last executing test programs: 1m22.315323548s ago: executing program 2 (id=373): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000080)={{@local, 0x2}, @local, 0x0, 0x0, 0x5e, 0x200000000000, 0x100000000000006}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r0, 0x7a4, &(0x7f0000000540)={{@local, 0x2}, 0xffffffffffffffff, 0x9, 0xffffffff, 0x200}) 1m22.147546462s ago: executing program 2 (id=377): madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f0000000580)='1\x00', 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) write$sysctl(r0, &(0x7f00000000c0)='2\x00', 0x2) 1m21.229558285s ago: executing program 2 (id=383): r0 = epoll_create1(0x80000) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000280), 0x28203) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)={0x2000000f}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x7e, 0x2, 0x3, 0x80000000, 0x20000006, 0x4f, 0x6, 0x5d, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x8000024, 0xd, 0x7, 0xfffffffc, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x88, 0x6, 0xffff, 0x0, 0x5, 0x4, 0x800a, 0x400, 0x80, 0x0, 0x5, 0x1006, 0x8, 0x3, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bc, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0xd, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x3ff, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f2e, 0xd, 0x4e2, 0x2, 0x4, 0xb, 0xc, 0x9, 0x8, 0x9, 0x6, 0x43, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x6, 0x3, 0x9, 0x1, 0x3, 0x3, 0x81, 0x48c93690, 0x42, 0x3], [0x10000007, 0x63fa0f21, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0x100b, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xca, 0xfffffffe, 0x3, 0x27ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x3c484551], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x93a, 0x5, 0x6, 0x0, 0x100, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x2000004, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x2, 0x16, 0xffffffff, 0x8, 0x5, 0x4, 0xc8, 0xfffffff9, 0xfffff000, 0x10000, 0x0, 0x7b, 0x100, 0x9602, 0x7, 0xaf, 0x5, 0x6, 0x223, 0x5, 0x5, 0x8, 0x2, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0xdd3, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 1m21.0465192s ago: executing program 2 (id=384): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x6}]}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r1, 0xffffffffffffffff, 0x0) 1m20.524658842s ago: executing program 2 (id=388): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./sys/kernel/tracing\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/kernel/tracing/dynamic_events\x00', 0x2, 0x0) write(r0, &(0x7f0000000500)='e:my_eprobe sch-d/sc', 0x14) 1m20.341354377s ago: executing program 2 (id=392): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000240)=0x3) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f00000001c0)=0xa) 1m12.543680771s ago: executing program 1 (id=445): r0 = io_uring_setup(0x6a76, &(0x7f0000000180)={0x0, 0xaefa, 0x0, 0x40}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000000c0)={0x70004, 0x2}, 0x8) close(r1) close_range(r0, 0xffffffffffffffff, 0x0) 1m12.289842147s ago: executing program 1 (id=446): syz_mount_image$jfs(&(0x7f0000000040), &(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x8, &(0x7f0000002740)=ANY=[], 0x1, 0x6001, &(0x7f0000006400)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4808, 0x0, 0x1, 0x0, &(0x7f0000000000)) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x80000, 0x0) getdents64(r0, &(0x7f0000000080)=""/4096, 0x1000) 1m10.53328516s ago: executing program 1 (id=457): r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000280)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000580)={0x0, 0x0, r1, 0x0}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000100)={r1, r2, 0x0, 0x0, 0xfffffffffffffffe}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000080)={r1, r2, 0x1, 0x0, 0x3}) 1m9.34830409s ago: executing program 1 (id=462): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x2048c5, &(0x7f0000000400)={[{@fat=@quiet}, {@shortname_winnt}, {@numtail}, {@shortname_mixed}, {@fat=@dos1xfloppy}, {@rodir}, {@shortname_lower}, {@fat=@flush}, {@numtail}, {@utf8}, {@rodir}, {@utf8no}, {@utf8}]}, 0x0, 0x2ad, &(0x7f0000000580)="$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") mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x20000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) 1m9.002899429s ago: executing program 1 (id=465): syz_mount_image$nilfs2(&(0x7f0000000b80), &(0x7f0000000040)='./file2\x00', 0x3200400, &(0x7f0000000c00)=ANY=[], 0x1, 0xa86, &(0x7f0000009b40)="$eJzs3U2MG1cBAOA33vUmmwTilIQuSWgTftry091ms4SfCJqquRA1FbdKEZcoTUtEGhCpBK0qkeTEjVZVuPIjTuVQAUJqLyjqiUslGolLxaFw4EAUpEocoJC42vV7XvutrbH3z/b6+6S3z2/eeN6b2fF4PDPvvQCMrcrS34WFmSKE62++evKfD/xjenHKo805akt/J1tS1RBCEdOT2fLem2jEd95/6VynuAjzS39TOjx5u/nenSGEK+FQuBFqYf/1m6+8Pf/E6aunrh1+57XjtzZm7QEAYLx868bxhX1/+/OBPR+8ft+JsK05PZ2f12J6VzzvPxFP/NP5fyW0p4uW0Goqm28yhko230SH+VrLqWbzTXYpfypbbrWZf6Btvm0l5U+0TOu03jDK0n5cC0Vlti1dqczONn6Th6Xf9VPF7KULF5+5PKCKAuvu3/eHEA4J/YZ6vf7jpQ04BHXZ+HCrPvg6CBsR6rsHfQQCaMjvF65wJb+ysDbNpU32Vv7txyqd3w/rYLP3f+WPVvm/vhrLP/PXDa0H42Grfn+l9Uqfo10xnd9HyJ9f6vfzn5Y3Ef9MZssv0+0+wqjcX+hWz4lNrsdqdat/vl9sVV+PcdoO38jyWz8/+f90VP7HQGf/GbPr/4eGoA5bOlSHoA5Cz6E+6AMQMLSWn5trqEcpP3+uL8/fVpK/vSR/uiR/R0n+zpJ8GGe/f/6n4eVi+Xd+/pu+3+th6TrbR2L80T7rk1+P7Lf8/Lnffq21/Px5Yhhmb5x96vxXnj5zs/H8f9Hc/+/G/f1QTNfiZ+tGnCFdL8yvqzef/a+1l1PpMt89WX3ScaOyLc1fb5S4t32+Yu/yckLLcWZFPWba37e723wH2+erZfNNx7A9q29+frIje186/0jH1bS9JrP1rWbrMZXVIx1X9sQ4rwesRtofuz3/n/bPmVAtnrlw8fwjMZ320z9NVLctTj/SutDfbE7dgbXptf3PTGhv/7OrOb1aaT0u7F6eXrQeF2rZ9PlGsnmbPE0/GtPpe+47E9NL02fPfe/i0+u98jDmLr/w4nfPXrx4/gf9vghhNe/aiBeLp9LrucDptWwWL7zYGi8GfWQCNtrc8899f+7yCy8+fOG5s8+ef/b8paPHjh2dnz/21aMLc0vn9XOtZ/fAVrL8pT/omgAAAAAAAAAAAAC9+uGpkzf/8taX3220/19u/5fa/6cnf1P7/59k7f/zdvKpHXxqB7inQ/7SuHtvtNdjKpuvGsPHsvruzcrZl73v4zFujuMX2/+n9vZ5v66pPvdm0/P+e9N8WXcCK/pLmcr6IMnHC/xUjK/F+FcBBqiY7jw5xm39W4eV/VunfT31T6FfitGU/m9pb0j9mKT23936dUrH/z2bUEfW32Y0Jxz0OgKd/Wvo+/9uORMfeF3GINjOYxXqdaN4AMNh0ON/puueKb70x29uXwxpttuPtR8v8/5LYS2GffxJ5Q/D+J/FulWiOf5dT8e/Dr2rt/Xz3PvoCv/9+a13W4oN+3s9/l7NVj31A723vMxWH8Ty0/o/GHorv/7LrPz8hlCP/peVv6PH8les/8HVlf//WH7abA99utfyGzUuKu31yK8bp/t/+XXj5E62/qlvz77Xf5UDNd6N5cM46z7ObK8j2A6ngYz/2+H+6Grlz2F8KabTgTA955B/I/db//R8Rfoe2Jctvyj5fhuVcYq7Gffxf78W47LPQxr/N+2PtQ7pSku62mHbjvq+AlvNe0N//2/EwpUhqIMwpGF6COrQHur1+sZe0Cox0MIZ+PYf9N3nQZc/6O1fJh//Nz+Hz8f/rWQ/IPLxf/P35+P/5vn5+Hp5fj7+b7498/F/8/x7s+XmV7BnSvI/UZK/vyT/wHL+dKf8gyXv/2RJ/uEQz0m65N9X8v77S/LvKcmfKMn/TEn+Z0vyHyjJf6gk/3Ml+Vtdao8yrusP4yxvn+fzD+Mj3f/p9vmfLskHRtfPXj/y+JnffbvWaP8/1fy9lu7jnYjpavzt/KOYzu97h5b0Yt5bMf33LH/Yr3fAOMn7z8i/3x8syQdGV3rOy+cbxlDRuceeXvut6naez2j5fIy/EOMvxvjhGM/GeC7GR2I8v0n1Y2M8/ts/HH+5WP69vzvL7/V58rw9UN5P1NEe65NfH+j3efa8H79+rbX8VTYHAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGJjK0t+FhZkihOtvvnryqdMX5hanPNqco7b0d7IlVW2+L4RHYjwR41/EF3fef+lca3w3xkWYD0UomtPDk7ebJe0MIVwJh8KNUAv7r9985e35J05fPXXt8DuvHb+1cVsAAAAAtr4PAwAA//+KXBmY") syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x800714, &(0x7f00000000c0)={[{@test_dummy_encryption}]}, 0x1, 0x4c0, &(0x7f00000006c0)="$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") symlinkat(&(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) statfs(0x0, 0x0) 1m8.242945067s ago: executing program 1 (id=467): ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, &(0x7f0000000380)=0x1) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) waitid(0x0, r0, 0x0, 0x61000006, 0x0) ptrace$getregset(0x4205, r0, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) 1m7.859126196s ago: executing program 32 (id=467): ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, &(0x7f0000000380)=0x1) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) waitid(0x0, r0, 0x0, 0x61000006, 0x0) ptrace$getregset(0x4205, r0, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) 1m5.025781187s ago: executing program 33 (id=392): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000240)=0x3) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f00000001c0)=0xa) 1m3.338873599s ago: executing program 0 (id=491): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/netfilter\x00') fchdir(r0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x200000c, 0x32, 0xffffffffffffffff, 0x33ed0000) r1 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x0) getdents64(r1, &(0x7f0000000fc0)=""/224, 0xe0) 1m3.105389875s ago: executing program 0 (id=492): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x28002) write$sndseq(r0, 0x0, 0x0) r1 = dup(r0) r2 = socket$caif_seqpacket(0x25, 0x5, 0x1) mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 1m2.057504431s ago: executing program 0 (id=494): r0 = shmget$private(0x0, 0x4000, 0x78000000, &(0x7f000060c000/0x4000)=nil) shmat(r0, &(0x7f0000000000/0x2000)=nil, 0x5000) syz_mount_image$udf(&(0x7f0000000040), &(0x7f00000000c0)='./bus\x00', 0x200000, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x1, 0xc18, &(0x7f0000000500)="$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") shmctl$SHM_LOCK(r0, 0xb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 1m1.852476806s ago: executing program 0 (id=496): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x2048c5, &(0x7f0000000400)={[{@fat=@quiet}, {@shortname_winnt}, {@numtail}, {@shortname_mixed}, {@fat=@dos1xfloppy}, {@rodir}, {@shortname_lower}, {@fat=@flush}, {@numtail}, {@utf8}, {@rodir}, {@utf8no}, {@utf8}]}, 0x0, 0x2ad, &(0x7f0000000580)="$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") mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x20000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) 1m1.26420903s ago: executing program 0 (id=505): socket$unix(0x1, 0x1, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x0) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x1, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x7fff, r0, &(0x7f0000000140)="b7", 0x1, 0x0, 0x0, 0x2}]) 59.045997645s ago: executing program 0 (id=506): r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2}, 0x14) close_range(r0, 0xffffffffffffffff, 0x0) 58.608466997s ago: executing program 34 (id=506): r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2}, 0x14) close_range(r0, 0xffffffffffffffff, 0x0) 7.250786731s ago: executing program 3 (id=822): r0 = syz_usb_connect$hid(0x3, 0x6a, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x458, 0x153, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x4, 0x9, 0x1, {0x22, 0x2a}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0xc4, 0x8, 0x2}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_usb_connect(0x1, 0x0, 0x0, 0x0) syz_usb_control_io$sierra_net(r1, 0x0, &(0x7f0000001b00)={0x1c, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000240)={0x20, 0x9, 0x2a, {0x2a, 0x21, "f70ba391030000000000000000cb4fdca0560f820d54f365c5b1d43ee44fbf6fc93f0808251f022a"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 4.346689703s ago: executing program 3 (id=845): r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000100)={0x3, 0x2, 0x1}) r1 = dup(r0) mmap(&(0x7f0000fed000/0x12000)=nil, 0x12000, 0x2, 0x11, r1, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0585609, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}) 3.966687522s ago: executing program 3 (id=836): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x8010, &(0x7f0000000180), 0x5, 0x565, &(0x7f0000000600)="$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") r0 = open(&(0x7f0000000300)='./file2\x00', 0x62b000, 0x8) fstat(r0, 0x0) open(&(0x7f0000000000)='./file2\x00', 0x4100, 0x8) lstat(&(0x7f0000003e00)='./file2\x00', 0x0) 3.722637988s ago: executing program 6 (id=839): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x1, @broadcast, 'tunl0\x00'}}, 0x1e) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x1, @broadcast, 'ip6gre0\x00'}}, 0x1e) close(0x3) 3.397178526s ago: executing program 6 (id=840): open(&(0x7f00000002c0)='./file1\x00', 0x4c27e, 0x1bb) open(&(0x7f00000000c0)='./file0\x00', 0x108242, 0x78e22799f4a46f8e) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x8000002d) renameat2(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x4) 3.177754962s ago: executing program 6 (id=846): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r0, &(0x7f0000000040)={0x23, 0x14}, 0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r1, &(0x7f0000000040)={0x23, 0x4, 0x2}, 0x10) 3.030867076s ago: executing program 4 (id=848): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x82) r1 = fanotify_init(0x81, 0x40000) fanotify_mark(r1, 0x105, 0x40001032, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) 2.929148248s ago: executing program 6 (id=850): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@bridge_getlink={0x38, 0x12, 0x1, 0x70bd29, 0x25dfdbfc, {0x7, 0x0, 0x0, r1, 0xc040, 0x3000}, [@IFLA_CARRIER={0x5, 0x21, 0xf}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xdc0}, @IFLA_CARRIER={0x5, 0x21, 0x80}]}, 0x38}}, 0x40000) 2.910748179s ago: executing program 4 (id=851): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f00000022c0)=ANY=[], 0x1, 0x6d0, &(0x7f0000001340)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) 2.794990942s ago: executing program 3 (id=852): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x4d}}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000140)={r2, 0x1, 0xe35}, &(0x7f0000000180)=0x8) 2.726787543s ago: executing program 6 (id=853): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket(0x2b, 0x80801, 0x1) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0xffffff1f, 0xfffffffe, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x22}}]}}}, @IFLA_MTU={0x8, 0x4, 0x1000}]}, 0x44}}, 0x4000) 2.553425567s ago: executing program 3 (id=854): syz_mount_image$xfs(&(0x7f0000000480), &(0x7f0000009780)='./file1\x00', 0x0, &(0x7f0000000140), 0x1, 0x98c7, &(0x7f00000097c0)="$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") syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10400, 0x0, 0xbc, 0x0, &(0x7f0000000140)) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x824851, 0x0, 0x1, 0x0, &(0x7f0000000d40)) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) syz_mount_image$ext4(0x0, &(0x7f0000000280)='./bus\x00', 0x80020, 0x0, 0x0, 0x0, &(0x7f0000000300)) 2.258063425s ago: executing program 4 (id=855): syz_mount_image$udf(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x43, 0xc11, &(0x7f0000000d00)="$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") setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x129242, 0x30) mount(0x0, &(0x7f00000009c0)='.\x00', 0x0, 0x22be836, 0x0) pwrite64(r0, &(0x7f0000000200)='a', 0x1, 0x80000000e0) 1.994807511s ago: executing program 7 (id=856): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f00000022c0)=ANY=[], 0x1, 0x6d0, &(0x7f0000001340)="$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") mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) symlink(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1.584909541s ago: executing program 4 (id=858): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_audit(0x10, 0x3, 0x9) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000280)=ANY=[@ANYBLOB="08010000", @ANYRES16=r3, @ANYBLOB="df4800000000fddbdf250c000000180001801400020064756d6d793000000000000000000000dc000380", @ANYRES16=r1, @ANYRES64=r0], 0x108}, 0x1, 0x0, 0x0, 0x4040800}, 0x0) 1.510827153s ago: executing program 7 (id=859): unshare(0x22020600) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000300000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) close(0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x2, 0x2, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0xad}, @exit], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2a}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x3, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 1.322190938s ago: executing program 7 (id=862): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file1\x00', 0x40, 0x83) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000200)=ANY=[@ANYBLOB="fffffffff0b7bbffffffff00000055e7288ec4dbc2060000003a6f0c"]) 1.22107297s ago: executing program 4 (id=863): r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ppoll(&(0x7f0000000140)=[{r0}], 0x1, 0x0, 0x0, 0x0) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/98, 0x62}], 0x1, 0x0, 0x0) close(r1) 1.22078814s ago: executing program 5 (id=864): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x4d}}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000140)={r2, 0x1, 0xe35}, &(0x7f0000000180)=0x8) 1.134282763s ago: executing program 7 (id=865): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000800)={0xa0000006}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f00000000c0)={0x12}) 978.555756ms ago: executing program 5 (id=866): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000140)={r2, 0x68}, 0x8) 871.425939ms ago: executing program 6 (id=867): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000240)=0x3) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x2) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) read$dsp(r0, &(0x7f0000000280)=""/79, 0x4f) 826.22644ms ago: executing program 5 (id=868): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0xcc04, &(0x7f0000000880)=ANY=[], 0x1, 0x209, &(0x7f0000000200)="$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") syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="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", 0x2000, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x0) syz_open_dev$loop(&(0x7f0000000080), 0xecb, 0x101000) 746.109962ms ago: executing program 7 (id=869): preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000003c0), 0x20683) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x1, 0x2, 0x9}}) ioctl$SNDRV_TIMER_IOCTL_TREAD64(r0, 0x400454a4, 0x0) 641.812915ms ago: executing program 5 (id=870): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c"], 0x0, 0x26}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='&\x00\x00\x00\a'], 0x50) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 535.750087ms ago: executing program 7 (id=871): unshare(0x68040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newlink={0x48, 0x10, 0xffffffffffffffff, 0x70bd2c, 0x25dedbff, {0x0, 0x0, 0x0, 0x0, 0x56d09, 0x41025}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}}]}}}]}, 0x48}}, 0x40040) 254.754434ms ago: executing program 4 (id=872): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000002ec0)={@val={0x8, 0x800}, @val={0x3, 0x0, 0x4, 0xfffd, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x1, 0x22, 0x32, 0x69, 0x0, 0x60, 0x2, 0x0, @empty, @broadcast}, "14f3305280f125e6e11a9314b296b53b5d25867c0a8c27b6478984da4eb5"}}, 0x40) 221.629695ms ago: executing program 5 (id=873): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000240)={r1, 0x0, 0x0}, 0xd) 141.131248ms ago: executing program 3 (id=874): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xffde}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xe, 0x7}, {}, {0xd, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x10, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x4}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x4) 0s ago: executing program 5 (id=875): write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000140)={0x7, 0x4d, 0x2}, 0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b0000008000000001000000ffff000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0xca, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000005c0)={r0, &(0x7f0000000080), &(0x7f0000000280)=""/250}, 0x20) kernel console output (not intermixed with test programs): 117.461470][ T5061] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 117.498389][ T5085] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 117.530656][ T5083] EXT4-fs error (device loop0): ext4_generic_delete_entry:2729: inode #2: block 13: comm syz.0.286: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 117.612624][ T5085] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 117.654730][ T5083] EXT4-fs (loop0): Remounting filesystem read-only [ 117.685480][ T5083] EXT4-fs error (device loop0) in ext4_delete_entry:2800: Corrupt filesystem [ 117.696332][ T5085] EXT4-fs (loop2): This should not happen!! Data will be lost [ 117.696332][ T5085] [ 117.751462][ T5083] EXT4-fs (loop0): Remounting filesystem read-only [ 117.758652][ T5085] EXT4-fs (loop2): Total free blocks count 0 [ 117.791622][ T5083] EXT4-fs warning (device loop0): ext4_rename_delete:3792: inode #2: comm syz.0.286: Deleting old file: nlink 5, error=-117 [ 117.805697][ T5085] EXT4-fs (loop2): Free/Dirty block details [ 117.816685][ T5074] REISERFS (device loop3): Using tea hash to sort names [ 117.831601][ T5085] EXT4-fs (loop2): free_blocks=4096 [ 117.840560][ T5074] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 117.861381][ T5085] EXT4-fs (loop2): dirty_blocks=48 [ 117.951247][ T5085] EXT4-fs (loop2): Block reservation details [ 117.957524][ T5085] EXT4-fs (loop2): i_reserved_data_blocks=3 [ 117.978843][ T5098] loop1: detected capacity change from 0 to 2048 [ 118.151266][ T5098] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 118.761294][ T4472] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 118.880092][ T5125] netlink: 4 bytes leftover after parsing attributes in process `syz.2.301'. [ 118.904584][ T5128] ima: policy update failed [ 118.930826][ T26] audit: type=1802 audit(1786168380.291:18): pid=5128 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.302" res=0 errno=0 [ 119.021292][ T4472] usb 2-1: Using ep0 maxpacket: 16 [ 119.141271][ T4472] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 119.162698][ T4472] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.199105][ T5138] loop2: detected capacity change from 0 to 256 [ 119.210892][ T4472] usb 2-1: config 0 descriptor?? [ 119.274036][ T4472] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 119.423911][ T5143] loop2: detected capacity change from 0 to 256 [ 120.066263][ T5162] tipc: Started in network mode [ 120.105782][ T5162] tipc: Node identity ac14142f, cluster identity 4711 [ 120.149559][ T5162] tipc: New replicast peer: 172.20.20.170 [ 120.180291][ T5162] tipc: Enabled bearer , priority 10 [ 120.237206][ T5163] tipc: New replicast peer: 0.0.0.0 [ 120.311240][ C0] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 120.352267][ T4234] usb 2-1: USB disconnect, device number 5 [ 120.418921][ T5168] netlink: 16 bytes leftover after parsing attributes in process `syz.2.320'. [ 120.955853][ T5180] netlink: 'syz.1.326': attribute type 29 has an invalid length. [ 120.989620][ T5180] netlink: 'syz.1.326': attribute type 29 has an invalid length. [ 121.037659][ T5181] netlink: 'syz.1.326': attribute type 29 has an invalid length. [ 121.089470][ T5180] netlink: 'syz.1.326': attribute type 29 has an invalid length. [ 121.156030][ T5180] netlink: 'syz.1.326': attribute type 29 has an invalid length. [ 121.293015][ T4234] tipc: Node number set to 2886997039 [ 121.477857][ T5177] loop2: detected capacity change from 0 to 32768 [ 121.635710][ T5177] JBD2: Ignoring recovery information on journal [ 121.851638][ T5177] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 121.947902][ T5195] loop0: detected capacity change from 0 to 64 [ 122.096130][ T26] audit: type=1800 audit(1786168383.461:19): pid=5177 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.324" name="file1" dev="loop2" ino=17058 res=0 errno=0 [ 122.236930][ T5120] block2mtd: error: cannot open device [ 122.297571][ T5195] attempt to access beyond end of device [ 122.297571][ T5195] loop0: rw=2049, want=162, limit=64 [ 122.332965][ T4190] ocfs2: Unmounting device (7,2) on (node local) [ 122.431748][ T5195] Buffer I/O error on dev loop0, logical block 161, lost async page write [ 122.461314][ T5195] attempt to access beyond end of device [ 122.461314][ T5195] loop0: rw=2049, want=163, limit=64 [ 122.543046][ T5195] Buffer I/O error on dev loop0, logical block 162, lost async page write [ 122.576285][ T5208] loop3: detected capacity change from 0 to 256 [ 122.594096][ T5195] attempt to access beyond end of device [ 122.594096][ T5195] loop0: rw=2049, want=164, limit=64 [ 122.631912][ T5195] Buffer I/O error on dev loop0, logical block 163, lost async page write [ 122.664284][ T5195] attempt to access beyond end of device [ 122.664284][ T5195] loop0: rw=2049, want=168, limit=64 [ 122.715556][ T5210] loop4: detected capacity change from 0 to 2048 [ 122.731581][ T4234] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 122.795209][ T5195] Buffer I/O error on dev loop0, logical block 167, lost async page write [ 122.862233][ T5195] attempt to access beyond end of device [ 122.862233][ T5195] loop0: rw=2049, want=170, limit=64 [ 122.916698][ T5195] Buffer I/O error on dev loop0, logical block 169, lost async page write [ 122.971263][ T5195] attempt to access beyond end of device [ 122.971263][ T5195] loop0: rw=2049, want=172, limit=64 [ 123.006034][ T5210] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 123.021082][ T4234] usb 2-1: Using ep0 maxpacket: 32 [ 123.033663][ T5195] Buffer I/O error on dev loop0, logical block 171, lost async page write [ 123.055744][ T5195] attempt to access beyond end of device [ 123.055744][ T5195] loop0: rw=2049, want=173, limit=64 [ 123.078556][ T5195] Buffer I/O error on dev loop0, logical block 172, lost async page write [ 123.142101][ T4234] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 123.175923][ T4234] usb 2-1: config 0 has no interface number 0 [ 123.251246][ T4480] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 123.361885][ T4234] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 123.380816][ T4234] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.409098][ T4234] usb 2-1: Product: syz [ 123.421347][ T4234] usb 2-1: Manufacturer: syz [ 123.430750][ T4234] usb 2-1: SerialNumber: syz [ 123.452202][ T4234] usb 2-1: config 0 descriptor?? [ 123.513765][ T4234] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 123.523076][ T4480] usb 4-1: Using ep0 maxpacket: 16 [ 123.651266][ T4480] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 123.675967][ T4480] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 123.718486][ T4480] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 123.731724][ T4234] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 123.767833][ T4234] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 123.783508][ T4480] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 123.826635][ T4480] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 123.961326][ T4480] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 123.986469][ T5234] loop2: detected capacity change from 0 to 128 [ 124.001193][ T4480] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 124.019971][ T4480] usb 4-1: Manufacturer: syz [ 124.048495][ T4480] usb 4-1: config 0 descriptor?? [ 124.137508][ T5234] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 124.158993][ T5241] loop0: detected capacity change from 0 to 128 [ 124.174160][ T5234] hpfs: filesystem error: improperly stopped [ 124.184554][ T5206] loop1: detected capacity change from 0 to 256 [ 124.198756][ T5234] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 124.216889][ T5234] hpfs: You really don't want any checks? You are crazy... [ 124.243503][ T5234] hpfs: hpfs_map_sector(): read error [ 124.256132][ T5234] hpfs: code page support is disabled [ 124.263075][ T5241] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 124.279404][ T4472] usb 2-1: USB disconnect, device number 6 [ 124.285430][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 124.300697][ T5234] hpfs: hpfs_map_4sectors(): unaligned read [ 124.327169][ T5234] hpfs: hpfs_map_4sectors(): unaligned read [ 124.343827][ T5234] hpfs: filesystem error: unable to find root dir [ 124.373937][ T4472] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 124.390537][ T5241] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 124.421086][ T4480] rc_core: IR keymap rc-hauppauge not found [ 124.427407][ T4480] Registered IR keymap rc-empty [ 124.464610][ T4480] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 124.479590][ T4472] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 124.502385][ T5241] ext2 filesystem being mounted at /83/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.514672][ T5234] hpfs: hpfs_map_4sectors(): unaligned read [ 124.559206][ T4472] quatech2 2-1:0.51: device disconnected [ 124.566883][ T5234] hpfs: hpfs_map_sector(): read error [ 124.573014][ T4480] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 124.633004][ T4480] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 124.678522][ T4480] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input8 [ 124.752168][ T4480] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 124.802050][ T4480] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 124.863057][ T4480] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 124.921088][ T4480] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 124.971305][ T4480] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 124.980785][ T5248] mmap: syz.0.354 (5248) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 125.005913][ T4480] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 125.071609][ T4480] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 125.111203][ T4480] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 125.141100][ T4480] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 125.191136][ T4480] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 125.247332][ T4480] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 125.301043][ T4480] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 125.342164][ T5259] process 'syz.1.358' launched './file0' with NULL argv: empty string added [ 125.371223][ T4480] usb 4-1: USB disconnect, device number 4 [ 125.669539][ T5267] loop3: detected capacity change from 0 to 512 [ 125.774060][ T5267] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 125.862020][ T5267] EXT4-fs error (device loop3): ext4_orphan_get:1432: comm syz.3.362: bad orphan inode 131083 [ 125.918926][ T5267] EXT4-fs (loop3): mounted filesystem without journal. Opts: stripe=0x000000000000003d,init_itable,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 125.964655][ T5279] netlink: 260 bytes leftover after parsing attributes in process `syz.1.365'. [ 126.071036][ T4480] Bluetooth: hci4: command 0x0405 tx timeout [ 126.095454][ T5267] EXT4-fs error (device loop3): ext4_empty_dir:3177: inode #2: block 13: comm syz.3.362: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 126.120824][ C0] vkms_vblank_simulate: vblank timer overrun [ 127.081546][ T5309] loop0: detected capacity change from 0 to 16 [ 127.222635][ T5309] erofs: (device loop0): mounted with root inode @ nid 36. [ 127.431745][ T5300] loop4: detected capacity change from 0 to 8192 [ 127.504865][ T5317] loop1: detected capacity change from 0 to 4096 [ 127.571187][ T4182] loop4: p1 p2 p3 p4 [ 127.587972][ T4182] loop4: p1 start 51379968 is beyond EOD, truncated [ 127.608714][ T4182] loop4: p3 size 100663552 extends beyond EOD, truncated [ 127.617921][ T4182] loop4: p4 size 81920 extends beyond EOD, truncated [ 127.636263][ T5317] EXT4-fs (loop1): Test dummy encryption mode enabled [ 127.672101][ T5317] EXT4-fs (loop1): Ignoring removed orlov option [ 127.696955][ T5320] loop3: detected capacity change from 0 to 4096 [ 127.735035][ T5317] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,debug_want_extra_isize=0x0000000000000010,nodioread_nolock,test_dummy_encryption,lazytime,stripe=0x0000000000000000,minixdf,orlov,,errors=continue. Quota mode: writeback. [ 127.801189][ T5300] loop4: p1 p2 p3 p4 [ 127.811754][ T5300] loop4: p1 start 51379968 is beyond EOD, truncated [ 127.861224][ T4481] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 127.901802][ T5300] loop4: p3 size 100663552 extends beyond EOD, truncated [ 127.952664][ T5320] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,dioread_nolock,,errors=continue. Quota mode: writeback. [ 128.018384][ T5300] loop4: p4 size 81920 extends beyond EOD, truncated [ 128.056489][ T5317] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 128.221393][ T4481] usb 1-1: config 127 has an invalid interface number: 138 but max is 0 [ 128.240008][ T4481] usb 1-1: config 127 has no interface number 0 [ 128.254507][ T4481] usb 1-1: config 127 interface 138 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 40 [ 128.270259][ T4481] usb 1-1: config 127 interface 138 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 128.424659][ T4551] udevd[4551]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 128.438038][ T4517] udevd[4517]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 128.468705][ T4524] udevd[4524]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 128.479889][ T4481] usb 1-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=4e.40 [ 128.521036][ T4481] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.529105][ T4481] usb 1-1: Product: syz [ 128.584406][ T4481] usb 1-1: Manufacturer: syz [ 128.585807][ T4182] udevd[4182]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 128.589798][ T4481] usb 1-1: SerialNumber: syz [ 128.606470][ T4517] udevd[4517]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 128.655406][ T4524] udevd[4524]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 128.742599][ T5321] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 128.765667][ T5321] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 129.111321][ T4471] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 129.201248][ T4481] usb 1-1: probing VID:PID(0424:012C) [ 129.212538][ T4481] usb 1-1: vub300 testing BULK OUT EndPoint(0) 0F [ 129.240501][ T4481] usb 1-1: vub300 testing BULK OUT EndPoint(1) 09 [ 129.262246][ T4481] usb 1-1: vub300 testing BULK OUT EndPoint(2) 0C [ 129.282517][ T4481] usb 1-1: ignoring unexpected bulk_out endpoint [ 129.311042][ T4481] usb 1-1: Could not find two sets of bulk-in/out endpoint pairs [ 129.345079][ T4481] vub300: probe of 1-1:127.138 failed with error -22 [ 129.381483][ T4481] usb 1-1: USB disconnect, device number 2 [ 129.491369][ T4471] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 129.501584][ T1112] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 129.520886][ T4471] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 129.541546][ T4471] usb 5-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 129.550796][ T4471] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.652822][ T4471] spcp8x5 5-1:1.0: SPCP8x5 converter detected [ 129.672156][ T4471] usb 5-1: SPCP8x5 converter now attached to ttyUSB0 [ 129.770916][ T5371] netlink: 16 bytes leftover after parsing attributes in process `syz.0.404'. [ 129.811752][ T4480] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 129.847440][ T5373] loop0: detected capacity change from 0 to 128 [ 129.862385][ T1112] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.046731][ T4471] usb 5-1: USB disconnect, device number 3 [ 130.053470][ T1112] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 130.071184][ T4480] usb 2-1: Using ep0 maxpacket: 8 [ 130.085227][ T4471] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 130.094325][ T1112] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.113746][ T141] attempt to access beyond end of device [ 130.113746][ T141] loop0: rw=1, want=593, limit=128 [ 130.116047][ T1112] usb 4-1: Product: syz [ 130.132148][ T4471] spcp8x5 5-1:1.0: device disconnected [ 130.156249][ T9] attempt to access beyond end of device [ 130.156249][ T9] loop0: rw=2049, want=793, limit=128 [ 130.181738][ T1112] usb 4-1: Manufacturer: syz [ 130.191302][ T4480] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 196, changing to 11 [ 130.203134][ T1112] usb 4-1: SerialNumber: syz [ 130.224554][ T4480] usb 2-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 130.268901][ T4480] usb 2-1: config 0 interface 0 has no altsetting 0 [ 130.289215][ T4480] usb 2-1: New USB device found, idVendor=0458, idProduct=0153, bcdDevice= 0.00 [ 130.310410][ T4480] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.335445][ T9] attempt to access beyond end of device [ 130.335445][ T9] loop0: rw=1, want=1041, limit=128 [ 130.339860][ T4480] usb 2-1: config 0 descriptor?? [ 130.488832][ T5377] device veth1_macvtap left promiscuous mode [ 130.506726][ T5377] device macsec0 entered promiscuous mode [ 130.663591][ T5380] loop0: detected capacity change from 0 to 1024 [ 130.898458][ T4480] kye 0003:0458:0153.0002: ignoring exceeding usage max [ 130.930510][ T4480] kye 0003:0458:0153.0002: usage index exceeded [ 130.967762][ T4480] kye 0003:0458:0153.0002: item 0 4 2 0 parsing failed [ 130.996330][ T4480] kye 0003:0458:0153.0002: parse failed [ 131.015978][ T4480] kye: probe of 0003:0458:0153.0002 failed with error -22 [ 131.128183][ T4480] usb 2-1: USB disconnect, device number 7 [ 131.175180][ T5391] syz.0.411 (5391) used greatest stack depth: 20992 bytes left [ 131.361336][ T1112] cdc_ncm 4-1:1.0: bind() failure [ 131.374003][ T1112] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 131.401821][ T1112] cdc_ncm 4-1:1.1: bind() failure [ 131.436347][ T1112] usb 4-1: USB disconnect, device number 5 [ 131.611053][ T4481] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 131.981301][ T4481] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 132.013199][ T4481] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.059437][ T4481] usb 1-1: config 0 descriptor?? [ 132.132335][ T4481] cp210x 1-1:0.0: cp210x converter detected [ 132.214715][ T5414] netlink: 48 bytes leftover after parsing attributes in process `syz.1.423'. [ 132.309446][ T5402] loop4: detected capacity change from 0 to 32768 [ 132.353676][ T5412] loop3: detected capacity change from 0 to 8192 [ 132.402685][ T5418] loop1: detected capacity change from 0 to 256 [ 132.426208][ T5402] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 132.459574][ T5412] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 132.479506][ T5412] REISERFS (device loop3): using ordered data mode [ 132.499964][ T26] audit: type=1800 audit(1786168393.861:20): pid=5402 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.417" name="file1" dev="loop4" ino=17058 res=0 errno=0 [ 132.525290][ T5412] reiserfs: using flush barriers [ 132.534856][ T5418] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 132.561900][ T5412] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 132.579489][ T4481] cp210x 1-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 132.630883][ T5412] REISERFS (device loop3): checking transaction log (loop3) [ 132.639144][ T4481] cp210x 1-1:0.0: GPIO initialisation failed: -524 [ 132.655965][ T4191] ocfs2: Unmounting device (7,4) on (node local) [ 132.676624][ T4481] usb 1-1: cp210x converter now attached to ttyUSB0 [ 132.688139][ T5412] REISERFS (device loop3): Using r5 hash to sort names [ 132.729054][ T5412] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 132.857577][ T4481] usb 1-1: USB disconnect, device number 3 [ 132.890087][ T4481] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 132.937449][ T4481] cp210x 1-1:0.0: device disconnected [ 133.171059][ T1112] usb 5-1: new low-speed USB device number 4 using dummy_hcd [ 133.217366][ T5425] smpboot: CPU 1 is now offline [ 133.402088][ T5427] Illegal XDP return value 4294967274, expect packet loss! [ 133.528538][ T5429] loop0: detected capacity change from 0 to 256 [ 133.552084][ T1112] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 133.607191][ T1112] usb 5-1: config 0 has no interface number 0 [ 133.615433][ T5431] netlink: 28 bytes leftover after parsing attributes in process `syz.3.429'. [ 133.638744][ T1112] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 133.679613][ T5429] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 133.699811][ T5433] netlink: 188 bytes leftover after parsing attributes in process `syz.1.430'. [ 133.738216][ T1112] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 133.818052][ T1112] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 133.887110][ T1112] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.940702][ T1112] usb 5-1: config 0 descriptor?? [ 133.953100][ T5435] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 133.981366][ T5423] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 134.057955][ T5435] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 134.070037][ T1112] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 134.237028][ T5440] device syzkaller1 entered promiscuous mode [ 134.327302][ T5442] loop0: detected capacity change from 0 to 128 [ 134.372068][ T4474] usb 5-1: USB disconnect, device number 4 [ 134.621231][ T4471] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 134.675384][ T5444] loop0: detected capacity change from 0 to 512 [ 134.753288][ T5444] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 134.805156][ T5444] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 134.847737][ T5444] System zones: 0-1, 15-15, 18-18, 34-34 [ 134.878778][ T5444] EXT4-fs (loop0): orphan cleanup on readonly fs [ 134.950405][ T5444] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=0 [ 135.007850][ T5444] EXT4-fs warning (device loop0): ext4_enable_quotas:6488: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 135.028250][ T4471] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 135.064745][ T4471] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 135.076145][ T5444] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 135.091082][ T4471] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 135.112453][ T5444] EXT4-fs (loop0): 1 truncate cleaned up [ 135.140601][ T5444] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 135.268481][ T5456] netlink: 20 bytes leftover after parsing attributes in process `syz.3.440'. [ 135.288888][ T5444] fscrypt (loop0, inode 16): Error -61 getting encryption context [ 135.324543][ T4471] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 135.336629][ T4480] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 135.352993][ T5444] fscrypt (loop0, inode 16): Error -61 getting encryption context [ 135.395137][ T4471] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.437055][ T5457] fscrypt (loop0, inode 16): Error -61 getting encryption context [ 135.454649][ T4471] usb 2-1: Product: syz [ 135.477091][ T4471] usb 2-1: Manufacturer: syz [ 135.501026][ T4471] usb 2-1: SerialNumber: syz [ 135.562382][ T4471] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 135.579702][ T4471] cdc_ncm 2-1:1.0: bind() failure [ 135.834593][ T4480] usb 5-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00 [ 135.873968][ T4480] usb 5-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 135.931819][ T4480] usb 5-1: Product: syz [ 135.957341][ T4480] usb 5-1: config 0 descriptor?? [ 135.987587][ T4474] usb 2-1: USB disconnect, device number 8 [ 136.025623][ T4480] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 136.055359][ T4480] usb 5-1: Detected FT232H [ 136.132624][ T4471] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 136.232886][ T4480] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 136.383348][ T4471] usb 1-1: Using ep0 maxpacket: 8 [ 136.518905][ T4471] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 136.540430][ T5466] loop3: detected capacity change from 0 to 32768 [ 136.562825][ T4471] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 136.618653][ T4471] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.641316][ T5466] [ 136.641316][ T5466] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 136.641316][ T5466] [ 136.711857][ T4471] usb 1-1: config 0 descriptor?? [ 136.754398][ T4480] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 136.818318][ T5466] ERROR: (device loop3): diWrite: ixpxd invalid [ 136.818318][ T5466] [ 136.902985][ T5466] ERROR: (device loop3): txCommit: [ 136.902985][ T5466] [ 136.944980][ T5470] jfs_create: dtSearch returned -17 [ 136.964014][ T4474] usb 5-1: USB disconnect, device number 5 [ 137.032729][ T4471] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 137.044684][ T4474] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 137.098725][ T4474] ftdi_sio 5-1:0.0: device disconnected [ 137.172084][ T4197] [ 137.172084][ T4197] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 137.172084][ T4197] [ 137.199445][ T4197] [ 137.199445][ T4197] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 137.199445][ T4197] [ 137.257937][ T4471] usb 1-1: USB disconnect, device number 4 [ 137.665624][ T5474] tun0: tun_chr_ioctl cmd 1074812118 [ 137.715470][ T5474] tun0: tun_chr_ioctl cmd 2147767520 [ 137.793862][ T5472] loop1: detected capacity change from 0 to 32768 [ 138.128509][ T5484] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.145089][ T5472] UFO tlock:0xffffc900028921b0 [ 138.215870][ T5472] non-latin1 character 0x637c found in JFS file name [ 138.251377][ T5484] Zero length message leads to an empty skb [ 138.311342][ T5472] mount with iocharset=utf8 to access [ 138.545566][ T5493] loop3: detected capacity change from 0 to 1024 [ 138.556781][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.563401][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.663147][ T5493] EXT4-fs (loop3): Ignoring removed oldalloc option [ 138.701158][ T5495] netlink: 20 bytes leftover after parsing attributes in process `syz.4.458'. [ 138.752372][ T5493] EXT4-fs (loop3): Ignoring removed oldalloc option [ 138.781074][ T5493] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 138.809433][ T5496] netlink: 20 bytes leftover after parsing attributes in process `syz.4.458'. [ 138.876905][ T5493] EXT4-fs (loop3): mounted filesystem without journal. Opts: stripe=0x0000000000000004,bsddf,sysvgroups,min_batch_time=0x0000000000000003,dioread_nolock,oldalloc,oldalloc,sysvgroups,norecovery,,errors=continue. Quota mode: none. [ 139.461418][ T5503] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 0 out of range (51000..2150000) [ 139.758608][ T5510] loop1: detected capacity change from 0 to 128 [ 139.907426][ T5512] loop3: detected capacity change from 0 to 512 [ 140.026747][ T5512] EXT4-fs (loop3): Ignoring removed oldalloc option [ 140.094022][ T5512] EXT4-fs (loop3): Ignoring removed nobh option [ 140.177870][ T5512] EXT4-fs warning (device loop3): ext4_xattr_inode_get:492: inode #11: comm syz.3.463: ea_inode file size=7 entry size=6 [ 140.320851][ T5512] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #11: comm syz.3.463: iget: bad extra_isize 90 (inode size 256) [ 140.418448][ T5512] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.463: error while reading EA inode 11 err=-117 [ 140.504560][ T5512] EXT4-fs (loop3): 1 orphan inode deleted [ 140.549550][ T5512] EXT4-fs (loop3): mounted filesystem without journal. Opts: data_err=ignore,oldalloc,debug_want_extra_isize=0x000000000000005a,nobh,quota,nodiscard,grpid,,errors=continue. Quota mode: writeback. [ 140.833414][ T5512] EXT4-fs (loop3): Ignoring removed bh option [ 140.879732][ T5512] EXT4-fs (loop3): changing journal_checksum during remount not supported; ignoring [ 140.954510][ T5512] EXT4-fs (loop3): re-mounted. Opts: stripe=0x0000000000000008,init_itable,block_validity,journal_async_commit,bh,noinit_itable,. Quota mode: writeback. [ 140.973052][ T141] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.105330][ T5512] EXT4-fs error (device loop3): ext4_nfs_get_inode:1433: inode #11: comm syz.3.463: iget: bad extra_isize 90 (inode size 256) [ 141.190252][ T141] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.470198][ T141] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.662983][ T141] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.681161][ T4474] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 141.971350][ T4474] usb 5-1: Using ep0 maxpacket: 16 [ 142.101248][ T4474] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 142.177570][ T4474] usb 5-1: config 0 interface 0 has no altsetting 0 [ 142.402841][ T4474] usb 5-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 142.466323][ T4474] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.528165][ T4474] usb 5-1: Product: syz [ 142.548708][ T4474] usb 5-1: Manufacturer: syz [ 142.573853][ T5526] chnl_net:caif_netlink_parms(): no params data found [ 142.591788][ T4474] usb 5-1: SerialNumber: syz [ 142.618893][ T4474] usb 5-1: config 0 descriptor?? [ 142.952015][ T4474] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input10 [ 143.201295][ T5526] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.239854][ T5526] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.294184][ T5526] device bridge_slave_0 entered promiscuous mode [ 143.341074][ T4474] rc_core: IR keymap rc-imon-pad not found [ 143.373517][ T4474] Registered IR keymap rc-empty [ 143.404749][ T4474] imon 5-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 143.443259][ T5564] input: syz1 as /devices/virtual/input/input12 [ 143.472234][ T4474] imon 5-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 143.533231][ T5552] bond0: (slave bond_slave_1): Releasing backup interface [ 143.574210][ T4474] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 143.638549][ T4474] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input11 [ 143.694763][ T4474] imon 5-1:0.0: iMON device (15c2:0041, intf0) on usb<5:6> initialized [ 143.816938][ T5526] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.869112][ T5526] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.911480][ T1112] Bluetooth: hci2: command 0x0409 tx timeout [ 144.009409][ T5526] device bridge_slave_1 entered promiscuous mode [ 144.058728][ T1112] usb 5-1: USB disconnect, device number 6 [ 144.071052][ C0] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 144.373940][ T5526] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 144.537546][ T5526] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 144.786697][ T5582] loop4: detected capacity change from 0 to 256 [ 145.026446][ T5582] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 145.242485][ T5526] team0: Port device team_slave_0 added [ 145.352320][ T5526] team0: Port device team_slave_1 added [ 145.378466][ T4190] syz-executor (4190) used greatest stack depth: 20688 bytes left [ 145.752105][ T5526] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 145.759200][ T5526] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.018977][ T4474] Bluetooth: hci2: command 0x041b tx timeout [ 146.057488][ T5526] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 146.156455][ T5526] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 146.188659][ T5526] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.279079][ T5526] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 146.364011][ T4474] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 146.543342][ T5526] device hsr_slave_0 entered promiscuous mode [ 146.556813][ T5601] loop4: detected capacity change from 0 to 32768 [ 146.567391][ T5526] device hsr_slave_1 entered promiscuous mode [ 146.661133][ T4474] usb 4-1: Using ep0 maxpacket: 16 [ 146.700702][ T5601] read_mapping_page failed! [ 146.768841][ T5601] ERROR: (device loop4): txCommit: [ 146.768841][ T5601] [ 146.781263][ T4474] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 146.853433][ T5584] chnl_net:caif_netlink_parms(): no params data found [ 146.874151][ T4474] usb 4-1: config 0 interface 0 has no altsetting 0 [ 147.033591][ T4480] Bluetooth: hci0: command 0x0409 tx timeout [ 147.071540][ T4474] usb 4-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 147.128016][ T4474] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.178706][ T4474] usb 4-1: Product: syz [ 147.221045][ T4474] usb 4-1: Manufacturer: syz [ 147.226002][ T4474] usb 4-1: SerialNumber: syz [ 147.250149][ T5625] loop0: detected capacity change from 0 to 128 [ 147.291846][ T4474] usb 4-1: config 0 descriptor?? [ 147.569174][ T141] device hsr_slave_0 left promiscuous mode [ 147.605958][ T4474] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input13 [ 147.693229][ T141] device hsr_slave_1 left promiscuous mode [ 147.799075][ T141] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 147.831574][ T141] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 147.903475][ T141] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 147.941346][ T141] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 147.961071][ T4474] rc_core: IR keymap rc-imon-pad not found [ 147.988677][ T4474] Registered IR keymap rc-empty [ 148.014707][ T4474] imon 4-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 148.064641][ T4474] imon 4-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 148.103483][ T141] device bridge_slave_1 left promiscuous mode [ 148.123205][ T141] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.144274][ T4474] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 148.172460][ T4474] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input14 [ 148.205534][ T4474] imon 4-1:0.0: iMON device (15c2:0041, intf0) on usb<4:6> initialized [ 148.261398][ T1112] Bluetooth: hci2: command 0x040f tx timeout [ 148.296060][ T141] device bridge_slave_0 left promiscuous mode [ 148.388021][ T141] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.522181][ T141] device veth1_macvtap left promiscuous mode [ 148.547083][ T141] device veth0_macvtap left promiscuous mode [ 148.586779][ T141] device veth1_vlan left promiscuous mode [ 148.595049][ T4474] usb 4-1: USB disconnect, device number 6 [ 148.601101][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 148.621332][ T141] device veth0_vlan left promiscuous mode [ 148.940583][ T5651] loop4: detected capacity change from 0 to 256 [ 148.979961][ T5651] exfat: Deprecated parameter 'utf8' [ 149.014446][ T5651] exfat: Deprecated parameter 'utf8' [ 149.068367][ T5651] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xff6615b4, utbl_chksum : 0xe619d30d) [ 149.111279][ T4474] Bluetooth: hci0: command 0x041b tx timeout [ 149.414190][ T141] team0 (unregistering): Port device team_slave_1 removed [ 149.445031][ T141] team0 (unregistering): Port device team_slave_0 removed [ 149.467291][ T141] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 149.495742][ T141] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 149.624301][ T141] bond0 (unregistering): Released all slaves [ 149.971861][ T5584] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.979253][ T5584] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.003155][ T5661] loop3: detected capacity change from 0 to 256 [ 150.083700][ T5661] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 150.100553][ T5584] device bridge_slave_0 entered promiscuous mode [ 150.201158][ T5584] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.248421][ T5584] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.321920][ T5584] device bridge_slave_1 entered promiscuous mode [ 150.349362][ T4474] Bluetooth: hci2: command 0x0419 tx timeout [ 150.512703][ T5526] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 150.704936][ T5584] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 150.813748][ T5526] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 150.856335][ T5584] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 150.916889][ T5526] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 150.979895][ T5526] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 151.098244][ T5584] team0: Port device team_slave_0 added [ 151.191777][ T4471] Bluetooth: hci0: command 0x040f tx timeout [ 151.203588][ T5584] team0: Port device team_slave_1 added [ 151.411986][ T5584] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 151.419339][ T5584] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 151.665521][ T5584] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 151.804319][ T5584] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 151.848776][ T5584] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 151.975428][ T5696] loop3: detected capacity change from 0 to 512 [ 152.038077][ T5696] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 152.061047][ T5584] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 152.150855][ T5526] 8021q: adding VLAN 0 to HW filter on device bond0 [ 152.175884][ T5696] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,quota,quota,stripe=0x0000000000000003,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 152.249573][ T5701] loop4: detected capacity change from 0 to 128 [ 152.277030][ T5696] ext4 filesystem being mounted at /110/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 152.326336][ T5701] FAT-fs (loop4): Directory bread(block 524322) failed [ 152.385785][ T5584] device hsr_slave_0 entered promiscuous mode [ 152.399962][ T5701] FAT-fs (loop4): Directory bread(block 524323) failed [ 152.462387][ T5701] FAT-fs (loop4): Directory bread(block 524324) failed [ 152.507106][ T5584] device hsr_slave_1 entered promiscuous mode [ 152.565790][ T5584] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 152.581263][ T5701] FAT-fs (loop4): Directory bread(block 524325) failed [ 152.589212][ T5701] FAT-fs (loop4): Directory bread(block 524326) failed [ 152.621857][ T5584] Cannot create hsr debugfs directory [ 152.691226][ T5701] FAT-fs (loop4): Directory bread(block 524327) failed [ 152.729605][ T5526] 8021q: adding VLAN 0 to HW filter on device team0 [ 152.837601][ T5701] FAT-fs (loop4): Directory bread(block 524328) failed [ 152.898918][ T5701] FAT-fs (loop4): Directory bread(block 524329) failed [ 152.921600][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 152.986033][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 152.996842][ T5701] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 153.058838][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 153.104073][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 153.138898][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.149459][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 153.205557][ T1112] Bluetooth: hci1: command 0x0409 tx timeout [ 153.272092][ T1112] Bluetooth: hci0: command 0x0419 tx timeout [ 153.316162][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 153.356918][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 153.372263][ T5707] loop4: detected capacity change from 0 to 2048 [ 153.434854][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 153.468715][ T5707] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 153.499157][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.506507][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.655175][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 153.732094][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 153.857947][ T5680] chnl_net:caif_netlink_parms(): no params data found [ 153.976040][ T5526] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 154.092030][ T5526] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 154.163141][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 154.220278][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 154.293073][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 154.340641][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 154.390172][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 154.453752][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 154.505213][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 154.550833][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 154.641228][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 154.701734][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 154.984936][ T5680] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.066335][ T5680] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.102378][ T5680] device bridge_slave_0 entered promiscuous mode [ 155.113630][ T5584] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 155.198165][ T5680] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.236437][ T5680] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.261958][ T5680] device bridge_slave_1 entered promiscuous mode [ 155.297397][ T4481] Bluetooth: hci1: command 0x041b tx timeout [ 155.304054][ T5584] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 155.411840][ T5584] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 155.460137][ T5584] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 155.562547][ T5526] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 155.572701][ T5680] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 155.641945][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 155.649892][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 155.828271][ T5680] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 156.125910][ T5680] team0: Port device team_slave_0 added [ 156.193766][ T5680] team0: Port device team_slave_1 added [ 156.250745][ T5584] 8021q: adding VLAN 0 to HW filter on device bond0 [ 156.337964][ T5680] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 156.361385][ T5680] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 156.507083][ T5680] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 156.547664][ T5584] 8021q: adding VLAN 0 to HW filter on device team0 [ 156.601781][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 156.621430][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 156.641506][ T5680] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 156.648921][ T5680] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 156.688692][ T5680] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 156.748108][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 156.758990][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 156.775752][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 156.799489][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 156.814991][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.822602][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 156.838054][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 156.847281][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 156.861635][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.868952][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 156.885533][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 156.982483][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 157.003252][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 157.038567][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 157.076309][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 157.095769][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 157.110597][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 157.132049][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 157.154406][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 157.169623][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 157.179680][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 157.205914][ T5526] device veth0_vlan entered promiscuous mode [ 157.223688][ T5584] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 157.251521][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 157.260166][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 157.279155][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 157.313650][ T5680] device hsr_slave_0 entered promiscuous mode [ 157.351681][ T1112] Bluetooth: hci1: command 0x040f tx timeout [ 157.361613][ T5680] device hsr_slave_1 entered promiscuous mode [ 157.412152][ T5680] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 157.420036][ T5680] Cannot create hsr debugfs directory [ 157.486126][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 157.509697][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 157.540059][ T5526] device veth1_vlan entered promiscuous mode [ 157.606318][ T141] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.734399][ T141] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.846937][ T5584] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 157.885407][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 157.924851][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 157.969766][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 158.021330][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 158.080109][ T141] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.266895][ T141] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.363367][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 158.413851][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 158.437939][ T5526] device veth0_macvtap entered promiscuous mode [ 158.466963][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 158.522855][ T5526] device veth1_macvtap entered promiscuous mode [ 158.682817][ T5526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.749675][ T5526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.795699][ T5526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.833937][ T5526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.858883][ T5526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.901304][ T5526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.925218][ T5526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.962701][ T5526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.997496][ T5526] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 159.070469][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 159.096570][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 159.132038][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 159.168195][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 159.214499][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 159.250019][ T5526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.286581][ T5526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.326673][ T5526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.366757][ T5526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.390346][ T5526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.427469][ T5526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.439643][ T4472] Bluetooth: hci1: command 0x0419 tx timeout [ 159.451017][ T5526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.468820][ T5526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.480174][ T5526] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 159.535663][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 159.558145][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 159.570893][ T5526] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.590041][ T5526] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.609130][ T5526] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.618967][ T5526] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.665308][ T5584] device veth0_vlan entered promiscuous mode [ 159.704077][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 159.719317][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 159.743008][ T141] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.800584][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 159.838801][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 159.859762][ T5584] device veth1_vlan entered promiscuous mode [ 159.935495][ T141] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.007660][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 160.038865][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 160.063698][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 160.096387][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 160.123645][ T5584] device veth0_macvtap entered promiscuous mode [ 160.181650][ T141] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.219783][ T5584] device veth1_macvtap entered promiscuous mode [ 160.274738][ T141] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.323508][ T4673] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 160.339333][ T5584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.378653][ T4673] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 160.414870][ T5584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.454514][ T5584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.484717][ T5584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.514216][ T5584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.544969][ T5584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.583695][ T5584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.614427][ T5584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.639898][ T5584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.656806][ T5584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.668299][ T5584] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 160.691245][ T4673] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 160.710605][ T4673] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 160.720789][ T4673] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 160.737094][ T4673] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 160.747717][ T4673] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 160.772587][ T5584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.821855][ T5584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.838666][ T5584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.849838][ T5584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.866038][ T5584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.879341][ T5584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.896503][ T5584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.909134][ T5584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.928877][ T5584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.940737][ T5584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.967009][ T5584] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 160.998612][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 161.009019][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 161.027294][ T5584] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.047103][ T5584] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.057282][ T5584] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.071332][ T5584] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.115613][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.181629][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.199482][ T4673] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 161.487040][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.548415][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.641791][ T467] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 161.729492][ T4673] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.778588][ T4673] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.822916][ T5680] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 161.899766][ T141] tipc: Disabling bearer [ 161.952084][ T4673] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 161.959768][ T141] tipc: Left network mode [ 161.992572][ T5680] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 162.042214][ T5680] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 162.193250][ T5680] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 162.917702][ T5825] loop5: detected capacity change from 0 to 32768 [ 162.936494][ T5856] loop6: detected capacity change from 0 to 256 [ 162.962151][ T5680] 8021q: adding VLAN 0 to HW filter on device bond0 [ 163.032343][ T5856] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 163.049313][ T5825] XFS (loop5): Mounting V5 Filesystem [ 163.149005][ T5680] 8021q: adding VLAN 0 to HW filter on device team0 [ 163.203967][ T5825] XFS (loop5): Ending clean mount [ 163.250394][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 163.300188][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 163.417928][ T467] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 163.474883][ T467] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 163.578059][ T467] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.585507][ T467] bridge0: port 1(bridge_slave_0) entered forwarding state [ 163.637679][ T5526] XFS (loop5): Unmounting Filesystem [ 163.725003][ T467] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 163.788922][ T467] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 163.849608][ T467] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.857116][ T467] bridge0: port 2(bridge_slave_1) entered forwarding state [ 163.993462][ T5870] device hsr0 entered promiscuous mode [ 164.025013][ T5871] netlink: 4 bytes leftover after parsing attributes in process `syz.4.541'. [ 164.080898][ T5871] device hsr_slave_0 left promiscuous mode [ 164.182685][ T5871] device hsr_slave_1 left promiscuous mode [ 164.289504][ T5871] device hsr0 left promiscuous mode [ 164.338181][ T467] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 164.361432][ T467] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 164.405630][ T467] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 164.463307][ T467] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 164.519902][ T5881] loop5: detected capacity change from 0 to 512 [ 164.537600][ T467] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 164.568140][ T5881] EXT4-fs (loop5): Quota format mount options ignored when QUOTA feature is enabled [ 164.596136][ T467] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 164.644192][ T467] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 164.661619][ T5881] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,quota,quota,stripe=0x0000000000000003,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 164.727555][ T5877] device batadv_slave_0 entered promiscuous mode [ 164.751535][ T5881] ext4 filesystem being mounted at /1/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 164.780476][ T467] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 164.821819][ T467] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 164.921610][ T467] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 164.981809][ T5876] device batadv_slave_0 left promiscuous mode [ 165.068744][ T5680] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 165.192884][ T5680] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 165.200632][ T467] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 165.282262][ T467] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 165.608706][ T5904] loop5: detected capacity change from 0 to 1024 [ 166.270673][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 166.326006][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 166.428323][ T5680] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 166.437879][ T5925] loop4: detected capacity change from 0 to 1024 [ 166.583829][ T5928] loop5: detected capacity change from 0 to 512 [ 166.598991][ T5925] hfsplus: extend alloc file! (16384,256,150995124) [ 166.702315][ T5930] hfsplus: extend alloc file! (16384,256,150995124) [ 166.787819][ T5928] EXT4-fs (loop5): 1 truncate cleaned up [ 166.866303][ T5928] EXT4-fs (loop5): mounted filesystem without journal. Opts: noload,stripe=0x000000000000030c,jqfmt=vfsv1,nojournal_checksum,jqfmt=vfsv1,usrjquota=,,errors=continue. Quota mode: none. [ 166.996336][ T141] device hsr_slave_0 left promiscuous mode [ 167.112788][ T141] device hsr_slave_1 left promiscuous mode [ 167.150273][ T141] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 167.218958][ T5939] loop4: detected capacity change from 0 to 1024 [ 167.229309][ T141] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 167.261069][ T1112] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 167.300077][ T141] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 167.347087][ T141] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 167.483335][ T5944] netlink: 1372 bytes leftover after parsing attributes in process `syz.5.553'. [ 167.497931][ T141] device bridge_slave_1 left promiscuous mode [ 167.521300][ T141] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.589991][ T141] device bridge_slave_0 left promiscuous mode [ 167.626206][ T141] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.654369][ T5947] x86: Booting SMP configuration: [ 167.678136][ T141] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 167.691262][ T5947] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 167.710715][ T0] kvm-clock: cpu 1, msr f103041, secondary cpu clock [ 167.717661][ T141] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 167.726959][ T1112] usb 7-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00 [ 167.741685][ T18] kvm-guest: stealtime: cpu 1, msr b9127440 [ 167.766744][ T1112] usb 7-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 167.779100][ T141] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 167.791430][ T141] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 167.796247][ T1112] usb 7-1: Product: syz [ 167.806832][ T141] device bridge_slave_1 left promiscuous mode [ 167.817043][ T141] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.829218][ T1112] usb 7-1: config 0 descriptor?? [ 167.846944][ T141] device bridge_slave_0 left promiscuous mode [ 167.857771][ T141] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.888931][ T1112] ftdi_sio 7-1:0.0: FTDI USB Serial Device converter detected [ 167.909114][ T1112] usb 7-1: Detected FT232H [ 167.947742][ T141] device veth0_macvtap left promiscuous mode [ 167.954115][ T141] device veth1_vlan left promiscuous mode [ 167.960121][ T141] device veth0_vlan left promiscuous mode [ 167.979003][ T141] device veth1_macvtap left promiscuous mode [ 167.989870][ T141] device veth0_macvtap left promiscuous mode [ 168.021165][ T141] device veth1_vlan left promiscuous mode [ 168.027264][ T141] device veth0_vlan left promiscuous mode [ 168.101225][ T1112] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 168.230029][ T5945] loop3: detected capacity change from 0 to 32768 [ 168.351155][ T5945] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.554 (5945) [ 168.415410][ T5945] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 168.432646][ T5945] BTRFS info (device loop3): force clearing of disk cache [ 168.450446][ T5945] BTRFS info (device loop3): metadata ratio 0 [ 168.465849][ T5945] BTRFS info (device loop3): enabling ssd optimizations [ 168.486918][ T5945] BTRFS info (device loop3): using spread ssd allocation scheme [ 168.507333][ T5945] BTRFS info (device loop3): using free space tree [ 168.520513][ T5945] BTRFS info (device loop3): has skinny extents [ 168.585404][ T1112] usb 7-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 168.630077][ T5945] BTRFS info (device loop3): clearing free space tree [ 168.655686][ T5945] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 168.666356][ T5945] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 168.689806][ T5945] BTRFS info (device loop3): creating free space tree [ 168.698828][ T5945] BTRFS info (device loop3): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 168.709820][ T5945] BTRFS info (device loop3): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 168.792612][ T4480] usb 7-1: USB disconnect, device number 2 [ 168.832295][ T4480] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 168.865812][ T4480] ftdi_sio 7-1:0.0: device disconnected [ 168.993526][ T141] team0 (unregistering): Port device team_slave_1 removed [ 169.063696][ T141] team0 (unregistering): Port device team_slave_0 removed [ 169.286729][ T141] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 169.434261][ T141] bond0 (unregistering): Released all slaves [ 169.595999][ T141] team0 (unregistering): Port device team_slave_1 removed [ 169.621484][ T141] team0 (unregistering): Port device team_slave_0 removed [ 169.638876][ T141] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 169.658071][ T141] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 169.754809][ T141] bond0 (unregistering): Released all slaves [ 170.013615][ T5984] loop6: detected capacity change from 0 to 1024 [ 170.209891][ T5995] loop5: detected capacity change from 0 to 1024 [ 170.269584][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 170.292321][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 170.356089][ T4673] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 170.378951][ T4673] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 170.467134][ T5680] device veth0_vlan entered promiscuous mode [ 170.481110][ T4476] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 170.484813][ T4673] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 170.510760][ T4673] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 170.527028][ T5680] device veth1_vlan entered promiscuous mode [ 170.572535][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 170.590242][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 170.634000][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 170.701773][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 170.713571][ T5680] device veth0_macvtap entered promiscuous mode [ 170.768966][ T6002] smpboot: CPU 1 is now offline [ 170.774379][ T4476] usb 5-1: Using ep0 maxpacket: 16 [ 170.789899][ T5680] device veth1_macvtap entered promiscuous mode [ 170.893055][ T4476] usb 5-1: config 0 has an invalid interface number: 7 but max is 0 [ 170.922661][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 170.936250][ T4476] usb 5-1: config 0 has no interface number 0 [ 170.956178][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 170.978850][ T4476] usb 5-1: config 0 interface 7 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 171.021829][ T5680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 171.088113][ T5680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.150765][ T5680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 171.173544][ T6007] loop5: detected capacity change from 0 to 8192 [ 171.229952][ T5680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.241166][ T4476] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 171.256398][ T6007] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal [ 171.292521][ T4476] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.319284][ T6007] REISERFS (device loop5): using ordered data mode [ 171.328750][ T5680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 171.363334][ T4476] usb 5-1: Product: syz [ 171.377574][ T6007] reiserfs: using flush barriers [ 171.395220][ T4476] usb 5-1: Manufacturer: syz [ 171.405755][ T5680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.428556][ T6007] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 171.450068][ T4476] usb 5-1: SerialNumber: syz [ 171.485069][ T5994] loop3: detected capacity change from 0 to 32768 [ 171.495647][ T4476] r8152-cfgselector 5-1: config 0 descriptor?? [ 171.508888][ T5680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 171.560107][ T6007] REISERFS (device loop5): checking transaction log (loop5) [ 171.583587][ T5994] XFS (loop3): Mounting V5 Filesystem [ 171.590858][ T5680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.672792][ T6005] x86: Booting SMP configuration: [ 171.693171][ T5680] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 171.710448][ T5994] XFS (loop3): Ending clean mount [ 171.725406][ T6005] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 171.778768][ T5993] udc-core: couldn't find an available UDC or it's busy [ 171.801163][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 171.826860][ T0] kvm-clock: cpu 1, msr f103041, secondary cpu clock [ 171.844905][ T18] kvm-guest: stealtime: cpu 1, msr b9127440 [ 171.875733][ T5993] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 171.901872][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 171.936532][ T5680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 171.948362][ T4476] r8152 5-1:0.7: Expected endpoints are not found [ 172.030711][ T6026] loop6: detected capacity change from 0 to 2048 [ 172.035210][ T5680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.058288][ T5680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.074802][ T5680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.093910][ T5680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.107095][ T5680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.117325][ T6007] REISERFS (device loop5): Using tea hash to sort names [ 172.117560][ T5680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.126383][ T6007] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 172.148154][ T5680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.161089][ T4476] r8152-cfgselector 5-1: Unknown version 0x0000 [ 172.167064][ T5680] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 172.176848][ T4476] r8152-cfgselector 5-1: USB disconnect, device number 7 [ 172.186272][ T4197] XFS (loop3): Unmounting Filesystem [ 172.213045][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 172.235250][ T1265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 172.282042][ T5680] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.290834][ T5680] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.318382][ T5680] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.334987][ T5680] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.421334][ T6026] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 172.517879][ T6026] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 172.709851][ T1265] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 172.754644][ T1265] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 172.780538][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 172.837630][ T1265] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 172.873127][ T1265] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 172.891774][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 173.221053][ T6047] 9pnet: p9_errstr2errno: server reported unknown error 00000000000000000000005 [ 173.269556][ T6048] loop6: detected capacity change from 0 to 2048 [ 173.312469][ T6051] netlink: 24 bytes leftover after parsing attributes in process `syz.5.570'. [ 173.380303][ T6054] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 173.423363][ T6048] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 173.627459][ T6059] netlink: 1372 bytes leftover after parsing attributes in process `syz.3.569'. [ 173.693848][ T6061] loop4: detected capacity change from 0 to 1024 [ 173.712913][ T6065] netlink: 4 bytes leftover after parsing attributes in process `syz.6.577'. [ 173.847480][ T6069] tipc: Started in network mode [ 173.864884][ T6069] tipc: Node identity ac1414aa, cluster identity 4711 [ 173.871136][ T4233] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 173.942170][ T6069] tipc: Enabled bearer , priority 10 [ 174.231848][ T4472] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 174.251279][ T4233] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 174.291970][ T4233] usb 8-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 174.314401][ T4233] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.471158][ T4472] usb 7-1: Using ep0 maxpacket: 16 [ 174.578871][ T6092] loop5: detected capacity change from 0 to 512 [ 174.591266][ T4472] usb 7-1: config 0 has an invalid interface number: 7 but max is 0 [ 174.601276][ T4472] usb 7-1: config 0 has no interface number 0 [ 174.615110][ T4472] usb 7-1: config 0 interface 7 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 174.650956][ T4233] qmi_wwan 8-1:1.0: cdc-wdm0: USB WDM device [ 174.742140][ T6098] loop3: detected capacity change from 0 to 512 [ 174.821258][ T4472] usb 7-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 174.864134][ T6098] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 174.878031][ T4233] qmi_wwan 8-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.7-1, WWAN/QMI device, ea:20:59:2f:e8:9c [ 174.883750][ T6092] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 174.901617][ T4472] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.943388][ T6098] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 174.954365][ T4472] usb 7-1: Product: syz [ 174.959713][ T4472] usb 7-1: Manufacturer: syz [ 175.011245][ T4472] usb 7-1: SerialNumber: syz [ 175.016137][ T6098] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 175.027745][ T6092] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 175.048886][ T4472] r8152-cfgselector 7-1: config 0 descriptor?? [ 175.101286][ C0] qmi_wwan 8-1:1.0: nonzero urb status received: -71 [ 175.108335][ C0] qmi_wwan 8-1:1.0: wdm_int_callback - 0 bytes [ 175.120989][ C0] qmi_wwan 8-1:1.0: nonzero urb status received: -71 [ 175.127948][ C0] qmi_wwan 8-1:1.0: wdm_int_callback - 0 bytes [ 175.137860][ T6098] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 175.146146][ C0] qmi_wwan 8-1:1.0: nonzero urb status received: -71 [ 175.146176][ C0] qmi_wwan 8-1:1.0: wdm_int_callback - 0 bytes [ 175.160981][ C0] qmi_wwan 8-1:1.0: nonzero urb status received: -71 [ 175.167717][ C0] qmi_wwan 8-1:1.0: wdm_int_callback - 0 bytes [ 175.180995][ C0] qmi_wwan 8-1:1.0: nonzero urb status received: -71 [ 175.188169][ C0] qmi_wwan 8-1:1.0: wdm_int_callback - 0 bytes [ 175.224636][ T4476] tipc: Node number set to 2886997162 [ 175.243019][ T4476] usb 8-1: USB disconnect, device number 2 [ 175.249536][ T6098] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c042e11c, mo2=0000] [ 175.269642][ T4476] qmi_wwan 8-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.7-1, WWAN/QMI device [ 175.299171][ T6098] EXT4-fs (loop3): orphan cleanup on readonly fs [ 175.319008][ T6073] udc-core: couldn't find an available UDC or it's busy [ 175.338267][ T6098] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.586: bg 0: block 34: padding at end of block bitmap is not set [ 175.361078][ T6073] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 175.391144][ T4472] r8152 7-1:0.7: Expected endpoints are not found [ 175.409600][ T6109] netlink: 20 bytes leftover after parsing attributes in process `syz.4.588'. [ 175.422945][ T6098] Quota error (device loop3): write_blk: dquota write failed [ 175.455276][ T6098] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 175.482486][ T6098] EXT4-fs error (device loop3): ext4_acquire_dquot:6236: comm syz.3.586: Failed to acquire dquot type 1 [ 175.523819][ T6098] EXT4-fs (loop3): 1 truncate cleaned up [ 175.551616][ T6098] EXT4-fs (loop3): mounted filesystem without journal. Opts: noload,bsdgroups,barrier=0x0000000000000003,noblock_validity,,errors=continue. Quota mode: writeback. [ 175.600100][ T6112] 9pnet: p9_errstr2errno: server reported unknown error 00000000000000000000005 [ 175.611120][ T4472] r8152-cfgselector 7-1: Unknown version 0x0000 [ 175.631924][ T4472] r8152-cfgselector 7-1: USB disconnect, device number 3 [ 175.961958][ T6120] netlink: 1372 bytes leftover after parsing attributes in process `syz.7.589'. [ 176.189098][ T6134] loop5: detected capacity change from 0 to 512 [ 176.351956][ T6143] loop4: detected capacity change from 0 to 256 [ 176.378687][ T6134] EXT4-fs (loop5): 1 truncate cleaned up [ 176.385175][ T6134] EXT4-fs (loop5): mounted filesystem without journal. Opts: noload,stripe=0x000000000000030c,jqfmt=vfsv1,nojournal_checksum,jqfmt=vfsv1,usrjquota=,dax=never,nouid32,,errors=continue. Quota mode: none. [ 176.525075][ T6143] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 176.610490][ T6149] loop5: detected capacity change from 0 to 512 [ 176.726400][ T6149] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 176.780292][ T6149] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 176.838779][ T6149] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 176.899534][ T6149] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 176.926956][ T6149] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c042e11c, mo2=0000] [ 176.963284][ T6149] EXT4-fs (loop5): orphan cleanup on readonly fs [ 176.994805][ T6149] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.599: bg 0: block 34: padding at end of block bitmap is not set [ 177.029082][ T6149] Quota error (device loop5): write_blk: dquota write failed [ 177.050187][ T6149] Quota error (device loop5): qtree_write_dquot: Error -28 occurred while creating quota [ 177.068753][ T6149] EXT4-fs error (device loop5): ext4_acquire_dquot:6236: comm syz.5.599: Failed to acquire dquot type 1 [ 177.118285][ T6149] EXT4-fs (loop5): 1 truncate cleaned up [ 177.145458][ T6149] EXT4-fs (loop5): mounted filesystem without journal. Opts: noload,bsdgroups,barrier=0x0000000000000003,noblock_validity,,errors=continue. Quota mode: writeback. [ 177.251145][ T5972] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 177.331126][ T4234] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 177.594286][ T4234] usb 4-1: Using ep0 maxpacket: 8 [ 177.611302][ T5972] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 177.658117][ T5972] usb 5-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 177.699993][ T5972] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.721264][ T4234] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 177.749487][ T4234] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 177.802502][ T4234] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.820445][ T6188] loop7: detected capacity change from 0 to 2048 [ 177.836375][ T4234] usb 4-1: config 0 descriptor?? [ 177.893487][ T4234] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 178.032072][ T6188] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 178.043731][ T5972] qmi_wwan 5-1:1.0: cdc-wdm0: USB WDM device [ 178.099130][ T6188] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 178.111133][ T4234] gspca_vc032x: reg_r err -32 [ 178.115928][ T4234] vc032x: probe of 4-1:0.0 failed with error -32 [ 178.286021][ T5972] qmi_wwan 5-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.4-1, WWAN/QMI device, 72:90:2b:11:95:95 [ 178.499945][ T5972] usb 5-1: USB disconnect, device number 8 [ 178.517603][ T5972] qmi_wwan 5-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.4-1, WWAN/QMI device [ 178.527418][ T6162] qmi_wwan 5-1:1.0: Error submitting int urb - -19 [ 178.945032][ T6194] loop6: detected capacity change from 0 to 40427 [ 178.987588][ T6194] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 179.000451][ T6194] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 179.025572][ T6194] F2FS-fs (loop6): invalid crc value [ 179.058765][ T6194] F2FS-fs (loop6): Found nat_bits in checkpoint [ 179.189376][ T6194] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 179.203952][ T6194] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 179.371647][ T6237] tipc: Started in network mode [ 179.387024][ T6237] tipc: Node identity ac1414aa, cluster identity 4711 [ 179.408512][ T6237] tipc: Enabled bearer , priority 10 [ 179.452848][ T6235] loop7: detected capacity change from 0 to 2048 [ 179.552900][ T6242] loop4: detected capacity change from 0 to 128 [ 179.588089][ T6235] EXT4-fs (loop7): mounted filesystem without journal. Opts: usrquota,max_batch_time=0x0000000000000002,errors=remount-ro,barrier=0x0000000000000001,. Quota mode: writeback. [ 179.611474][ T6235] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 179.677291][ T6242] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 179.677431][ T6235] EXT4-fs (loop7): shut down requested (1) [ 179.763321][ T6242] UDF-fs: warning (device loop4): udf_fill_super: No fileset found [ 180.156723][ T5973] usb 4-1: USB disconnect, device number 7 [ 180.521160][ T5972] tipc: Node number set to 2886997162 [ 181.412891][ T6303] loop6: detected capacity change from 0 to 1024 [ 181.571141][ T4265] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 181.714854][ T6275] loop3: detected capacity change from 0 to 40427 [ 181.738542][ T6316] netlink: 'syz.6.635': attribute type 11 has an invalid length. [ 181.802157][ T6275] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 181.832869][ T6275] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 181.902481][ T5973] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 181.917713][ T6275] F2FS-fs (loop3): invalid crc value [ 181.968765][ T6275] F2FS-fs (loop3): Found nat_bits in checkpoint [ 182.021523][ T4265] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 182.061112][ T4265] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 182.161077][ T5973] usb 5-1: Using ep0 maxpacket: 8 [ 182.180856][ T6275] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 182.196114][ T6275] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 182.242005][ T4265] usb 8-1: New USB device found, idVendor=104f, idProduct=0004, bcdDevice= 1.00 [ 182.265641][ T4265] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 182.281472][ T5973] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 182.294953][ T4265] usb 8-1: Product: syz [ 182.300394][ T4265] usb 8-1: Manufacturer: syz [ 182.323963][ T5973] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 182.365368][ T5973] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.402299][ T5973] usb 5-1: config 0 descriptor?? [ 182.404265][ T4265] iuu_phoenix 8-1:1.0: iuu_phoenix converter detected [ 182.454438][ T4265] usb 8-1: iuu_phoenix converter now attached to ttyUSB0 [ 182.475030][ T5973] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 182.564231][ T6341] loop5: detected capacity change from 0 to 2048 [ 182.648420][ T4233] usb 8-1: USB disconnect, device number 3 [ 182.667326][ T4233] iuu_phoenix ttyUSB0: iuu_phoenix converter now disconnected from ttyUSB0 [ 182.691128][ T5973] gspca_vc032x: reg_r err -32 [ 182.696239][ T5973] vc032x: probe of 5-1:0.0 failed with error -32 [ 182.757834][ T6341] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 182.784704][ T4233] iuu_phoenix 8-1:1.0: device disconnected [ 182.786420][ T6341] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 182.897412][ T6331] loop6: detected capacity change from 0 to 32768 [ 183.005790][ T6331] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 183.137668][ T5584] ocfs2: Unmounting device (7,6) on (node local) [ 184.074417][ T6380] netlink: 'syz.5.647': attribute type 11 has an invalid length. [ 184.255224][ T6389] netem: unknown loss type 0 [ 184.289687][ T6389] netem: change failed [ 184.364626][ T6394] loop6: detected capacity change from 0 to 256 [ 184.441080][ T6394] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 184.479620][ T6394] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 184.559675][ T6394] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 184.669079][ T26] audit: type=1800 audit(1786168446.031:21): pid=6394 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.650" name="file1" dev="loop6" ino=1048633 res=0 errno=0 [ 184.704709][ T26] audit: type=1800 audit(1786168446.061:22): pid=6394 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.650" name="file1" dev="loop6" ino=1048633 res=0 errno=0 [ 184.730070][ T5973] usb 5-1: USB disconnect, device number 9 [ 184.903985][ T6409] loop3: detected capacity change from 0 to 2048 [ 184.985122][ T6418] loop6: detected capacity change from 0 to 256 [ 185.056386][ T6418] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x99a53fd9, utbl_chksum : 0xe619d30d) [ 185.076286][ T6409] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 185.106753][ T6409] ext4 filesystem being mounted at /136/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 185.840112][ T6441] loop6: detected capacity change from 0 to 128 [ 185.909708][ T6441] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 186.027680][ T6441] FAT-fs (loop6): error, parent dir link count too low (2) [ 186.075706][ T6441] FAT-fs (loop6): Filesystem has been set read-only [ 186.221842][ T5584] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 186.338567][ T6461] loop3: detected capacity change from 0 to 512 [ 186.351076][ T4234] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 186.516785][ T6461] EXT4-fs (loop3): Ignoring removed oldalloc option [ 186.554203][ T6461] EXT4-fs error (device loop3): ext4_expand_extra_isize_ea:2759: inode #11: comm syz.3.669: corrupted xattr block 95 [ 186.618711][ T6461] EXT4-fs (loop3): Remounting filesystem read-only [ 186.635719][ T6461] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.669: bg 0: block 7: invalid block bitmap [ 186.680711][ T6461] EXT4-fs (loop3): Remounting filesystem read-only [ 186.688904][ T6461] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 186.708964][ T6461] EXT4-fs (loop3): Remounting filesystem read-only [ 186.716452][ T6461] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2925: inode #11: comm syz.3.669: corrupted xattr block 95 [ 186.731263][ T4234] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 186.752450][ T6461] EXT4-fs (loop3): Remounting filesystem read-only [ 186.759149][ T6461] EXT4-fs warning (device loop3): ext4_evict_inode:304: xattr delete (err -117) [ 186.771890][ T4234] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 186.790108][ T6461] EXT4-fs (loop3): 1 orphan inode deleted [ 186.806849][ T6461] EXT4-fs (loop3): mounted filesystem without journal. Opts: min_batch_time=0x000000000000fffd,errors=remount-ro,oldalloc,jqfmt=vfsold,. Quota mode: none. [ 186.844775][ T26] audit: type=1326 audit(1786168448.211:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6460 comm="syz.3.669" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2a57db0d9 code=0x7ffc0000 [ 186.901251][ T4234] usb 5-1: New USB device found, idVendor=104f, idProduct=0004, bcdDevice= 1.00 [ 186.915586][ T26] audit: type=1326 audit(1786168448.211:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6460 comm="syz.3.669" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2a57db0d9 code=0x7ffc0000 [ 186.941128][ T26] audit: type=1326 audit(1786168448.211:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6460 comm="syz.3.669" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa2a57db0d9 code=0x7ffc0000 [ 186.955023][ T4234] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 186.969257][ T26] audit: type=1326 audit(1786168448.211:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6460 comm="syz.3.669" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2a57db0d9 code=0x7ffc0000 [ 187.004510][ T4234] usb 5-1: Product: syz [ 187.008935][ T4234] usb 5-1: Manufacturer: syz [ 187.031028][ T26] audit: type=1326 audit(1786168448.221:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6460 comm="syz.3.669" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2a57db0d9 code=0x7ffc0000 [ 187.055353][ T4234] iuu_phoenix 5-1:1.0: iuu_phoenix converter detected [ 187.087852][ T26] audit: type=1326 audit(1786168448.221:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6460 comm="syz.3.669" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa2a57db0d9 code=0x7ffc0000 [ 187.102001][ T4234] usb 5-1: iuu_phoenix converter now attached to ttyUSB0 [ 187.115879][ T26] audit: type=1326 audit(1786168448.231:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6460 comm="syz.3.669" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2a57db0d9 code=0x7ffc0000 [ 187.148906][ T26] audit: type=1326 audit(1786168448.241:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6460 comm="syz.3.669" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa2a57db0d9 code=0x7ffc0000 [ 187.287677][ T4234] usb 5-1: USB disconnect, device number 10 [ 187.305036][ T4234] iuu_phoenix ttyUSB0: iuu_phoenix converter now disconnected from ttyUSB0 [ 187.318359][ T4234] iuu_phoenix 5-1:1.0: device disconnected [ 187.967215][ T6516] loop5: detected capacity change from 0 to 2048 [ 188.048812][ T6520] loop4: detected capacity change from 0 to 2048 [ 188.120757][ T6516] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 160: 0xa1 != 0xd4 [ 188.162679][ T6516] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 188.213290][ T6520] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 188.250666][ T6520] ext4 filesystem being mounted at /142/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 188.568760][ T6542] loop6: detected capacity change from 0 to 22 [ 188.642265][ T6542] MTD: Attempt to mount non-MTD device "/dev/loop6" [ 188.699953][ T6542] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 189.024968][ T6552] loop7: detected capacity change from 0 to 512 [ 189.179851][ T6552] EXT4-fs (loop7): mounted filesystem without journal. Opts: usrquota,grpjquota=,nodelalloc,,errors=continue. Quota mode: writeback. [ 189.207654][ T6552] ext4 filesystem being mounted at /24/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 189.263731][ T5972] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 189.282080][ T6552] EXT4-fs warning (device loop7): ext4_group_add:1676: Can't resize non-sparse filesystem further [ 189.641321][ T5972] usb 7-1: config 220 has an invalid interface number: 76 but max is 2 [ 189.656671][ T5972] usb 7-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 189.681949][ T6545] loop5: detected capacity change from 0 to 32768 [ 189.697616][ T5972] usb 7-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 189.731152][ T5972] usb 7-1: config 220 has no interface number 2 [ 189.748438][ T5972] usb 7-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 189.783446][ T5972] usb 7-1: config 220 interface 0 has no altsetting 0 [ 189.798519][ T5972] usb 7-1: config 220 interface 76 has no altsetting 0 [ 189.816719][ T5972] usb 7-1: config 220 interface 1 has no altsetting 0 [ 189.889061][ T6550] loop4: detected capacity change from 0 to 32768 [ 190.021546][ T5972] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 190.030767][ T5972] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.110781][ T5972] usb 7-1: Product: syz [ 190.130815][ T5972] usb 7-1: Manufacturer: syz [ 190.147954][ T5972] usb 7-1: SerialNumber: syz [ 190.211108][ T6550] XFS (loop4): Mounting V5 Filesystem [ 190.243376][ T6596] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 190.418190][ T6550] XFS (loop4): Ending clean mount [ 190.451295][ T6607] netlink: 25 bytes leftover after parsing attributes in process `syz.3.702'. [ 190.480725][ T6607] device gretap0 entered promiscuous mode [ 190.517433][ T6610] netlink: 45349 bytes leftover after parsing attributes in process `syz.3.702'. [ 190.552742][ T5972] usb 7-1: Found UVC 7.01 device syz (8086:0b07) [ 190.576137][ T5972] usb 7-1: No valid video chain found. [ 190.590728][ T6610] 0XD: renamed from gretap0 [ 190.597907][ T5972] usb 7-1: selecting invalid altsetting 0 [ 190.631138][ T6610] device 00XD left promiscuous mode [ 190.647220][ T4191] XFS (loop4): Unmounting Filesystem [ 190.687457][ T5972] usb 7-1: selecting invalid altsetting 0 [ 190.723415][ T5972] usbtest: probe of 7-1:220.1 failed with error -22 [ 190.767262][ T5972] usb 7-1: USB disconnect, device number 4 [ 190.859520][ T6618] loop5: detected capacity change from 0 to 512 [ 191.006462][ T6618] EXT4-fs (loop5): Test dummy encryption mode enabled [ 191.062919][ T6618] EXT4-fs (loop5): Ignoring removed orlov option [ 191.101083][ T6618] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 191.179399][ T6618] EXT4-fs (loop5): 1 truncate cleaned up [ 191.191103][ T6618] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption=v1,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,orlov,. Quota mode: none. [ 191.214266][ T6625] loop6: detected capacity change from 0 to 512 [ 191.266825][ T6628] loop3: detected capacity change from 0 to 512 [ 191.361498][ T6625] EXT4-fs (loop6): mounted filesystem without journal. Opts: errors=remount-ro,usrjquota=,errors=continue,. Quota mode: none. [ 191.394828][ T6628] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 191.429558][ T6634] loop4: detected capacity change from 0 to 128 [ 191.626786][ T6634] FAT-fs (loop4): bogus logical sector size 65535 [ 191.641064][ T6634] FAT-fs (loop4): Can't find a valid FAT filesystem [ 191.795075][ T6634] loop4: detected capacity change from 0 to 2048 [ 191.815247][ T6645] loop7: detected capacity change from 0 to 164 [ 191.926785][ T6645] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 191.942922][ T6634] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 192.027815][ T6645] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 192.107882][ T6645] rock: directory entry would overflow storage [ 192.171339][ T6645] rock: sig=0x4f50, size=4, remaining=3 [ 192.177355][ T6645] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 192.321908][ T6655] loop5: detected capacity change from 0 to 8192 [ 192.383333][ T6655] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal [ 192.475026][ T6655] REISERFS (device loop5): using ordered data mode [ 192.507076][ T6655] reiserfs: using flush barriers [ 192.564049][ T6675] jffs2: notice: (6675) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 192.636052][ T6655] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 192.727125][ T6655] REISERFS (device loop5): checking transaction log (loop5) [ 192.768737][ T6685] netlink: 24 bytes leftover after parsing attributes in process `syz.7.726'. [ 192.906158][ T6689] loop3: detected capacity change from 0 to 128 [ 193.145089][ T6655] REISERFS (device loop5): Using rupasov hash to sort names [ 193.160392][ T6655] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 193.221181][ T4476] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 193.561454][ T4472] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 193.593335][ T6712] FAT-fs (loop3): error, corrupted file size (i_pos 548, 512) [ 193.601832][ T4476] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 193.620043][ T4476] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 193.631909][ T6712] FAT-fs (loop3): Filesystem has been set read-only [ 193.651176][ T4476] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 193.665563][ T6718] FAT-fs (loop3): error, invalid FAT chain (i_pos 548, last_block 8) [ 193.831572][ T4472] usb 7-1: Using ep0 maxpacket: 8 [ 193.872629][ T4476] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 193.892292][ T4476] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 193.921923][ T4476] usb 5-1: Product: syz [ 193.935558][ T4476] usb 5-1: Manufacturer: syz [ 193.947279][ T4476] usb 5-1: SerialNumber: syz [ 193.961362][ T4472] usb 7-1: config index 0 descriptor too short (expected 74, got 45) [ 193.974346][ T4472] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 194.018149][ T4472] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 194.039987][ T4472] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 194.073556][ T4472] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 194.097782][ T4472] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 194.136210][ T4472] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 194.155583][ T4472] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.252873][ T4476] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 11 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 194.440583][ T4476] usb 5-1: USB disconnect, device number 11 [ 194.462439][ T4476] usblp0: removed [ 194.471210][ T4472] usb 7-1: usb_control_msg returned -32 [ 194.477234][ T4472] usbtmc 7-1:16.0: can't read capabilities [ 194.770393][ T6757] set_capacity_and_notify: 2 callbacks suppressed [ 194.770410][ T6757] loop5: detected capacity change from 0 to 2048 [ 194.830683][ T6760] loop3: detected capacity change from 0 to 512 [ 194.890187][ T6755] loop7: detected capacity change from 0 to 8192 [ 194.907946][ T6760] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 194.956774][ T6760] EXT4-fs (loop3): 1 truncate cleaned up [ 194.962889][ T6757] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 194.983362][ T6760] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,grpid,. Quota mode: none. [ 195.019497][ T6757] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 195.064454][ T26] kauditd_printk_skb: 3 callbacks suppressed [ 195.064470][ T26] audit: type=1326 audit(1786168456.431:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6767 comm="syz.4.748" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f77c736d0d9 code=0x0 [ 195.070882][ T6757] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 195.113754][ T6757] EXT4-fs (loop5): This should not happen!! Data will be lost [ 195.113754][ T6757] [ 195.124130][ T6755] REISERFS (device loop7): found reiserfs format "3.6" with non-standard journal [ 195.133341][ T6757] EXT4-fs (loop5): Total free blocks count 0 [ 195.133366][ T6757] EXT4-fs (loop5): Free/Dirty block details [ 195.133384][ T6757] EXT4-fs (loop5): free_blocks=4096 [ 195.133403][ T6757] EXT4-fs (loop5): dirty_blocks=48 [ 195.133419][ T6757] EXT4-fs (loop5): Block reservation details [ 195.133433][ T6757] EXT4-fs (loop5): i_reserved_data_blocks=3 [ 195.169929][ T6771] EXT4-fs error (device loop3): ext4_generic_delete_entry:2729: inode #2: block 13: comm syz.3.747: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 195.216449][ T6771] EXT4-fs (loop3): Remounting filesystem read-only [ 195.224775][ T6771] EXT4-fs error (device loop3) in ext4_delete_entry:2800: Corrupt filesystem [ 195.236055][ T6771] EXT4-fs (loop3): Remounting filesystem read-only [ 195.243264][ T6771] EXT4-fs warning (device loop3): ext4_rename_delete:3792: inode #2: comm syz.3.747: Deleting old file: nlink 5, error=-117 [ 195.279568][ T6755] REISERFS (device loop7): using ordered data mode [ 195.298948][ T6755] reiserfs: using flush barriers [ 195.346011][ T6755] REISERFS (device loop7): journal params: device loop7, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 195.425626][ T6755] REISERFS (device loop7): checking transaction log (loop7) [ 195.675026][ T6783] input: syz1 as /devices/virtual/input/input15 [ 195.702994][ T6755] REISERFS (device loop7): Using tea hash to sort names [ 195.710696][ T6755] REISERFS (device loop7): Created .reiserfs_priv - reserved for xattr storage. [ 196.029188][ T6793] ima: policy update failed [ 196.034243][ T26] audit: type=1802 audit(1786168457.401:35): pid=6793 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.757" res=0 errno=0 [ 196.071007][ T4472] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 196.232517][ T6801] loop7: detected capacity change from 0 to 8 [ 196.241054][ T5973] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 196.319519][ T4234] usb 7-1: USB disconnect, device number 5 [ 196.325997][ T4472] usb 6-1: Using ep0 maxpacket: 8 [ 196.451323][ T4472] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 196.470809][ T4472] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 196.497628][ T4472] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 196.512977][ T4472] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 196.523684][ T4472] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 196.542904][ T4472] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 196.565584][ T4472] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.574335][ T5973] usb 5-1: not running at top speed; connect to a high speed hub [ 196.661108][ T5973] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 196.694985][ T6815] netlink: 16 bytes leftover after parsing attributes in process `syz.3.765'. [ 196.704276][ T5973] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.00 [ 196.724774][ T5973] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.797036][ T5973] garmin_gps 5-1:1.0: Garmin GPS usb/tty converter detected [ 196.828266][ T5973] usb 5-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 196.841273][ T4472] usb 6-1: usb_control_msg returned -32 [ 196.848168][ T4472] usbtmc 6-1:16.0: can't read capabilities [ 196.870501][ T6823] tipc: Enabling of bearer rejected, already enabled [ 196.923904][ T6827] tipc: Can't add remote ip to TIPC UDP multicast bearer [ 197.082657][ T4472] usb 5-1: USB disconnect, device number 12 [ 197.112288][ T4472] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 197.152171][ T4472] garmin_gps 5-1:1.0: device disconnected [ 197.423500][ T4472] usb 6-1: USB disconnect, device number 2 [ 197.812200][ T6845] loop3: detected capacity change from 0 to 32768 [ 197.979462][ T6845] JBD2: Ignoring recovery information on journal [ 198.063401][ T6858] loop4: detected capacity change from 0 to 64 [ 198.140331][ T6845] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 198.248979][ T26] audit: type=1800 audit(1786168459.611:36): pid=6845 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.776" name="file1" dev="loop3" ino=17058 res=0 errno=0 [ 198.355674][ T6863] attempt to access beyond end of device [ 198.355674][ T6863] loop4: rw=2049, want=162, limit=64 [ 198.418567][ T4197] ocfs2: Unmounting device (7,3) on (node local) [ 198.471281][ T6863] Buffer I/O error on dev loop4, logical block 161, lost async page write [ 198.488182][ T6866] loop5: detected capacity change from 0 to 2048 [ 198.503431][ T6863] attempt to access beyond end of device [ 198.503431][ T6863] loop4: rw=2049, want=163, limit=64 [ 198.576767][ T6863] Buffer I/O error on dev loop4, logical block 162, lost async page write [ 198.592972][ T6863] attempt to access beyond end of device [ 198.592972][ T6863] loop4: rw=2049, want=164, limit=64 [ 198.621485][ T6863] Buffer I/O error on dev loop4, logical block 163, lost async page write [ 198.644081][ T6863] attempt to access beyond end of device [ 198.644081][ T6863] loop4: rw=2049, want=168, limit=64 [ 198.678738][ T6866] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 198.697049][ T6863] Buffer I/O error on dev loop4, logical block 167, lost async page write [ 198.730110][ T6863] attempt to access beyond end of device [ 198.730110][ T6863] loop4: rw=2049, want=170, limit=64 [ 198.776861][ T6863] Buffer I/O error on dev loop4, logical block 169, lost async page write [ 198.808520][ T6863] attempt to access beyond end of device [ 198.808520][ T6863] loop4: rw=2049, want=172, limit=64 [ 198.842534][ T6863] Buffer I/O error on dev loop4, logical block 171, lost async page write [ 198.925387][ T6863] attempt to access beyond end of device [ 198.925387][ T6863] loop4: rw=2049, want=173, limit=64 [ 199.005085][ T6863] Buffer I/O error on dev loop4, logical block 172, lost async page write [ 199.531943][ T5973] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 199.713585][ T6915] netlink: 260 bytes leftover after parsing attributes in process `syz.3.796'. [ 199.781053][ T5973] usb 7-1: Using ep0 maxpacket: 32 [ 199.902157][ T5973] usb 7-1: config 0 has an invalid interface number: 51 but max is 0 [ 199.911390][ T5973] usb 7-1: config 0 has no interface number 0 [ 199.999875][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 200.006356][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.091476][ T5973] usb 7-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 200.105372][ T5973] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.183069][ T5973] usb 7-1: Product: syz [ 200.187500][ T5973] usb 7-1: Manufacturer: syz [ 200.229631][ T5973] usb 7-1: SerialNumber: syz [ 200.237064][ T6939] loop4: detected capacity change from 0 to 512 [ 200.258047][ T5973] usb 7-1: config 0 descriptor?? [ 200.300302][ T6939] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 200.323166][ T5973] quatech2 7-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 200.380667][ T6939] EXT4-fs error (device loop4): ext4_orphan_get:1432: comm syz.4.798: bad orphan inode 131083 [ 200.427869][ T6939] EXT4-fs (loop4): mounted filesystem without journal. Opts: stripe=0x000000000000003d,init_itable,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 200.477857][ T6939] EXT4-fs error (device loop4): ext4_empty_dir:3177: inode #2: block 13: comm syz.4.798: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 200.541177][ T5973] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 200.589680][ T5973] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 200.661960][ T6959] loop5: detected capacity change from 0 to 16 [ 200.781668][ T6959] erofs: (device loop5): mounted with root inode @ nid 36. [ 201.014716][ T6887] loop6: detected capacity change from 0 to 256 [ 201.068844][ T6969] loop4: detected capacity change from 0 to 4096 [ 201.111285][ T6851] block2mtd: error: cannot open device [ 201.124231][ T5973] usb 7-1: USB disconnect, device number 6 [ 201.130978][ C0] usb 7-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 201.175973][ T6969] EXT4-fs (loop4): Test dummy encryption mode enabled [ 201.197291][ T6969] EXT4-fs (loop4): Ignoring removed orlov option [ 201.205292][ T5973] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 201.249214][ T6969] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpid,debug_want_extra_isize=0x0000000000000010,nodioread_nolock,test_dummy_encryption,lazytime,stripe=0x0000000000000000,minixdf,orlov,,errors=continue. Quota mode: writeback. [ 201.276160][ T5973] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 201.292067][ T5973] quatech2 7-1:0.51: device disconnected [ 201.351352][ T4472] Bluetooth: hci1: command 0x0405 tx timeout [ 201.454460][ T6979] device veth1_macvtap left promiscuous mode [ 201.471394][ T6979] device macsec0 entered promiscuous mode [ 202.014357][ T7006] loop6: detected capacity change from 0 to 128 [ 202.041234][ T4234] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 202.075836][ T4233] Bluetooth: hci3: command 0x0406 tx timeout [ 202.199889][ T7018] netlink: 16 bytes leftover after parsing attributes in process `syz.5.818'. [ 202.238797][ T141] attempt to access beyond end of device [ 202.238797][ T141] loop6: rw=1, want=641, limit=128 [ 202.291224][ T4234] usb 4-1: Using ep0 maxpacket: 8 [ 202.332264][ T1265] attempt to access beyond end of device [ 202.332264][ T1265] loop6: rw=2049, want=873, limit=128 [ 202.411228][ T4234] usb 4-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 196, changing to 11 [ 202.442116][ T7030] netlink: 20 bytes leftover after parsing attributes in process `syz.4.833'. [ 202.451603][ T4234] usb 4-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 202.501601][ T4234] usb 4-1: config 0 interface 0 has no altsetting 0 [ 202.516259][ T4234] usb 4-1: New USB device found, idVendor=0458, idProduct=0153, bcdDevice= 0.00 [ 202.526545][ T4234] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.553215][ T4234] usb 4-1: config 0 descriptor?? [ 202.575666][ T154] attempt to access beyond end of device [ 202.575666][ T154] loop6: rw=1, want=1041, limit=128 [ 202.595079][ T7037] loop7: detected capacity change from 0 to 256 [ 202.692749][ T7037] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 202.961204][ T4476] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 203.043650][ T4234] kye 0003:0458:0153.0003: ignoring exceeding usage max [ 203.079635][ T4234] kye 0003:0458:0153.0003: usage index exceeded [ 203.102238][ T4234] kye 0003:0458:0153.0003: item 0 4 2 0 parsing failed [ 203.130253][ T4234] kye 0003:0458:0153.0003: parse failed [ 203.150116][ T4234] kye: probe of 0003:0458:0153.0003 failed with error -22 [ 203.289313][ T4234] usb 4-1: USB disconnect, device number 8 [ 203.331295][ T4476] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 203.352079][ T4476] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.386618][ T4476] usb 6-1: config 0 descriptor?? [ 203.442448][ T4476] cp210x 6-1:0.0: cp210x converter detected [ 203.517173][ T7045] loop6: detected capacity change from 0 to 32768 [ 203.680752][ T7045] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 203.744951][ T26] audit: type=1800 audit(1786168465.111:37): pid=7045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.824" name="file1" dev="loop6" ino=17058 res=0 errno=0 [ 203.821838][ T5584] ocfs2: Unmounting device (7,6) on (node local) [ 203.881207][ T4476] cp210x 6-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 203.939329][ T4476] cp210x 6-1:0.0: GPIO initialisation failed: -524 [ 203.961202][ T4476] usb 6-1: cp210x converter now attached to ttyUSB0 [ 204.001155][ T5973] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 204.147410][ T4476] usb 6-1: USB disconnect, device number 3 [ 204.175025][ T4476] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 204.192460][ T4232] usb 8-1: new low-speed USB device number 4 using dummy_hcd [ 204.198522][ T4476] cp210x 6-1:0.0: device disconnected [ 204.261020][ T5973] usb 5-1: Using ep0 maxpacket: 8 [ 204.267531][ T7086] loop6: detected capacity change from 0 to 8192 [ 204.319115][ T7086] loop6: p1 p2 p3 p4 [ 204.332241][ T7086] loop6: p1 start 51379968 is beyond EOD, truncated [ 204.363829][ T7086] loop6: p3 size 100663552 extends beyond EOD, truncated [ 204.382775][ T5973] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 204.407458][ T7086] loop6: p4 size 81920 extends beyond EOD, truncated [ 204.416827][ T5973] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 204.439961][ T5973] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.467698][ T7096] blk_update_request: I/O error, dev loop13, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 204.483932][ T5973] usb 5-1: config 0 descriptor?? [ 204.534038][ T7096] EXT4-fs (loop13): unable to read superblock [ 204.621228][ T4232] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 204.629484][ T4232] usb 8-1: config 0 has no interface number 0 [ 204.651033][ T4232] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 204.686235][ T4232] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 204.711082][ T4232] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 204.720410][ T4232] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.748786][ T4232] usb 8-1: config 0 descriptor?? [ 204.782624][ T5973] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 204.801401][ T7080] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 204.834280][ T4232] iowarrior 8-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior1 [ 205.077774][ T5973] usb 5-1: USB disconnect, device number 13 [ 205.093181][ T4233] usb 8-1: USB disconnect, device number 4 [ 205.180722][ T7118] loop3: detected capacity change from 0 to 512 [ 205.219487][ T7120] loop5: detected capacity change from 0 to 2048 [ 205.235447][ T5787] udevd[5787]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 205.254908][ T5865] udevd[5865]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 205.266676][ T6024] udevd[6024]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 205.315472][ T7118] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 205.338040][ T7120] EXT4-fs (loop5): Ignoring removed mblk_io_submit option [ 205.361537][ T7118] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 205.378643][ T7120] EXT4-fs (loop5): Ignoring removed mblk_io_submit option [ 205.449987][ T7118] System zones: 0-1, 15-15, 18-18, 34-34 [ 205.536942][ T7118] EXT4-fs (loop3): orphan cleanup on readonly fs [ 205.559148][ T7120] EXT4-fs (loop5): mounted filesystem without journal. Opts: debug_want_extra_isize=0x0000000000000004,discard,errors=remount-ro,mblk_io_submit,usrquota,mblk_io_submit,minixdf,barrier=0x0000000000000002,nombcache,bsddf,. Quota mode: writeback. [ 205.632361][ T7118] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=0 [ 205.719062][ T7144] netlink: 188 bytes leftover after parsing attributes in process `syz.7.842'. [ 205.721562][ T7118] EXT4-fs warning (device loop3): ext4_enable_quotas:6488: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 205.841034][ T7118] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 205.880559][ T7118] EXT4-fs (loop3): 1 truncate cleaned up [ 205.921237][ T7118] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 205.978351][ T7118] fscrypt (loop3, inode 16): Error -61 getting encryption context [ 206.072334][ T7118] fscrypt (loop3, inode 16): Error -61 getting encryption context [ 206.131899][ T7118] fscrypt (loop3, inode 16): Error -61 getting encryption context [ 206.206604][ T7166] loop4: detected capacity change from 0 to 1024 [ 206.429823][ T7166] hfsplus: xattr searching failed [ 206.464801][ T7175] hfsplus: xattr searching failed [ 206.623861][ T7175] hfsplus: bad catalog file entry [ 206.764143][ T141] hfsplus: b-tree write err: -5, ino 3 [ 206.965004][ T7186] loop4: detected capacity change from 0 to 2048 [ 207.133868][ T7186] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 207.175521][ T7191] loop7: detected capacity change from 0 to 1024 [ 207.409099][ T7191] hfsplus: xattr search failed [ 207.627536][ T7178] loop3: detected capacity change from 0 to 32768 [ 207.831231][ T7178] XFS (loop3): Mounting V5 Filesystem [ 208.190887][ T7238] loop5: detected capacity change from 0 to 256 [ 208.208787][ T7178] XFS (loop3): Ending clean mount [ 208.251872][ T4265] XFS (loop3): Metadata CRC error detected at xfs_agfl_read_verify+0x189/0x240, xfs_agfl block 0x3 [ 208.284952][ T4265] XFS (loop3): Unmount and run xfs_repair [ 208.321013][ T4265] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 208.328523][ T4265] 00000000: 58 41 46 4c 00 00 00 00 d7 dc 42 4e 07 00 00 00 XAFL......BN.... [ 208.411022][ T4265] 00000010: 9f 91 9c b7 20 0a 10 1d 00 00 00 00 00 00 00 00 .... ........... [ 208.428046][ T4265] 00000020: e6 0a 0e bb ff ff ff ff 00 00 0b f0 00 00 0b f1 ................ [ 208.461021][ T4265] 00000030: 00 00 0b f2 00 00 0b f3 00 00 0b f4 00 00 0b f5 ................ [ 208.499243][ T4265] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 208.531505][ T4265] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 208.540521][ T4265] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 208.552677][ T4265] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 208.581721][ T7178] XFS (loop3): metadata I/O error in "xfs_alloc_read_agfl+0x1dc/0x390" at daddr 0x3 len 1 error 74 [ 208.662575][ T7178] XFS (loop3): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x515/0x8b0 (fs/xfs/xfs_trans_buf.c:296). Shutting down filesystem. [ 208.740046][ T7178] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [ 208.835492][ T7253] device syzkaller1 entered promiscuous mode [ 208.882455][ T4197] XFS (loop3): Unmounting Filesystem [ 209.025632][ T7227] ================================================================== [ 209.034452][ T7227] BUG: KASAN: use-after-free in xfs_iflush_cluster+0xc6/0x1230 [ 209.042166][ T7227] Read of size 8 at addr ffff88805d4f3910 by task xfsaild/loop3/7227 [ 209.050484][ T7227] [ 209.052892][ T7227] CPU: 1 PID: 7227 Comm: xfsaild/loop3 Not tainted syzkaller #0 [ 209.060744][ T7227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 209.070972][ T7227] Call Trace: [ 209.074383][ T7227] [ 209.077360][ T7227] dump_stack_lvl+0x188/0x250 [ 209.082200][ T7227] ? show_regs_print_info+0x20/0x20 [ 209.087456][ T7227] ? load_image+0x410/0x410 [ 209.092012][ T7227] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 209.097700][ T7227] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 209.104154][ T7227] print_address_description+0x60/0x2d0 [ 209.109895][ T7227] ? xfs_iflush_cluster+0xc6/0x1230 [ 209.115375][ T7227] kasan_report+0xdf/0x130 [ 209.120224][ T7227] ? xfs_iflush_cluster+0xc6/0x1230 [ 209.125639][ T7227] xfs_iflush_cluster+0xc6/0x1230 [ 209.130857][ T7227] xfs_inode_item_push+0x1c3/0x2a0 [ 209.136143][ T7227] xfsaild+0xd04/0x26f0 [ 209.140389][ T7227] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 209.146691][ T7227] ? xfs_trans_ail_init+0x230/0x230 [ 209.151949][ T7227] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 209.158022][ T7227] ? __kthread_parkme+0x14e/0x1b0 [ 209.163211][ T7227] kthread+0x42e/0x520 [ 209.167527][ T7227] ? xfs_trans_ail_init+0x230/0x230 [ 209.173028][ T7227] ? kthread_blkcg+0xd0/0xd0 [ 209.177676][ T7227] ret_from_fork+0x1f/0x30 [ 209.182173][ T7227] [ 209.185397][ T7227] [ 209.188100][ T7227] Allocated by task 7178: [ 209.193236][ T7227] __kasan_slab_alloc+0x92/0xc0 [ 209.198339][ T7227] slab_post_alloc_hook+0x4c/0x380 [ 209.203508][ T7227] kmem_cache_alloc+0x15d/0x280 [ 209.208442][ T7227] xfs_inode_item_init+0x2f/0xc0 [ 209.213509][ T7227] xfs_trans_ijoin+0xb2/0xe0 [ 209.218614][ T7227] xfs_init_new_inode+0xa98/0xde0 [ 209.224145][ T7227] xfs_create+0x751/0xe80 [ 209.228731][ T7227] xfs_generic_create+0x363/0xa50 [ 209.233791][ T7227] vfs_mkdir+0x386/0x570 [ 209.238419][ T7227] do_mkdirat+0x1dd/0x5c0 [ 209.242782][ T7227] __x64_sys_mkdirat+0x85/0x90 [ 209.247707][ T7227] do_syscall_64+0x4c/0xa0 [ 209.252299][ T7227] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 209.258344][ T7227] [ 209.260692][ T7227] Freed by task 7256: [ 209.264817][ T7227] kasan_set_track+0x4b/0x70 [ 209.269566][ T7227] kasan_set_free_info+0x1f/0x40 [ 209.274668][ T7227] ____kasan_slab_free+0xd5/0x110 [ 209.279892][ T7227] slab_free_freelist_hook+0xec/0x170 [ 209.285412][ T7227] kmem_cache_free+0x8f/0x210 [ 209.290185][ T7227] xfs_inode_free_callback+0x1bc/0x230 [ 209.295783][ T7227] rcu_core+0x96e/0x1650 [ 209.300371][ T7227] handle_softirqs+0x336/0x830 [ 209.305185][ T7227] __irq_exit_rcu+0x13b/0x230 [ 209.310154][ T7227] irq_exit_rcu+0x5/0x20 [ 209.314744][ T7227] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 209.320647][ T7227] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 209.326753][ T7227] [ 209.329104][ T7227] The buggy address belongs to the object at ffff88805d4f38c0 [ 209.329104][ T7227] which belongs to the cache xfs_ili of size 256 [ 209.343462][ T7227] The buggy address is located 80 bytes inside of [ 209.343462][ T7227] 256-byte region [ffff88805d4f38c0, ffff88805d4f39c0) [ 209.357913][ T7227] The buggy address belongs to the page: [ 209.363894][ T7227] page:ffffea0001753cc0 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5d4f3 [ 209.374455][ T7227] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 209.382251][ T7227] raw: 00fff00000000200 0000000000000000 dead000000000122 ffff888146226dc0 [ 209.391114][ T7227] raw: 0000000000000000 00000000800c000c 00000001ffffffff 0000000000000000 [ 209.399939][ T7227] page dumped because: kasan: bad access detected [ 209.406509][ T7227] page_owner tracks the page as allocated [ 209.412439][ T7227] page last allocated via order 0, migratetype Reclaimable, gfp_mask 0x112c50(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_HARDWALL|__GFP_RECLAIMABLE), pid 4903, ts 110882164524, free_ts 99676046861 [ 209.432044][ T7227] get_page_from_freelist+0x24f6/0x2670 [ 209.437762][ T7227] __alloc_pages+0x1ee/0x480 [ 209.442497][ T7227] new_slab+0xc0/0x4b0 [ 209.446612][ T7227] ___slab_alloc+0x807/0xdd0 [ 209.451337][ T7227] kmem_cache_alloc+0xf0/0x280 [ 209.456412][ T7227] xfs_inode_item_init+0x2f/0xc0 [ 209.461390][ T7227] xfs_trans_ijoin+0xb2/0xe0 [ 209.466031][ T7227] xfs_init_new_inode+0xa98/0xde0 [ 209.471113][ T7227] xfs_qm_qino_alloc+0x498/0x990 [ 209.476115][ T7227] xfs_qm_init_quotainos+0x47f/0x6b0 [ 209.481717][ T7227] xfs_qm_init_quotainfo+0xa3/0x9a0 [ 209.487055][ T7227] xfs_qm_mount_quotas+0x95/0x5f0 [ 209.492128][ T7227] xfs_mountfs+0x144a/0x1ae0 [ 209.497014][ T7227] xfs_fs_fill_super+0x119b/0x13e0 [ 209.502168][ T7227] get_tree_bdev+0x3e6/0x610 [ 209.506796][ T7227] vfs_get_tree+0x88/0x270 [ 209.511275][ T7227] page last free stack trace: [ 209.516164][ T7227] free_unref_page_prepare+0x637/0x6c0 [ 209.521668][ T7227] free_unref_page+0x8f/0x2a0 [ 209.526391][ T7227] __unfreeze_partials+0x188/0x1e0 [ 209.531546][ T7227] put_cpu_partial+0x12d/0x190 [ 209.536350][ T7227] qlist_free_all+0x35/0x90 [ 209.541053][ T7227] kasan_quarantine_reduce+0x150/0x160 [ 209.546546][ T7227] __kasan_slab_alloc+0x2f/0xc0 [ 209.551536][ T7227] slab_post_alloc_hook+0x4c/0x380 [ 209.556684][ T7227] kmem_cache_alloc+0x15d/0x280 [ 209.561760][ T7227] __pmd_alloc+0x116/0x750 [ 209.566555][ T7227] handle_mm_fault+0xbd3/0x4440 [ 209.571576][ T7227] do_user_addr_fault+0x494/0xc90 [ 209.576739][ T7227] exc_page_fault+0x60/0x100 [ 209.581374][ T7227] asm_exc_page_fault+0x22/0x30 [ 209.586256][ T7227] [ 209.588611][ T7227] Memory state around the buggy address: [ 209.594372][ T7227] ffff88805d4f3800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 209.602558][ T7227] ffff88805d4f3880: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 209.610746][ T7227] >ffff88805d4f3900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 209.618842][ T7227] ^ [ 209.623648][ T7227] ffff88805d4f3980: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 209.631772][ T7227] ffff88805d4f3a00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 209.639860][ T7227] ================================================================== [ 209.648307][ T7227] Disabling lock debugging due to kernel taint [ 209.809080][ T7227] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 209.816358][ T7227] CPU: 0 PID: 7227 Comm: xfsaild/loop3 Tainted: G B syzkaller #0 [ 209.825543][ T7227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 209.835738][ T7227] Call Trace: [ 209.839047][ T7227] [ 209.842022][ T7227] dump_stack_lvl+0x188/0x250 [ 209.847028][ T7227] ? show_regs_print_info+0x20/0x20 [ 209.852466][ T7227] ? load_image+0x410/0x410 [ 209.857354][ T7227] panic+0x2f8/0x850 [ 209.861700][ T7227] ? bpf_jit_dump+0xd0/0xd0 [ 209.867019][ T7227] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 209.873140][ T7227] ? _raw_spin_unlock+0x40/0x40 [ 209.878469][ T7227] ? xfs_iflush_cluster+0xc6/0x1230 [ 209.883727][ T7227] check_panic_on_warn+0x80/0xa0 [ 209.888996][ T7227] ? xfs_iflush_cluster+0xc6/0x1230 [ 209.894422][ T7227] end_report+0x6d/0xf0 [ 209.898714][ T7227] kasan_report+0x102/0x130 [ 209.903263][ T7227] ? xfs_iflush_cluster+0xc6/0x1230 [ 209.908511][ T7227] xfs_iflush_cluster+0xc6/0x1230 [ 209.913597][ T7227] xfs_inode_item_push+0x1c3/0x2a0 [ 209.918851][ T7227] xfsaild+0xd04/0x26f0 [ 209.923072][ T7227] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 209.929132][ T7227] ? xfs_trans_ail_init+0x230/0x230 [ 209.934391][ T7227] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 209.940338][ T7227] ? __kthread_parkme+0x14e/0x1b0 [ 209.945450][ T7227] kthread+0x42e/0x520 [ 209.949557][ T7227] ? xfs_trans_ail_init+0x230/0x230 [ 209.954805][ T7227] ? kthread_blkcg+0xd0/0xd0 [ 209.959440][ T7227] ret_from_fork+0x1f/0x30 [ 209.963986][ T7227] [ 209.967393][ T7227] Kernel Offset: disabled [ 209.971769][ T7227] Rebooting in 86400 seconds..