last executing test programs: 12m22.068926785s ago: executing program 4 (id=7553): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, 0x0, &(0x7f0000000080)) 12m21.824704167s ago: executing program 4 (id=7558): r0 = socket(0xa, 0x2, 0x0) sendto$inet(r0, 0x0, 0xffe5, 0xe000, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) 12m21.577841759s ago: executing program 4 (id=7563): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x3b, 0x301, 0x2270bd24, 0x25dfdc02, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4018}, 0x40000) 12m21.335958553s ago: executing program 4 (id=7567): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$nfs(&(0x7f00000001c0)='..\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x85000, 0x0) 12m21.10481082s ago: executing program 4 (id=7571): setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000040)="aef942805060e6f86fdc1d338af372cea673d4744045df93db1724e855d7", 0x1e) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000017dcb4401e040c4098af000000010902120001000000000904"], 0x0) 12m20.616433433s ago: executing program 4 (id=7578): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) getegid() 12m20.130884383s ago: executing program 32 (id=7578): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) getegid() 12m13.026100866s ago: executing program 3 (id=7648): r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x2, 0x2) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000380)=@userptr={0xd, 0x6, 0x4, 0x0, 0x81, {}, {0x2, 0x1, 0x1b, 0x2, 0xff, 0x9, "7e6bbc1b"}, 0x8000, 0x2, {0x0}, 0x2}) 12m12.823126094s ago: executing program 3 (id=7651): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000300)=[{&(0x7f0000000580)=""/102364, 0x18fdc}, {0x0, 0x41}], 0x2, 0x5, 0x400006) 12m12.481529848s ago: executing program 3 (id=7654): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x1, 0x42, 0x40, 0xc2}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000240)={&(0x7f0000000000), 0x0, 0x0, 0x0, 0x2, r0}, 0x38) 12m12.342390543s ago: executing program 3 (id=7656): syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x300800c, &(0x7f0000000100)=ANY=[], 0x1, 0x259, &(0x7f0000000580)="$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") mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 12m12.131841985s ago: executing program 3 (id=7658): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee0000000000000000020000", 0x56}, {&(0x7f00000001c0)="ee64", 0x2}], 0x2) 12m11.495896751s ago: executing program 3 (id=7662): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0xd0, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xa4, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x28, 0x1, 'veth0_to_batadv\x00'}, {0x14, 0x1, 'macvlan1\x00'}, {0x14, 0x1, 'veth1\x00'}, {0x14, 0x1, 'gre0\x00'}, {0x14, 0x1, 'wlan1\x00'}, {0x14, 0x1, 'veth1_virt_wifi\x00'}, {0x14, 0x1, 'veth0_to_bond\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}]}]}, @NFT_MSG_DELFLOWTABLE={0xc8, 0x18, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x9c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x28, 0x1, 'ip6erspan0\x00'}, {0x14, 0x1, 'veth0_macvtap\x00'}, {0x14, 0x1, 'bond_slave_1\x00'}, {0x14, 0x1, 'bond_slave_0\x00'}, {0x14, 0x1, 'caif0\x00'}, {0x14, 0x1, 'macsec0\x00'}, {0x14, 0x1, 'team_slave_0\x00'}]}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x10}}, 0x1e0}}, 0x0) 12m10.716479044s ago: executing program 33 (id=7662): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0xd0, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xa4, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x28, 0x1, 'veth0_to_batadv\x00'}, {0x14, 0x1, 'macvlan1\x00'}, {0x14, 0x1, 'veth1\x00'}, {0x14, 0x1, 'gre0\x00'}, {0x14, 0x1, 'wlan1\x00'}, {0x14, 0x1, 'veth1_virt_wifi\x00'}, {0x14, 0x1, 'veth0_to_bond\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}]}]}, @NFT_MSG_DELFLOWTABLE={0xc8, 0x18, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x9c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x28, 0x1, 'ip6erspan0\x00'}, {0x14, 0x1, 'veth0_macvtap\x00'}, {0x14, 0x1, 'bond_slave_1\x00'}, {0x14, 0x1, 'bond_slave_0\x00'}, {0x14, 0x1, 'caif0\x00'}, {0x14, 0x1, 'macsec0\x00'}, {0x14, 0x1, 'team_slave_0\x00'}]}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x10}}, 0x1e0}}, 0x0) 9m39.388058337s ago: executing program 2 (id=9741): syz_mount_image$udf(&(0x7f0000000280), &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x3000010, &(0x7f0000000000)={[{@volume={'volume', 0x3d, 0x101}}, {@session}, {}, {@noadinicb}, {@iocharset={'iocharset', 0x3d, 'ascii'}}, {@shortad}, {@rootdir={'rootdir', 0x3d, 0x2}}, {@longad}, {@uid_forget}, {@volume={'volume', 0x3d, 0x7}}]}, 0x1, 0xc68, &(0x7f00000022c0)="$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") symlink(&(0x7f00000005c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000002c0)='.\x02\x00') 9m38.956471643s ago: executing program 2 (id=9745): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000000200)="68000000000905040000000000000000020000000900010073797a30000000001400028006000100f5020000050002002000000008000500000000002c0003800800010000000001200002800c000100706f8369637930000800020000000002080003000000001e", 0x68}], 0x1}, 0x80) 9m38.635692123s ago: executing program 2 (id=9749): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x14, 0x11, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x4}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd8}}, 0x0) 9m38.454335326s ago: executing program 2 (id=9753): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f00000004c0), 0x1, 0x434, &(0x7f0000000940)="$eJzs3E+IVVUcB/DfvTOjOY69MaKpCJQSLcJR37PaaosWbVwIQn+Ehnw64tMJ30RpQlogQkS0kAQhpmUE5aJFEUG0iaAWLQoiSagWYVghLdpNvHfvnXnoHahxxqvT5wN33rnnvbnfe7hwOQfu/QXwv7U2IrZFRF9EjEZELe9P8y2OZ1vnd8ca58Y7WxLT0zv/SCKJiGbj3HhxrCT/XJn/2y0Rcdu2JB7tvzq3feTogbFWq3k43980efC5Te0jRzfuPzi2r7mveaix9eF6fetDjUcWbqznR16Jen3bwAcb1p76+tPXv+uc71D+Xe84FlIyR+f2xQir0EBPOym53tx43jz9xidVnwMAcP2l+dy/vzv/r0VfZJO3C+efvlyLlwerPj8AAADg2k1P9+WfAAAAwNKVWPsDAADAElc8B9BsnBsvtuv17MHKByIubY+I4Sy/eL84+7a/+/5w5O+WDixC/r0XFuGg/0H78Wrzv9lVbf7q96rNn/qh2vxn1leb/8tP1eavW1Nt/umJiM+2ZwUQmo3lEdF7/0u7NQ8KyyJieV7TYMUC5a/5fPb+d+yq+186c//ri4hreRHr1NTFk2X9I49FXDoRcXd/WX4yk5/kNR3ma+O3J3aX9a++FDH9TsT66M1/f3w2dbY1d32ITXv3t5qbs7/l+Y2XnqyV9e/4Ihv/YJSPfzj/XV9PnYj5ODO4+6NVJf27RrP8++8rv/539oz/1rw2x/A88tfe1dpR1r/+tSx/zxzj773+q+eRW5j6rf1zWf+HW6/hoADAvKXduU2Sjs6003R0NJvv3R6DaWuiPfng3onnD+3J5kDDMZAWU61sPjKQdPa35HOTYr9+xX4jn0Ocqq3o7o8+O9HaU/XgAQAAYIkbivjxqVc/Hll5xfr/11q2/gcAAABufp31/z1Tb5/ttP8qfToSAAAAuNl11v+XT/7+ZVj/AwAAwJJl/Q8AAABLX7H+H5qj/t+qntp9m/P6w1/VBpYXtf4AAACAG19n/Z9+/8SF9pGjB8ZareZhDQ0NjZlG1XcoAABgoc1O+qs+EwAAAGDxpBeTiOhsG2rrhu5Y8+5I77fLkr+71QGWRcQLZ3e+9eLY5OThLZ3+P2f6J8/k/fV/FXh8ccYBAAAAFIp1erGOBwAAAAAAAAAAAAAAbnzXo5x41WMEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABg4fwTAAD//wB7l14=") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 9m38.096042637s ago: executing program 2 (id=9758): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x24, 0x4, 0x8, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x883e}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}]}, 0x24}, 0x1, 0x0, 0x0, 0x4800}, 0x20000000) 9m37.460454181s ago: executing program 2 (id=9766): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000740)={0x53, 0xa, 0x8, "3a58ae1e10004000001000", 0x33524742}) 9m36.915347511s ago: executing program 34 (id=9766): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000740)={0x53, 0xa, 0x8, "3a58ae1e10004000001000", 0x33524742}) 6m6.610892895s ago: executing program 8 (id=13093): mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) mincore(&(0x7f0000502000/0x3000)=nil, 0x3000, 0x0) 6m6.303605373s ago: executing program 8 (id=13097): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000400)={&(0x7f0000000040)={0xa, 0x4e20, 0x7a, @mcast2, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="300000000000000029000000040000008402000400030000040200030401"], 0x30}, 0x0) 6m5.977164476s ago: executing program 8 (id=13099): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff00000000030000000000000000000000020000000000000000000000000000040300000000000000000000100c"], 0x0, 0x56, 0x0, 0x0, 0x4}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x3, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x3, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000180)='syzkaller\x00', 0x1}, 0x94) 6m5.455255811s ago: executing program 8 (id=13105): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000280)='./file1\x00', 0x0, &(0x7f0000000500)=ANY=[], 0xd, 0x20e, &(0x7f0000000dc0)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 6m5.083122185s ago: executing program 8 (id=13109): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000002440)={'sit0\x00', &(0x7f0000002400)={@empty, @local, 0x1d, 0xe4}}) 6m4.255723259s ago: executing program 8 (id=13121): r0 = fsopen(&(0x7f0000000300)='tracefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000280)='gid', &(0x7f0000000580)='0X#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xeaEb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k\x00', 0x0) 6m3.487569728s ago: executing program 35 (id=13121): r0 = fsopen(&(0x7f0000000300)='tracefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000280)='gid', &(0x7f0000000580)='0X#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xeaEb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k\x00', 0x0) 4.198544552s ago: executing program 9 (id=18901): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4) recvmmsg(r0, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}, 0xa248}], 0x1, 0x40000000, 0x0) 3.227437088s ago: executing program 7 (id=18912): syz_mount_image$hfs(&(0x7f0000000040), &(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x201401b, &(0x7f00000005c0)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=0x0, @ANYBLOB="2c636f6465706167653d69736f383835392d342c696f636861727365743d6d616363656e746575726f2c00d15aae7e7cb335da7e8459c9b30739da3a189a8e12abb80bdc85178c04dc210f95e244e05c659cf25e7db73d279807ee138269b26f47c94bf91fe21f60db4a74eacd5680e87c7989cd25e0736493d1810719943254b029d5f266b864998311a327e9ac69b378b9f3f05c1bdcc8e867a7d09c5e367ce2eef7275e8a575d6af0c27feb31282f08d5c6d30a619dbc92643ce697f196ca1759bdc7dd17e2575cf7eb27db93be5a5d6fcbe6c0538320765f447fb073de35f133ec44089aed6a6b8009ba44775585609dbbfa39c4f0c6cd4eaadf3fa3e7c0399442f4e3b948588d4a6dfaff2eb427ecf857074ccf9d7b19ce4bfd1e934f762e602156ce0a13963fefc9f27be46aac6b541322fc058d1b48f8f4ae507ed725a3924bb9c47279"], 0x4, 0x339, &(0x7f0000000140)="$eJzs3U9P1EwcB/DvtLtL94EHK2BIPBmUxBMBPGi8QAzxNXgwRIQlIayYKCZKTETPxngzMfHIzbPRt6AX4xvQEwfjSS/EgzUzne5Ol5m2C7iF7PeTuHbb+fObttPO7GYpiKhvXVv4unNpV/4TVQA+gKuAByAAKgDOYDx4sLGZW5DfWhKIc4p9aZY3GrasAXQOLZTvKhgy19G/EUVR9C031c+exELlEWYPNnjAgO6danvQ88gObc62cjtuV38xjrDYwx4eYrjMcIiIqHz6/u/pu8SQHr97HjCpx+En9f6fSI1v9sqL41ho3f+9+H0k5P45pTbJ+d7aZrOxEk/h5NH3klmirSzrORG1d3cN8ZnlDxpDLqMWOxWLV19dazamtlUBzzCnGcnG1OsKkoYormhrwAyACcvcNENW27MNqjZUZRtmHfGPZtVonQB/+I5X9uoWPxWISXwUn8WiCPEaK63xXyUScueoIxV2dJU4/ml3iaqVYZwq1cp2+KdVJWd1DXj/tt3Kumu/BvBlLDayFNE5fg+TOF/W3LkwgvTHCnHrZtytU7lGgYpQswYz12wr0W9rrrHOuuqr1WZjavlu03XSHy3rjE68EDfEBH7gHRaM8b8nU0/C3TNTvVyolPrMyGxPRaV0HMcU1YHvdNUzSbmeuvgV8xy3cQXD9x9trS81m4175S8kXeWA2c8dcTzxiahPR7lG/m+kQSAXqgCc5VTdm6wLf6Iosm6qoBeHoKqaevlNu8lb60tCX/MOV4W8cnZsmncnBjAPQK9JrggHqf1JK9dAu8BC2X/Jo63W2E/IJKoedJCkqtQmHwOFekp935qdnFyP/z/YVYhOoPbRx/jNsoOhMsixg4jnf8Z8ZVpddeRLmDH/ifIKN0qcccyARtTrf8VmcK1inePEwWQhZ851/iJwoaNGD0mNTzuLDXWcOI7fSnb/VYZYwBfc4uf/REREREREREREREREREREREREREQnTbe/Rtj/c4L8hXSNu334hzeIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiA7HeP4v4KsnxtRsz//NelKT4sdPiAmO4vm/foHn/4rtLlpJRDZ/AwAA//9eD1xQ") mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2390024, 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) 3.050752573s ago: executing program 9 (id=18916): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') arch_prctl$ARCH_SHSTK_LOCK(0x5003, 0x3) lseek(r0, 0x9, 0x0) 2.804756473s ago: executing program 9 (id=18918): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'geneve0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c", 0xe, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r1, 0x1, 0x7, 0x6, @local}, 0x14) 2.5598683s ago: executing program 7 (id=18919): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_GETMODE(r0, 0x5601, 0x0) 2.498358889s ago: executing program 9 (id=18922): r0 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x1ea1e2) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x400, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, 0xd, 0x0, "faf983c3bd02b02a128b15efabb534464c516bdd8a2d35000000000049c4d50899350000000000000000000000001000", "32d8cc26f7061a06c89f3d2b984b30c50997fffff409ff217efd07fe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa501c50a1fcaed1e831fa79a00", "715261f700d2daf49fe63dcc8d000000000000002100", [0x9, 0x9]}}) 2.32541834s ago: executing program 9 (id=18925): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x1, 0x0, 0x0, 0x0, 0x10, 0x6666, 0x8802, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0x20, "", [{{0x9, 0x4, 0x0, 0x9, 0x3, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x1001, 0xff, 0x1, {0x22, 0x6}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x4, 0x1, 0xb}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000040)={0x0, 0x11, 0x6, {0x6, 0x5, "9e56c35f"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 2.269140154s ago: executing program 7 (id=18926): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x60, 0x0, 0x1, 0x0, 0x25dfdbfe, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x64}}, {0x8}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4044}, 0x40000) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="900000000001010400008000141a000002000010240001801400018008000100e000000108000200e00000010c0002800500010000000000240002801400018008000100ac1414aa08000200ac1e00010c000280050001000000000008000740000000012c000e800c000280050001002100000006000340000000001400018008"], 0x90}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) 2.049008842s ago: executing program 7 (id=18927): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x10, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000074f6967d00000000000000180100002020702500000000002020207baaf8ff00000000bda100000000000027010000f8ffffffb702000008000000b7030000000000002500000006000000be91000000000000b502ecffffff00008500000005000000b70000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.048814758s ago: executing program 6 (id=18928): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xfffffffffffffee6}, 0x68) 1.813906078s ago: executing program 6 (id=18931): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000003c0)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x28, 0x3a, 0xff, @dev, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00', @private1}}}}}}, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af83, &(0x7f0000000400)={0x1d}) 1.511552825s ago: executing program 0 (id=18935): prctl$PR_CAPBSET_DROP(0x18, 0x23) setresuid(0xee00, 0xee00, 0x0) capset(&(0x7f00000020c0)={0x20071026}, &(0x7f0000002100)={0x101, 0x5, 0xffff, 0x101, 0x6, 0x9}) 1.497414133s ago: executing program 6 (id=18936): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write(r0, &(0x7f0000000000)="0d000000010001", 0x7) 1.410488408s ago: executing program 1 (id=18937): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x6, @mcast2, 0x8}, 0x1c) sendto(r0, 0x0, 0x0, 0x20008000, &(0x7f00000003c0)=@l2tp6={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}, 0x6, 0x3}, 0x80) 1.332337357s ago: executing program 5 (id=18938): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) ioctl$PPPIOCSMRRU(r0, 0x4004743b, 0x0) 1.31070651s ago: executing program 0 (id=18940): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8921, &(0x7f0000000000)={'bridge_slave_1\x00', @broadcast}) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0xffff0000, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x0, 0xffff0000}, 0x48) 1.202024902s ago: executing program 6 (id=18941): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newlink={0x50, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x12, 0x17}}, @IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x50}, 0x1, 0x0, 0x0, 0x880}, 0x8048802) 1.127804592s ago: executing program 1 (id=18942): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000340)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x400, @multicast2}}}, 0x108) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000480)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @multicast2}}}, 0x108) 1.062468197s ago: executing program 0 (id=18943): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000dc0), r0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000040)={0x20, r1, 0x9, 0x70bdb1, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x2004c800}, 0x20000014) 1.056891863s ago: executing program 5 (id=18944): r0 = epoll_create1(0x80000) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x20002004}) 836.336365ms ago: executing program 1 (id=18945): setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000080)="17", 0x1) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080), 0x62}, {&(0x7f0000000100)="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", 0x682c}, {&(0x7f0000001480)="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", 0x1001}], 0x3) 835.907198ms ago: executing program 6 (id=18946): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) sendmmsg$sock(r0, &(0x7f0000000140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=[@timestamping={{0x14, 0x1, 0x4f, 0x23ff}}], 0x18}}], 0x1, 0x404c081) 828.123323ms ago: executing program 0 (id=18947): syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r0, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) 689.278229ms ago: executing program 5 (id=18948): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="0500000010040000ff03009a869eedac", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000004001"], 0x48}, 0x1, 0x0, 0x0, 0x240048c4}, 0x8002) 651.053192ms ago: executing program 6 (id=18949): syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000040)={[{@grpjquota}, {@nojournal_checksum}, {@resuid}, {@noload}, {@i_version}, {@data_err_ignore}]}, 0x3, 0x4fe, &(0x7f0000000dc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000000c0)=0x80014) 584.439333ms ago: executing program 1 (id=18950): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x560b, 0x0) 584.170046ms ago: executing program 0 (id=18951): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000000c0)={0xfffd, 0x7, 0x9, 0x1, 0xf0af, 0xe477, 0x8, 0xb, r1}, &(0x7f0000000100)=0x20) 510.516114ms ago: executing program 5 (id=18952): r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000014006d2fde8a746fe748c36d2d830905", @ANYRES32, @ANYBLOB='\b'], 0x48}, 0x1, 0x0, 0x0, 0x4044814}, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 370.954557ms ago: executing program 1 (id=18953): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$BINDER_GET_EXTENDED_ERROR(r0, 0xc0046209, 0x0) 318.260752ms ago: executing program 5 (id=18954): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240)='ocfs2_dlmfs\x00', 0x10, 0x0) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x400a8, &(0x7f0000000380)=ANY=[], 0x5, 0x0, 0x0) 316.61785ms ago: executing program 7 (id=18955): setresgid(0xee00, 0xee01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000e40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=[@cred={{0x1c}}], 0x20, 0x1}}], 0x2, 0x0) 264.431772ms ago: executing program 9 (id=18956): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000001d00070f000000200300000007000000", @ANYRES32=r1, @ANYBLOB="5a006708060005"], 0x24}, 0x1, 0x0, 0x0, 0x40408c4}, 0x0) 210.868413ms ago: executing program 0 (id=18957): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401", 0x30}], 0x1}, 0xc) r0 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[{0x18, 0x110, 0x1, 'C'}, {0x18, 0x110, 0xd, "10"}], 0x30}, 0xfc40) 133.796085ms ago: executing program 1 (id=18958): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000780)={0x2, &(0x7f0000000600)=[{0x15, 0x0, 0x5, 0x2}, {0x3d, 0x0, 0xff}]}) 69.98477ms ago: executing program 7 (id=18959): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000700000002000000ffff000005"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000340), 0x7ff, r0}, 0x38) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f00000001c0)={r0, 0x5b, &(0x7f0000000400)}, 0x10) 0s ago: executing program 5 (id=18960): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d40), r0) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000200)={0x20, r1, 0x831b97362602f4f3, 0x70bd28, 0x25dfdbff, {}, [@NL80211_ATTR_REG_RULES={0x4}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x845}, 0x20000090) kernel console output (not intermixed with test programs): eftover after parsing attributes in process `syz.7.17326'. [ 1388.329264][T24373] r8152-cfgselector 7-1: config 0 descriptor?? [ 1388.407872][T13113] loop5: detected capacity change from 0 to 4096 [ 1388.435301][T13113] ntfs3(loop5): Different NTFS sector size (1024) and media sector size (512). [ 1388.483916][T13123] cifs: Unknown parameter 'ۛQ [ 1388.483916][T13123] @"2ach}# [ 1388.483916][T13123] [bIT&:"/嶎4,Zz-#F<]%gC [ 1388.483916][T13123] SȘ7@$8 !YJ9Tw8}|' [ 1388.634275][T13113] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 1388.650103][T13120] bond2: Unable to set peer notification delay as MII monitoring is disabled [ 1388.681031][T13113] ntfs3(loop5): Failed to initialize $Extend/$Reparse. [ 1388.696037][T13120] bond2 (unregistering): Released all slaves [ 1388.709821][T13125] loop0: detected capacity change from 0 to 2048 [ 1388.768787][T13128] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1388.815266][T24456] r8152-cfgselector 7-1: USB disconnect, device number 49 [ 1388.860648][T13125] NILFS error (device loop0): nilfs_check_folio: size of directory #2 is not a multiple of chunk size [ 1388.955347][T13125] Remounting filesystem read-only [ 1389.344640][T13141] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 2 [ 1389.964851][T13163] bond5: entered promiscuous mode [ 1389.980661][T13177] netlink: 'syz.1.17356': attribute type 13 has an invalid length. [ 1389.989946][T13163] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1390.101098][T23878] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 1390.262455][T23878] usb 1-1: Using ep0 maxpacket: 8 [ 1390.280578][T23878] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 1390.310608][T23878] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1390.326694][T23878] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1390.337308][T23878] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 173 [ 1390.349963][T23878] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1390.373405][T23878] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1390.423250][T23878] usb 1-1: config 0 descriptor?? [ 1390.461103][T13169] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1390.626433][T13191] netlink: 20 bytes leftover after parsing attributes in process `syz.9.17362'. [ 1390.728713][T13197] loop7: detected capacity change from 0 to 1024 [ 1390.936381][ T5645] Bluetooth: hci6: Opcode 0x0c03 failed: -71 [ 1390.939732][T23878] usb 1-1: USB disconnect, device number 39 [ 1391.248242][T13217] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1391.276986][T13217] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 1391.307340][T13217] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1391.337093][T13217] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 1391.447703][T13222] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 1391.460509][T13225] loop7: detected capacity change from 0 to 64 [ 1391.696739][T13226] bond6 (unregistering): Released all slaves [ 1391.733590][T13233] 0x000000000000-0x000000020000 : "" [ 1391.872308][T13233] ftl_cs: FTL header not found. [ 1391.895450][T13239] netlink: 188 bytes leftover after parsing attributes in process `syz.1.17385'. [ 1392.152945][T13212] loop9: detected capacity change from 0 to 32768 [ 1392.214272][T13212] XFS (loop9): Mounting V5 filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d in no-recovery mode. Filesystem will be inconsistent. [ 1392.247213][T13246] loop1: detected capacity change from 0 to 4096 [ 1392.267038][T13246] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512). [ 1392.380977][T24373] usb 8-1: new high-speed USB device number 47 using dummy_hcd [ 1392.413726][T13246] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 1392.434112][T13246] ntfs3(loop1): Failed to initialize $Extend/$Reparse. [ 1392.545174][T24373] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 1392.571062][ T3747] XFS (loop9): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1392.590632][T24373] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1392.665766][T24373] usb 8-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 1392.693435][T24373] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1392.741900][T24373] usb 8-1: Product: syz [ 1392.760221][T24373] usb 8-1: Manufacturer: syz [ 1392.797631][T24373] usb 8-1: SerialNumber: syz [ 1392.829322][T24373] usb 8-1: config 0 descriptor?? [ 1392.856889][T13243] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1392.891461][T13243] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1393.153608][T13243] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1393.210306][T13243] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1393.425397][T13288] loop0: detected capacity change from 0 to 64 [ 1393.463352][T24373] Error reading MAC address [ 1393.488033][T24373] usb 8-1: USB disconnect, device number 47 [ 1393.710855][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1393.829487][T13297] loop9: detected capacity change from 0 to 4096 [ 1393.860010][T13297] ntfs3(loop9): Different NTFS sector size (1024) and media sector size (512). [ 1393.971302][T13305] loop6: detected capacity change from 0 to 512 [ 1393.994468][T13297] ntfs3(loop9): Mark volume as dirty due to NTFS errors [ 1394.018591][T13305] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1394.039350][T13297] ntfs3(loop9): Failed to initialize $Extend/$Reparse. [ 1394.114928][T13305] EXT4-fs error (device loop6): xattr_find_entry:337: inode #15: comm syz.6.17411: corrupted xattr entries [ 1394.148777][T13305] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1394.150721][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 1394.166341][ C0] EXT4-fs (loop6): initial error at time 2000000166: xattr_find_entry:337: inode 15 [ 1394.175792][ C0] EXT4-fs (loop6): last error at time 2000000166: xattr_find_entry:337: inode 15 [ 1394.201271][T13305] EXT4-fs (loop6): Remounting filesystem read-only [ 1394.209847][T13305] EXT4-fs (loop6): 1 truncate cleaned up [ 1394.253216][T13305] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1394.306449][T13305] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1394.489950][T13322] loop0: detected capacity change from 0 to 256 [ 1394.581290][T23878] usb 8-1: new full-speed USB device number 48 using dummy_hcd [ 1394.628094][T13328] loop5: detected capacity change from 0 to 64 [ 1394.766195][T23878] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1394.793184][T23878] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1394.810098][T23878] usb 8-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 1394.847325][T23878] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1394.883750][T23878] usb 8-1: Product: syz [ 1394.902560][T23878] usb 8-1: Manufacturer: syz [ 1394.929421][T23878] usb 8-1: SerialNumber: syz [ 1394.964335][T23878] usb 8-1: config 0 descriptor?? [ 1395.194590][T23878] usb 8-1: Can not set alternate setting to 1, error: -71 [ 1395.227355][T23878] synaptics_usb 8-1:0.0: probe with driver synaptics_usb failed with error -71 [ 1395.266491][T23878] usb 8-1: USB disconnect, device number 48 [ 1395.340667][T13354] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1395.375583][T13354] /dev/nullb0: Can't open blockdev [ 1395.513721][T13353] loop0: detected capacity change from 0 to 4096 [ 1395.555586][T13353] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512). [ 1395.685084][T13353] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 1395.715230][T13353] ntfs3(loop0): Failed to initialize $Extend/$Reparse. [ 1395.931169][T24373] usb 7-1: new full-speed USB device number 50 using dummy_hcd [ 1396.133351][T24373] usb 7-1: config 1 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1396.175094][T24373] usb 7-1: config 1 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1396.222497][T24373] usb 7-1: config 1 interface 0 has no altsetting 0 [ 1396.263147][T24373] usb 7-1: New USB device found, idVendor=10cf, idProduct=1713, bcdDevice= 0.40 [ 1396.287320][T24373] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1396.320601][T24373] usb 7-1: Product: syz [ 1396.324060][T13384] netlink: 32 bytes leftover after parsing attributes in process `syz.1.17450'. [ 1396.332847][T24373] usb 7-1: Manufacturer: syz [ 1396.351045][T13384] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17450'. [ 1396.351105][T24373] usb 7-1: SerialNumber: syz [ 1396.577700][T13388] netlink: 40 bytes leftover after parsing attributes in process `syz.1.17452'. [ 1396.625669][T24373] usbhid 7-1:1.0: can't add hid device: -71 [ 1396.652022][T24373] usbhid 7-1:1.0: probe with driver usbhid failed with error -71 [ 1396.664925][T13360] loop5: detected capacity change from 0 to 32768 [ 1396.701592][T24373] usb 7-1: USB disconnect, device number 50 [ 1396.719062][T13393] loop7: detected capacity change from 0 to 512 [ 1396.752617][T13393] EXT4-fs error (device loop7): ext4_get_branch:178: inode #11: block 4294967295: comm syz.7.17454: invalid block [ 1396.777635][T13400] netlink: 12 bytes leftover after parsing attributes in process `syz.0.17456'. [ 1396.787214][T13400] netlink: 48 bytes leftover after parsing attributes in process `syz.0.17456'. [ 1396.796857][T13393] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1396.800708][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 1396.801094][T13360] XFS (loop5): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1396.809879][ C0] EXT4-fs (loop7): initial error at time 2000000168: ext4_get_branch:178: inode 11: block 4294967295 [ 1396.835858][ C0] EXT4-fs (loop7): last error at time 2000000168: ext4_get_branch:178: inode 11: block 4294967295 [ 1396.861065][T13393] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.17454: invalid indirect mapped block 4294967295 (level 1) [ 1396.877512][T13393] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1396.878028][T13393] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.17454: invalid indirect mapped block 4294967295 (level 1) [ 1396.902323][T13393] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1396.904178][T13393] EXT4-fs (loop7): 2 truncates cleaned up [ 1396.918484][T13360] XFS (loop5): Ending clean mount [ 1396.948275][T13393] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1396.968247][T13408] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17457'. [ 1396.980429][T13408] openvswitch: netlink: Message has 1 unknown bytes. [ 1397.090589][T13411] tc_dump_action: action bad kind [ 1397.194955][T23337] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1397.260397][ T5631] XFS (loop5): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1397.393244][T13416] netlink: 6024 bytes leftover after parsing attributes in process `syz.1.17461'. [ 1397.729351][T13429] openvswitch: netlink: IP tunnel attribute has 5 unknown bytes. [ 1397.870838][ T9] usb 7-1: new high-speed USB device number 51 using dummy_hcd [ 1397.879041][T13435] netlink: 'syz.5.17470': attribute type 33 has an invalid length. [ 1398.054378][ T9] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1398.103425][ T9] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1398.168336][ T9] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 1398.234953][ T9] usb 7-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1398.278728][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1398.308018][ T9] usb 7-1: Product: syz [ 1398.318825][ T9] usb 7-1: Manufacturer: syz [ 1398.344079][ T9] usb 7-1: SerialNumber: syz [ 1398.381850][ T9] usb 7-1: config 0 descriptor?? [ 1398.399226][T13425] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1398.420034][T13425] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1398.460629][ T9] usb 7-1: ucan: probing device on interface #0 [ 1398.680200][ T9] usb 7-1: ucan: device protocol version 0 is not supported [ 1398.717483][ T9] usb 7-1: ucan: probe failed; try to update the device firmware [ 1398.898713][T24552] usb 7-1: USB disconnect, device number 51 [ 1399.039769][T13481] netlink: 5 bytes leftover after parsing attributes in process `syz.0.17493'. [ 1399.075574][T13481] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1399.120802][T24373] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 1399.282461][T13486] loop0: detected capacity change from 0 to 64 [ 1399.300749][T24373] usb 6-1: Using ep0 maxpacket: 16 [ 1399.317189][T24373] usb 6-1: config index 0 descriptor too short (expected 51443, got 18) [ 1399.341495][T24373] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1399.361116][T24373] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1399.372453][T13489] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 1399.381818][T24373] usb 6-1: Product: syz [ 1399.417512][T24373] usb 6-1: Manufacturer: syz [ 1399.435913][T24373] usb 6-1: SerialNumber: syz [ 1399.469274][T24373] r8152-cfgselector 6-1: Unknown version 0x0000 [ 1399.483923][T24373] r8152-cfgselector 6-1: config 0 descriptor?? [ 1399.904970][T13502] netlink: 'syz.6.17502': attribute type 1 has an invalid length. [ 1399.916682][T24373] r8152-cfgselector 6-1: USB disconnect, device number 26 [ 1401.447477][T13572] loop1: detected capacity change from 0 to 512 [ 1401.475710][T13572] EXT4-fs: inline encryption not supported [ 1401.503711][T13572] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 1401.567058][T13572] Quota error (device loop1): do_insert_tree: Free block already used in tree: block 1 [ 1401.590802][T13572] Quota error (device loop1): qtree_write_dquot: Error -5 occurred while creating quota [ 1401.708611][T13587] loop9: detected capacity change from 0 to 512 [ 1401.727160][T13572] EXT4-fs error (device loop1): ext4_acquire_dquot:7041: comm syz.1.17534: Failed to acquire dquot type 1 [ 1401.767262][T13572] loop1: lost filesystem error report for type 5 error -5 [ 1401.767714][T13572] EXT4-fs (loop1): Remounting filesystem read-only [ 1401.774914][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 1401.774935][ C0] EXT4-fs (loop1): initial error at time 2000000173: ext4_acquire_dquot:7041 [ 1401.774966][ C0] EXT4-fs (loop1): last error at time 2000000173: ext4_acquire_dquot:7041 [ 1401.834150][T13535] loop7: detected capacity change from 0 to 32768 [ 1401.836911][T13587] EXT4-fs warning (device loop9): dx_probe:801: inode #2: comm syz.9.17539: Unrecognised inode hash code 255 [ 1401.859883][T13535] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.17518 (13535) [ 1401.901268][T13587] EXT4-fs warning (device loop9): dx_probe:934: inode #2: comm syz.9.17539: Corrupt directory, running e2fsck is recommended [ 1401.901814][T13572] EXT4-fs (loop1): 1 truncate cleaned up [ 1401.937268][T13572] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1401.951018][T13535] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1402.011982][T13535] BTRFS info (device loop7): using sha256 checksum algorithm [ 1402.178113][T13587] EXT4-fs (loop9): Cannot turn on journaled quota: type 1: error -2 [ 1402.186360][T13587] EXT4-fs error (device loop9): ext4_iget_extra_inode:5180: inode #15: comm syz.9.17539: corrupted in-inode xattr: invalid ea_ino [ 1402.199884][T13587] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1402.200705][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 1402.214498][T13587] EXT4-fs error (device loop9): ext4_orphan_get:1404: comm syz.9.17539: couldn't read orphan inode 15 (err -117) [ 1402.216266][ C1] EXT4-fs (loop9): initial error at time 2000000174: ext4_iget_extra_inode:5180: inode 15 [ 1402.238050][ C1] EXT4-fs (loop9): last error at time 2000000174: ext4_iget_extra_inode:5180: inode 15 [ 1402.259730][T13587] loop9: lost filesystem error report for type 5 error -117 [ 1402.262306][T13587] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1402.268923][T13535] BTRFS info (device loop7): enabling ssd optimizations [ 1402.328674][T13614] ieee802154 phy1 wpan1: encryption failed: -22 [ 1402.380921][T13535] BTRFS info (device loop7): turning on async discard [ 1402.395077][ T5621] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1402.415345][T13535] BTRFS info (device loop7): enabling free space tree [ 1402.417156][T13587] EXT4-fs error (device loop9): ext4_xattr_set_entry:1672: inode #2: comm syz.9.17539: corrupted xattr entries [ 1402.599852][T23337] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1402.625528][T13622] netlink: 32 bytes leftover after parsing attributes in process `syz.0.17551'. [ 1402.637241][ T3747] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1403.854043][T13668] loop9: detected capacity change from 0 to 2048 [ 1403.923608][T13668] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1403.964349][T13668] EXT4-fs error (device loop9): ext4_map_blocks:791: inode #12: block 2: comm syz.9.17573: lblock 0 mapped to illegal pblock 2 (length 1) [ 1404.003966][T13665] loop6: detected capacity change from 0 to 4096 [ 1404.156491][T13665] ntfs3(loop6): Mark volume as dirty due to NTFS errors [ 1404.229855][T13665] ntfs3(loop6): Failed to load $Extend (-22). [ 1404.244904][ T3747] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1404.277448][T13665] ntfs3(loop6): Failed to initialize $Extend. [ 1404.342127][ T9] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 1404.537464][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 1404.569543][ T9] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 1404.628730][ T9] usb 1-1: config 0 has no interface number 0 [ 1404.653698][ T9] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1404.706235][ T9] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1404.744321][ T9] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1404.787842][ T9] usb 1-1: Product: syz [ 1404.797168][ T9] usb 1-1: SerialNumber: syz [ 1404.847463][ T9] usb 1-1: config 0 descriptor?? [ 1404.892186][ T9] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input78 [ 1404.943548][T13705] loop1: detected capacity change from 0 to 8 [ 1405.134841][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1405.142146][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1405.149729][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1405.156924][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1405.164080][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1405.171290][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1405.178425][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1405.185687][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1405.193069][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1405.200191][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1405.222351][T23878] usb 8-1: new high-speed USB device number 49 using dummy_hcd [ 1405.231338][ T9] usb 1-1: USB disconnect, device number 40 [ 1405.237294][ C0] cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1405.312910][ T9] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1405.433102][T23878] usb 8-1: Using ep0 maxpacket: 16 [ 1405.452171][T23878] usb 8-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1405.487493][T23878] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 1405.530427][T23878] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 1794, setting to 1024 [ 1405.585098][T23878] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 1405.622424][T23878] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1405.652502][T23878] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1405.678266][T23878] usb 8-1: config 0 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1405.723173][T23878] usb 8-1: New USB device found, idVendor=104f, idProduct=0004, bcdDevice=c6.c3 [ 1405.743065][T23878] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1405.767066][T23878] usb 8-1: Product: syz [ 1405.778780][T13732] netlink: 300 bytes leftover after parsing attributes in process `syz.6.17603'. [ 1405.783843][T23878] usb 8-1: Manufacturer: syz [ 1405.805778][T23878] usb 8-1: SerialNumber: syz [ 1405.836970][T23878] usb 8-1: config 0 descriptor?? [ 1405.860926][T13707] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 1405.887073][T23878] iuu_phoenix 8-1:0.0: iuu_phoenix converter detected [ 1405.937439][T23878] usb 8-1: iuu_phoenix converter now attached to ttyUSB0 [ 1406.113132][T23878] usb 8-1: USB disconnect, device number 49 [ 1406.172471][T23878] iuu_phoenix ttyUSB0: iuu_phoenix converter now disconnected from ttyUSB0 [ 1406.208400][T13747] netlink: 12 bytes leftover after parsing attributes in process `syz.5.17611'. [ 1406.209301][T23878] iuu_phoenix 8-1:0.0: device disconnected [ 1406.359211][T13755] loop9: detected capacity change from 0 to 512 [ 1406.365885][T13756] netlink: 36 bytes leftover after parsing attributes in process `syz.1.17614'. [ 1406.409775][T13755] EXT4-fs error (device loop9): ext4_orphan_get:1425: comm syz.9.17615: bad orphan inode 11862016 [ 1406.421281][T13755] loop9: lost filesystem error report for type 5 error -117 [ 1406.430170][T13755] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 1406.513200][T13755] ext4 filesystem being mounted at /698/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1406.938048][ T3747] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 1407.086438][ T30] audit: type=1400 audit(2000000179.219:2851): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=13785 comm="syz.1.17631" [ 1407.993724][T13823] loop5: detected capacity change from 0 to 512 [ 1408.017199][T13823] EXT4-fs: Ignoring removed i_version option [ 1408.067547][T13823] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 1408.109348][T13823] EXT4-fs (loop5): blocks per group (64) and clusters per group (32768) inconsistent [ 1408.123706][T13830] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1408.410802][T24456] usb 6-1: new full-speed USB device number 27 using dummy_hcd [ 1408.586026][T24456] usb 6-1: config 0 has an invalid interface number: 37 but max is 1 [ 1408.634469][T24456] usb 6-1: config 0 has an invalid interface number: 255 but max is 1 [ 1408.667271][T24456] usb 6-1: config 0 has no interface number 0 [ 1408.683370][T24456] usb 6-1: config 0 has no interface number 1 [ 1408.701948][T24456] usb 6-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 1408.763699][T24456] usb 6-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1408.809118][T24456] usb 6-1: config 0 interface 255 has no altsetting 0 [ 1408.846243][T24456] usb 6-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=20.a3 [ 1408.858177][T13858] cifs: Unknown parameter 'ۛQ [ 1408.858177][T13858] @"2ach}# [ 1408.858177][T13858] [bIT&:"/嶎4,Zz-#F<]%gC [ 1408.858177][T13858] SȘ7@$8 !YJ9Tw8}|' [ 1408.890196][T24456] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1408.911647][T24456] usb 6-1: Product: syz [ 1408.915848][T24456] usb 6-1: Manufacturer: syz [ 1408.920507][T24456] usb 6-1: SerialNumber: syz [ 1408.966264][T24456] usb 6-1: config 0 descriptor?? [ 1409.148197][T13868] netlink: 60 bytes leftover after parsing attributes in process `syz.9.17670'. [ 1409.224970][T24456] usb 6-1: USB disconnect, device number 27 [ 1409.260963][T24555] usb 7-1: new high-speed USB device number 52 using dummy_hcd [ 1409.443196][T24555] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1409.459028][T13880] loop0: detected capacity change from 0 to 2048 [ 1409.477192][T24555] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1409.528274][T24555] usb 7-1: config 0 descriptor?? [ 1409.555721][T24555] cp210x 7-1:0.0: cp210x converter detected [ 1409.807890][T24555] usb 7-1: cp210x converter now attached to ttyUSB0 [ 1409.976895][T24456] usb 7-1: USB disconnect, device number 52 [ 1410.043426][T24456] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1410.091087][T24456] cp210x 7-1:0.0: device disconnected [ 1410.143767][T13907] loop1: detected capacity change from 0 to 256 [ 1410.158874][T13907] exfat: Deprecated parameter 'namecase' [ 1410.182712][T13907] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 1410.218820][T13907] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x7f1fc68d, utbl_chksum : 0xe619d30d) [ 1410.335773][T13917] netlink: 8 bytes leftover after parsing attributes in process `syz.9.17695'. [ 1410.906416][T13938] ALSA: mixer_oss: invalid OSS volume 'n' [ 1411.157013][T13942] bridge0: port 1(bridge_slave_0) entered disabled state [ 1411.170893][T13949] netlink: 358 bytes leftover after parsing attributes in process `syz.5.17710'. [ 1411.333803][T13952] loop0: detected capacity change from 0 to 256 [ 1411.949434][T13979] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1412.248352][T13996] netlink: 4 bytes leftover after parsing attributes in process `syz.7.17733'. [ 1412.429170][T14003] loop9: detected capacity change from 0 to 8 [ 1412.451769][T14003] MTD: Attempt to mount non-MTD device "/dev/loop9" [ 1412.566814][T13998] loop6: detected capacity change from 0 to 4096 [ 1412.597973][T13998] ntfs3(loop6): Different NTFS sector size (4096) and media sector size (512). [ 1412.640838][T13998] ntfs3(loop6): It is recommended to use chkdsk. [ 1412.895470][T14015] loop5: detected capacity change from 0 to 128 [ 1412.904863][T14016] IPVS: length: 96 != 8 [ 1413.119893][T14020] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1413.172409][T14020] batadv_slave_0: entered promiscuous mode [ 1413.193337][T14020] batadv_slave_0: entered allmulticast mode [ 1413.226323][T14020] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 1413.297990][T14026] loop0: detected capacity change from 0 to 128 [ 1414.086412][T14055] loop0: detected capacity change from 0 to 128 [ 1414.115247][T14055] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 1414.163987][T14055] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1414.526846][T14031] loop1: detected capacity change from 0 to 32768 [ 1414.558044][T14072] netlink: 28 bytes leftover after parsing attributes in process `syz.9.17771'. [ 1414.588953][T14031] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.17751 (14031) [ 1414.612402][T14072] netlink: 28 bytes leftover after parsing attributes in process `syz.9.17771'. [ 1414.689277][T14031] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1414.727583][T14031] BTRFS info (device loop1): using sha256 checksum algorithm [ 1414.892862][T14095] netlink: 'syz.7.17776': attribute type 21 has an invalid length. [ 1414.901576][T14095] netlink: 128 bytes leftover after parsing attributes in process `syz.7.17776'. [ 1414.913491][T14095] netlink: 3 bytes leftover after parsing attributes in process `syz.7.17776'. [ 1414.936292][T14031] BTRFS info (device loop1): enabling ssd optimizations [ 1414.958523][T14031] BTRFS info (device loop1): turning on async discard [ 1414.972924][T14031] BTRFS info (device loop1): enabling free space tree [ 1415.012839][ T30] audit: type=1326 audit(2000000187.149:2852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14100 comm="syz.7.17780" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dc2f9e019 code=0x7ffc0000 [ 1415.118379][ T30] audit: type=1326 audit(2000000187.149:2853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14100 comm="syz.7.17780" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dc2f9e019 code=0x7ffc0000 [ 1415.200634][ T5621] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1415.239633][ T30] audit: type=1326 audit(2000000187.149:2854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14100 comm="syz.7.17780" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=23 compat=0 ip=0x7f3dc2f9e019 code=0x7ffc0000 [ 1415.301174][T14112] netlink: 20 bytes leftover after parsing attributes in process `syz.5.17784'. [ 1415.336204][ T30] audit: type=1326 audit(2000000187.149:2855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14100 comm="syz.7.17780" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dc2f9e019 code=0x7ffc0000 [ 1415.860283][T14130] autofs4:pid:14130:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.1000000), cmd(0xc0189375) [ 1415.874415][T14130] autofs4:pid:14130:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189375) [ 1415.940520][T14127] bond4: option primary: mode dependency failed, not supported in mode broadcast(3) [ 1416.066327][T14127] bond4 (unregistering): Released all slaves [ 1416.687907][T14153] loop9: detected capacity change from 0 to 4096 [ 1416.796607][T14153] ntfs3(loop9): Mark volume as dirty due to NTFS errors [ 1416.841511][T24456] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 1416.862093][T14153] ntfs3(loop9): Failed to load $Extend (-22). [ 1416.887450][T14153] ntfs3(loop9): Failed to initialize $Extend. [ 1417.021189][T24456] usb 6-1: Using ep0 maxpacket: 8 [ 1417.061458][T24456] usb 6-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=f9.64 [ 1417.100491][T24456] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67 [ 1417.142908][T24456] usb 6-1: Product: syz [ 1417.167644][T24456] usb 6-1: Manufacturer: syz [ 1417.191896][T24456] usb 6-1: SerialNumber: syz [ 1417.227011][T24456] usb 6-1: config 0 descriptor?? [ 1417.264617][T24456] gspca_main: sn9c2028-2.14.0 probing 0c45:8003 [ 1417.511914][T14194] netlink: 8 bytes leftover after parsing attributes in process `syz.9.17821'. [ 1417.672377][T24456] gspca_sn9c2028: read1 error -71 [ 1417.680272][T24456] gspca_sn9c2028: read1 error -71 [ 1417.695778][T24456] sn9c2028 6-1:0.0: probe with driver sn9c2028 failed with error -71 [ 1417.720078][ T30] audit: type=1326 audit(2000000189.849:2856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14198 comm="syz.1.17825" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bb419e019 code=0x7ffc0000 [ 1417.739494][T24456] usb 6-1: USB disconnect, device number 28 [ 1417.828968][ T30] audit: type=1326 audit(2000000189.849:2857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14198 comm="syz.1.17825" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bb419e019 code=0x7ffc0000 [ 1417.854555][T14206] loop7: detected capacity change from 0 to 164 [ 1417.878649][T14206] rock: directory entry would overflow storage [ 1417.895871][T14206] rock: sig=0x66, size=4, remaining=3 [ 1417.921362][T14206] rock: directory entry would overflow storage [ 1417.940031][ T30] audit: type=1326 audit(2000000189.889:2858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14198 comm="syz.1.17825" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bb419e019 code=0x7ffc0000 [ 1417.958540][T14206] rock: sig=0x66, size=4, remaining=3 [ 1418.052850][ T30] audit: type=1326 audit(2000000189.889:2859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14198 comm="syz.1.17825" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bb419e019 code=0x7ffc0000 [ 1418.166342][ T30] audit: type=1326 audit(2000000189.889:2860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14198 comm="syz.1.17825" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7f2bb419e019 code=0x7ffc0000 [ 1418.280288][ T30] audit: type=1326 audit(2000000189.889:2861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14198 comm="syz.1.17825" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bb419e019 code=0x7ffc0000 [ 1418.732085][T14239] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1418.961893][T14250] kAFS: unable to lookup cell '(,c' [ 1419.000800][T14253] loop6: detected capacity change from 0 to 512 [ 1419.082414][T14256] loop1: detected capacity change from 0 to 4096 [ 1419.102447][T14258] netlink: 5 bytes leftover after parsing attributes in process `syz.5.17852'. [ 1419.164332][T14258] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1419.219183][T14256] ntfs3(loop1): Failed to load $Extend (-22). [ 1419.229103][T14253] EXT4-fs error (device loop6): ext4_xattr_inode_iget:446: comm syz.6.17849: error while reading EA inode 32 err=-116 [ 1419.245928][T14256] ntfs3(loop1): Failed to initialize $Extend. [ 1419.289520][T14253] loop6: lost filesystem error report for type 5 error -117 [ 1419.290703][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 1419.304466][ C1] EXT4-fs (loop6): initial error at time 2000000191: ext4_xattr_inode_iget:446 [ 1419.313456][ C1] EXT4-fs (loop6): last error at time 2000000191: ext4_xattr_inode_iget:446 [ 1419.393177][T14266] loop7: detected capacity change from 0 to 764 [ 1419.505793][T14266] Symlink component flag not implemented [ 1419.559817][T14266] Symlink component flag not implemented [ 1419.783574][T14253] EXT4-fs error (device loop6): ext4_xattr_inode_iget:446: comm syz.6.17849: error while reading EA inode 32 err=-116 [ 1419.850260][T14253] loop6: lost filesystem error report for type 5 error -117 [ 1419.878770][T14253] EXT4-fs (loop6): 1 orphan inode deleted [ 1419.904983][T14253] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1420.040805][T24555] usb 1-1: new full-speed USB device number 41 using dummy_hcd [ 1420.138249][T23098] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1420.223001][T24555] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1420.243966][T24555] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1420.292190][T24555] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1420.320752][T24552] usb 8-1: new high-speed USB device number 50 using dummy_hcd [ 1420.328372][T24555] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1420.363705][T24555] usb 1-1: Product: syz [ 1420.378615][T24555] usb 1-1: Manufacturer: syz [ 1420.401478][T24555] usb 1-1: SerialNumber: syz [ 1420.425691][T24555] usb 1-1: 0:2 : does not exist [ 1420.441439][T24555] usb 1-1: unit 9 not found! [ 1420.480252][T14294] loop1: detected capacity change from 0 to 4096 [ 1420.490813][T24552] usb 8-1: Using ep0 maxpacket: 8 [ 1420.521361][T24552] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1420.548704][T24552] usb 8-1: New USB device found, idVendor=0423, idProduct=000c, bcdDevice=2e.bf [ 1420.578359][T24552] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1420.599693][T24552] usb 8-1: Product: syz [ 1420.617764][T14294] ntfs3(loop1): Failed to load $Extend (-22). [ 1420.628930][T24552] usb 8-1: Manufacturer: syz [ 1420.654633][T24552] usb 8-1: SerialNumber: syz [ 1420.659572][T14294] ntfs3(loop1): Failed to initialize $Extend. [ 1420.667768][T24555] usb 1-1: 4:0: cannot get min/max values for control 2 (id 4) [ 1420.698327][T24555] usb 1-1: 4:0: cannot get min/max values for control 3 (id 4) [ 1420.731845][T24555] usb 1-1: 4:0: cannot get min/max values for control 9 (id 4) [ 1420.751293][T14284] loop5: detected capacity change from 0 to 32768 [ 1420.761195][T14284] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.17863 (14284) [ 1420.813384][T14284] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1420.854783][T14284] BTRFS info (device loop5): using sha256 checksum algorithm [ 1420.895740][T14306] netlink: 64 bytes leftover after parsing attributes in process `syz.9.17874'. [ 1420.916357][T24552] usb 8-1: selecting invalid altsetting 1 [ 1420.944743][T14306] netlink: 64 bytes leftover after parsing attributes in process `syz.9.17874'. [ 1420.965466][T24555] usb 1-1: USB disconnect, device number 41 [ 1420.976246][T24552] catc 8-1:8.0: Can't set altsetting 1. [ 1421.008244][T24552] catc 8-1:8.0: probe with driver catc failed with error -5 [ 1421.076600][T24552] usb 8-1: USB disconnect, device number 50 [ 1421.078824][T14321] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1421.113140][ T5891] udevd[5891]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1421.118516][T14321] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 1421.146301][T14321] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1421.162117][T14284] BTRFS info (device loop5): enabling ssd optimizations [ 1421.178590][T14284] BTRFS info (device loop5): turning on async discard [ 1421.186087][T14284] BTRFS info (device loop5): enabling free space tree [ 1421.364925][ T5631] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1421.873230][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1421.882706][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 1421.993706][T14350] netlink: 'syz.7.17889': attribute type 11 has an invalid length. [ 1422.044100][T14352] loop6: detected capacity change from 0 to 64 [ 1422.114307][T14359] loop5: detected capacity change from 0 to 64 [ 1422.406680][ T5631] hfs: node 4:3 still has 1 user(s)! [ 1422.564713][T14374] netlink: NAT attribute has 1 unknown bytes [ 1422.587311][T14374] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1422.821539][T24555] usb 8-1: new high-speed USB device number 51 using dummy_hcd [ 1423.020763][T24555] usb 8-1: Using ep0 maxpacket: 8 [ 1423.048380][T24555] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1423.088801][T24555] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 1423.129891][T24555] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 1423.144731][T14394] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.153638][T24555] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024 [ 1423.165594][T24555] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1423.180949][T24552] usb 1-1: new full-speed USB device number 42 using dummy_hcd [ 1423.199020][T24555] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1423.240354][T24555] usb 8-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 1423.258366][T24555] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1423.292793][T24555] usb 8-1: Product: syz [ 1423.312446][T24555] usb 8-1: Manufacturer: syz [ 1423.327718][T24555] usb 8-1: SerialNumber: syz [ 1423.362603][T24552] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1423.374613][T24555] usb 8-1: config 0 descriptor?? [ 1423.390309][T24552] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1423.397558][T14376] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1423.415408][T24552] usb 1-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 1423.431966][T24552] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1423.443483][T24552] usb 1-1: Product: syz [ 1423.453814][T24552] usb 1-1: Manufacturer: syz [ 1423.458452][T24552] usb 1-1: SerialNumber: syz [ 1423.492581][T24552] usb 1-1: config 0 descriptor?? [ 1423.719902][T14415] netlink: 128 bytes leftover after parsing attributes in process `syz.5.17921'. [ 1423.735979][T14415] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1423.914419][T24552] usb 1-1: USB disconnect, device number 42 [ 1424.179555][T14438] loop6: detected capacity change from 0 to 256 [ 1424.632337][T14455] netlink: 12 bytes leftover after parsing attributes in process `syz.7.17941'. [ 1424.850801][T24555] rc_core: IR keymap rc-snapstream-firefly not found [ 1424.860543][T24555] Registered IR keymap rc-empty [ 1424.900428][T24555] rc rc0: syz syz as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0 [ 1424.964328][T24555] input: syz syz as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input79 [ 1425.085141][T24555] input: syz syz mouse as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/input/input81 [ 1425.119570][T14468] loop9: detected capacity change from 0 to 4096 [ 1425.177373][T14478] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17951'. [ 1425.187048][T24555] usb 8-1: USB disconnect, device number 51 [ 1425.193091][ C1] ati_remote 8-1:0.0: ati_remote_irq_in: usb_submit_urb()=-19 [ 1425.224256][T14481] netlink: 44 bytes leftover after parsing attributes in process `syz.0.17953'. [ 1425.241724][T14468] ntfs3(loop9): Mark volume as dirty due to NTFS errors [ 1425.319403][T14468] ntfs3(loop9): Failed to load $Extend (-22). [ 1425.350601][T14468] ntfs3(loop9): Failed to initialize $Extend. [ 1425.543406][T14487] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 1426.031130][T14503] x_tables: arp_tables: .0 target: invalid size 8 (kernel) != (user) 0 [ 1426.165565][T14509] bridge3: entered promiscuous mode [ 1426.208528][T14509] bridge3: entered allmulticast mode [ 1426.505571][T14522] binder: 14521:14522 ioctl 40046210 0 returned -14 [ 1426.870498][T14536] loop7: detected capacity change from 0 to 64 [ 1427.251047][T23878] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 1427.323483][T14515] loop1: detected capacity change from 0 to 32768 [ 1427.335731][ T1151] bond0: (slave bond_slave_0): interface is now down [ 1427.377957][T14550] loop7: detected capacity change from 0 to 128 [ 1427.386693][ T1151] bond0: (slave 4@0): interface is now down [ 1427.397455][T14515] jfs_rename: dtInsert returned -EIO [ 1427.448138][T23878] usb 10-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice=c4.36 [ 1427.457672][T14516] loop0: detected capacity change from 0 to 32768 [ 1427.500756][T23878] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1427.510171][ T1151] bond0: now running without any active interface! [ 1427.535897][T23878] usb 10-1: Product: syz [ 1427.554223][T14516] ialloc: diAlloc returned -5! [ 1427.567286][T23878] usb 10-1: Manufacturer: syz [ 1427.594417][T23878] usb 10-1: SerialNumber: syz [ 1427.856399][T14559] vxcan3: entered promiscuous mode [ 1427.885422][T23878] mdc800 10-1:39.0: probe fails -> wrong Number of Configuration [ 1427.895167][T14559] vxcan3: entered allmulticast mode [ 1427.958653][T23878] usb 10-1: USB disconnect, device number 15 [ 1428.028076][T14565] kAFS: unable to lookup cell '' [ 1428.291242][T14572] loop0: detected capacity change from 0 to 1024 [ 1428.337872][T14578] loop5: detected capacity change from 0 to 256 [ 1428.370427][T14572] hfsplus: can't free extent: start 2889, count 1 [ 1428.415085][T14578] exFAT-fs (loop5): failed to load upcase table (idx : 0x00011e7e, chksum : 0x04bede55, utbl_chksum : 0xe619d30d) [ 1428.472064][T14578] exFAT-fs (loop5): error, data valid size is invalid(-281474976706560) [ 1429.267913][T14612] netlink: 12 bytes leftover after parsing attributes in process `syz.9.18013'. [ 1429.314205][T14612] openvswitch: netlink: Missing key (keys=40, expected=80) [ 1429.636312][T14631] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1429.830808][T24456] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 1429.931425][T24555] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 1430.022745][T24456] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1430.035354][T14648] loop6: detected capacity change from 0 to 256 [ 1430.055307][T24456] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1430.087189][T24456] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1430.101550][T24555] usb 2-1: Using ep0 maxpacket: 32 [ 1430.125644][T24456] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1430.129012][T24555] usb 2-1: config 0 has an invalid interface number: 119 but max is 0 [ 1430.168615][T24456] usb 10-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1430.201419][T24555] usb 2-1: config 0 has no interface number 0 [ 1430.214804][T24456] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1430.227846][T24555] usb 2-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1430.263289][T24456] usb 10-1: config 0 descriptor?? [ 1430.268895][T24555] usb 2-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 1430.309631][T14654] netlink: 156 bytes leftover after parsing attributes in process `syz.6.18034'. [ 1430.315160][T24555] usb 2-1: config 0 interface 119 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 27 [ 1430.343960][T14654] netlink: 12 bytes leftover after parsing attributes in process `syz.6.18034'. [ 1430.368621][T24555] usb 2-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1430.372487][T14654] netlink: 16 bytes leftover after parsing attributes in process `syz.6.18034'. [ 1430.399061][T24555] usb 2-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 1430.415643][T24555] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1430.424622][T24555] usb 2-1: Product: syz [ 1430.428803][T24555] usb 2-1: Manufacturer: syz [ 1430.436197][T24555] usb 2-1: SerialNumber: syz [ 1430.455552][T24555] usb 2-1: config 0 descriptor?? [ 1430.478010][T14634] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1430.486633][T24456] hdpvr 10-1:0.0: firmware version 0x1e dated [ 1430.514665][T24555] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.119/input/input82 [ 1430.549119][ T4972] usb 2-1: BOGUS urb xfer, pipe 1 != type 3 [ 1430.600486][ C1] bcm5974 2-1:0.119: trackpad urb failed: -1 [ 1430.691715][T24456] hdpvr 10-1:0.0: device init failed [ 1430.711813][T24456] hdpvr 10-1:0.0: probe with driver hdpvr failed with error -12 [ 1430.748492][T24456] usb 10-1: USB disconnect, device number 16 [ 1430.748877][T14662] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1430.800140][T23878] usb 2-1: USB disconnect, device number 5 [ 1431.091435][T24555] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 1431.230555][T14682] loop5: detected capacity change from 0 to 256 [ 1431.252256][T14682] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1431.292119][T24555] usb 1-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice=29.00 [ 1431.314211][T24555] usb 1-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 1431.339712][T24555] usb 1-1: Product: syz [ 1431.411078][T24555] ftdi_sio 1-1:5.0: FTDI USB Serial Device converter detected [ 1431.446026][T24555] usb 1-1: Detected FT4233HP [ 1431.496726][T14687] kAFS: unable to lookup cell '(,' [ 1431.807997][T24555] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1431.848824][T24555] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1431.904987][T24555] usb 1-1: USB disconnect, device number 43 [ 1431.938805][T24555] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1431.973714][T14706] netlink: 'syz.9.18060': attribute type 12 has an invalid length. [ 1431.985804][T24555] ftdi_sio 1-1:5.0: device disconnected [ 1432.863673][T14734] kAFS: unable to lookup cell 'sy1' [ 1432.945877][T14700] loop7: detected capacity change from 0 to 32768 [ 1432.976441][T14700] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.18057 (14700) [ 1433.090440][T14700] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1433.111459][T14700] BTRFS info (device loop7): using sha256 checksum algorithm [ 1433.320333][T14700] BTRFS info (device loop7): enabling ssd optimizations [ 1433.382604][T14700] BTRFS info (device loop7): turning on async discard [ 1433.437304][T14700] BTRFS info (device loop7): enabling free space tree [ 1433.584951][T23337] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1433.983660][T14724] loop0: detected capacity change from 0 to 32768 [ 1434.039549][T14724] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.18069 (14724) [ 1434.077818][T14777] loop9: detected capacity change from 0 to 2048 [ 1434.107473][T14724] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1434.149978][T14724] BTRFS info (device loop0): using crc32c checksum algorithm [ 1434.185459][T14777] UDF-fs: error (device loop9): udf_read_tagged: tag checksum failed, block 160: 0xa1 != 0xd4 [ 1434.267937][T14777] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1434.389133][T14724] BTRFS info (device loop0): setting nodatasum [ 1434.416703][T14724] BTRFS info (device loop0): turning off barriers [ 1434.471284][T14724] BTRFS info (device loop0): disabling tree log [ 1434.500711][T14724] BTRFS info (device loop0): turning on async discard [ 1434.522799][T14724] BTRFS info (device loop0): enabling free space tree [ 1434.569984][T14724] BTRFS info (device loop0): max_inline set to 33 [ 1434.614118][T14809] loop5: detected capacity change from 0 to 1024 [ 1434.665544][T14724] BTRFS info (device loop0 state M): max_inline set to 33 [ 1434.695214][T14813] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=io+mem:owns=io+mem [ 1434.803211][ T5628] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1435.048608][T14827] UBIFS error (pid: 14827): cannot open "ubi:0", error -19 [ 1435.472552][T14837] loop9: detected capacity change from 0 to 2048 [ 1435.605287][T14837] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1435.956665][T14849] loop6: detected capacity change from 0 to 4096 [ 1436.024492][T14849] ntfs3(loop6): Mark volume as dirty due to NTFS errors [ 1436.065860][T14860] netlink: 'syz.9.18120': attribute type 1 has an invalid length. [ 1436.101909][T14849] ntfs3(loop6): Failed to load $Extend (-22). [ 1436.139905][T14849] ntfs3(loop6): Failed to initialize $Extend. [ 1436.146981][T14860] netlink: 224 bytes leftover after parsing attributes in process `syz.9.18120'. [ 1436.795669][T14888] sock: sock_timestamping_bind_phc: sock not bind to device [ 1437.429333][T14910] netlink: 120 bytes leftover after parsing attributes in process `syz.5.18147'. [ 1437.481886][T14910] netlink: 88 bytes leftover after parsing attributes in process `syz.5.18147'. [ 1437.567072][T14919] netlink: 20 bytes leftover after parsing attributes in process `syz.7.18150'. [ 1437.688477][T14916] bridge0: port 1(bridge_slave_0) entered disabled state [ 1438.009146][T14936] loop1: detected capacity change from 0 to 512 [ 1438.046314][T14936] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 1438.119198][T14936] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1438.145016][T14936] EXT4-fs error (device loop1): ext4_orphan_get:1425: comm syz.1.18158: bad orphan inode 15 [ 1438.157280][T14936] loop1: lost filesystem error report for type 5 error -117 [ 1438.160698][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 1438.176377][ C1] EXT4-fs (loop1): initial error at time 2000000210: ext4_orphan_get:1425 [ 1438.176414][ C1] EXT4-fs (loop1): last error at time 2000000210: ext4_orphan_get:1425 [ 1438.177705][T14936] ext4_test_bit(bit=14, block=18) = 1 [ 1438.199204][T14936] is_bad_inode(inode)=0 [ 1438.203441][T14936] NEXT_ORPHAN(inode)=1023 [ 1438.207768][T14936] max_ino=32 [ 1438.211201][T14936] i_nlink=0 [ 1438.221317][T14936] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2972: inode #15: comm syz.1.18158: corrupted xattr block 19: e_value size too large [ 1438.242321][T14936] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1438.244049][T14936] EXT4-fs warning (device loop1): ext4_evict_inode:287: xattr delete (err -117) [ 1438.315324][T14936] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1438.447757][T14936] EXT4-fs error (device loop1): ext4_lookup:1789: inode #2: comm syz.1.18158: deleted inode referenced: 15 [ 1438.633015][T14957] loop6: detected capacity change from 0 to 64 [ 1438.658941][ T5621] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1438.869995][T14961] loop1: detected capacity change from 0 to 512 [ 1438.937857][T14961] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1438.970393][T14965] loop0: detected capacity change from 0 to 1024 [ 1439.003046][T14961] EXT4-fs (loop1): 1 truncate cleaned up [ 1439.053664][T14961] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1439.231236][T24456] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 1439.325103][ T5621] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1439.392805][T24456] usb 10-1: Using ep0 maxpacket: 16 [ 1439.417761][T24456] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 1439.431134][T24456] usb 10-1: config 0 has no interface number 0 [ 1439.455059][T24456] usb 10-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 1439.482251][T24456] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1439.505115][T24456] usb 10-1: Product: syz [ 1439.522662][T24456] usb 10-1: Manufacturer: syz [ 1439.536795][T24456] usb 10-1: SerialNumber: syz [ 1439.555025][T14949] loop7: detected capacity change from 0 to 32768 [ 1439.557200][T24456] usb 10-1: config 0 descriptor?? [ 1439.587846][T14949] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.18163 (14949) [ 1439.656660][T14949] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1439.671305][T23878] usb 7-1: new low-speed USB device number 53 using dummy_hcd [ 1439.714204][T14949] BTRFS info (device loop7): using sha256 checksum algorithm [ 1439.788649][T24456] usb 10-1: selecting invalid altsetting 1 [ 1439.806690][T24456] speedtch 10-1:0.1: speedtch_bind: setting interface to 1 failed (-22)! [ 1439.853993][T23878] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 1439.863636][T14962] loop5: detected capacity change from 0 to 32768 [ 1439.871560][T24456] speedtch 10-1:0.1: usbatm_usb_probe: bind failed: -22! [ 1439.880634][T14962] BTRFS info: device /dev/loop5 (7:5) using temp-fsid d3dfcd15-c4f2-476d-aa0a-6ac1b70b5e44 [ 1439.896035][T14949] BTRFS info (device loop7): enabling ssd optimizations [ 1439.902580][T14962] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.18168 (14962) [ 1439.905374][T23878] usb 7-1: config 0 has no interface number 0 [ 1439.936273][T24456] speedtch 10-1:0.1: probe with driver speedtch failed with error -22 [ 1439.948850][T14962] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1439.963577][T14962] BTRFS info (device loop5): using sha256 checksum algorithm [ 1439.973744][T14949] BTRFS info (device loop7): turning on async discard [ 1439.982172][T14949] BTRFS info (device loop7): enabling free space tree [ 1440.028648][T24456] usb 10-1: USB disconnect, device number 17 [ 1440.049706][T23878] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1440.069510][T14962] BTRFS info (device loop5): enabling ssd optimizations [ 1440.113361][T14962] BTRFS info (device loop5): turning on async discard [ 1440.120426][T14962] BTRFS info (device loop5): enabling free space tree [ 1440.140359][T23878] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1440.198775][T23337] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1440.243495][T23878] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1440.314391][T23878] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1440.369904][ T5631] BTRFS info (device loop5): last unmount of filesystem d3dfcd15-c4f2-476d-aa0a-6ac1b70b5e44 [ 1440.391165][T23878] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 1440.452758][T23878] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1440.503589][T23878] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1440.557178][T23878] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1440.572349][T15025] loop9: detected capacity change from 0 to 128 [ 1440.613260][T23878] usb 7-1: config 0 descriptor?? [ 1440.639292][T15028] x_tables: duplicate entry at hook 2 [ 1440.659665][T14976] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1440.684401][T15025] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1440.715836][T15031] netlink: 88 bytes leftover after parsing attributes in process `syz.7.18183'. [ 1440.732036][T14976] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1440.777369][T15025] ext4 filesystem being mounted at /793/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1440.803104][T23878] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1440.925578][T15035] netlink: 120 bytes leftover after parsing attributes in process `syz.0.18190'. [ 1440.988615][T24553] usb 7-1: USB disconnect, device number 53 [ 1441.007869][T15035] netlink: 120 bytes leftover after parsing attributes in process `syz.0.18190'. [ 1441.027266][T15039] netlink: 388 bytes leftover after parsing attributes in process `syz.7.18192'. [ 1441.045852][ T3747] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1441.065032][T24553] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 1441.369778][T15046] loop9: detected capacity change from 0 to 512 [ 1441.500126][T15046] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1441.609431][T15046] ext4 filesystem being mounted at /794/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1441.860162][T15059] loop0: detected capacity change from 0 to 1024 [ 1441.898032][T15063] openvswitch: netlink: IPv4 tunnel dst address is zero [ 1441.906254][T15061] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1441.943348][T15059] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1441.986251][ T3747] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1442.071924][T15059] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #11: comm syz.0.18201: missing EA_INODE flag [ 1442.145689][T15059] EXT4-fs (loop0): Remounting filesystem read-only [ 1442.329666][ T5628] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1442.342027][T15074] loop6: detected capacity change from 0 to 64 [ 1442.545812][T15078] netlink: 3 bytes leftover after parsing attributes in process `syz.5.18209'. [ 1442.576506][T15080] netlink: 8 bytes leftover after parsing attributes in process `syz.9.18210'. [ 1443.092171][T15104] loop1: detected capacity change from 0 to 512 [ 1443.113120][T15109] netlink: Conntrack attr has 12 unknown bytes [ 1443.125182][T15104] EXT4-fs warning (device loop1): dx_probe:801: inode #2: comm syz.1.18222: Unrecognised inode hash code 255 [ 1443.154853][T15109] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1443.171293][T15104] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.18222: Corrupt directory, running e2fsck is recommended [ 1443.375105][T15119] loop6: detected capacity change from 0 to 16 [ 1443.405644][T15119] erofs (device loop6): mounted with root inode @ nid 36. [ 1443.426397][T15104] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 1443.449219][T15119] erofs (device loop6): unsupported i_format 65535 of nid 89 [ 1443.469229][T15104] EXT4-fs error (device loop1): ext4_iget_extra_inode:5180: inode #15: comm syz.1.18222: corrupted in-inode xattr: invalid ea_ino [ 1443.469270][T15104] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1443.470221][T15104] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.18222: couldn't read orphan inode 15 (err -117) [ 1443.470257][T15104] loop1: lost filesystem error report for type 5 error -117 [ 1443.470912][ C1] EXT4-fs (loop1): error count since last fsck: 2 [ 1443.470935][ C1] EXT4-fs (loop1): initial error at time 2000000215: ext4_iget_extra_inode:5180: inode 15 [ 1443.470974][ C1] EXT4-fs (loop1): last error at time 2000000215: ext4_orphan_get:1404 [ 1443.482984][T15104] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1443.584511][T15104] EXT4-fs error (device loop1): ext4_xattr_set_entry:1672: inode #2: comm syz.1.18222: corrupted xattr entries [ 1443.787704][ T5621] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1443.953801][T15138] loop0: detected capacity change from 0 to 256 [ 1444.093534][T15135] loop5: detected capacity change from 0 to 4096 [ 1444.127373][T15143] loop6: detected capacity change from 0 to 64 [ 1444.139766][T15135] ntfs3(loop5): ino=3, mi_enum_attr [ 1444.630814][T23878] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 1444.700621][T15161] netlink: 8 bytes leftover after parsing attributes in process `syz.5.18249'. [ 1444.822803][T15166] loop6: detected capacity change from 0 to 512 [ 1444.841279][T23878] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1444.873966][T23878] usb 2-1: config 114 has an invalid interface number: 240 but max is 0 [ 1444.889348][T15169] macsec0: entered promiscuous mode [ 1444.906623][T15166] EXT4-fs warning (device loop6): dx_probe:801: inode #2: comm syz.6.18250: Unrecognised inode hash code 255 [ 1444.915645][T15169] macsec0: entered allmulticast mode [ 1444.940912][T23878] usb 2-1: config 114 has no interface number 0 [ 1444.951862][T15166] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.18250: Corrupt directory, running e2fsck is recommended [ 1444.961482][T23878] usb 2-1: config 114 interface 240 altsetting 232 bulk endpoint 0x1 has invalid maxpacket 1023 [ 1444.991130][T23878] usb 2-1: config 114 interface 240 altsetting 232 has an endpoint descriptor with address 0xCA, changing to 0x8A [ 1445.003253][T23878] usb 2-1: config 114 interface 240 altsetting 232 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1445.013982][T23878] usb 2-1: config 114 interface 240 altsetting 232 bulk endpoint 0x8A has invalid maxpacket 0 [ 1445.024867][T23878] usb 2-1: config 114 interface 240 has no altsetting 0 [ 1445.048899][T23878] usb 2-1: string descriptor 0 read error: -22 [ 1445.056394][T23878] usb 2-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice= 6.38 [ 1445.094412][T23878] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1445.125730][T15166] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -2 [ 1445.143249][T15151] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1445.176029][T23878] ir_usb 2-1:114.240: IR Dongle converter detected [ 1445.191617][T15166] EXT4-fs error (device loop6): ext4_iget_extra_inode:5180: inode #15: comm syz.6.18250: corrupted in-inode xattr: invalid ea_ino [ 1445.290638][T15166] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1445.295909][T15166] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.18250: couldn't read orphan inode 15 (err -117) [ 1445.305127][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 1445.305150][ C1] EXT4-fs (loop6): initial error at time 2000000217: ext4_iget_extra_inode:5180: inode 15 [ 1445.305190][ C1] EXT4-fs (loop6): last error at time 2000000217: ext4_iget_extra_inode:5180: inode 15 [ 1445.384507][T23878] usb 2-1: IRDA class descriptor not found, device not bound [ 1445.394839][T15166] loop6: lost filesystem error report for type 5 error -117 [ 1445.411876][T15166] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1445.417818][T15185] openvswitch: netlink: nsh attr 251 is out of range max 3 [ 1445.542053][T15166] EXT4-fs error (device loop6): ext4_xattr_set_entry:1672: inode #2: comm syz.6.18250: corrupted xattr entries [ 1445.575627][T15189] tmpfs: Bad value for 'mpol' [ 1445.590453][T23878] usb 2-1: USB disconnect, device number 6 [ 1445.654045][T15191] netlink: zone id is out of range [ 1445.679918][T15191] netlink: del zone limit has 4 unknown bytes [ 1445.706027][T23098] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1446.383037][T15224] loop5: detected capacity change from 0 to 512 [ 1446.426429][T15224] EXT4-fs warning (device loop5): dx_probe:801: inode #2: comm syz.5.18279: Unrecognised inode hash code 255 [ 1446.462315][T15224] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.18279: Corrupt directory, running e2fsck is recommended [ 1446.556798][T15224] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2 [ 1446.567888][T15224] EXT4-fs error (device loop5): ext4_iget_extra_inode:5180: inode #15: comm syz.5.18279: corrupted in-inode xattr: invalid ea_ino [ 1446.581579][T15224] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1446.582061][T15224] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.18279: couldn't read orphan inode 15 (err -117) [ 1446.591307][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 1446.591331][ C0] EXT4-fs (loop5): initial error at time 2000000218: ext4_iget_extra_inode:5180: inode 15 [ 1446.591371][ C0] EXT4-fs (loop5): last error at time 2000000218: ext4_iget_extra_inode:5180: inode 15 [ 1446.637415][T15224] loop5: lost filesystem error report for type 5 error -117 [ 1446.639875][T15224] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1446.679001][T15237] netlink: 60 bytes leftover after parsing attributes in process `syz.1.18285'. [ 1446.764896][T15224] EXT4-fs error (device loop5): ext4_xattr_set_entry:1672: inode #2: comm syz.5.18279: corrupted xattr entries [ 1446.918834][ T5631] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1447.038797][T15250] bridge0: port 1(bridge_slave_1) entered blocking state [ 1447.067146][T15250] bridge0: port 1(bridge_slave_1) entered disabled state [ 1447.098527][T15250] bridge_slave_1: entered allmulticast mode [ 1447.130254][T15250] bridge_slave_1: entered promiscuous mode [ 1447.163170][T15257] ieee802154 phy1 wpan1: encryption failed: -90 [ 1447.366933][T15266] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 1447.798916][T15288] netlink: 8 bytes leftover after parsing attributes in process `syz.9.18309'. [ 1448.009701][T15288] bond2: entered promiscuous mode [ 1448.130859][T23878] usb 7-1: new high-speed USB device number 54 using dummy_hcd [ 1448.215192][T15307] loop9: detected capacity change from 0 to 64 [ 1448.302852][T23878] usb 7-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1448.328001][T23878] usb 7-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1448.375331][T23878] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1448.397108][T23878] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1448.412702][T23878] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1448.431878][T23878] usb 7-1: Product: syz [ 1448.437545][T15315] loop9: detected capacity change from 0 to 128 [ 1448.445347][T23878] usb 7-1: Manufacturer: syz [ 1448.451022][T23878] usb 7-1: SerialNumber: syz [ 1448.460857][T15315] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=256, location=256 [ 1448.478474][T15315] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1448.491478][T23878] usb 7-1: config 0 descriptor?? [ 1448.525303][T23878] usb 7-1: selecting invalid altsetting 0 [ 1448.560829][T24555] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 1448.735302][T23878] usb 7-1: USB disconnect, device number 54 [ 1448.751693][T24555] usb 6-1: Using ep0 maxpacket: 8 [ 1448.775052][T24555] usb 6-1: config 2 has an invalid interface number: 57 but max is 0 [ 1448.815687][T24555] usb 6-1: config 2 has no interface number 0 [ 1448.844460][T24555] usb 6-1: config 2 interface 57 has no altsetting 0 [ 1448.875854][T24555] usb 6-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.0a [ 1448.920567][T24555] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1449.196459][T24555] usb 6-1: USB disconnect, device number 29 [ 1449.379509][T15338] netlink: 228 bytes leftover after parsing attributes in process `syz.0.18333'. [ 1449.396457][T15309] loop7: detected capacity change from 0 to 40427 [ 1449.432821][T15309] F2FS-fs (loop7): Wrong secs_per_zone / total_sections (0, 24) [ 1449.473438][T15309] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 1449.512868][T15309] F2FS-fs (loop7): invalid crc_offset: 4177530876 [ 1449.567446][T15309] F2FS-fs (loop7): Wrong journal entry on segno 65538 [ 1449.599142][T15309] loop7: lost filesystem error report for type 5 error -117 [ 1449.599173][T15309] F2FS-fs (loop7): Failed to initialize F2FS segment manager (-117) [ 1449.692497][T15352] loop1: detected capacity change from 0 to 64 [ 1449.817201][T15352] syz.1.18337: attempt to access beyond end of device [ 1449.817201][T15352] loop1: rw=2049, sector=268435468, nr_sectors = 2 limit=64 [ 1451.234205][T15412] netlink: 8 bytes leftover after parsing attributes in process `syz.5.18369'. [ 1451.278816][T15412] netlink: 24 bytes leftover after parsing attributes in process `syz.5.18369'. [ 1451.323040][T15412] netlink: 24 bytes leftover after parsing attributes in process `syz.5.18369'. [ 1451.448123][T15418] xt_cluster: you have exceeded the maximum number of cluster nodes (524288 > 32) [ 1451.512693][T15419] loop7: detected capacity change from 0 to 1024 [ 1451.576543][T15419] hfsplus: keylen 65060 too large [ 1451.602060][T15419] hfsplus: xattr search failed [ 1452.002092][T23878] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 1452.057154][T15439] loop1: detected capacity change from 0 to 2048 [ 1452.105779][T15439] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1452.173545][T15446] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1452.188672][T23878] usb 1-1: Using ep0 maxpacket: 8 [ 1452.214456][T23878] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1452.224409][T23878] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1452.238960][T23878] usb 1-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 1452.266870][T23878] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1452.278401][T23878] usb 1-1: Product: syz [ 1452.283291][T23878] usb 1-1: Manufacturer: syz [ 1452.288006][T23878] usb 1-1: SerialNumber: syz [ 1452.304233][T23878] usb 1-1: config 0 descriptor?? [ 1452.590947][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1452.720568][T15460] IPv6: A: Disabled Multicast RS [ 1452.746552][T24553] usb 1-1: USB disconnect, device number 44 [ 1452.886482][T15469] netlink: 'syz.5.18396': attribute type 10 has an invalid length. [ 1452.926534][T15469] team0 (unregistering): Port device team_slave_0 removed [ 1452.952617][T15469] team0 (unregistering): Port device team_slave_1 removed [ 1453.022165][T15469] team0 (unregistering): Port device dummy0 removed [ 1453.063001][T15469] team0 (unregistering): Port device bond0 removed [ 1453.112176][T24553] dummy0 speed is unknown, defaulting to 1000 [ 1453.128425][T24553] syz2: Port: 1 Link DOWN [ 1453.193671][T24456] dummy0 speed is unknown, defaulting to 1000 [ 1453.226842][T15477] netlink: 'syz.9.18400': attribute type 21 has an invalid length. [ 1453.239525][T15477] netlink: 132 bytes leftover after parsing attributes in process `syz.9.18400'. [ 1453.558666][T15492] loop9: detected capacity change from 0 to 2048 [ 1453.628916][T15492] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1454.591029][T24553] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 1454.770563][T24553] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1454.781880][T24553] usb 6-1: config 64 has an invalid interface number: 44 but max is 0 [ 1454.794380][T24553] usb 6-1: config 64 has no interface number 0 [ 1454.808530][T24553] usb 6-1: config 64 interface 44 altsetting 7 endpoint 0x83 has an invalid bInterval 57, changing to 9 [ 1454.822119][T24553] usb 6-1: config 64 interface 44 has no altsetting 0 [ 1454.857833][T24553] usb 6-1: New USB device found, idVendor=07c0, idProduct=158b, bcdDevice=d9.d2 [ 1454.915418][T24553] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1454.959218][T24553] usb 6-1: Product: syz [ 1454.965592][T15547] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1454.979399][T24553] usb 6-1: Manufacturer: syz [ 1454.994574][T24553] usb 6-1: SerialNumber: syz [ 1455.121137][T23878] usb 8-1: new high-speed USB device number 52 using dummy_hcd [ 1455.271625][T24553] iowarrior 6-1:64.44: no interrupt-out endpoint found [ 1455.294734][T23878] usb 8-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1455.324387][T24553] usb 6-1: USB disconnect, device number 30 [ 1455.345120][T23878] usb 8-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 1455.382884][T23878] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1455.463412][T23878] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 1455.623855][T15578] loop6: detected capacity change from 0 to 128 [ 1455.649978][T15578] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 1455.693086][T15578] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1456.200752][ T9] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 1456.372776][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 1456.400268][ T9] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 1456.425672][ T9] usb 1-1: config 0 has no interface number 0 [ 1456.449328][ T9] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 1456.462463][ T9] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 1456.476179][ T9] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 1456.495022][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1456.504262][ T9] usb 1-1: Product: syz [ 1456.508848][ T9] usb 1-1: Manufacturer: syz [ 1456.517632][T23878] stv0680 8-1:4.0: STV(e): camera ping failed!! [ 1456.527507][ T9] usb 1-1: SerialNumber: syz [ 1456.557486][ T9] usb 1-1: config 0 descriptor?? [ 1456.584511][T15590] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1456.603764][T15590] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1456.726368][T23878] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 1456.750024][T23878] stv0680 8-1:4.0: last error: 0, command = 0x0 [ 1456.787413][T23878] usb 8-1: USB disconnect, device number 52 [ 1456.844964][ T9] asix 1-1:0.34: probe with driver asix failed with error -71 [ 1456.890563][ T9] usb 1-1: USB disconnect, device number 45 [ 1457.310902][T24553] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 1457.491454][T24553] usb 10-1: Using ep0 maxpacket: 8 [ 1457.541246][T24553] usb 10-1: config 0 has an invalid interface number: 31 but max is 0 [ 1457.569202][T24553] usb 10-1: config 0 has an invalid descriptor of length 5, skipping remainder of the config [ 1457.607622][T24553] usb 10-1: config 0 has no interface number 0 [ 1457.630469][T24553] usb 10-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1457.663829][T24553] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1457.695566][T24553] usb 10-1: Product: syz [ 1457.710538][T24553] usb 10-1: Manufacturer: syz [ 1457.715491][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1457.757259][T24553] usb 10-1: SerialNumber: syz [ 1457.803633][T24553] usb 10-1: config 0 descriptor?? [ 1458.033386][T24553] uvcvideo 10-1:0.31: probe with driver uvcvideo failed with error -22 [ 1458.080299][T24553] usb 10-1: USB disconnect, device number 18 [ 1458.852190][T15695] netlink: 'syz.5.18507': attribute type 46 has an invalid length. [ 1458.924376][T15695] netlink: 'syz.5.18507': attribute type 28 has an invalid length. [ 1458.967411][T15695] netlink: 4 bytes leftover after parsing attributes in process `syz.5.18507'. [ 1459.083862][T15663] loop7: detected capacity change from 0 to 40427 [ 1459.217514][T15707] loop6: detected capacity change from 0 to 512 [ 1459.273776][T15707] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1459.330952][T15707] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.18511: Invalid block bitmap block 0 in block_group 0 [ 1459.371068][T15707] loop6: lost filesystem error report for type 5 error -117 [ 1459.371545][T15707] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 1459.387596][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 1459.387621][ C0] EXT4-fs (loop6): initial error at time 2000000231: ext4_read_block_bitmap_nowait:483 [ 1459.387671][ C0] EXT4-fs (loop6): last error at time 2000000231: ext4_read_block_bitmap_nowait:483 [ 1459.442269][T15707] loop6: lost filesystem error report for type 5 error -117 [ 1459.465551][T15663] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1459.487431][T15707] EXT4-fs error (device loop6): ext4_clear_blocks:876: inode #11: comm syz.6.18511: attempt to clear invalid blocks 983261 len 1 [ 1459.582656][T15707] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1459.583236][T15707] EXT4-fs error (device loop6): __ext4_get_inode_loc:4886: comm syz.6.18511: Invalid inode table block 0 in block_group 0 [ 1459.586085][T15663] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 1459.654832][T15707] loop6: lost filesystem error report for type 5 error -117 [ 1459.658022][T15707] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 1459.748598][T15707] loop6: lost filesystem error report for type 5 error -117 [ 1459.753421][T15707] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem [ 1459.802583][T15707] loop6: lost filesystem error report for type 5 error -117 [ 1459.804267][T15707] EXT4-fs error (device loop6): __ext4_get_inode_loc:4886: comm syz.6.18511: Invalid inode table block 0 in block_group 0 [ 1459.856821][T15707] loop6: lost filesystem error report for type 5 error -117 [ 1459.857267][T15707] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 1459.914192][T15707] loop6: lost filesystem error report for type 5 error -117 [ 1459.926574][T15707] EXT4-fs error (device loop6): ext4_truncate:4691: inode #11: comm syz.6.18511: mark_inode_dirty error [ 1459.952058][T15707] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1459.952521][T15707] EXT4-fs error (device loop6) in ext4_process_orphan:345: Corrupt filesystem [ 1460.015839][T15707] loop6: lost filesystem error report for type 5 error -117 [ 1460.016301][T15707] EXT4-fs error (device loop6): __ext4_get_inode_loc:4886: comm syz.6.18511: Invalid inode table block 0 in block_group 0 [ 1460.062441][T15707] loop6: lost filesystem error report for type 5 error -117 [ 1460.063528][T15707] EXT4-fs (loop6): 1 truncate cleaned up [ 1460.099181][T15733] netlink: 36 bytes leftover after parsing attributes in process `syz.0.18523'. [ 1460.125187][T15707] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1460.209649][T15707] EXT4-fs error (device loop6): __ext4_get_inode_loc:4886: comm syz.6.18511: Invalid inode table block 0 in block_group 0 [ 1460.298637][T15712] loop5: detected capacity change from 0 to 32768 [ 1460.327886][T23098] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1460.342071][T15712] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.18514 (15712) [ 1460.468982][T15712] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1460.480199][T15712] BTRFS info (device loop5): using sha256 checksum algorithm [ 1460.583869][T15748] netlink: 'syz.9.18530': attribute type 1 has an invalid length. [ 1460.622964][T15712] BTRFS info (device loop5): enabling ssd optimizations [ 1460.638939][T15712] BTRFS info (device loop5): turning on async discard [ 1460.654634][T15712] BTRFS info (device loop5): enabling free space tree [ 1460.757804][T15762] netlink: 8 bytes leftover after parsing attributes in process `syz.6.18532'. [ 1460.858865][ T5631] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1461.085108][T15769] tmpfs: Bad value for 'mpol' [ 1461.400438][T15779] netlink: 16 bytes leftover after parsing attributes in process `syz.6.18539'. [ 1461.466649][T15784] sctp: [Deprecated]: syz.5.18542 (pid 15784) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1461.466649][T15784] Use struct sctp_sack_info instead [ 1462.219507][T15806] netlink: 'syz.7.18552': attribute type 13 has an invalid length. [ 1462.288630][T15806] gretap0: refused to change device tx_queue_len [ 1462.303913][T15806] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1462.428190][T15813] netlink: 'syz.9.18557': attribute type 1 has an invalid length. [ 1462.445235][T15813] netlink: 224 bytes leftover after parsing attributes in process `syz.9.18557'. [ 1462.689531][T15825] IPv6: NLM_F_CREATE should be specified when creating new route [ 1462.702673][T15825] netlink: 12 bytes leftover after parsing attributes in process `syz.7.18560'. [ 1462.939411][T15834] overlayfs: workdir and upperdir must be separate subtrees [ 1463.178805][T15844] netlink: 25 bytes leftover after parsing attributes in process `syz.6.18571'. [ 1463.460513][T15857] netlink: 209852 bytes leftover after parsing attributes in process `syz.7.18577'. [ 1463.697334][T15868] netlink: 232 bytes leftover after parsing attributes in process `syz.9.18582'. [ 1463.815247][T15875] loop0: detected capacity change from 0 to 8 [ 1463.849089][T15875] SQUASHFS error: Failed to read block 0x29b: -5 [ 1463.866817][T15875] SQUASHFS error: Unable to read metadata cache entry [299] [ 1463.884484][T15875] SQUASHFS error: Failed to read block 0x85: -5 [ 1463.910100][T15875] SQUASHFS error: Failed to read block 0x85: -5 [ 1463.938779][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 1463.938797][ T30] audit: type=1800 audit(2000000236.069:2864): pid=15875 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.18585" name="file1" dev="loop0" ino=5 res=0 errno=0 [ 1464.061298][ T9] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 1464.100515][T15883] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1464.286055][ T9] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1464.307132][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1464.332705][ T9] usb 2-1: Product: syz [ 1464.341393][T15894] netlink: 8 bytes leftover after parsing attributes in process `syz.5.18596'. [ 1464.350164][ T9] usb 2-1: Manufacturer: syz [ 1464.375568][ T9] usb 2-1: SerialNumber: syz [ 1464.427413][T24456] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1464.538201][T15901] loop7: detected capacity change from 0 to 256 [ 1464.586612][T15901] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 1464.599162][T15901] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 1464.611749][T15901] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 1464.622896][T15901] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 1464.631841][T15901] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 1464.650868][T15901] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 1464.693541][T15901] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 1464.725409][T15901] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 1464.744804][ T30] audit: type=1800 audit(2000000236.879:2865): pid=15901 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.18599" name="file2" dev="loop7" ino=1048778 res=0 errno=0 [ 1465.413674][T15912] netlink: 16 bytes leftover after parsing attributes in process `syz.5.18606'. [ 1465.747607][T15914] loop9: detected capacity change from 0 to 4096 [ 1466.038243][T15922] netlink: 36 bytes leftover after parsing attributes in process `syz.1.18611'. [ 1466.372408][T24456] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1466.379451][T24456] ath9k_htc: Failed to initialize the device [ 1466.389722][ T9] usb 2-1: USB disconnect, device number 7 [ 1466.431457][ T9] usb 2-1: ath9k_htc: USB layer deinitialized [ 1466.475124][T15914] ntfs3(loop9): Mark volume as dirty due to NTFS errors [ 1466.558568][T15914] ntfs3(loop9): Failed to load $Extend (-22). [ 1466.603628][T15914] ntfs3(loop9): Failed to initialize $Extend. [ 1466.817648][T15942] loop0: detected capacity change from 0 to 256 [ 1467.254166][T15958] loop5: detected capacity change from 0 to 512 [ 1467.303156][T15964] loop7: detected capacity change from 0 to 16 [ 1467.342968][T15958] Quota error (device loop5): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 1467.360552][T15964] MTD: Attempt to mount non-MTD device "/dev/loop7" [ 1467.390591][T15958] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 1467.469268][T15958] EXT4-fs error (device loop5): ext4_acquire_dquot:7041: comm syz.5.18626: Failed to acquire dquot type 1 [ 1467.549499][T15958] loop5: lost filesystem error report for type 5 error -117 [ 1467.550793][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 1467.564618][ C0] EXT4-fs (loop5): last error at time 2000000239: ext4_acquire_dquot:7041 [ 1467.577760][T15958] Quota error (device loop5): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 1467.602271][T15958] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 1467.631827][T15958] EXT4-fs error (device loop5): ext4_acquire_dquot:7041: comm syz.5.18626: Failed to acquire dquot type 1 [ 1467.703572][T15958] loop5: lost filesystem error report for type 5 error -117 [ 1467.705307][T15958] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.18626: bg 0: block 248: padding at end of block bitmap is not set [ 1467.746959][T15974] IPVS: set_ctl: invalid protocol: 58 224.0.0.1:20001 [ 1467.797318][T15958] loop5: lost filesystem error report for type 5 error -117 [ 1467.797806][T15958] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 1467.851345][T15958] loop5: lost filesystem error report for type 5 error -117 [ 1467.856494][T15958] Quota error (device loop5): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 1467.902676][T15958] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 1467.941689][T15958] EXT4-fs error (device loop5): ext4_acquire_dquot:7041: comm syz.5.18626: Failed to acquire dquot type 1 [ 1467.987931][T15958] loop5: lost filesystem error report for type 5 error -117 [ 1467.989735][T15958] EXT4-fs (loop5): 1 orphan inode deleted [ 1468.040305][T15958] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1468.062572][T15977] loop0: detected capacity change from 0 to 4096 [ 1468.084627][T15958] ext4 filesystem being mounted at /3219/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1468.108006][T15977] ntfs3(loop0): ino=3, mi_enum_attr [ 1468.108992][T15939] loop1: detected capacity change from 0 to 32768 [ 1468.307740][ T5631] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1468.727120][T15997] netlink: 'syz.0.18643': attribute type 1 has an invalid length. [ 1468.764233][T15997] netlink: 56 bytes leftover after parsing attributes in process `syz.0.18643'. [ 1468.887219][T15968] loop9: detected capacity change from 0 to 32768 [ 1468.971049][T15968] jfs_create: dtInsert returned -EIO [ 1468.996268][T15968] ERROR: (device loop9): jfs_create: [ 1468.996268][T15968] [ 1469.004337][T24552] usb 8-1: new high-speed USB device number 53 using dummy_hcd [ 1469.053027][T15968] ERROR: (device loop9): remounting filesystem as read-only [ 1469.181865][T24552] usb 8-1: Using ep0 maxpacket: 32 [ 1469.199650][T16011] netlink: 164 bytes leftover after parsing attributes in process `syz.1.18650'. [ 1469.200244][T16012] netlink: 16 bytes leftover after parsing attributes in process `syz.6.18651'. [ 1469.227260][T24552] usb 8-1: config 0 has an invalid interface number: 196 but max is 0 [ 1469.278644][T24552] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1469.330460][T24552] usb 8-1: config 0 has no interface number 0 [ 1469.361746][T24552] usb 8-1: config 0 interface 196 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1469.430584][T24552] usb 8-1: config 0 interface 196 has no altsetting 0 [ 1469.503311][T24552] usb 8-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 1469.521263][T24552] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1469.551254][T24552] usb 8-1: Product: syz [ 1469.569658][T24552] usb 8-1: Manufacturer: syz [ 1469.593117][T24552] usb 8-1: SerialNumber: syz [ 1469.626729][T24552] usb 8-1: config 0 descriptor?? [ 1469.744401][T16029] loop9: detected capacity change from 0 to 1764 [ 1469.817449][T16029] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 1469.881164][T24552] ipheth 8-1:0.196: Unable to find endpoints [ 1470.048281][T16039] netlink: 'syz.9.18663': attribute type 21 has an invalid length. [ 1470.056787][T24553] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 1470.070443][T16039] netlink: 164 bytes leftover after parsing attributes in process `syz.9.18663'. [ 1470.087348][T24552] usb 8-1: USB disconnect, device number 53 [ 1470.146075][T16042] netlink: 28 bytes leftover after parsing attributes in process `syz.5.18664'. [ 1470.231553][T24553] usb 1-1: Using ep0 maxpacket: 16 [ 1470.250526][T24553] usb 1-1: config index 0 descriptor too short (expected 16456, got 72) [ 1470.273679][T24553] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 1470.306410][T24553] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1470.359640][T24553] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1470.395972][T24553] usb 1-1: config 0 has no interface number 0 [ 1470.414778][T24553] usb 1-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 1470.434214][T24553] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1470.456685][T24553] usb 1-1: Product: syz [ 1470.470937][T24553] usb 1-1: Manufacturer: syz [ 1470.484109][T24553] usb 1-1: SerialNumber: syz [ 1470.495007][T16056] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 1470.520273][T24553] usb 1-1: config 0 descriptor?? [ 1470.815921][T24553] usb 1-1: USB disconnect, device number 46 [ 1470.935862][T16073] loop5: detected capacity change from 0 to 256 [ 1471.219347][T16081] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1471.323822][T16082] loop9: detected capacity change from 0 to 4096 [ 1471.345772][T16082] ntfs3(loop9): ino=3, mi_enum_attr [ 1471.471070][ T9] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 1471.654074][ T9] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1471.706032][ T9] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1471.755566][ T9] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1471.806109][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1471.849511][T16084] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1471.873207][ T30] audit: type=1326 audit(2000000244.009:2866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16099 comm="syz.9.18692" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f152d79e019 code=0x7ffc0000 [ 1471.932819][ T9] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1471.999473][ T30] audit: type=1326 audit(2000000244.009:2867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16099 comm="syz.9.18692" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f152d79e019 code=0x7ffc0000 [ 1472.115407][ T30] audit: type=1326 audit(2000000244.009:2868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16099 comm="syz.9.18692" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f152d79e019 code=0x7ffc0000 [ 1472.185064][T16108] usb usb8: usbfs: process 16108 (syz.9.18697) did not claim interface 0 before use [ 1472.217801][ T30] audit: type=1326 audit(2000000244.009:2869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16099 comm="syz.9.18692" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f152d79e019 code=0x7ffc0000 [ 1472.248396][ T30] audit: type=1326 audit(2000000244.019:2870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16099 comm="syz.9.18692" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=193 compat=0 ip=0x7f152d79e019 code=0x7ffc0000 [ 1472.343931][ T30] audit: type=1326 audit(2000000244.019:2871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16099 comm="syz.9.18692" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f152d79e019 code=0x7ffc0000 [ 1472.457116][ T30] audit: type=1326 audit(2000000244.019:2873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16099 comm="syz.9.18692" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f152d79e019 code=0x7ffc0000 [ 1472.482590][ T30] audit: type=1326 audit(2000000244.019:2872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16099 comm="syz.9.18692" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f152d79e019 code=0x7ffc0000 [ 1472.508750][ T9] usb 6-1: USB disconnect, device number 31 [ 1472.510235][ T30] audit: type=1326 audit(2000000244.019:2874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16099 comm="syz.9.18692" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f152d79e019 code=0x7ffc0000 [ 1473.221261][T16127] loop1: detected capacity change from 0 to 4096 [ 1473.258272][T16095] loop6: detected capacity change from 0 to 32768 [ 1473.279217][T16127] ntfs3(loop1): ino=3, mi_enum_attr [ 1473.316010][T16095] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1473.432864][T16106] loop0: detected capacity change from 0 to 32768 [ 1473.454337][T16106] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.18696 (16106) [ 1473.556963][T16095] XFS (loop6): Ending clean mount [ 1473.585247][T16106] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1473.634406][T16106] BTRFS info (device loop0): using sha256 checksum algorithm [ 1473.703581][T23098] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1473.903600][T16106] BTRFS info (device loop0): enabling ssd optimizations [ 1473.965244][T16106] BTRFS info (device loop0): turning on async discard [ 1473.998128][T16106] BTRFS info (device loop0): enabling free space tree [ 1474.091765][T16106] BTRFS warning (device loop0): can't clear the compress_lzo feature bit while mounted [ 1474.303989][ T5628] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1474.539014][T16188] geneve2: entered allmulticast mode [ 1474.567357][T16187] loop1: detected capacity change from 0 to 2048 [ 1474.658925][T16187] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1474.675404][T16191] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1474.872896][T16198] loop5: detected capacity change from 0 to 1024 [ 1474.938432][T16198] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 1474.993408][T16194] loop7: detected capacity change from 0 to 4096 [ 1475.011527][T16198] EXT4-fs (loop5): stripe (203) is not aligned with cluster size (16), stripe is disabled [ 1475.049517][T16194] ntfs3(loop7): ino=3, mi_enum_attr [ 1475.072854][T16198] EXT4-fs error (device loop5): ext4_get_journal_inode:5900: inode #32: comm syz.5.18729: iget: special inode unallocated [ 1475.147278][T16198] loop5: lost file I/O error report for ino 32 type 5 pos 0x0 len 0x0 error -117 [ 1475.148901][T16198] EXT4-fs (loop5): no journal found [ 1475.158219][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 1475.158240][ C1] EXT4-fs (loop5): initial error at time 2000000247: ext4_get_journal_inode:5900: inode 32 [ 1475.158278][ C1] EXT4-fs (loop5): last error at time 2000000247: ext4_get_journal_inode:5900: inode 32 [ 1475.237946][T16208] xt_addrtype: ipv6 does not support BROADCAST matching [ 1475.357110][T16198] EXT4-fs (loop5): can't get journal size [ 1475.388282][T16198] EXT4-fs (loop5): filesystem is read-only [ 1475.489209][T16198] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1475.764400][ T5631] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1476.092784][T16227] loop7: detected capacity change from 0 to 8 [ 1476.163667][T16227] SQUASHFS error: Unable to read inode 0xa7 [ 1476.206959][T16231] netlink: 48 bytes leftover after parsing attributes in process `syz.0.18746'. [ 1476.266700][T16233] netlink: 45 bytes leftover after parsing attributes in process `syz.5.18747'. [ 1476.446367][T16237] CIFS: enabling forceuid mount option implicitly because uid= option is specified [ 1476.500256][T16237] CIFS mount error: No usable UNC path provided in device string! [ 1476.500256][T16237] [ 1476.540455][T16237] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1476.569349][T16239] loop0: detected capacity change from 0 to 2048 [ 1476.590363][T16239] EXT4-fs: Ignoring removed i_version option [ 1476.620840][ T9] usb 8-1: new high-speed USB device number 54 using dummy_hcd [ 1476.647701][T16239] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1476.672205][T16210] loop9: detected capacity change from 0 to 32768 [ 1476.706479][T16216] loop1: detected capacity change from 0 to 32768 [ 1476.722657][T16210] ocfs2: Slot 0 on device (7,9) was already allocated to this node! [ 1476.731294][T16239] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #12: block 2: comm syz.0.18750: lblock 0 mapped to illegal pblock 2 (length 1) [ 1476.759464][T16210] JBD2: Ignoring recovery information on journal [ 1476.774900][T16216] debugfs: 'B1DE653C5FFC4D88B33B244AAB9EB3E9' already exists in 'ocfs2' [ 1476.792048][ T9] usb 8-1: Using ep0 maxpacket: 8 [ 1476.836774][ T9] usb 8-1: config 2 has an invalid interface number: 31 but max is 0 [ 1476.846139][T16216] JBD2: Ignoring recovery information on journal [ 1476.890697][T16210] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode. [ 1476.909428][ T9] usb 8-1: config 2 has no interface number 0 [ 1476.917018][T16216] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 1476.940526][T16251] netlink: 'syz.6.18751': attribute type 10 has an invalid length. [ 1476.950548][ T9] usb 8-1: config 2 interface 31 has no altsetting 0 [ 1476.969788][ T9] usb 8-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 1476.992370][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1477.019349][ T5628] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1477.020293][ T9] usb 8-1: Product: syz [ 1477.084443][T16251] team0 (unregistering): Port device team_slave_0 removed [ 1477.097339][ T9] usb 8-1: Manufacturer: syz [ 1477.111217][ T9] usb 8-1: SerialNumber: syz [ 1477.117163][T16216] OCFS2: ERROR (device loop1): int ocfs2_xattr_ibody_lookup_header(struct inode *, struct ocfs2_dinode *, struct ocfs2_xattr_header **): Invalid xattr inline size 0 in inode 65 [ 1477.147766][T16251] team0 (unregistering): Port device team_slave_1 removed [ 1477.187457][T16216] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 1477.235971][T16216] OCFS2: File system is now read-only. [ 1477.246242][T16216] (syz.1.18736,16216,1):ocfs2_calc_xattr_init:642 ERROR: status = -117 [ 1477.258555][ T3747] ocfs2: Unmounting device (7,9) on (node local) [ 1477.330457][T16216] (syz.1.18736,16216,1):ocfs2_mknod:338 ERROR: status = -117 [ 1477.347385][T16216] (syz.1.18736,16216,1):ocfs2_mknod:506 ERROR: status = -117 [ 1477.380603][T16216] (syz.1.18736,16216,1):ocfs2_mkdir:662 ERROR: status = -117 [ 1477.436778][T16260] netlink: 'syz.9.18754': attribute type 29 has an invalid length. [ 1477.483599][T16256] loop0: detected capacity change from 0 to 4096 [ 1477.515834][T16256] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 1477.649809][ T9] ch9200 8-1:2.31: probe with driver ch9200 failed with error -22 [ 1477.671879][ T5621] ocfs2: Unmounting device (7,1) on (node local) [ 1477.718715][ T9] usb 8-1: USB disconnect, device number 54 [ 1477.773264][ T30] audit: type=1326 audit(2000000249.899:2875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16262 comm="syz.9.18759" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f152d79e019 code=0x7ffc0000 [ 1477.816198][T16266] netlink: 8 bytes leftover after parsing attributes in process `syz.6.18758'. [ 1477.875972][ T30] audit: type=1326 audit(2000000249.899:2876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16262 comm="syz.9.18759" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f152d79e019 code=0x7ffc0000 [ 1478.030348][ T30] audit: type=1326 audit(2000000249.939:2877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16262 comm="syz.9.18759" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f152d79e019 code=0x7ffc0000 [ 1478.123514][T16268] loop9: detected capacity change from 0 to 512 [ 1478.164504][ T30] audit: type=1326 audit(2000000249.939:2878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16262 comm="syz.9.18759" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f152d79e019 code=0x7ffc0000 [ 1478.198651][T16268] FAT-fs (loop9): error, clusters badly computed (1 != 0) [ 1478.275526][T16268] FAT-fs (loop9): error, clusters badly computed (2 != 1) [ 1478.297438][ T30] audit: type=1326 audit(2000000249.939:2879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16262 comm="syz.9.18759" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=469 compat=0 ip=0x7f152d79e019 code=0x7ffc0000 [ 1478.409034][ T30] audit: type=1326 audit(2000000249.939:2880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16262 comm="syz.9.18759" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f152d79e019 code=0x7ffc0000 [ 1478.454914][T16280] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18766'. [ 1478.534570][ T30] audit: type=1326 audit(2000000249.939:2881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16262 comm="syz.9.18759" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f152d79e019 code=0x7ffc0000 [ 1478.668075][ T30] audit: type=1326 audit(2000000249.939:2882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16262 comm="syz.9.18759" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f152d79e019 code=0x7ffc0000 [ 1478.851190][T16295] netlink: 'syz.7.18772': attribute type 10 has an invalid length. [ 1478.949134][T16295] team0 (unregistering): Port device team_slave_0 removed [ 1478.955109][T16299] netlink: 20 bytes leftover after parsing attributes in process `syz.0.18775'. [ 1479.000764][T24552] usb 10-1: new full-speed USB device number 19 using dummy_hcd [ 1479.012103][T16295] team0 (unregistering): Port device team_slave_1 removed [ 1479.132572][T16303] netlink: 'syz.0.18777': attribute type 1 has an invalid length. [ 1479.155628][T16303] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1479.175117][T24552] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1479.225076][T24552] usb 10-1: New USB device found, idVendor=05a4, idProduct=1700, bcdDevice= 0.00 [ 1479.255332][T24552] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1479.310424][T24552] usb 10-1: config 0 descriptor?? [ 1479.601805][T16278] loop6: detected capacity change from 0 to 32768 [ 1479.632888][T16278] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.18765 (16278) [ 1479.688874][T16278] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1479.733071][T16278] BTRFS info (device loop6): using sha256 checksum algorithm [ 1479.811700][T24552] hid_parser_main: 91 callbacks suppressed [ 1479.811727][T24552] ortek 0003:05A4:1700.0002: unknown main item tag 0x0 [ 1479.893847][T24552] ortek 0003:05A4:1700.0002: unknown main item tag 0x0 [ 1479.939374][T24552] ortek 0003:05A4:1700.0002: unknown main item tag 0x0 [ 1479.978669][T16278] BTRFS info (device loop6): enabling ssd optimizations [ 1479.999697][T24552] ortek 0003:05A4:1700.0002: unknown main item tag 0x0 [ 1480.020790][T16278] BTRFS info (device loop6): turning on async discard [ 1480.040602][T24552] ortek 0003:05A4:1700.0002: unknown main item tag 0x0 [ 1480.048139][T16278] BTRFS info (device loop6): enabling free space tree [ 1480.082793][T24552] ortek 0003:05A4:1700.0002: unknown main item tag 0x0 [ 1480.122139][T24552] ortek 0003:05A4:1700.0002: unknown main item tag 0x0 [ 1480.148929][T24552] ortek 0003:05A4:1700.0002: unknown main item tag 0x0 [ 1480.184545][T24552] ortek 0003:05A4:1700.0002: unknown main item tag 0x0 [ 1480.227502][T24552] ortek 0003:05A4:1700.0002: unknown main item tag 0x0 [ 1480.278085][T23098] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1480.285698][T16353] netlink: 'syz.0.18794': attribute type 10 has an invalid length. [ 1480.368374][T24552] ortek 0003:05A4:1700.0002: hidraw0: USB HID v0.09 Device [HID 05a4:1700] on usb-dummy_hcd.9-1/input0 [ 1480.429232][T16353] team_slave_0: left allmulticast mode [ 1480.450031][T24552] usb 10-1: USB disconnect, device number 19 [ 1480.500945][T16353] team0 (unregistering): Port device team_slave_0 removed [ 1480.570523][T16353] team_slave_1: left allmulticast mode [ 1480.630396][T16353] team0 (unregistering): Port device team_slave_1 removed [ 1480.769290][T16360] fido_id[16360]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 1480.792603][T16367] loop5: detected capacity change from 0 to 512 [ 1480.853886][T16367] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 1480.890375][T16367] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002] [ 1480.909005][T16367] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1480.985907][T16367] EXT4-fs error (device loop5): ext4_orphan_get:1425: comm syz.5.18802: bad orphan inode 3 [ 1480.996235][ T5773] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 1481.023524][T16367] loop5: lost filesystem error report for type 5 error -117 [ 1481.029793][T16367] EXT4-fs (loop5): Remounting filesystem read-only [ 1481.037187][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 1481.037210][ C1] EXT4-fs (loop5): initial error at time 2000000253: ext4_orphan_get:1425 [ 1481.037241][ C1] EXT4-fs (loop5): last error at time 2000000253: ext4_orphan_get:1425 [ 1481.122059][T16367] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 1481.149434][T16375] loop7: detected capacity change from 0 to 164 [ 1481.199344][ T5773] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1481.229881][T16367] EXT4-fs warning (device loop5): dx_probe:861: inode #2: comm syz.5.18802: dx entry: limit 0 != root limit 125 [ 1481.229906][ T5773] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1481.229932][ T5773] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1481.285602][T16367] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.18802: Corrupt directory, running e2fsck is recommended [ 1481.342565][ T5773] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 14385, setting to 64 [ 1481.358933][ T5773] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1481.372121][ T5773] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1481.386434][ T5773] usb 2-1: Product: syz [ 1481.402536][ T5773] usb 2-1: Manufacturer: syz [ 1481.432778][ T5773] cdc_wdm 2-1:1.0: skipping garbage [ 1481.438756][ T5773] cdc_wdm 2-1:1.0: skipping garbage [ 1481.507761][ T5631] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 1481.529999][ T5773] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 1481.558529][ T5773] cdc_wdm 2-1:1.0: Unknown control protocol [ 1481.857655][T24553] usb 2-1: USB disconnect, device number 8 [ 1482.041240][T16397] netlink: 8 bytes leftover after parsing attributes in process `syz.5.18814'. [ 1482.094794][T16373] loop9: detected capacity change from 0 to 32768 [ 1482.170184][T16373] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode. [ 1482.463826][T16407] loop0: detected capacity change from 0 to 1024 [ 1482.522459][T16407] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1482.555854][T16407] EXT4-fs: inline encryption not supported [ 1482.590319][T16407] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1482.591632][ T3747] ocfs2: Unmounting device (7,9) on (node local) [ 1482.598238][T16413] netlink: 8 bytes leftover after parsing attributes in process `syz.7.18822'. [ 1482.648149][T16413] netlink: 'syz.7.18822': attribute type 5 has an invalid length. [ 1482.710512][T16407] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1482.810106][T16407] ext4 filesystem being mounted at /3110/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1482.921965][ T30] audit: type=1800 audit(2000000255.065:2883): pid=16407 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.18818" name="file3" dev="loop0" ino=16 res=0 errno=0 [ 1482.981258][T16424] veth0: entered promiscuous mode [ 1482.988621][T16424] veth0: left promiscuous mode [ 1483.052185][T16407] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.18818: bg 0: block 112: padding at end of block bitmap is not set [ 1483.119298][T16430] loop5: detected capacity change from 0 to 1024 [ 1483.128762][T16407] EXT4-fs (loop0): Remounting filesystem read-only [ 1483.303637][ T5628] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1483.316943][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.179894][T16474] loop1: detected capacity change from 0 to 64 [ 1484.255213][T16474] syz.1.18848: attempt to access beyond end of device [ 1484.255213][T16474] loop1: rw=8388608, sector=2590, nr_sectors = 2 limit=64 [ 1484.596891][T16491] netlink: 16 bytes leftover after parsing attributes in process `syz.0.18857'. [ 1484.629033][T16491] netlink: 28 bytes leftover after parsing attributes in process `syz.0.18857'. [ 1484.667893][T16491] netlink: 'syz.0.18857': attribute type 3 has an invalid length. [ 1485.053866][T16509] loop0: detected capacity change from 0 to 256 [ 1485.087303][T16509] exfat: Deprecated parameter 'namecase' [ 1485.163997][T16509] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x2ab34fd4, utbl_chksum : 0xe619d30d) [ 1485.370829][T24553] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 1485.380232][T16513] loop6: detected capacity change from 0 to 4096 [ 1485.432116][T16519] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1485.540737][T24553] usb 6-1: Using ep0 maxpacket: 16 [ 1485.562695][T24553] usb 6-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1485.614780][T24553] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1485.650109][T24553] usb 6-1: New USB device found, idVendor=057e, idProduct=2009, bcdDevice= 0.00 [ 1485.695516][T24553] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1485.733327][T24553] usb 6-1: config 0 descriptor?? [ 1486.238162][T24553] nintendo 0003:057E:2009.0003: ignoring exceeding usage max [ 1486.263224][T24553] nintendo 0003:057E:2009.0003: item fetching failed at offset 40/43 [ 1486.274029][T24553] nintendo 0003:057E:2009.0003: HID parse failed [ 1486.301302][T24553] nintendo 0003:057E:2009.0003: probe - fail = -22 [ 1486.317113][T24553] nintendo 0003:057E:2009.0003: probe with driver nintendo failed with error -22 [ 1486.411656][T24553] usb 6-1: USB disconnect, device number 32 [ 1486.453026][T16553] netlink: 'syz.9.18883': attribute type 10 has an invalid length. [ 1486.566342][T16553] team0 (unregistering): Port device team_slave_0 removed [ 1486.604722][T16555] netlink: 8 bytes leftover after parsing attributes in process `syz.6.18886'. [ 1486.626128][T16553] team0 (unregistering): Port device team_slave_1 removed [ 1486.650809][T16555] netlink: 4 bytes leftover after parsing attributes in process `syz.6.18886'. [ 1486.676105][T16555] netlink: 'syz.6.18886': attribute type 12 has an invalid length. [ 1486.696309][T16555] netlink: 'syz.6.18886': attribute type 13 has an invalid length. [ 1487.207872][T16577] bridge_slave_1: invalid flags given to default FDB implementation [ 1487.265415][T16582] loop7: detected capacity change from 0 to 1024 [ 1487.810386][T16599] netlink: 'syz.1.18906': attribute type 10 has an invalid length. [ 1487.822314][T16601] loop5: detected capacity change from 0 to 64 [ 1487.838532][T16602] loop6: detected capacity change from 0 to 256 [ 1487.882714][T16602] exfat: Deprecated parameter 'utf8' [ 1487.896056][T16601] syz.5.18909: attempt to access beyond end of device [ 1487.896056][T16601] loop5: rw=8388608, sector=268435468, nr_sectors = 2 limit=64 [ 1487.915782][T16602] exfat: Deprecated parameter 'namecase' [ 1487.932310][T16602] exfat: Deprecated parameter 'namecase' [ 1487.949803][T16602] exfat: Deprecated parameter 'utf8' [ 1487.973544][T16601] Buffer I/O error on dev loop5, logical block 134217734, async page read [ 1488.022298][T16602] exFAT-fs (loop6): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 1488.024769][T16600] loop7: detected capacity change from 0 to 4096 [ 1488.058808][T16601] syz.5.18909: attempt to access beyond end of device [ 1488.058808][T16601] loop5: rw=8388608, sector=268435468, nr_sectors = 2 limit=64 [ 1488.080920][T16602] exFAT-fs (loop6): failed to test first cluster bit of root dir(5) [ 1488.116926][T16601] Buffer I/O error on dev loop5, logical block 134217734, async page read [ 1488.136237][T16600] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1488.149428][T16601] overlayfs: failed to create directory ./file0/work (errno: 5); mounting read-only [ 1488.159760][T16601] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 1488.178703][T16601] overlayfs: failed to get uuid (/file4, err=-95); falling back to uuid=null. [ 1488.243123][T23337] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1488.297873][ T5631] syz-executor: attempt to access beyond end of device [ 1488.297873][ T5631] loop5: rw=8388608, sector=268435468, nr_sectors = 2 limit=64 [ 1488.320402][T16608] loop1: detected capacity change from 0 to 164 [ 1488.332885][T16608] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 1488.344184][ T5631] Buffer I/O error on dev loop5, logical block 134217734, async page read [ 1488.388992][ T5631] syz-executor: attempt to access beyond end of device [ 1488.388992][ T5631] loop5: rw=8388608, sector=268435468, nr_sectors = 2 limit=64 [ 1488.443815][ T5631] Buffer I/O error on dev loop5, logical block 134217734, async page read [ 1488.465813][ T5631] Trying to free block not in datazone [ 1488.471616][T16608] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 1488.492176][ T5631] Trying to free block not in datazone [ 1488.648854][T16618] loop7: detected capacity change from 0 to 64 [ 1488.707154][T16622] loop5: detected capacity change from 0 to 128 [ 1488.746339][T16622] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 1488.785039][T16622] System zones: 1-3, 19-19, 35-36 [ 1488.827435][T16622] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 1488.845649][T16622] ext4 filesystem being mounted at /3273/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1488.938692][T16622] EXT4-fs warning (device loop5): verify_group_input:156: Last group not full [ 1489.068990][ T5631] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1489.160736][ T30] audit: type=1326 audit(2000000261.285:2884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16637 comm="syz.6.18923" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f291199e019 code=0x7ffc0000 [ 1489.269792][ T30] audit: type=1326 audit(2000000261.285:2885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16637 comm="syz.6.18923" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f291199e019 code=0x7ffc0000 [ 1489.315140][ T30] audit: type=1326 audit(2000000261.335:2886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16637 comm="syz.6.18923" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f291199e019 code=0x7ffc0000 [ 1489.464501][ T30] audit: type=1326 audit(2000000261.335:2887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16637 comm="syz.6.18923" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f291199e019 code=0x7ffc0000 [ 1489.550866][T24553] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 1489.552949][ T30] audit: type=1326 audit(2000000261.335:2888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16637 comm="syz.6.18923" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=109 compat=0 ip=0x7f291199e019 code=0x7ffc0000 [ 1489.616210][ T30] audit: type=1326 audit(2000000261.335:2889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16637 comm="syz.6.18923" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f291199e019 code=0x7ffc0000 [ 1489.682264][ T30] audit: type=1326 audit(2000000261.335:2890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16637 comm="syz.6.18923" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f291199e019 code=0x7ffc0000 [ 1489.750727][T24553] usb 10-1: Using ep0 maxpacket: 16 [ 1489.757775][T24553] usb 10-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1489.771654][T24553] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1489.778537][T24553] usb 10-1: New USB device found, idVendor=6666, idProduct=8802, bcdDevice= 0.00 [ 1489.788059][T24553] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1489.797194][ T30] audit: type=1326 audit(2000000261.335:2891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16637 comm="syz.6.18923" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f291199e019 code=0x7ffc0000 [ 1489.823939][ T30] audit: type=1326 audit(2000000261.335:2892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16637 comm="syz.6.18923" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=109 compat=0 ip=0x7f291199e019 code=0x7ffc0000 [ 1489.852373][ T30] audit: type=1326 audit(2000000261.335:2893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16637 comm="syz.6.18923" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f291199e019 code=0x7ffc0000 [ 1489.878933][T24553] usb 10-1: config 0 descriptor?? [ 1490.155952][T16666] Bluetooth: MGMT ver 1.23 [ 1490.377225][T24553] smartjoyplus 0003:6666:8802.0004: hidraw0: USB HID v10.01 Device [HID 6666:8802] on usb-dummy_hcd.9-1/input0 [ 1490.427814][T24553] smartjoyplus 0003:6666:8802.0004: no output reports found [ 1490.479294][T16674] vlan2: entered promiscuous mode [ 1490.549834][T24373] usb 10-1: USB disconnect, device number 20 [ 1490.666370][T16677] fido_id[16677]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/10-1/report_descriptor': No such file or directory [ 1490.926463][T16691] loop6: detected capacity change from 0 to 512 [ 1490.947569][T16691] EXT4-fs: Ignoring removed i_version option [ 1490.977325][T16691] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1491.026551][T16691] EXT4-fs error (device loop6): ext4_get_branch:178: inode #11: block 4294967295: comm syz.6.18949: invalid block [ 1491.066906][T16691] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1491.071367][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 1491.086979][ C0] EXT4-fs (loop6): initial error at time 2000000263: ext4_get_branch:178: inode 11: block 4294967295 [ 1491.097933][ C0] EXT4-fs (loop6): last error at time 2000000263: ext4_get_branch:178: inode 11: block 4294967295 [ 1491.135370][T16691] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.18949: invalid indirect mapped block 4294967295 (level 1) [ 1491.165076][T16691] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1491.235509][T16701] binder: 16700:16701 ioctl c0046209 0 returned -22 [ 1491.244707][T16691] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.18949: invalid indirect mapped block 4294967295 (level 1) [ 1491.244748][T16691] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1491.314835][T16691] EXT4-fs (loop6): 2 truncates cleaned up [ 1491.400543][T16691] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1491.524602][T16691] [ 1491.526958][T16691] ====================================================== [ 1491.533963][T16691] WARNING: possible circular locking dependency detected [ 1491.540968][T16691] syzkaller #0 Not tainted [ 1491.545368][T16691] ------------------------------------------------------ [ 1491.552372][T16691] syz.6.18949/16691 is trying to acquire lock: [ 1491.558505][T16691] ffff88804f7ac640 (sb_internal){.+.+}-{0:0}, at: ext4_evict_inode+0x426/0x10c0 [ 1491.567573][T16691] [ 1491.567573][T16691] but task is already holding lock: [ 1491.574917][T16691] ffff88802941ec18 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_ext_migrate+0x317/0x10e0 [ 1491.585108][T16691] [ 1491.585108][T16691] which lock already depends on the new lock. [ 1491.585108][T16691] [ 1491.595487][T16691] [ 1491.595487][T16691] the existing dependency chain (in reverse order) is: [ 1491.604477][T16691] [ 1491.604477][T16691] -> #1 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 1491.612899][T16691] percpu_down_read_internal+0x48/0x1c0 [ 1491.618964][T16691] ext4_writepages+0x205/0x3b0 [ 1491.624245][T16691] do_writepages+0x338/0x560 [ 1491.629353][T16691] __writeback_single_inode+0x12e/0xf90 [ 1491.635414][T16691] writeback_single_inode+0x4ef/0xe70 [ 1491.641300][T16691] write_inode_now+0x1c2/0x290 [ 1491.646574][T16691] iput+0x98b/0xf00 [ 1491.650899][T16691] ext4_xattr_block_set+0x22e4/0x2a80 [ 1491.656785][T16691] ext4_expand_extra_isize_ea+0x1342/0x1e70 [ 1491.663191][T16691] __ext4_expand_extra_isize+0x30d/0x400 [ 1491.669338][T16691] __ext4_mark_inode_dirty+0x455/0x700 [ 1491.675300][T16691] ext4_evict_inode+0x976/0x10c0 [ 1491.680757][T16691] evict+0x624/0xb50 [ 1491.685160][T16691] ext4_orphan_cleanup+0xc7a/0x14c0 [ 1491.690870][T16691] ext4_fill_super+0x5cb4/0x65c0 [ 1491.696325][T16691] get_tree_bdev_flags+0x430/0x4f0 [ 1491.701945][T16691] vfs_get_tree+0x92/0x2a0 [ 1491.706868][T16691] do_new_mount+0x319/0xdc0 [ 1491.711884][T16691] __se_sys_mount+0x31d/0x420 [ 1491.717074][T16691] do_syscall_64+0x174/0x580 [ 1491.722178][T16691] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1491.728579][T16691] [ 1491.728579][T16691] -> #0 (sb_internal){.+.+}-{0:0}: [ 1491.735872][T16691] __lock_acquire+0x1520/0x2cf0 [ 1491.741242][T16691] lock_acquire+0x106/0x350 [ 1491.746260][T16691] percpu_down_read_internal+0x48/0x1c0 [ 1491.752318][T16691] ext4_evict_inode+0x426/0x10c0 [ 1491.757776][T16691] evict+0x624/0xb50 [ 1491.762181][T16691] ext4_ext_migrate+0xddf/0x10e0 [ 1491.767633][T16691] ext4_fileattr_set+0xf41/0x16e0 [ 1491.773187][T16691] vfs_fileattr_set+0x9f5/0xc90 [ 1491.778557][T16691] ioctl_setflags+0x305/0x370 [ 1491.783757][T16691] do_vfs_ioctl+0x9f2/0x1530 [ 1491.788855][T16691] __se_sys_ioctl+0x82/0x170 [ 1491.793954][T16691] do_syscall_64+0x174/0x580 [ 1491.799059][T16691] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1491.805458][T16691] [ 1491.805458][T16691] other info that might help us debug this: [ 1491.805458][T16691] [ 1491.815662][T16691] Possible unsafe locking scenario: [ 1491.815662][T16691] [ 1491.823091][T16691] CPU0 CPU1 [ 1491.828435][T16691] ---- ---- [ 1491.833778][T16691] lock(&sbi->s_writepages_rwsem); [ 1491.838967][T16691] lock(sb_internal); [ 1491.845544][T16691] lock(&sbi->s_writepages_rwsem); [ 1491.853251][T16691] rlock(sb_internal); [ 1491.857395][T16691] [ 1491.857395][T16691] *** DEADLOCK *** [ 1491.857395][T16691] [ 1491.865517][T16691] 3 locks held by syz.6.18949/16691: [ 1491.870779][T16691] #0: ffff88804f7ac450 (sb_writers#4){.+.+}-{0:0}, at: mnt_want_write_file+0x60/0x200 [ 1491.880455][T16691] #1: ffff88807696bbc0 (&type->i_mutex_dir_key#3){++++}-{4:4}, at: vfs_fileattr_set+0x160/0xc90 [ 1491.891010][T16691] #2: ffff88802941ec18 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_ext_migrate+0x317/0x10e0 [ 1491.901638][T16691] [ 1491.901638][T16691] stack backtrace: [ 1491.907506][T16691] CPU: 0 UID: 0 PID: 16691 Comm: syz.6.18949 Not tainted syzkaller #0 PREEMPT(full) [ 1491.907531][T16691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1491.907545][T16691] Call Trace: [ 1491.907554][T16691] [ 1491.907564][T16691] dump_stack_lvl+0xe8/0x150 [ 1491.907600][T16691] print_circular_bug+0x2e1/0x300 [ 1491.907628][T16691] check_noncircular+0x12e/0x150 [ 1491.907656][T16691] __lock_acquire+0x1520/0x2cf0 [ 1491.907704][T16691] ? is_bpf_text_address+0x26/0x2b0 [ 1491.907741][T16691] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1491.907769][T16691] ? kernel_text_address+0xa5/0xe0 [ 1491.907792][T16691] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1491.907818][T16691] ? __kernel_text_address+0xd/0x30 [ 1491.907839][T16691] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1491.907866][T16691] ? unwind_get_return_address+0x4d/0x90 [ 1491.907893][T16691] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1491.907919][T16691] ? __asan_memset+0x22/0x50 [ 1491.907950][T16691] ? ext4_evict_inode+0x426/0x10c0 [ 1491.907986][T16691] lock_acquire+0x106/0x350 [ 1491.908019][T16691] ? ext4_evict_inode+0x426/0x10c0 [ 1491.908058][T16691] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1491.908089][T16691] percpu_down_read_internal+0x48/0x1c0 [ 1491.908120][T16691] ? ext4_evict_inode+0x426/0x10c0 [ 1491.908157][T16691] ext4_evict_inode+0x426/0x10c0 [ 1491.908198][T16691] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1491.908228][T16691] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 1491.908253][T16691] ? do_raw_spin_lock+0x12b/0x2f0 [ 1491.908281][T16691] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1491.908309][T16691] ? __pfx_ext4_evict_inode+0x10/0x10 [ 1491.908344][T16691] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1491.908373][T16691] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1491.908400][T16691] ? do_raw_spin_unlock+0xf5/0x210 [ 1491.908428][T16691] ? __pfx_ext4_evict_inode+0x10/0x10 [ 1491.908465][T16691] evict+0x624/0xb50 [ 1491.908494][T16691] ? __pfx_evict+0x10/0x10 [ 1491.908517][T16691] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1491.908544][T16691] ? do_raw_spin_unlock+0xf5/0x210 [ 1491.908573][T16691] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1491.908599][T16691] ? _raw_spin_unlock+0x28/0x50 [ 1491.908624][T16691] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1491.908651][T16691] ? iput+0xb84/0xf00 [ 1491.908686][T16691] ext4_ext_migrate+0xddf/0x10e0 [ 1491.908726][T16691] ? __pfx_ext4_ext_migrate+0x10/0x10 [ 1491.908756][T16691] ? inode_maybe_inc_iversion+0x18f/0x200 [ 1491.908797][T16691] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1491.908824][T16691] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1491.908851][T16691] ? ext4_set_inode_flags+0x249/0x5b0 [ 1491.908878][T16691] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1491.908905][T16691] ? __ext4_journal_stop+0x34/0x1a0 [ 1491.908936][T16691] ext4_fileattr_set+0xf41/0x16e0 [ 1491.908980][T16691] ? __pfx_ext4_fileattr_set+0x10/0x10 [ 1491.909016][T16691] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1491.909045][T16691] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1491.909074][T16691] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1491.909103][T16691] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1491.909129][T16691] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1491.909156][T16691] ? security_capable+0x7e/0x2c0 [ 1491.909185][T16691] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1491.909211][T16691] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1491.909241][T16691] vfs_fileattr_set+0x9f5/0xc90 [ 1491.909276][T16691] ? mnt_get_write_access+0x66/0x280 [ 1491.909299][T16691] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1491.909331][T16691] ? __pfx_vfs_fileattr_set+0x10/0x10 [ 1491.909371][T16691] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1491.909398][T16691] ? mnt_want_write_file+0x172/0x200 [ 1491.909423][T16691] ioctl_setflags+0x305/0x370 [ 1491.909461][T16691] ? __pfx_ioctl_setflags+0x10/0x10 [ 1491.909499][T16691] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1491.909523][T16691] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1491.909547][T16691] do_vfs_ioctl+0x9f2/0x1530 [ 1491.909574][T16691] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1491.909605][T16691] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1491.909633][T16691] ? hook_file_ioctl+0x1f0/0x5f0 [ 1491.909656][T16691] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1491.909695][T16691] ? __fget_files+0x2a/0x420 [ 1491.909729][T16691] ? __fget_files+0x2a/0x420 [ 1491.909761][T16691] ? __fget_files+0x3a2/0x420 [ 1491.909793][T16691] ? __fget_files+0x2a/0x420 [ 1491.909827][T16691] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1491.909854][T16691] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1491.909883][T16691] __se_sys_ioctl+0x82/0x170 [ 1491.909907][T16691] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1491.909931][T16691] do_syscall_64+0x174/0x580 [ 1491.909961][T16691] ? trace_irq_disable+0x3b/0x140 [ 1491.909995][T16691] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1491.910018][T16691] RIP: 0033:0x7f291199e019 [ 1491.910039][T16691] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1491.910058][T16691] RSP: 002b:00007f29128db028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1491.910081][T16691] RAX: ffffffffffffffda RBX: 00007f2911c25fa0 RCX: 00007f291199e019 [ 1491.910098][T16691] RDX: 00002000000000c0 RSI: 0000000040086602 RDI: 0000000000000004 [ 1491.910114][T16691] RBP: 00007f2911a3500c R08: 0000000000000000 R09: 0000000000000000 [ 1491.910129][T16691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1491.910143][T16691] R13: 00007f2911c26038 R14: 00007f2911c25fa0 R15: 00007ffee2465148 [ 1491.910174][T16691] [ 1491.931652][T16696] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 1492.454662][T23098] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.