fs error (device loop5): ext4_empty_dir:3177: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 201.923380][ T6335] EXT4-fs error (device loop5): ext4_readdir:263: inode #11: block 18: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 201.958645][ T6335] EXT4-fs error (device loop5): ext4_empty_dir:3177: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 202.286953][ T8856] netlink: 'syz.0.950': attribute type 4 has an invalid length. [ 202.361183][ T8856] (null): rxe_set_mtu: Set mtu to 256 [ 202.384376][ T8856] rdma_rxe: rxe_newlink: failed to add lo [ 202.557836][ T8862] loop0: detected capacity change from 0 to 512 [ 202.614315][ T8862] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 202.669273][ T8862] EXT4-fs (loop0): 1 truncate cleaned up [ 202.715383][ T8862] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 202.772360][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.821156][ T8869] bridge0: port 3(syz_tun) entered blocking state [ 202.849185][ T6335] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.861387][ T8869] bridge0: port 3(syz_tun) entered disabled state [ 202.884567][ T8869] syz_tun: entered allmulticast mode [ 202.891704][ T8869] syz_tun: entered promiscuous mode [ 202.907589][ T8869] bridge0: port 3(syz_tun) entered blocking state [ 202.914561][ T8869] bridge0: port 3(syz_tun) entered forwarding state [ 202.964030][ T5784] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 203.069323][ T62] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.095249][ T8876] loop0: detected capacity change from 0 to 512 [ 203.135084][ T8874] loop1: detected capacity change from 0 to 128 [ 203.172480][ T8876] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 203.173949][ T5784] usb 3-1: Using ep0 maxpacket: 16 [ 203.192260][ T5784] usb 3-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 203.205357][ T5784] usb 3-1: config 0 interface 0 has no altsetting 0 [ 203.209429][ T8874] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 203.212212][ T5784] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 203.233224][ T5784] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.251143][ T5784] usb 3-1: config 0 descriptor?? [ 203.264881][ T8876] ext4 filesystem being mounted at /248/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 203.292142][ T8874] ext4 filesystem being mounted at /258/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 203.355868][ T62] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.411389][ T8874] fscrypt (loop1, inode 12): Direct key flag not allowed with different contents and filenames modes [ 203.424095][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.508688][ T62] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.561327][ T5780] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 203.631936][ T8882] netlink: 4 bytes leftover after parsing attributes in process `syz.0.962'. [ 203.650442][ T8882] netlink: 4 bytes leftover after parsing attributes in process `syz.0.962'. [ 203.668703][ T62] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.695845][ T5784] mcp2221 0003:04D8:00DD.0006: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 203.918779][ T8886] loop0: detected capacity change from 0 to 256 [ 203.928269][ T28] audit: type=1326 audit(1788369282.691:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8887 comm="syz.1.965" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f831899e159 code=0x7ffc0000 [ 203.993708][ T28] audit: type=1326 audit(1788369282.691:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8887 comm="syz.1.965" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f831899e159 code=0x7ffc0000 [ 204.051178][ T8886] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xcf07e9af, utbl_chksum : 0xe619d30d) [ 204.080916][ T28] audit: type=1326 audit(1788369282.731:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8887 comm="syz.1.965" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f831899e159 code=0x7ffc0000 [ 204.129977][ T5861] usb 3-1: USB disconnect, device number 7 [ 204.131780][ T28] audit: type=1326 audit(1788369282.831:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8887 comm="syz.1.965" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f831899e159 code=0x7ffc0000 [ 204.224974][ T28] audit: type=1326 audit(1788369282.831:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8887 comm="syz.1.965" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f831899e159 code=0x7ffc0000 [ 204.298326][ T28] audit: type=1326 audit(1788369282.831:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8889 comm="syz.1.965" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f831895e98e code=0x7ffc0000 [ 204.416741][ T28] audit: type=1326 audit(1788369282.921:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8887 comm="syz.1.965" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f831899e159 code=0x7ffc0000 [ 204.503636][ T28] audit: type=1326 audit(1788369282.931:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8887 comm="syz.1.965" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f831899e159 code=0x7ffc0000 [ 204.516187][ T5788] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 204.548363][ T5788] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 204.557459][ T5788] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 204.592960][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 204.605389][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 204.613502][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 204.856376][ T8904] netlink: 16 bytes leftover after parsing attributes in process `syz.2.969'. [ 204.907341][ T8904] veth1: entered promiscuous mode [ 204.932454][ T8904] veth1: left promiscuous mode [ 205.181801][ T8893] lo speed is unknown, defaulting to 1000 [ 205.247170][ T8915] loop2: detected capacity change from 0 to 512 [ 205.335295][ T8915] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.363313][ T6202] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 205.404041][ T8915] ext4 filesystem being mounted at /234/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 205.468453][ T8896] loop1: detected capacity change from 0 to 32768 [ 205.507808][ T8896] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 scanned by syz.1.967 (8896) [ 205.543130][ T5781] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.566056][ T6202] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 205.578488][ T8896] BTRFS info (device loop1): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 205.588194][ T6202] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.624577][ T6202] usb 1-1: config 0 descriptor?? [ 205.634062][ T8896] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 205.651165][ T6202] cp210x 1-1:0.0: cp210x converter detected [ 205.665668][ T8896] BTRFS info (device loop1): turning off barriers [ 205.688534][ T8896] BTRFS info (device loop1): enabling auto defrag [ 205.706112][ T8896] BTRFS info (device loop1): force zlib compression, level 3 [ 205.733132][ T8896] BTRFS info (device loop1): enabling ssd optimizations [ 205.750853][ T8896] BTRFS info (device loop1): using spread ssd allocation scheme [ 205.771063][ T8896] BTRFS info (device loop1): using free space tree [ 206.042180][ T8896] BTRFS info (device loop1: state M): not using ssd optimizations [ 206.073460][ T8896] BTRFS info (device loop1: state M): not using spread ssd allocation scheme [ 206.102113][ T8896] BTRFS info (device loop1: state M): enabling ssd optimizations [ 206.117296][ T8896] BTRFS info (device loop1: state M): using spread ssd allocation scheme [ 206.182749][ T5780] BTRFS info (device loop1): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 206.247759][ T6202] cp210x 1-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 206.274326][ T6202] cp210x 1-1:0.0: GPIO initialisation failed: -71 [ 206.309071][ T6202] usb 1-1: cp210x converter now attached to ttyUSB0 [ 206.355437][ T6202] usb 1-1: USB disconnect, device number 10 [ 206.388880][ T8949] loop2: detected capacity change from 0 to 4096 [ 206.429398][ T8949] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 206.489768][ T6202] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 206.542725][ T6202] cp210x 1-1:0.0: device disconnected [ 206.581957][ T8949] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 206.633839][ T8949] ntfs3: loop2: Failed to initialize $Extend/$Reparse. [ 206.667805][ T5786] Bluetooth: hci2: command 0x0406 tx timeout [ 206.674085][ T5086] Bluetooth: hci1: command 0x0406 tx timeout [ 206.674095][ T5790] Bluetooth: hci3: command 0x0406 tx timeout [ 206.680616][ T51] Bluetooth: hci0: command tx timeout [ 206.841661][ T5781] ntfs3: loop2: ino=1a, ntfs_sync_fs failed, -22. [ 207.345961][ T62] bond0: left promiscuous mode [ 207.365678][ T62] bond_slave_0: left promiscuous mode [ 207.376435][ T62] bond_slave_1: left promiscuous mode [ 207.388390][ T62] batadv0: left promiscuous mode [ 207.408627][ T62] hsr_slave_0: left promiscuous mode [ 207.417399][ T62] hsr_slave_1: left promiscuous mode [ 207.427925][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 207.439691][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 207.463984][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 207.479038][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 207.487217][ T62] bridge_slave_1: left allmulticast mode [ 207.492905][ T62] bridge_slave_1: left promiscuous mode [ 207.509962][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.535218][ T62] bridge_slave_0: left allmulticast mode [ 207.540902][ T62] bridge_slave_0: left promiscuous mode [ 207.553694][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.620224][ T62] veth1_macvtap: left promiscuous mode [ 207.631502][ T62] veth0_macvtap: left promiscuous mode [ 207.643150][ T62] veth1_vlan: left promiscuous mode [ 207.654151][ T62] veth0_vlan: left promiscuous mode [ 208.169284][ T8979] loop1: detected capacity change from 0 to 4096 [ 208.234626][ T8979] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 208.256542][ T8979] ntfs3: loop1: Failed to load $Bitmap (-2). [ 208.647179][ T8995] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 208.654118][ T8995] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 208.674105][ T8995] vhci_hcd vhci_hcd.0: Device attached [ 208.707857][ T8998] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(6) [ 208.714465][ T8998] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 208.722527][ T8998] vhci_hcd vhci_hcd.0: Device attached [ 208.740796][ T8995] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(5) [ 208.747367][ T8995] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 208.759764][ T5777] Bluetooth: hci0: command tx timeout [ 208.767269][ T8995] vhci_hcd vhci_hcd.0: Device attached [ 208.794491][ T8995] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(9) [ 208.801036][ T8995] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 208.823589][ T8995] vhci_hcd vhci_hcd.0: Device attached [ 208.845558][ T8996] vhci_hcd: connection closed [ 208.847022][ T8999] vhci_hcd: connection closed [ 208.861198][ T9001] vhci_hcd: connection closed [ 208.897895][ T2934] vhci_hcd: stop threads [ 208.922056][ T9003] vhci_hcd: connection closed [ 208.923075][ T2934] vhci_hcd: release socket [ 208.940905][ T2934] vhci_hcd: disconnect device [ 208.951451][ T5784] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 208.959195][ T5784] usb 33-1: enqueue for inactive port 0 [ 208.964556][ T2934] vhci_hcd: stop threads [ 208.969320][ T2934] vhci_hcd: release socket [ 208.986799][ T2934] vhci_hcd: disconnect device [ 209.012703][ T2934] vhci_hcd: stop threads [ 209.012720][ T2934] vhci_hcd: release socket [ 209.012748][ T2934] vhci_hcd: disconnect device [ 209.028385][ T2934] vhci_hcd: stop threads [ 209.028401][ T2934] vhci_hcd: release socket [ 209.028452][ T2934] vhci_hcd: disconnect device [ 209.057404][ T5784] vhci_hcd: vhci_device speed not set [ 209.397642][ T62] team0 (unregistering): Port device team_slave_1 removed [ 209.470378][ T62] team0 (unregistering): Port device team_slave_0 removed [ 209.515930][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 209.562335][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 209.965618][ T62] bond0 (unregistering): Released all slaves [ 210.123438][ T8893] chnl_net:caif_netlink_parms(): no params data found [ 210.277164][ T8893] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.284462][ T8893] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.291615][ T8893] bridge_slave_0: entered allmulticast mode [ 210.300882][ T8893] bridge_slave_0: entered promiscuous mode [ 210.310557][ T8893] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.318058][ T8893] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.325689][ T8893] bridge_slave_1: entered allmulticast mode [ 210.333120][ T8893] bridge_slave_1: entered promiscuous mode [ 210.373630][ T8893] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 210.386394][ T8893] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 210.468146][ T8893] team0: Port device team_slave_0 added [ 210.490263][ T8893] team0: Port device team_slave_1 added [ 210.541949][ T8893] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 210.549105][ T8893] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.576032][ T8893] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 210.603966][ T8893] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 210.610965][ T8893] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.651665][ T8893] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 210.766980][ T8893] hsr_slave_0: entered promiscuous mode [ 210.775063][ T8893] hsr_slave_1: entered promiscuous mode [ 210.823395][ T5777] Bluetooth: hci0: command tx timeout [ 211.070070][ T8893] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 211.101527][ T8893] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 211.116032][ T8893] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 211.128886][ T8893] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 211.262636][ T8893] 8021q: adding VLAN 0 to HW filter on device bond0 [ 211.294481][ T8893] 8021q: adding VLAN 0 to HW filter on device team0 [ 211.310436][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.317657][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 211.339386][ T2924] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.346576][ T2924] bridge0: port 2(bridge_slave_1) entered forwarding state [ 211.709426][ T8893] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 212.061336][ T8893] veth0_vlan: entered promiscuous mode [ 212.089992][ T8893] veth1_vlan: entered promiscuous mode [ 212.151566][ T8893] veth0_macvtap: entered promiscuous mode [ 212.177241][ T8893] veth1_macvtap: entered promiscuous mode [ 212.212302][ T8893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.228139][ T8893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.239516][ T8893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.253327][ T8893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.263171][ T8893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.279430][ T8893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.291591][ T8893] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 212.316401][ T8893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.329762][ T8893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.339909][ T8893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.352690][ T8893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.362821][ T8893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.374203][ T8893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.385768][ T8893] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 212.401525][ T8893] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.410815][ T8893] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.420016][ T8893] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.430175][ T8893] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.541528][ T2924] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.552512][ T2924] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.611727][ T2924] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.621133][ T2924] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.818046][ T9076] netlink: 'syz.6.961': attribute type 4 has an invalid length. [ 212.889391][ T9075] loop2: detected capacity change from 0 to 2048 [ 212.904443][ T5777] Bluetooth: hci0: command tx timeout [ 212.911832][ T9076] (null): rxe_set_mtu: Set mtu to 256 [ 212.927293][ T9076] rdma_rxe: rxe_newlink: failed to add lo [ 212.944653][ T9075] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 213.013517][ T9075] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 213.091113][ T9081] binder: 9080:9081 ioctl c018620c 200000000240 returned -1 [ 214.278432][ T9112] loop2: detected capacity change from 0 to 128 [ 214.364505][ T9112] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 214.377263][ T9112] ext4 filesystem being mounted at /247/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 214.486204][ T9116] loop0: detected capacity change from 0 to 1764 [ 214.502663][ T9088] loop1: detected capacity change from 0 to 32768 [ 214.537029][ T9112] fscrypt (loop2, inode 12): Direct key flag not allowed with different contents and filenames modes [ 214.632838][ T9088] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 214.722371][ T9088] XFS (loop1): Ending clean mount [ 214.800600][ T5781] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 214.910623][ T5780] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 215.026696][ T9133] loop0: detected capacity change from 0 to 128 [ 215.139361][ T9133] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 215.243459][ T9133] ext4 filesystem being mounted at /261/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 215.357757][ T9133] fscrypt (loop0, inode 12): Direct key flag not allowed with different contents and filenames modes [ 215.571669][ T5775] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 216.013743][ T9158] program syz.2.1013 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 216.596235][ T9170] loop1: detected capacity change from 0 to 4096 [ 216.634680][ T9170] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 216.734401][ T9170] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 216.769576][ T9170] ntfs3: loop1: Failed to initialize $Extend/$Reparse. [ 216.947114][ T9184] MTRR 1 not used [ 217.062505][ T5780] ntfs3: loop1: ino=1a, ntfs_sync_fs failed, -22. [ 218.026957][ T9216] loop2: detected capacity change from 0 to 64 [ 218.091322][ T9209] loop6: detected capacity change from 0 to 4096 [ 218.109018][ T9218] loop1: detected capacity change from 0 to 1764 [ 218.147724][ T9209] ntfs3: loop6: Different NTFS sector size (4096) and media sector size (512). [ 218.273973][ T9209] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 218.282794][ T9222] loop0: detected capacity change from 0 to 256 [ 218.284902][ T9209] ntfs3: loop6: Failed to initialize $Extend/$Reparse. [ 218.362619][ T9222] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d) [ 218.624044][ T8893] ntfs3: loop6: ino=1a, ntfs_sync_fs failed, -22. [ 218.913569][ T9240] netlink: 'syz.0.1041': attribute type 32 has an invalid length. [ 219.070412][ T9240] bond1: Setting coupled_control to off (0) [ 219.078408][ T9240] bond1: entered promiscuous mode [ 219.233336][ T6194] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 219.338872][ T9250] loop6: detected capacity change from 0 to 128 [ 219.417665][ T9250] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 219.453418][ T6194] usb 2-1: Using ep0 maxpacket: 16 [ 219.460429][ T9250] System zones: 1-3, 19-19, 35-36 [ 219.468627][ T6194] usb 2-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 219.481770][ T9250] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: writeback. [ 219.494419][ T6194] usb 2-1: config 0 interface 0 has no altsetting 0 [ 219.501087][ T6194] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 219.511192][ T6194] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.522986][ T6194] usb 2-1: config 0 descriptor?? [ 219.533706][ T9255] bridge0: port 3(syz_tun) entered blocking state [ 219.578634][ T9255] bridge0: port 3(syz_tun) entered disabled state [ 219.616470][ T9255] syz_tun: entered allmulticast mode [ 219.628914][ T9255] syz_tun: entered promiscuous mode [ 219.639510][ T9255] bridge0: port 3(syz_tun) entered blocking state [ 219.646207][ T9255] bridge0: port 3(syz_tun) entered forwarding state [ 219.690900][ T8893] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 219.977278][ T6194] mcp2221 0003:04D8:00DD.0007: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 220.273632][ T6203] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 220.445161][ T6194] usb 2-1: USB disconnect, device number 7 [ 220.475902][ T6203] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 220.508993][ T6203] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.543322][ T6203] usb 7-1: Product: syz [ 220.553142][ T6203] usb 7-1: Manufacturer: syz [ 220.566698][ T6203] usb 7-1: SerialNumber: syz [ 220.605009][ T8] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 220.886499][ T6204] usb 7-1: USB disconnect, device number 2 [ 221.024577][ T9282] loop2: detected capacity change from 0 to 32768 [ 221.059130][ T9282] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 scanned by syz.2.1058 (9282) [ 221.086954][ T9282] BTRFS info (device loop2): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 221.108269][ T9282] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 221.143193][ T9282] BTRFS info (device loop2): turning off barriers [ 221.150177][ T9282] BTRFS info (device loop2): enabling auto defrag [ 221.165062][ T9282] BTRFS info (device loop2): force zlib compression, level 3 [ 221.188227][ T9282] BTRFS info (device loop2): enabling ssd optimizations [ 221.196208][ T9286] binder: 9285:9286 ioctl c018620c 200000000240 returned -1 [ 221.203648][ T9282] BTRFS info (device loop2): using spread ssd allocation scheme [ 221.203710][ T9282] BTRFS info (device loop2): using free space tree [ 221.313493][ T9301] loop0: detected capacity change from 0 to 2048 [ 221.349331][ T9282] BTRFS info (device loop2: state M): not using ssd optimizations [ 221.357510][ T9282] BTRFS info (device loop2: state M): not using spread ssd allocation scheme [ 221.366478][ T9282] BTRFS info (device loop2: state M): enabling ssd optimizations [ 221.374607][ T9282] BTRFS info (device loop2: state M): using spread ssd allocation scheme [ 221.419702][ T9301] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 221.487342][ T5781] BTRFS info (device loop2): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 221.539980][ T9306] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 221.552455][ T9306] syzkaller1: linktype set to 768 [ 221.720218][ T8] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 221.762095][ T8] ath9k_htc: Failed to initialize the device [ 221.774188][ T6204] usb 7-1: ath9k_htc: USB layer deinitialized [ 222.055021][ T9315] ip_tables: iptables: counters copy to user failed while replacing table [ 222.104230][ T9317] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1065'. [ 222.120734][ T9315] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 222.163617][ T6204] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 222.368584][ T6204] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 222.383381][ T6204] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 1289, setting to 1024 [ 222.412255][ T6204] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 222.442823][ T6204] usb 7-1: New USB device found, idVendor=8087, idProduct=0025, bcdDevice= 0.01 [ 222.471660][ T6204] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.647296][ T9309] loop0: detected capacity change from 0 to 32768 [ 222.660200][ T9309] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 scanned by syz.0.1072 (9309) [ 222.735980][ T9309] BTRFS info (device loop0): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 222.752155][ T9309] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 222.767559][ T9309] BTRFS info (device loop0): turning off barriers [ 222.774715][ T9309] BTRFS info (device loop0): enabling auto defrag [ 222.781430][ T9309] BTRFS info (device loop0): force zlib compression, level 3 [ 222.789779][ T9309] BTRFS info (device loop0): enabling ssd optimizations [ 222.825008][ T9309] BTRFS info (device loop0): using spread ssd allocation scheme [ 222.842818][ T9309] BTRFS info (device loop0): using free space tree [ 222.969021][ T789] usb 7-1: USB disconnect, device number 3 [ 222.979199][ T5777] Bluetooth: hci4: Reading Intel version command failed (-71) [ 222.979930][ T9309] BTRFS info (device loop0: state M): not using ssd optimizations [ 223.044051][ T9309] BTRFS info (device loop0: state M): not using spread ssd allocation scheme [ 223.064916][ T9309] BTRFS info (device loop0: state M): enabling ssd optimizations [ 223.072738][ T9309] BTRFS info (device loop0: state M): using spread ssd allocation scheme [ 223.152704][ T5775] BTRFS info (device loop0): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 223.282856][ T9321] loop1: detected capacity change from 0 to 32768 [ 223.358910][ T5774] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 9 /dev/loop0 scanned by udevd (5774) [ 223.649601][ T9321] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 223.893760][ T9359] Line length is too long: Should be less than 4094 [ 223.969124][ T9321] (syz.1.1068,9321,1):ocfs2_double_lock:1190 ERROR: status = -2 [ 224.033727][ T9321] (syz.1.1068,9321,1):ocfs2_rename:1299 ERROR: status = -2 [ 224.070762][ T9321] (syz.1.1068,9321,1):ocfs2_rename:1690 ERROR: status = -2 [ 224.247457][ T9367] device-mapper: ioctl: device name cannot be "control", ".", or ".." [ 224.388994][ T5780] ocfs2: Unmounting device (7,1) on (node local) [ 224.865848][ T9381] pci 0000:00:01.0: MSI/MSI-X disallowed for future drivers [ 225.752887][ T9415] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1098'. [ 226.070320][ T9423] loop0: detected capacity change from 0 to 2048 [ 226.114248][ T9423] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 226.174744][ T9423] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 226.465606][ T9413] loop1: detected capacity change from 0 to 32768 [ 226.492255][ T9413] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 226.567135][ T9413] JBD2: Ignoring recovery information on journal [ 226.754600][ T9413] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 227.003466][ T9440] Attempt to restore checkpoint with obsolete wellknown handles [ 227.324394][ T5780] ocfs2: Unmounting device (7,1) on (node local) [ 227.813377][ T6199] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 227.880636][ T9459] loop6: detected capacity change from 0 to 512 [ 227.965339][ T9459] EXT4-fs error (device loop6): ext4_orphan_get:1408: inode #15: comm syz.6.1117: inode has both inline data and extents flags [ 228.004409][ T9459] EXT4-fs error (device loop6): ext4_orphan_get:1413: comm syz.6.1117: couldn't read orphan inode 15 (err -117) [ 228.024240][ T6199] usb 3-1: config index 0 descriptor too short (expected 63186, got 210) [ 228.043427][ T6199] usb 3-1: config 0 has an invalid interface number: 106 but max is 0 [ 228.044214][ T9459] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 228.051640][ T6199] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 228.051665][ T6199] usb 3-1: config 0 has no interface number 0 [ 228.051711][ T6199] usb 3-1: config 0 interface 106 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 228.091647][ T6199] usb 3-1: config 0 interface 106 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 228.163337][ T6199] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 228.181330][ T6199] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.224584][ T6199] usb 3-1: config 0 descriptor?? [ 228.252263][ T8893] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.326402][ T6199] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 228.438030][ T9476] loop6: detected capacity change from 0 to 512 [ 228.460183][ T6199] usb 3-1: USB disconnect, device number 8 [ 228.461864][ T9473] jffs2: notice: (9473) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 228.483554][ T2953] usb 3-1: Failed to submit usb control message: -71 [ 228.491504][ T2953] usb 3-1: unable to send the bmi data to the device: -71 [ 228.514184][ T2953] usb 3-1: unable to get target info from device [ 228.520683][ T2953] usb 3-1: could not get target info (-71) [ 228.548867][ T2953] usb 3-1: could not probe fw (-71) [ 228.559403][ T9476] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.1122: invalid indirect mapped block 256 (level 2) [ 228.651195][ T9476] EXT4-fs (loop6): 2 truncates cleaned up [ 228.668783][ T9476] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 228.789765][ T9476] EXT4-fs error (device loop6): ext4_validate_block_bitmap:430: comm syz.6.1122: bg 0: block 5: invalid block bitmap [ 228.836970][ T9487] loop0: detected capacity change from 0 to 8 [ 228.864115][ T9476] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 1 with error 28 [ 228.884113][ T9489] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 228.923934][ T9476] EXT4-fs (loop6): This should not happen!! Data will be lost [ 228.923934][ T9476] [ 228.973525][ T9476] EXT4-fs (loop6): Total free blocks count 0 [ 228.980389][ T9489] EXT4-fs (loop6): This should not happen!! Data will be lost [ 228.980389][ T9489] [ 228.994541][ T9476] EXT4-fs (loop6): Free/Dirty block details [ 229.003084][ T9487] SQUASHFS error: Failed to read block 0x260685: -5 [ 229.033526][ T9476] EXT4-fs (loop6): free_blocks=0 [ 229.038726][ T9487] SQUASHFS error: Unable to read metadata cache entry [260685] [ 229.052077][ T9489] EXT4-fs (loop6): Total free blocks count 0 [ 229.067196][ T9476] EXT4-fs (loop6): dirty_blocks=2 [ 229.082784][ T9487] SQUASHFS error: Unable to read directory block [260685:0] [ 229.497116][ T9506] loop6: detected capacity change from 0 to 2048 [ 229.536996][ T9506] UDF-fs: error (device loop6): udf_process_sequence: Primary Volume Descriptor not found! [ 229.590641][ T9506] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 230.069798][ T9517] kAFS: Invalid Command on /proc/fs/afs/cells file [ 230.340489][ T9522] i2c i2c-0: Invalid 7-bit I2C address 0x00 [ 231.978042][ T9567] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1148'. [ 232.318492][ T9581] loop0: detected capacity change from 0 to 256 [ 232.371842][ T9581] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 232.388456][ T9583] input: syz1 as /devices/virtual/input/input17 [ 233.327563][ T9613] loop0: detected capacity change from 0 to 512 [ 233.420587][ T9613] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.1165: invalid indirect mapped block 256 (level 2) [ 233.525337][ T9613] EXT4-fs (loop0): 2 truncates cleaned up [ 233.532712][ T9613] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 233.672134][ T9613] EXT4-fs error (device loop0): ext4_validate_block_bitmap:430: comm syz.0.1165: bg 0: block 5: invalid block bitmap [ 233.745368][ T9613] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 1 with error 28 [ 233.746778][ T9622] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 233.808728][ T9613] EXT4-fs (loop0): This should not happen!! Data will be lost [ 233.808728][ T9613] [ 233.823405][ T9613] EXT4-fs (loop0): Total free blocks count 0 [ 233.843405][ T9622] EXT4-fs (loop0): This should not happen!! Data will be lost [ 233.843405][ T9622] [ 233.871123][ T9622] EXT4-fs (loop0): Total free blocks count 0 [ 233.899842][ T9622] EXT4-fs (loop0): Free/Dirty block details [ 233.916803][ T9622] EXT4-fs (loop0): free_blocks=0 [ 233.924872][ T9613] EXT4-fs (loop0): Free/Dirty block details [ 234.107031][ T9610] loop2: detected capacity change from 0 to 32768 [ 234.119374][ T6194] input: syz0 as /devices/virtual/misc/uhid/0005:0009:0040.0008/input/input18 [ 234.158146][ T9610] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.1163 (9610) [ 234.213401][ T9610] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 234.256379][ T9610] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 234.303702][ T9610] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 234.313206][ T9610] BTRFS info (device loop2): force zstd compression, level 15 [ 234.360829][ T6194] hid-generic 0005:0009:0040.0008: input,hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 234.371080][ T9610] BTRFS info (device loop2): using free space tree [ 234.577243][ T9610] BTRFS info (device loop2): enabling ssd optimizations [ 234.646368][ T9610] BTRFS info (device loop2): auto enabling async discard [ 234.785649][ T9643] fido_id[9643]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 235.262156][ T5781] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 236.542011][ T9699] batadv_slave_1: entered promiscuous mode [ 236.549398][ T9699] macvlan2: entered allmulticast mode [ 236.556389][ T9699] batadv_slave_1: entered allmulticast mode [ 236.565750][ T9699] batman_adv: batadv0: Adding interface: macvlan2 [ 236.603648][ T9699] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 236.711194][ T9699] batman_adv: batadv0: Interface activated: macvlan2 [ 236.796487][ T9701] loop6: detected capacity change from 0 to 4096 [ 236.867165][ T9706] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 236.970155][ T9701] NILFS (loop6): Segment number 13903790157999918 to be freed is out of range [ 237.694883][ T9733] loop6: detected capacity change from 0 to 1024 [ 238.084758][ T9712] loop0: detected capacity change from 0 to 32768 [ 238.147528][ T9748] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 238.155527][ T9748] IPv6: NLM_F_CREATE should be set when creating new route [ 238.162838][ T9748] IPv6: NLM_F_CREATE should be set when creating new route [ 238.220691][ T9712] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 238.243641][ T6199] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 238.261888][ T9748] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 238.448016][ T6199] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 238.463192][ T9712] (syz.0.1185,9712,0):ocfs2_double_lock:1190 ERROR: status = -2 [ 238.482356][ T9712] (syz.0.1185,9712,0):ocfs2_rename:1299 ERROR: status = -2 [ 238.493331][ T6199] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 238.523156][ T9712] (syz.0.1185,9712,0):ocfs2_rename:1690 ERROR: status = -2 [ 238.531846][ T6199] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.579125][ T6199] usb 2-1: config 0 descriptor?? [ 238.818208][ T5775] ocfs2: Unmounting device (7,0) on (node local) [ 238.901177][ T9760] loop2: detected capacity change from 0 to 512 [ 238.956583][ T9760] EXT4-fs (loop2): 1 truncate cleaned up [ 238.990123][ T9760] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 239.070864][ T6199] keytouch 0003:0926:3333.0009: fixing up Keytouch IEC report descriptor [ 239.172870][ T6199] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0009/input/input19 [ 239.239395][ T5781] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.468753][ T6199] keytouch 0003:0926:3333.0009: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 239.563997][ T6199] usb 2-1: USB disconnect, device number 8 [ 239.762226][ T9777] fido_id[9777]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 240.226525][ T9797] sctp: [Deprecated]: syz.6.1213 (pid 9797) Use of int in max_burst socket option deprecated. [ 240.226525][ T9797] Use struct sctp_assoc_value instead [ 240.646932][ T9813] gadgetfs: bound to dummy_udc driver [ 240.725971][ T9816] Illegal XDP return value 4294967274 on prog (id 61) dev N/A, expect packet loss! [ 241.081696][ T9829] loop1: detected capacity change from 0 to 128 [ 241.163867][ T9829] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 241.230154][ T9829] ext4 filesystem being mounted at /323/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 241.320144][ T5780] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 241.623773][ T5777] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 242.967920][ T9874] netlink: 252 bytes leftover after parsing attributes in process `syz.1.1236'. [ 243.023901][ T9874] netem: unknown loss type 5 [ 243.043042][ T9874] netem: change failed [ 243.296098][ T5777] Bluetooth: hci1: unexpected event for opcode 0x1009 [ 243.633913][ T9898] sctp: [Deprecated]: syz.1.1248 (pid 9898) Use of int in max_burst socket option deprecated. [ 243.633913][ T9898] Use struct sctp_assoc_value instead [ 244.228196][ T9918] loop2: detected capacity change from 0 to 512 [ 244.732397][ T9935] sctp: [Deprecated]: syz.0.1261 (pid 9935) Use of int in max_burst socket option deprecated. [ 244.732397][ T9935] Use struct sctp_assoc_value instead [ 244.822204][ T5777] Bluetooth: hci3: unexpected event for opcode 0x0c22 [ 244.848235][ T9937] loop2: detected capacity change from 0 to 512 [ 244.860071][ T9937] EXT4-fs: inline encryption not supported [ 244.898107][ T9937] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 244.915584][ T9937] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 244.977877][ T9937] __quota_error: 4 callbacks suppressed [ 244.977897][ T9937] Quota error (device loop2): do_insert_tree: Free block already used in tree: block 1 [ 245.020711][ T9937] Quota error (device loop2): qtree_write_dquot: Error -5 occurred while creating quota [ 245.041931][ T9937] EXT4-fs error (device loop2): ext4_acquire_dquot:6953: comm syz.2.1263: Failed to acquire dquot type 1 [ 245.078910][ T9937] EXT4-fs (loop2): Remounting filesystem read-only [ 245.087125][ T9937] EXT4-fs (loop2): 1 truncate cleaned up [ 245.094475][ T9937] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 245.213060][ T5781] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.008155][ T9939] loop6: detected capacity change from 0 to 40427 [ 246.030005][ T9939] F2FS-fs (loop6): build fault injection attr: rate: 771, type: 0x7ffff [ 246.057963][ T9939] F2FS-fs (loop6): invalid crc value [ 246.081239][ T9939] F2FS-fs (loop6): Found nat_bits in checkpoint [ 246.281842][ T9939] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 246.476608][ T8893] syz-executor: attempt to access beyond end of device [ 246.476608][ T8893] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 246.513129][ T8893] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 246.513893][ T6199] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 246.549036][ T8] logitech-hidpp-device 0005:046D:B012.000A: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 246.713610][ T9966] loop0: detected capacity change from 0 to 32768 [ 246.726148][ T9979] fido_id[9979]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 246.742926][ T9966] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.1271 (9966) [ 246.793450][ T6199] usb 3-1: Using ep0 maxpacket: 8 [ 246.804865][ T6199] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 246.838052][ T6199] usb 3-1: config 179 has no interface number 0 [ 246.848857][ T9966] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 246.865619][ T6199] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 246.893365][ T9966] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 246.912347][ T6199] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 246.923888][ T9966] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 246.944242][ T6199] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 246.963813][ T9966] BTRFS info (device loop0): force zstd compression, level 15 [ 246.981985][ T6199] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 246.994751][ T9966] BTRFS info (device loop0): using free space tree [ 247.015090][ T6199] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 247.041179][ T6199] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 247.053543][ T6199] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.071457][ T9973] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 247.117254][ T9966] BTRFS info (device loop0): enabling ssd optimizations [ 247.172548][ T9966] BTRFS info (device loop0): auto enabling async discard [ 247.394512][ T6203] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input20 [ 247.654917][ T6194] usb 3-1: USB disconnect, device number 9 [ 247.655227][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 247.669165][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 247.687618][ T5775] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 247.725166][ T6194] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 248.014928][ T5774] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop0 scanned by udevd (5774) [ 248.062894][T10005] netlink: 76 bytes leftover after parsing attributes in process `syz.6.1276'. [ 248.881114][T10023] loop2: detected capacity change from 0 to 512 [ 248.953828][T10023] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 249.021458][T10023] ext4 filesystem being mounted at /319/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 249.308480][T10020] loop1: detected capacity change from 0 to 40427 [ 249.319224][ T5781] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.381059][T10020] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 249.411816][T10020] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 249.422877][T10020] F2FS-fs (loop1): invalid crc value [ 249.441985][T10020] F2FS-fs (loop1): Found nat_bits in checkpoint [ 249.505435][T10037] loop0: detected capacity change from 0 to 512 [ 249.551170][T10037] EXT4-fs (loop0): orphan cleanup on readonly fs [ 249.573787][T10037] EXT4-fs error (device loop0): ext4_do_update_inode:5256: inode #15: comm syz.0.1291: corrupted inode contents [ 249.590194][T10037] EXT4-fs (loop0): Remounting filesystem read-only [ 249.606360][T10020] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 249.627558][T10037] EXT4-fs (loop0): 1 orphan inode deleted [ 249.652336][T10020] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 249.665662][T10037] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 249.937289][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.421651][T10053] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1298'. [ 250.463752][T10053] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 250.471243][T10053] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 250.494827][T10053] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 250.533908][T10053] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 250.596298][T10043] loop2: detected capacity change from 0 to 32768 [ 250.613409][T10043] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.1292 (10043) [ 250.676708][T10043] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 250.687917][T10043] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 250.705889][T10043] BTRFS info (device loop2): setting nodatacow, compression disabled [ 250.714974][T10043] BTRFS info (device loop2): force clearing of disk cache [ 250.722517][T10043] BTRFS info (device loop2): turning on async discard [ 250.732470][T10043] BTRFS info (device loop2): turning off barriers [ 250.740475][T10043] BTRFS info (device loop2): disabling free space tree [ 250.759815][T10043] BTRFS info (device loop2): enabling ssd optimizations [ 250.768309][T10043] BTRFS info (device loop2): using spread ssd allocation scheme [ 250.784260][T10043] BTRFS info (device loop2): not using ssd optimizations [ 250.803959][T10043] BTRFS info (device loop2): not using spread ssd allocation scheme [ 251.065705][T10043] BTRFS info (device loop2): rebuilding free space tree [ 251.131017][T10043] BTRFS info (device loop2): disabling free space tree [ 251.150204][T10043] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 251.163168][T10043] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 251.648385][ T5781] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 252.243342][ T789] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 252.447796][ T789] usb 2-1: unable to get BOS descriptor or descriptor too short [ 252.464449][ T789] usb 2-1: not running at top speed; connect to a high speed hub [ 252.487079][ T789] usb 2-1: New USB device found, idVendor=0582, idProduct=0a14, bcdDevice= 0.40 [ 252.517569][ T789] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.573345][ T789] usb 2-1: Product: syz [ 252.577595][ T789] usb 2-1: Manufacturer: syz [ 252.582239][ T789] usb 2-1: SerialNumber: syz [ 252.617975][T10111] bond0: no command found in slaves file - use +ifname or -ifname [ 252.890315][ T789] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 252.913174][ T789] usb 2-1: MIDIStreaming interface descriptor not found [ 253.012472][ T789] usb 2-1: USB disconnect, device number 9 [ 253.704787][ T6203] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 253.932004][ T6203] usb 7-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 0.00 [ 253.953304][ T6203] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 253.961376][ T6203] usb 7-1: Product: syz [ 253.986409][ T6203] usb 7-1: Manufacturer: syz [ 254.022452][ T6203] input: syz syz as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/input/input21 [ 254.356023][ T5784] usb 7-1: USB disconnect, device number 4 [ 254.456269][T10164] loop1: detected capacity change from 0 to 512 [ 254.541987][T10164] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 254.563687][T10164] ext4 filesystem being mounted at /349/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 254.762783][ T5780] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.653707][T10194] netlink: 'syz.1.1350': attribute type 6 has an invalid length. [ 255.789707][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.810691][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.821686][ T1292] clip:clip_start_xmit: skb_dst(skb) == NULL [ 255.929958][T10198] loop1: detected capacity change from 0 to 2048 [ 255.959573][T10198] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 255.979192][T10201] loop0: detected capacity change from 0 to 512 [ 256.022513][T10176] loop2: detected capacity change from 0 to 40427 [ 256.064937][T10201] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 256.110130][T10176] F2FS-fs (loop2): build fault injection attr: rate: 771, type: 0x7ffff [ 256.142797][T10201] ext4 filesystem being mounted at /355/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 256.165276][T10176] F2FS-fs (loop2): invalid crc value [ 256.198715][T10176] F2FS-fs (loop2): Found nat_bits in checkpoint [ 256.400420][ T5775] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.450055][T10211] loop1: detected capacity change from 0 to 128 [ 256.473475][T10176] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 256.522606][T10211] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 256.536956][T10183] loop6: detected capacity change from 0 to 32768 [ 256.574100][T10211] hpfs: filesystem error: improperly stopped [ 256.580184][T10211] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 256.588535][T10211] hpfs: You really don't want any checks? You are crazy... [ 256.599433][T10211] hpfs: hpfs_map_sector(): read error [ 256.606175][T10211] hpfs: code page support is disabled [ 256.615471][T10211] hpfs: hpfs_map_4sectors(): unaligned read [ 256.621803][T10211] hpfs: hpfs_map_4sectors(): unaligned read [ 256.628425][T10211] hpfs: filesystem error: unable to find root dir [ 256.654808][T10183] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop6 scanned by syz.6.1346 (10183) [ 256.813674][T10183] BTRFS info (device loop6): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 256.881178][ T5781] syz-executor: attempt to access beyond end of device [ 256.881178][ T5781] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 256.883611][T10183] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm [ 256.949010][T10183] BTRFS info (device loop6): setting nodatacow, compression disabled [ 256.969596][ T5781] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 256.986970][T10183] BTRFS info (device loop6): force clearing of disk cache [ 257.017309][T10183] BTRFS info (device loop6): turning on async discard [ 257.043521][T10183] BTRFS info (device loop6): turning off barriers [ 257.063652][T10183] BTRFS info (device loop6): disabling free space tree [ 257.090989][T10183] BTRFS info (device loop6): enabling ssd optimizations [ 257.113873][T10183] BTRFS info (device loop6): using spread ssd allocation scheme [ 257.144387][T10183] BTRFS info (device loop6): not using ssd optimizations [ 257.151514][T10183] BTRFS info (device loop6): not using spread ssd allocation scheme [ 257.510525][T10183] BTRFS info (device loop6): rebuilding free space tree [ 257.569362][T10183] BTRFS info (device loop6): disabling free space tree [ 257.601255][T10183] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 257.653412][T10183] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 258.116061][ T8893] BTRFS info (device loop6): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 258.751072][T10268] loop2: detected capacity change from 0 to 2048 [ 258.806597][T10270] loop1: detected capacity change from 0 to 128 [ 258.835905][T10268] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 258.855112][T10270] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 258.903823][T10268] ext4 filesystem being mounted at /337/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 259.052895][T10268] fs-verity: sha512 using implementation "sha512-avx2" [ 259.104162][ T28] audit: type=1800 audit(1788369338.847:57): pid=10276 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1366" name="file1" dev="loop1" ino=94 res=0 errno=0 [ 259.177301][T10270] UDF-fs: error (device loop1): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 259.329812][ T5781] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.432733][T10283] loop0: detected capacity change from 0 to 256 [ 259.464845][T10283] exfat: Deprecated parameter 'utf8' [ 259.513487][T10283] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 259.555538][T10283] netlink: 116 bytes leftover after parsing attributes in process `syz.0.1371'. [ 259.698573][T10289] netlink: 200 bytes leftover after parsing attributes in process `syz.0.1373'. [ 260.080959][T10297] vlan2: entered promiscuous mode [ 260.102225][T10285] loop1: detected capacity change from 0 to 32768 [ 260.123730][T10297] bond0: entered promiscuous mode [ 260.128853][T10297] bond_slave_0: entered promiscuous mode [ 260.152005][T10297] bond_slave_1: entered promiscuous mode [ 260.176657][T10285] JBD2: Ignoring recovery information on journal [ 260.382994][T10285] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 260.607702][T10285] [ 260.610116][T10285] ====================================================== [ 260.617177][T10285] WARNING: possible circular locking dependency detected [ 260.624243][T10285] syzkaller #0 Not tainted [ 260.628700][T10285] ------------------------------------------------------ [ 260.635766][T10285] syz.1.1372/10285 is trying to acquire lock: [ 260.641876][T10285] ffff88804e07eab8 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_init_acl+0x30a/0x770 [ 260.651296][T10285] [ 260.651296][T10285] but task is already holding lock: [ 260.658684][T10285] ffff88801b6e54e8 (&journal->j_trans_barrier){.+.+}-{3:3}, at: ocfs2_start_trans+0x3a8/0x6f0 [ 260.668998][T10285] [ 260.668998][T10285] which lock already depends on the new lock. [ 260.668998][T10285] [ 260.679421][T10285] [ 260.679421][T10285] the existing dependency chain (in reverse order) is: [ 260.688458][T10285] [ 260.688458][T10285] -> #3 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 260.696998][T10285] down_read+0x46/0x2e0 [ 260.701733][T10285] ocfs2_start_trans+0x3a8/0x6f0 [ 260.707231][T10285] ocfs2_mknod+0xf33/0x2310 [ 260.712281][T10285] ocfs2_mkdir+0x196/0x430 [ 260.717681][T10285] vfs_mkdir+0x2a5/0x470 [ 260.722471][T10285] do_mkdirat+0x1dc/0x450 [ 260.727350][T10285] __x64_sys_mkdirat+0x89/0xa0 [ 260.732842][T10285] do_syscall_64+0x55/0xb0 [ 260.737811][T10285] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 260.744253][T10285] [ 260.744253][T10285] -> #2 (sb_internal#7){.+.+}-{0:0}: [ 260.751848][T10285] ocfs2_start_trans+0x2a9/0x6f0 [ 260.757348][T10285] ocfs2_truncate_file+0x645/0x1530 [ 260.763094][T10285] ocfs2_setattr+0x15b8/0x1bf0 [ 260.768407][T10285] notify_change+0xb05/0xde0 [ 260.773557][T10285] do_truncate+0x1b0/0x240 [ 260.778528][T10285] path_openat+0x2a7e/0x3270 [ 260.783672][T10285] do_filp_open+0x1f2/0x430 [ 260.788717][T10285] do_sys_openat2+0x134/0x1d0 [ 260.793945][T10285] __x64_sys_open+0x11f/0x140 [ 260.799168][T10285] do_syscall_64+0x55/0xb0 [ 260.804148][T10285] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 260.810582][T10285] [ 260.810582][T10285] -> #1 (&oi->ip_alloc_sem){+.+.}-{3:3}: [ 260.818439][T10285] down_write+0x97/0x200 [ 260.823241][T10285] ocfs2_try_remove_refcount_tree+0xb7/0x360 [ 260.829773][T10285] ocfs2_truncate_file+0xe87/0x1530 [ 260.835530][T10285] ocfs2_setattr+0x15b8/0x1bf0 [ 260.840840][T10285] notify_change+0xb05/0xde0 [ 260.845986][T10285] do_truncate+0x1b0/0x240 [ 260.850950][T10285] path_openat+0x2a7e/0x3270 [ 260.856091][T10285] do_filp_open+0x1f2/0x430 [ 260.861150][T10285] do_sys_openat2+0x134/0x1d0 [ 260.866396][T10285] __x64_sys_open+0x11f/0x140 [ 260.871623][T10285] do_syscall_64+0x55/0xb0 [ 260.876683][T10285] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 260.883129][T10285] [ 260.883129][T10285] -> #0 (&oi->ip_xattr_sem){++++}-{3:3}: [ 260.890983][T10285] __lock_acquire+0x37ef/0x7d80 [ 260.896390][T10285] lock_acquire+0x19e/0x420 [ 260.901446][T10285] down_read+0x46/0x2e0 [ 260.906160][T10285] ocfs2_init_acl+0x30a/0x770 [ 260.911390][T10285] ocfs2_mknod+0x1427/0x2310 [ 260.916524][T10285] ocfs2_mkdir+0x196/0x430 [ 260.921483][T10285] vfs_mkdir+0x2a5/0x470 [ 260.926269][T10285] do_mkdirat+0x1dc/0x450 [ 260.931144][T10285] __x64_sys_mkdirat+0x89/0xa0 [ 260.936463][T10285] do_syscall_64+0x55/0xb0 [ 260.941436][T10285] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 260.947883][T10285] [ 260.947883][T10285] other info that might help us debug this: [ 260.947883][T10285] [ 260.958221][T10285] Chain exists of: [ 260.958221][T10285] &oi->ip_xattr_sem --> sb_internal#7 --> &journal->j_trans_barrier [ 260.958221][T10285] [ 260.972159][T10285] Possible unsafe locking scenario: [ 260.972159][T10285] [ 260.979638][T10285] CPU0 CPU1 [ 260.985026][T10285] ---- ---- [ 260.990414][T10285] rlock(&journal->j_trans_barrier); [ 260.995813][T10285] lock(sb_internal#7); [ 261.002629][T10285] lock(&journal->j_trans_barrier); [ 261.010470][T10285] rlock(&oi->ip_xattr_sem); [ 261.015192][T10285] [ 261.015192][T10285] *** DEADLOCK *** [ 261.015192][T10285] [ 261.023354][T10285] 8 locks held by syz.1.1372/10285: [ 261.028568][T10285] #0: ffff888025a00418 (sb_writers#39){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 261.037847][T10285] #1: ffff88804e07ed98 (&type->i_mutex_dir_key#27/1){+.+.}-{3:3}, at: filename_create+0x20f/0x450 [ 261.048613][T10285] #2: ffff888076b6a658 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#2){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x171/0x44a0 [ 261.062323][T10285] #3: ffff888076b689d8 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x171/0x44a0 [ 261.076110][T10285] #4: ffff888076b69818 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#4){+.+.}-{3:3}, at: ocfs2_reserve_local_alloc_bits+0x120/0x2620 [ 261.090066][T10285] #5: ffff888025a00608 (sb_internal#7){.+.+}-{0:0}, at: ocfs2_mknod+0xf33/0x2310 [ 261.099335][T10285] #6: ffff88801b6e54e8 (&journal->j_trans_barrier){.+.+}-{3:3}, at: ocfs2_start_trans+0x3a8/0x6f0 [ 261.110089][T10285] #7: ffff88807e6e4990 (jbd2_handle#2){.+.+}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 261.119995][T10285] [ 261.119995][T10285] stack backtrace: [ 261.125942][T10285] CPU: 0 PID: 10285 Comm: syz.1.1372 Not tainted syzkaller #0 [ 261.133437][T10285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 261.143542][T10285] Call Trace: [ 261.146850][T10285] [ 261.149802][T10285] dump_stack_lvl+0x18c/0x250 [ 261.154515][T10285] ? load_image+0x420/0x420 [ 261.159042][T10285] ? show_regs_print_info+0x20/0x20 [ 261.164278][T10285] ? print_circular_bug+0x12b/0x1a0 [ 261.169511][T10285] check_noncircular+0x2fc/0x400 [ 261.174488][T10285] ? print_deadlock_bug+0x5d0/0x5d0 [ 261.179720][T10285] ? _find_first_zero_bit+0xd6/0x100 [ 261.185041][T10285] ? add_lock_to_list+0x191/0x280 [ 261.190100][T10285] __lock_acquire+0x37ef/0x7d80 [ 261.195025][T10285] ? verify_lock_unused+0x140/0x140 [ 261.200262][T10285] ? verify_lock_unused+0x140/0x140 [ 261.205510][T10285] lock_acquire+0x19e/0x420 [ 261.210038][T10285] ? ocfs2_init_acl+0x30a/0x770 [ 261.214949][T10285] ? jbd2_write_access_granted+0x69/0x300 [ 261.220702][T10285] ? __might_sleep+0xe0/0xe0 [ 261.225317][T10285] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 261.230982][T10285] ? read_lock_is_recursive+0x20/0x20 [ 261.236385][T10285] ? mutex_unlock+0x10/0x10 [ 261.240921][T10285] ? do_raw_spin_lock+0x11f/0x2b0 [ 261.245980][T10285] down_read+0x46/0x2e0 [ 261.250168][T10285] ? ocfs2_init_acl+0x30a/0x770 [ 261.255048][T10285] ocfs2_init_acl+0x30a/0x770 [ 261.259760][T10285] ? ocfs2_acl_chmod+0x340/0x340 [ 261.264737][T10285] ? dquot_alloc_inode+0x211/0xa40 [ 261.269879][T10285] ? ocfs2_journal_access+0x40/0x40 [ 261.275109][T10285] ? ocfs2_block_signals+0x9b/0xe0 [ 261.280247][T10285] ? ocfs2_free_mem_caches+0x50/0x50 [ 261.285590][T10285] ? mark_lock+0x94/0x320 [ 261.289951][T10285] ? ocfs2_metadata_cache_get_super+0x46/0x90 [ 261.296048][T10285] ? ocfs2_inode_cache_get_super+0xd/0x40 [ 261.301803][T10285] ocfs2_mknod+0x1427/0x2310 [ 261.306424][T10285] ? ocfs2_mkdir+0x430/0x430 [ 261.311068][T10285] ? ocfs2_inode_lock_tracker+0x437/0x700 [ 261.316814][T10285] ? __lock_acquire+0x7d80/0x7d80 [ 261.321867][T10285] ? do_raw_spin_lock+0x11f/0x2b0 [ 261.326925][T10285] ? ocfs2_inode_unlock_tracker+0x270/0x2e0 [ 261.332944][T10285] ? __lock_acquire+0x7d80/0x7d80 [ 261.338040][T10285] ? __rwlock_init+0x150/0x150 [ 261.342865][T10285] ? do_raw_spin_unlock+0x121/0x230 [ 261.348112][T10285] ? put_pid+0xde/0x120 [ 261.352308][T10285] ocfs2_mkdir+0x196/0x430 [ 261.356987][T10285] ? make_kgid+0x650/0x650 [ 261.361633][T10285] ? apparmor_path_mkdir+0x1b0/0x230 [ 261.366966][T10285] ? ocfs2_symlink+0x2730/0x2730 [ 261.371944][T10285] ? HAS_UNMAPPED_ID+0x101/0x170 [ 261.376918][T10285] ? ocfs2_getattr+0x3a0/0x3a0 [ 261.381721][T10285] ? inode_permission+0xf3/0x480 [ 261.386690][T10285] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 261.391767][T10285] ? security_inode_mkdir+0xb7/0x100 [ 261.397081][T10285] vfs_mkdir+0x2a5/0x470 [ 261.401352][T10285] do_mkdirat+0x1dc/0x450 [ 261.405713][T10285] ? vfs_mkdir+0x470/0x470 [ 261.410164][T10285] __x64_sys_mkdirat+0x89/0xa0 [ 261.414969][T10285] do_syscall_64+0x55/0xb0 [ 261.419424][T10285] ? clear_bhb_loop+0x40/0x90 [ 261.424132][T10285] ? clear_bhb_loop+0x40/0x90 [ 261.428845][T10285] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 261.434767][T10285] RIP: 0033:0x7f831899cfc7 [ 261.439234][T10285] Code: 00 66 90 48 89 f2 b9 00 01 00 00 48 89 fe bf 9c ff ff ff e9 db f7 ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 261.458885][T10285] RSP: 002b:00007f831984ae58 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 261.467340][T10285] RAX: ffffffffffffffda RBX: 00007f831984aee0 RCX: 00007f831899cfc7 [ 261.475343][T10285] RDX: 00000000000001ff RSI: 0000200000021300 RDI: 00000000ffffff9c [ 261.483348][T10285] RBP: 0000200000000b00 R08: 0000200000000140 R09: 0000000000000000 [ 261.491347][T10285] R10: 0000200000000b00 R11: 0000000000000246 R12: 0000200000021300 [ 261.499346][T10285] R13: 00007f831984aea0 R14: 0000000000000000 R15: 0000000000000000 [ 261.507349][T10285] [ 261.595310][T10285] syz.1.1372 (10285) used greatest stack depth: 18840 bytes left [ 261.669742][ T5780] ocfs2: Unmounting device (7,1) on (node local)