last executing test programs: 3.18790997s ago: executing program 4 (id=1021): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000040)={0x2000, 0x101, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x80, 0x0, 'queue0\x00'}) 2.867631485s ago: executing program 3 (id=1026): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={@remote, 0x13, r2}) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@remote, r2}, 0x14) 2.730272042s ago: executing program 1 (id=1028): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000bc0)=0x3, 0x4) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x64, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @empty}}}}}}, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 2.615202907s ago: executing program 4 (id=1029): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @empty}, 0x1c) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) 2.613272627s ago: executing program 3 (id=1039): syz_mount_image$nilfs2(&(0x7f0000000180), &(0x7f0000000300)='./file3\x00', 0x400, &(0x7f0000001040)=ANY=[], 0x1, 0xadc, &(0x7f0000001900)="$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") syz_mount_image$exfat(0x0, &(0x7f00000000c0)='./file3\x00', 0x80d808, 0x0, 0x7e, 0x0, &(0x7f0000000000)) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0xe1, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fsync(r0) 2.249337764s ago: executing program 4 (id=1033): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) 2.11660903s ago: executing program 3 (id=1035): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x100) fcntl$setlease(r1, 0x400, 0x0) fcntl$setlease(r1, 0x400, 0x2) 2.031359644s ago: executing program 0 (id=1037): mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1000, 0x103) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x20400, 0x20) 1.940633549s ago: executing program 4 (id=1038): r0 = io_uring_setup(0x7a76, &(0x7f0000000180)={0x0, 0xa7dc, 0x0, 0x40, 0x3aa}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001fd85aec1983ff140000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc800000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000005400038050000080080003400000000244000b80140001800c000100636f756e74657200040002802c0001800a0001006c696d69740000001c0002800c00024000000000800000000c000140000000000000000814000000110001"], 0xe4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close_range(r0, 0xffffffffffffffff, 0x0) 1.629219813s ago: executing program 4 (id=1041): bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200), 0x6) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) process_vm_readv(r0, &(0x7f0000000500)=[{&(0x7f0000000300)=""/41, 0x29}], 0x1, &(0x7f0000008640)=[{&(0x7f00000003c0)=""/95, 0x5f}], 0x1, 0x0) 1.581302545s ago: executing program 1 (id=1042): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000010140)={0x8, {"7f9654d636ab18b7938a2804505c72e9994ca22404fc203334cc21ed3d6a776fd12d13f9602b2980f983c31a5d1e431db778099ce3af3fb20e1ee1f4fdb77cbb36154982a93c19825d6fd273ab1eb5bcd47adad50de8a6791486e482e29ecc94284921f33b941cfc1000c9781d9a828c5ec7a2c77b4e624a5aa0e9e39782bad733eda81ba47e1c6116e4170e6587dd6210a57abe91f1f80c4e31139d8b73fe35ac1f99ea82dd6aa9c9aa67de88ae3e141020e1a876bbc449d2d843aa7e6d90b948b7e28770e6ac71010c63f17e90fd20806a9f8d9f418ee3af74aac64b04a27c4f5e3626ca2da546c79d24acadd11e01272a22fc54078fd5e64475993668980a9f95aff96492b8377a759d8ccf1accb9a18ef7ad16f438dde69cd020d71552b0810688c882a26a22b23f4b35471b08b379193db1cd7934a4049ff1b00d9795cda6e73951641d5e2365c24facd5afd09ed1d096d758b4fef66fe1aa22395d67b7e1db623d4a60a7dc93893d6c4a91df79535a855868c5dc0033d5c428cd25b85c5deb6e81068553bc84cead4d1eba8aa57e2b354a6899e44acbd3834491219b3e231cd55d82f161774a689efe197cc193ac0124c67738a0a1d5f16a6768c2c2ba7386c8c95ca08c55117f344f5a2bca0d09e79ea3fc49491f2c7adc513c2779c1bf62b1a8643d23e9e8b2ae41d4a59f1b82b82e092b36eb851b8456da871b4057aec325a9d4cccafde61f2abc85e3cabeabb856f6ffbfe23d69219ec8fae6beb54abe7870dbae823d49806a967a1c7f252999804f106745f20490bb3347b59321dc69765567abcbd89de04d89622170005df5871ed0fb72345a11da074060d7d4ee2e437f71a45723fb6b02de56067e54f54c52d10f7874a13cbfb3bd65ce54f9d6719ea210e0cf79e4e2157736ec07ac5915682ab81bced665c1e72fab8d8cfe509de0f21fe374b957b379fd5918061e21c2e96985cc1354b2de859b0f1a463ab04683b1253eda671c2353b5c208aca652f5419ffc4949a7fa909b95653f42d97390c400b4a1c308b11e73e9a06d3b164d3361e75584d70e6bc61d570a7e0c7da330f643194c1893fcd6489fac605eead61b53dff18caf526ecccc9bbd9146bc3c3bb67677695e6fddaab081786e9084014e60f5c03ae5a9087726b05e17402cd2fbb80d773b8a41470b1f901a8c2b2d57450181f4fc5bc53c7cb3dc032b84567492607cb08832eca9f79da9210d197863e5db5a74a9823dc0cc8bd9f3a9b6ff5a7d15d4747a9b26e088f4fad96d81cd1214226b1c4585d418d593220fcbb9ad949266cc48163e3498b46ebcdf7b2b5ecfe67539a61ed9e39b02d5b35ac0d0e7fa830034ca2da8a7ddf04bcf2cee939994369feb77023e0e3de04b21db7a640a92c17748245005cd75a7deba4ff0e4c104a9db2d9a98ec8edb3562050a3bac5f322290e3d8b6fb21770ac436d4cb12b97fc8f76d7bb9eeed85663eb0626f1ad1719ee4b07f7de2c1d1a31c27c6879f4fa3dbdfb2bfc0898beabafbeca9f13050e6b2f6c432e423cd5cb6b8fa56fe32c3e50104e44462c0a5c69de6a7ac5ae3d9f07ceed64dbffa42e4663838bfcde92f0fcb895f3b93c59b0e48c09890dfc36436db56b708f6e7cbbd2a6305f573cee099dbcd263cb96d9fb69cbc3cb06d8f5e3789698a17e71d22b4665ff5447fcc17a31bb136c8bb4b984573bcaf1cb650198c1266e6ddfd42d44f9de02cb9d915c5334c550fac3fcee56790aeb09d81e7690a32d8b0cc477b23f15257820de227be1ffaec2f63f3266b8f5dd78947dcee355fe59bfb100e5244425532bb1d115acd211b8c16b0ec0aae00fca5d4511a05c3ff027a1cac56210a10d81c01b90e156cc7b33de0fac825dc516d398166096013e068db935483c93ba95da39b5ae4087d84479a4c4809f28f93790dc279637bd6f3dc441d315cf6bd7b0e3d92070a45baf4445ce063fd12690eb002f5ca068a256bc54100c99a02a346beca39072163c4b297d117f1ed9fef4201dbc11d36a0a0db52e84461c6fbb4aad62cf3c8dc9ae6a3390a5e8773ac599e67436220c8d541a9039762bffaa7f490e31dddbc362fb4ff686cda905f3b02a1db76d4d570d970434921ca8a4765af6d5c8b881e1f4ffa7e2d9ef5f5511b94f88474674ec790bb5186c73446a227bf1ffd19b605733abd1bd41e421aeaf2ed4617088c7ceef85451225056435993e89e4bccd2c2e4b39af99feef11fea645eeb5cf9f77b1e19a72d3efb613100969b84302789714bca65bcbc96762b4012a5700c62aed706433b9f142b7302442b6a9958b0e28e8b1cfa9eeb4ac0d71f497b23babf9f0221dcb658d9f4db5d45bee30d2ad7c97d6a562e014a7701c15325ec080000002b37714a77a95c03fb15bbfba6fade32bf50f985a1df362ca7216cc152907dd931acb58a63920f581e82b590c0d6a0033009f8e50c3263d3f58596b63d507cadbc809a6690561f74d0772bf92d04e06c47a350724b106f5e83f7e71c4b2a983bf5ad7d8684e7b8b5dc1273d0fa5879b8e61bde33d602bc8ff0913b6d32dcac366d568dc7cf82bbfc405cbe418a2644c26592b32ca1a632fc95123efb784cfb6953a94ebeccd24fba389a0e56b043df07d9a2dd38a1196e5e55576b25f85cb96f6560802a4a58b7a6857e8454faa2c880bf32d464562b2bdc5f0df22b663f2c01fc944f1cfd1908f617f8295a5440bb79ae178ea46a95baeea48322105146ac3ed2de7d3796ddddcc848a8ecf4a00dd055733b4f59211f5a40deea44e74b3bc57953b26ed61e6fd67889edfe8d0902385e37666aacec072735630ecc441c3cc6b09bb2f63aa4e332c6df728dc74078a83ce20454dfd616d116270b36ddc09c5fea2e8442bc43455d0257fac92f3780061178f9420bf8e463f29896c12383dbb9a81bc5c87376e647c8a7986cb514fb9696d9c0a8d303c5c4b5b7c5f601c01fa19323e02f675c371bc44fbc1ac5704d41a89a2a4ccec6ac8440c532f07da25aa2dce6a5d2ebe694eb4017d178b221213bfe2a01d9cfe689bd190776bca6c032f446eb8862587a7826e35f3f691763212eee6af2e49bbeb0a27e07c5714b74e373798c7bebce265f7ebef3a1ea64078cf1e8a9d433af32c53090c972ffedbadafb50b9aee540abd84f8e938583ea725954be3b236c5d8aca7d486d21902a2902f25a7c02dbe83c39bd0b81513f9ef198c49d560e930ae224ff47f92e4851e1f7ab5bb406abcf6596569261e6b0c67bb3b854e9c6de60bfb60fcf29241ff237151310ecd19f8b2cfe764c1df1a2de9d840eca47aa169ba9a415901204ec31ccdfd76e908029ae34fb12dc286758c64fd6d42bc82b14e07e421f4b42b180cd6ef40cac8062928b4a420a4577f24295f54de9048ac9d34307bf93e463cea4967cf4880166f68ed1eb965db2e4fb9f5f0b1c695d621e427ccb9a3188073ee6fde729c6698346efa1c0ba643c1efd20858965511da750060d551c44c435a5f1603fae7357e0bc78e92aad3d88790ec2aa1a42d6fe7e0ffc57f3599e406db63be7dd32692df32ce33dee0a2becdb02d6e435e09de3d356497543db23f53da25643f9c585e275297800d8beed47f0e622f86fc25d2e87036fdceebfe7257cb6de0c02412d1c0758acfcd0862e99ad17a118f46f635a87477e8b825423d94ada35bf0b5444aa7d3de4bb7eec7ae5129fcc2cba651cc972f5500fc5161149d29f452962afb102a01ae76825cb4477460be0b85d75058595c27e9b7fae3492ec3925c671bee5f4ca534d5a294f783d6cc073c992139b61d21fd98297b04c0578dafd5f7ebcaf8d4d9185aea3d76e813421f4573b38c25093c015a65e44fb297f0f6ac2d02c4237b37a3bfca2406c5c95ae5812816bacad59ba7c6f72d7c644ff25b592ed1e89b276e05866c01a4ced7fc6dd9f190c20d420d7c8a1fe908833a24c5e5bd7a95a2a6fbf147fc4b29a179718166dd0fbae2fc6b8c8aac6194fa6baf0d3edc36b231f7ffc441ba53e3e7aaaf0a1405566ff584f73a637b74dde9bcb4d41da2be6c9df5d533fbac54f5fb52a8a793757cfe19aa90048c6d07e3474136ae1be2455b0d0d02eb4b5961ba883209355c0dd2af4aad98e7b971e358a7d9b55fe17cd6095f257355d9b99e5ea52848f17b35a80792d9ed0fef6fe3eef9a324902409969823be20bbe0e8dba9c747cd1a14d3642d877b86271f3f0c322a142c4ff635b37d542c3265b5fe8589a732bb1a55010b930dd0196cd43ac3634c01b4a44c517197d03a3d89c67f5c09aab409e84c0af466bfbd0c96d240101a2542c66b4b4b8ef65b41b0079995c52cc9720d2c1d7c128c6f17a65cc798c1986cfbd8888460c54438edc4f91f3580391c8b57d9aee209a59a116c1c44775437e9c30e6d87e82ce84e28532b19441e32ab9aea22177bac9daad25a6c88395e9348d6780de630cddb266c411011175bdb6255a36535180818447d43ffba3758d311539fe9f6811fa470bf3767b4c2d4cdf37854c7ee28730bb1d39d5c0dfffcdbf353cca3e13079f3ae66b839c7dd36914022a0e75bca5b622f521420b73249ef47f03c1fb03ecf7557882afcaa7cf454a68ad237d4ce860bd6b1531c1cafe2cfb76bc4188271ef6bdfb304ee0e6932463a1909f03d6e8a27b5f137d6b342841d613863dfdf37d5ec3a98d667810fb6f82d67620bdefed8b3ff98420a6c7ee577c3ba68b95a20403608a7ba6526ec9e8662c6e15ab09b1a9019d4958af04cb2e4890ee6b1077fcaa5cc0817f388461b230fe631e75f18ab392a5ca5de4a024ca16dd05fcfdf92114e43a5c4a169d462ff0dba57deeaf5eaafd892f8ccbd72ac56471162e1416bca39859b4184ba0d1b3f7ec05db4ef4cf0142867fa9be328a0be8aa74c716aad9411008607980861f4f72e9bfa60195e2f939d3f6a44a6cec07dd376d1bccaa126686f313d5f7918ecd1215026982c82ed1922ef70e36e8ed59b2d5ceab3b4aad7e53049062dd5ba0e87f7005c3f4d2b788245cdc2f35ef2572bea5ea92dfad406ade6d5ad18be8eeb4c652e5277b244645c68c0c0f5a68d42e00d59b75941917b2cdf31fdf809f2078ca97fd5beba65b34e0621138ea0e94feb87166b2dac2232ebca575e5c0a4d565d9992f733bbfbe68a63d99ee93398604065d5517c33ed0e067bdb643e73102f16137afd7d4bf21e8065ea028c392a6dcefbe642dc3fb03a239d9c8b17023eacc8e19fea11c34a10644af1b786fc0f4504038c2ee59c1b353f3d7b9313df025b4b5874ca63ec164a3fe35bf390d266f53dcda6a8e190e63a56ffdf4f7c5c02aa22d376db06d4d2b96be5b331f897d1ecfd25c13a1c194c265dd95a5724a6435bc8138224d9db28b689b9cea5132cd19601dbc4a43e70c71e27e8fd0689d09484974e8a4605f8553735fffaf5654a087e323ca14e02b681b9bbe592bd6b719ae2e86bdf918b27c79d52dd334d1aa7ebc1bff76e97572faad092010a1022f7d33089049107a89c364ae7dd022d119e8f6ab795fd71d76a90e8202339401ff9e9918ea8c8e12f7b0ba10d9ebde5d1bc5988f2d07b34579d8c282628204f2978d8b0cf95dc41f3775a4053f833267c64b42336d7c850f2918ef0dd6d62e43fcc173254eb34748efd4754609ce25afd648ee5a8fc5c64346603f8258592d67b9613e8f7ac0def0958f13436581d729e0b3e062738eb06b2116abe837529690a614fc5d3f53b4d4602e5706000", 0x103f}}, 0x1006) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x802716, 0x0, &(0x7f0000000000)) 1.440407242s ago: executing program 2 (id=1043): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0xbffffffe, 0x100, {{@in6=@remote, @in6=@private1, 0x1, 0x794, 0x4e24, 0x0, 0x2, 0x20, 0x20, 0x3a, 0x0, 0xee00}, {@in=@loopback, 0x4d4, 0x6c}, @in=@empty, {0x0, 0x5, 0x6, 0xffff, 0x8251c, 0x2, 0x83}, {0xfffffffffffffffc, 0x7fff, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x0, 0x2, 0x0, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0xc801}, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@broadcast, @in=@rand_addr=0x64010100, 0x4e24, 0x0, 0x0, 0x80, 0x2}, {0x0, 0x0, 0x6}, {0x4}, 0xb, 0x0, 0x1, 0x0, 0x2}, {{@in=@rand_addr=0x64010102, 0x2, 0x6c}, 0x0, @in6=@mcast1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400000, 0x9}}, 0xe8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) 1.420530843s ago: executing program 3 (id=1044): timer_create(0x0, 0x0, &(0x7f0000bbdffc)) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x24}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) 1.386032455s ago: executing program 1 (id=1045): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @empty}, 0x1c) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) 1.308485118s ago: executing program 4 (id=1046): syz_mount_image$ocfs2(&(0x7f00000026c0), &(0x7f0000004780)='./file0\x00', 0x200000, &(0x7f0000000340)=ANY=[@ANYBLOB="6a6f75726e616c5f6173796e635f636f6d6d69742c636f686572656e63793d66756c6c2c6572726f72733d636f6e74696e75652c6865617274626561743d6e6f6e652c6572726f72733d636f6e74696e75652c6e6f696e74722c67727071756f74612c001796fa694353e3807803df5ea6fd4d6e6a2613d336eb62b863dcd89e37b45f8bd04199a14c48b3e553e035ab300ba3c60c27682a8ab5656969d829535c0862f6e3a35f15fe4d50c0d5c74631344625d6224c436474bb101ff47a14c51e342ca291c09c35d9d31b06b6b86cb9dccae387b5f1e7c5e1d445d52845a3fa4c77234ea9d37c8a277c85e69a85cc6ffeb225bebbca91b569b80ee303c9a21c58db5d96fb87f1713e0e9b896e37becae2e7a978259a0847e9fb08dcb8b9f84f616463da2507db1b3489769e99"], 0x1, 0x4703, &(0x7f0000004800)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000540)='./bus\x00', 0x38c180a, 0x0, 0x0, 0x0, &(0x7f0000000240)) chdir(&(0x7f00000003c0)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4842, 0x1ff) syz_mount_image$vfat(&(0x7f00000007c0), &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x824851, 0x0, 0x1, 0x0, &(0x7f0000000d40)) 1.280061499s ago: executing program 2 (id=1047): r0 = syz_open_dev$sndctrl(&(0x7f0000000580), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0xffb) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000080)={{0x1088, 0x4, 0x5, 0x80, 'syz0\x00', 0x200000}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x8, 'syz1\x00', 0x0}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3000001, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000540)=0x7b1) 1.193432774s ago: executing program 1 (id=1048): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x4) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a1c000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) 1.100644318s ago: executing program 3 (id=1049): mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./mnt_trace\x00', 0x1ff) mount(0x0, &(0x7f0000001040)='./mnt_trace\x00', &(0x7f0000001080)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000010c0)='./mnt_trace/trace_pipe\x00', 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./mnt_trace\x00', &(0x7f0000000180), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 1.074429049s ago: executing program 2 (id=1050): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r0, 0x2000009) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) shutdown(r1, 0x0) sendfile(r1, r0, 0x0, 0x5) 1.04413577s ago: executing program 0 (id=1051): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x1}}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/asound/seq/timer\x00', 0x0, 0x0) read$char_usb(r1, &(0x7f00000001c0)=""/4068, 0xfe4) 960.652615ms ago: executing program 1 (id=1052): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000400)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@auto_da_alloc}, {@nodioread_nolock}, {@bh}]}, 0xfe, 0x59c, &(0x7f0000001840)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xc00) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ftruncate(r0, 0x3) 862.840459ms ago: executing program 0 (id=1053): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x6, 0x4, 0x4, 0xc, 0x0, 0xffffffffffffffff, 0x6}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) 802.353812ms ago: executing program 2 (id=1054): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000180)={0xfffffff7, 0x6003ff, 0xfffffff1, 0xc4cf, 0x5, "00000800000000000000000000e700", 0x240000, 0x1fd}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000640)=0x8) 644.597169ms ago: executing program 2 (id=1055): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000000380)={[{@debug}, {@delalloc}, {@journal_ioprio}, {@test_dummy_encryption}, {@nodiscard}, {@min_batch_time={'min_batch_time', 0x3d, 0x5}}, {@acl}, {@nomblk_io_submit}]}, 0x1, 0xbc5, &(0x7f0000000700)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000480)='.\x00', 0x10000, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @auto="f075a44d20fa6b66322c12f649aba91e"}}) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) symlinkat(&(0x7f00000000c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 566.466403ms ago: executing program 0 (id=1056): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chown(&(0x7f00000001c0)='./file0\x00', 0xee01, 0x0) lremovexattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@known='system.posix_acl_default\x00') 397.386281ms ago: executing program 0 (id=1057): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) write$P9_RLERROR(r1, 0x0, 0xa) 93.417275ms ago: executing program 3 (id=1058): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_cmd={0xe, 0x1, 0x7fff, 0x0, 0x3, 0x4, 0x41, 0x5, 0x8, 0x6, 0x7, 0x4, 0xfff3, 0x80, 0x84, 0x7f, [0x7fffffff, 0x4]}}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000000)={0x2}) 24.591259ms ago: executing program 0 (id=1059): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @empty}, 0x1c) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) 3.943239ms ago: executing program 1 (id=1060): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000840)=[{{&(0x7f00000001c0)={0xa, 0x4e22, 0x4, @dev={0xfe, 0x80, '\x00', 0x30}, 0xa}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000200)="a2", 0x1}], 0x1}}], 0x1, 0xc010) shutdown(r0, 0x1) getsockopt$bt_hci(r0, 0x84, 0x81, &(0x7f0000001280)=""/4107, &(0x7f00000000c0)=0x100b) 0s ago: executing program 2 (id=1061): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x48) unshare(0x6020400) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="02000000040000000400000008"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0d00000023000000040000000200000040000000", @ANYRES32=r1], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r0, 0x11}, 0x20) kernel console output (not intermixed with test programs): 5394][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.032493][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.044967][ T4272] device veth1_vlan entered promiscuous mode [ 77.062767][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 77.073206][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 77.087963][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 77.102374][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.111354][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.141230][ T4286] device veth0_vlan entered promiscuous mode [ 77.154826][ T4276] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.163859][ T4276] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.174956][ T4276] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.183940][ T4276] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.197351][ T4279] Bluetooth: hci0: command 0x040f tx timeout [ 77.197574][ T49] Bluetooth: hci1: command 0x040f tx timeout [ 77.216264][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 77.227760][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 77.247916][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 77.281382][ T4286] device veth1_vlan entered promiscuous mode [ 77.295368][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 77.307160][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 77.315100][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 77.343351][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 77.357485][ T49] Bluetooth: hci3: command 0x040f tx timeout [ 77.357503][ T4279] Bluetooth: hci4: command 0x040f tx timeout [ 77.363527][ T49] Bluetooth: hci2: command 0x040f tx timeout [ 77.388067][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 77.452842][ T4272] device veth0_macvtap entered promiscuous mode [ 77.485962][ T4286] device veth0_macvtap entered promiscuous mode [ 77.506284][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 77.519971][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 77.528354][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 77.537369][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 77.549816][ T4286] device veth1_macvtap entered promiscuous mode [ 77.572021][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 77.586667][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 77.602046][ T4272] device veth1_macvtap entered promiscuous mode [ 77.660960][ T4286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.674752][ T4286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.685913][ T4286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.697101][ T4286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.718370][ T4286] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.750543][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.769507][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.780258][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.790987][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.801352][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.812140][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.823657][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.838423][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.848704][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.859373][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.869664][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.885722][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.895014][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.907719][ T4286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.920842][ T4286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.931206][ T4286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.942657][ T4286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.954355][ T4286] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.968289][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.979390][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.987381][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.987428][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.987443][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.987455][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.987469][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.003290][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.051174][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.057954][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.062103][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 78.078874][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 78.089683][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.098092][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 78.107412][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 78.145124][ T4272] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.156634][ T4272] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.169081][ T4272] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.177914][ T4272] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.192297][ T4286] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.203305][ T4286] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.213524][ T4286] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.224448][ T4286] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.268306][ T4325] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.269928][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 78.276246][ T4325] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.291698][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 78.300562][ T4336] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.320534][ T4336] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.351451][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.359713][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.368307][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 78.377156][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 78.385978][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 78.398736][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 78.437352][ T4281] device veth0_vlan entered promiscuous mode [ 78.486234][ T4281] device veth1_vlan entered promiscuous mode [ 78.564625][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.588040][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.656253][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 78.678963][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 78.692750][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.713423][ T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.719949][ T4336] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.739940][ T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.746950][ T4336] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.819382][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.843172][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.870025][ T4357] Zero length message leads to an empty skb [ 78.876194][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 78.885468][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 78.925770][ T4319] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.936418][ T4281] device veth0_macvtap entered promiscuous mode [ 78.972050][ T4319] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.982709][ T4281] device veth1_macvtap entered promiscuous mode [ 79.027700][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 79.038075][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 79.067511][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 79.119981][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.141809][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.172733][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.192120][ T4364] process 'syz.0.7' launched './file0' with NULL argv: empty string added [ 79.205554][ T4364] Invalid argument reading file caps for ./file0 [ 79.209117][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.231815][ T4365] loop1: detected capacity change from 0 to 128 [ 79.242240][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.266646][ T4365] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 79.277638][ T4279] Bluetooth: hci0: command 0x0419 tx timeout [ 79.283721][ T4279] Bluetooth: hci1: command 0x0419 tx timeout [ 79.295884][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.306157][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.317658][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.346061][ T4281] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.358757][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 79.407990][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 79.440753][ T4279] Bluetooth: hci2: command 0x0419 tx timeout [ 79.446851][ T4279] Bluetooth: hci4: command 0x0419 tx timeout [ 79.452878][ T4279] Bluetooth: hci3: command 0x0419 tx timeout [ 79.482154][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.546888][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.556750][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.640904][ T4373] loop0: detected capacity change from 0 to 512 [ 79.653416][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.671536][ T4373] ======================================================= [ 79.671536][ T4373] WARNING: The mand mount option has been deprecated and [ 79.671536][ T4373] and is ignored by this kernel. Remove the mand [ 79.671536][ T4373] option from the mount to silence this warning. [ 79.671536][ T4373] ======================================================= [ 79.704540][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.727215][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.738846][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.766793][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.798705][ T4281] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.839408][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 79.865165][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 79.894440][ T4281] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.913644][ T4281] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.928675][ T4281] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.972814][ T4281] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.103035][ T4370] loop3: detected capacity change from 0 to 32768 [ 80.228106][ T4325] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.236009][ T4325] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.263642][ T27] audit: type=1800 audit(1790221051.721:2): pid=4370 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4" name="file1" dev="loop3" ino=4 res=0 errno=0 [ 80.307624][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 80.339578][ T4385] loop1: detected capacity change from 0 to 128 [ 80.347919][ T4319] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.415280][ T4319] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.454014][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 80.550381][ T4385] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 80.572052][ T4385] ext4 filesystem being mounted at /2/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 80.766619][ T4272] EXT4-fs (loop1): unmounting filesystem. [ 80.995373][ T4403] loop0: detected capacity change from 0 to 512 [ 81.041734][ T4406] loop3: detected capacity change from 0 to 2048 [ 81.053226][ T4403] EXT4-fs: Ignoring removed oldalloc option [ 81.072323][ T4403] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 81.087936][ T4403] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 81.099721][ T4406] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 81.150814][ T4403] EXT4-fs (loop0): 1 orphan inode deleted [ 81.187127][ T4403] EXT4-fs (loop0): 1 truncate cleaned up [ 81.227620][ T4403] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 81.365470][ T4403] EXT4-fs error (device loop0): ext4_search_dir:1551: inode #12: block 7: comm syz.0.20: bad entry in directory: directory entry overrun - offset=0, inode=13, rec_len=784, size=56 fake=0 [ 81.380475][ T4286] EXT4-fs (loop3): unmounting filesystem. [ 81.413510][ T4403] EXT4-fs (loop0): Remounting filesystem read-only [ 81.548891][ T4276] EXT4-fs (loop0): unmounting filesystem. [ 81.704318][ T4422] loop1: detected capacity change from 0 to 4096 [ 81.736012][ T4422] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 81.760019][ T4427] block nbd0: shutting down sockets [ 82.099723][ T4438] syz.0.32 uses obsolete (PF_INET,SOCK_PACKET) [ 83.116279][ T4518] batman_adv: batadv0: Adding interface: wlan1 [ 83.308176][ T4518] batman_adv: batadv0: The MTU of interface wlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.457152][ T4518] batman_adv: batadv0: Interface activated: wlan1 [ 83.606178][ T4539] loop3: detected capacity change from 0 to 1024 [ 83.897973][ T4539] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 84.248495][ T4548] loop1: detected capacity change from 0 to 16 [ 84.295334][ T4548] erofs: (device loop1): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 66300) [ 84.314838][ T27] audit: type=1326 audit(1790221055.771:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4550 comm="syz.2.50" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc88999e159 code=0x0 [ 84.691796][ T4545] input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input6 [ 84.907011][ T4326] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 85.125698][ T4326] usb 5-1: Using ep0 maxpacket: 32 [ 85.140157][ T4326] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 85.152538][ T4326] usb 5-1: config 0 has no interface number 0 [ 85.160485][ T4326] usb 5-1: config 0 interface 184 altsetting 7 bulk endpoint 0x82 has invalid maxpacket 255 [ 85.174839][ T4326] usb 5-1: config 0 interface 184 has no altsetting 0 [ 85.185627][ T4326] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 85.200457][ T4326] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.209685][ T4326] usb 5-1: Product: syz [ 85.213998][ T4326] usb 5-1: Manufacturer: syz [ 85.222494][ T4326] usb 5-1: SerialNumber: syz [ 85.241047][ T4326] usb 5-1: config 0 descriptor?? [ 85.249158][ T4564] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 85.260674][ T4326] smsc75xx v1.0.0 [ 85.430599][ T27] audit: type=1326 audit(1790221056.891:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4561 comm="syz.3.55" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e4b19e159 code=0x7fc00000 [ 85.481474][ T4564] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 85.494299][ T27] audit: type=1326 audit(1790221056.891:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4561 comm="syz.3.55" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8e4b19e159 code=0x7fc00000 [ 85.517851][ C0] vkms_vblank_simulate: vblank timer overrun [ 85.531728][ T27] audit: type=1326 audit(1790221056.891:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4561 comm="syz.3.55" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e4b19e159 code=0x7fc00000 [ 85.562465][ T27] audit: type=1326 audit(1790221056.891:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4561 comm="syz.3.55" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e4b19e159 code=0x7fc00000 [ 85.609096][ T27] audit: type=1326 audit(1790221056.891:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4561 comm="syz.3.55" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e4b19e159 code=0x7fc00000 [ 85.632774][ C0] vkms_vblank_simulate: vblank timer overrun [ 85.645208][ T27] audit: type=1326 audit(1790221056.891:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4561 comm="syz.3.55" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e4b19e159 code=0x7fc00000 [ 85.668861][ C0] vkms_vblank_simulate: vblank timer overrun [ 85.686991][ T27] audit: type=1326 audit(1790221056.891:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4561 comm="syz.3.55" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e4b19e159 code=0x7fc00000 [ 85.722636][ T27] audit: type=1326 audit(1790221056.891:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4561 comm="syz.3.55" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e4b19e159 code=0x7fc00000 [ 85.746425][ C0] vkms_vblank_simulate: vblank timer overrun [ 85.758656][ T27] audit: type=1326 audit(1790221056.891:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4561 comm="syz.3.55" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e4b19e159 code=0x7fc00000 [ 85.782427][ C0] vkms_vblank_simulate: vblank timer overrun [ 85.802436][ T27] audit: type=1326 audit(1790221056.891:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4561 comm="syz.3.55" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e4b19e159 code=0x7fc00000 [ 85.919425][ T4326] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 85.933132][ T4326] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 86.005557][ T4593] Bluetooth: MGMT ver 1.22 [ 86.011629][ T4593] Bluetooth: hci1: too big key_count value 51653 [ 86.174559][ T4326] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 86.197021][ T4316] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 86.204307][ T4326] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 86.228585][ T4326] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 86.257588][ T4326] smsc75xx: probe of 5-1:0.184 failed with error -71 [ 86.283924][ T4326] usb 5-1: USB disconnect, device number 2 [ 86.389722][ T4316] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 86.408367][ T954] cfg80211: failed to load regulatory.db [ 86.455526][ T4316] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 86.484644][ T4316] usb 2-1: New USB device found, idVendor=0506, idProduct=4601, bcdDevice= 1.00 [ 86.499527][ T4261] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 86.509335][ T4316] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.697109][ T4261] usb 1-1: Using ep0 maxpacket: 16 [ 86.704332][ T4261] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 86.732409][ T4261] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 86.746973][ T4261] usb 1-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 86.756308][ T4261] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.778334][ T4261] usb 1-1: config 0 descriptor?? [ 87.209561][ T4261] apple 0003:05AC:024B.0001: unknown global tag 0xe [ 87.229946][ T4261] apple 0003:05AC:024B.0001: item 0 1 1 14 parsing failed [ 87.248081][ T4261] apple 0003:05AC:024B.0001: parse failed [ 87.254041][ T4261] apple: probe of 0003:05AC:024B.0001 failed with error -22 [ 87.397696][ T4625] loop2: detected capacity change from 0 to 512 [ 87.430885][ T4625] EXT4-fs: inline encryption not supported [ 87.442781][ T4261] usb 1-1: USB disconnect, device number 2 [ 87.481876][ T4625] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 87.520971][ T4625] EXT4-fs error (device loop2): ext4_orphan_get:1435: comm syz.2.85: bad orphan inode 131083 [ 87.536125][ T4625] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 87.547282][ T4316] pegasus: probe of 2-1:1.0 failed with error -71 [ 87.568528][ T4316] usb 2-1: USB disconnect, device number 2 [ 87.646409][ T4280] EXT4-fs (loop2): unmounting filesystem. [ 87.723891][ T4261] Process accounting resumed [ 87.734496][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888057db2800: rx timeout, send abort [ 87.793191][ T4631] Process accounting resumed [ 87.849353][ T4637] loop4: detected capacity change from 0 to 256 [ 87.918184][ T4637] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 88.243240][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888057db2800: abort rx timeout. Force session deactivation [ 88.711736][ T4656] netlink: 4 bytes leftover after parsing attributes in process `syz.4.99'. [ 88.737027][ T4656] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 88.778105][ T4656] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (149) [ 89.113714][ T4646] loop1: detected capacity change from 0 to 32768 [ 89.162117][ T4662] loop4: detected capacity change from 0 to 2048 [ 89.198766][ T4662] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 89.218968][ T4662] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 89.254194][ T4654] loop0: detected capacity change from 0 to 32768 [ 89.264859][ T4662] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 89.299605][ T4646] XFS (loop1): Mounting V5 Filesystem [ 89.401275][ T4654] JBD2: Ignoring recovery information on journal [ 89.485083][ T4646] XFS (loop1): Ending clean mount [ 89.524481][ T4646] XFS (loop1): Quotacheck needed: Please wait. [ 89.611529][ T4654] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 89.635957][ T4646] XFS (loop1): Quotacheck: Done. [ 89.709230][ T4678] netlink: 4 bytes leftover after parsing attributes in process `syz.4.104'. [ 89.868551][ T4272] XFS (loop1): Unmounting Filesystem [ 90.272196][ T4276] ocfs2: Unmounting device (7,0) on (node local) [ 90.476976][ T7] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 90.676837][ T7] usb 4-1: Using ep0 maxpacket: 32 [ 90.685876][ T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 90.711026][ T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 90.721252][ T7] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 90.730678][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.752075][ T4704] loop1: detected capacity change from 0 to 512 [ 90.757886][ T7] usb 4-1: config 0 descriptor?? [ 90.782265][ T4704] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 90.792883][ T4704] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 not in group (block 5)! [ 90.816897][ T4704] EXT4-fs (loop1): group descriptors corrupted! [ 91.196240][ T7] savu 0003:1E7D:2D5A.0002: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 91.267805][ T4710] loop4: detected capacity change from 0 to 128 [ 91.295177][ T4710] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 91.314575][ T4706] loop1: detected capacity change from 0 to 32768 [ 91.340974][ T4706] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.116 (4706) [ 91.387282][ T4706] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 91.407304][ T4706] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 91.447109][ T4706] BTRFS info (device loop1): force clearing of disk cache [ 91.484498][ T4706] BTRFS info (device loop1): use zlib compression, level 3 [ 91.519471][ T4706] BTRFS info (device loop1): enabling ssd optimizations [ 91.551089][ T4326] usb 4-1: USB disconnect, device number 2 [ 91.568305][ T4706] BTRFS info (device loop1): using spread ssd allocation scheme [ 91.576181][ T4706] BTRFS info (device loop1): using free space tree [ 91.640597][ T4716] loop2: detected capacity change from 0 to 8 [ 91.670926][ T4717] sd 0:0:1:0: PR command failed: 1026 [ 91.676376][ T4717] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 91.693360][ T4713] fido_id[4713]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 91.729948][ T4716] SQUASHFS error: lzo decompression failed, data probably corrupt [ 91.771729][ T4716] SQUASHFS error: Failed to read block 0x144: -5 [ 91.803313][ T4717] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 91.807441][ T4716] SQUASHFS error: Unable to read metadata cache entry [142] [ 91.852918][ T4716] SQUASHFS error: Unable to read inode 0x11f [ 91.979153][ T4706] BTRFS info (device loop1): rebuilding free space tree [ 91.979315][ T4738] loop0: detected capacity change from 0 to 1024 [ 92.156426][ T4706] BTRFS info (device loop1): checking UUID tree [ 92.166302][ T4738] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 92.308952][ T4752] device batadv_slave_0 entered promiscuous mode [ 92.395460][ T4751] device batadv_slave_0 left promiscuous mode [ 92.521584][ T4276] EXT4-fs (loop0): unmounting filesystem. [ 92.641633][ T4261] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 92.829230][ T4261] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 92.860812][ T4261] usb 5-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 92.907524][ T4261] usb 5-1: config 0 interface 0 has no altsetting 0 [ 92.914194][ T4261] usb 5-1: New USB device found, idVendor=054c, idProduct=09cc, bcdDevice= 0.00 [ 92.960036][ T4272] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 92.974381][ T4261] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.996285][ T4261] usb 5-1: config 0 descriptor?? [ 93.087159][ T4767] loop0: detected capacity change from 0 to 8192 [ 93.151597][ T4767] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 93.596397][ T4778] loop2: detected capacity change from 0 to 2048 [ 93.636023][ T4778] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 93.811343][ T4782] loop1: detected capacity change from 0 to 4096 [ 93.826843][ T4261] sony 0003:054C:09CC.0003: Retrying DualShock 4 get calibration report (0x02) request [ 93.930287][ T4782] ntfs3: loop1: failed to convert "0080" to cp869 [ 93.946413][ T4782] ntfs3: loop1: failed to convert name for inode 1e. [ 94.028042][ T4261] sony 0003:054C:09CC.0003: Failed to get calibration data from Dualshock 4 [ 94.051093][ T4261] sony 0003:054C:09CC.0003: hidraw0: USB HID vb6.2c Joystick [HID 054c:09cc] on usb-dummy_hcd.4-1/input0 [ 94.086977][ T4261] sony 0003:054C:09CC.0003: failed to claim input [ 94.107078][ T4261] usb 5-1: USB disconnect, device number 3 [ 94.685600][ T4797] fido_id[4797]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 94.761129][ T4784] loop0: detected capacity change from 0 to 40427 [ 94.796026][ T4784] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 94.833269][ T4784] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 94.883878][ T4784] F2FS-fs (loop0): Found nat_bits in checkpoint [ 95.022590][ T4784] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 95.047731][ T4784] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 95.197378][ T4816] loop2: detected capacity change from 0 to 2048 [ 95.287696][ T4816] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 95.327088][ T27] kauditd_printk_skb: 57 callbacks suppressed [ 95.327102][ T27] audit: type=1800 audit(1790221066.779:71): pid=4816 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.152" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 95.484781][ T4280] EXT4-fs (loop2): unmounting filesystem. [ 96.117315][ T4842] set_capacity_and_notify: 1 callbacks suppressed [ 96.117329][ T4842] loop4: detected capacity change from 0 to 512 [ 96.150266][ T4842] EXT4-fs: Ignoring removed oldalloc option [ 96.169579][ T4842] EXT4-fs (loop4): unable to read superblock [ 96.396629][ T4848] loop1: detected capacity change from 0 to 2048 [ 96.467166][ T4848] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 96.513268][ T4857] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 96.549437][ T27] audit: type=1804 audit(1790221068.009:72): pid=4848 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.167" name="/newroot/29/file0/file1" dev="loop1" ino=15 res=1 errno=0 [ 96.570309][ C1] vkms_vblank_simulate: vblank timer overrun [ 96.646299][ T4773] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 96.685315][ T4272] EXT4-fs (loop1): unmounting filesystem. [ 96.842819][ T4316] kernel write not supported for file /gssd/clntXX/gssd (pid: 4316 comm: kworker/1:5) [ 96.858786][ T4773] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 96.920990][ T4773] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.969113][ T4773] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 96.996100][ T4773] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 97.018872][ T27] audit: type=1800 audit(1790221068.480:73): pid=4866 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.173" name="power" dev="configfs" ino=35259 res=0 errno=0 [ 97.049473][ T4773] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 97.060097][ T4868] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 97.066269][ T4773] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 97.099827][ T4773] usb 1-1: Manufacturer: syz [ 97.107431][ T4773] usb 1-1: config 0 descriptor?? [ 97.161213][ T4866] null_blk: disk my_zoned_dev created [ 97.206783][ T4846] loop3: detected capacity change from 0 to 32768 [ 97.302124][ T4846] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 97.383749][ T4846] (syz.3.166,4846,0):ocfs2_read_blocks_sync:112 ERROR: status = -12 [ 97.392333][ T4846] (syz.3.166,4846,0):ocfs2_group_add:499 ERROR: Can't read the group descriptor # 18446744069414589487 from the device. [ 97.456921][ T4286] ocfs2: Unmounting device (7,3) on (node local) [ 97.515158][ T4875] ntfs: (device nullb0): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 97.524855][ T4875] ntfs: (device nullb0): read_ntfs_boot_sector(): Mount option errors=recover not used. Aborting without trying to recover. [ 97.556849][ T4773] appleir 0003:05AC:8243.0004: unknown main item tag 0x0 [ 97.564613][ T4773] appleir 0003:05AC:8243.0004: No inputs registered, leaving [ 97.595993][ T4875] ntfs: (device nullb0): ntfs_fill_super(): Not an NTFS volume. [ 97.606390][ T4881] device macvtap1 entered promiscuous mode [ 97.612903][ T4881] device vlan0 entered promiscuous mode [ 97.629802][ T4773] appleir 0003:05AC:8243.0004: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 97.675556][ T4881] team0: Device macvtap1 failed to register rx_handler [ 97.696488][ T4881] device vlan0 left promiscuous mode [ 97.869088][ T4773] usb 1-1: USB disconnect, device number 3 [ 97.941331][ T4881] syz.1.178 (4881) used greatest stack depth: 20752 bytes left [ 98.017669][ T4884] fido_id[4884]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 98.384695][ T4883] loop3: detected capacity change from 0 to 40427 [ 98.413416][ T4883] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 98.450502][ T4883] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 98.487693][ T4883] F2FS-fs (loop3): invalid crc_offset: 33558524 [ 98.520172][ T4883] F2FS-fs (loop3): Found nat_bits in checkpoint [ 98.629040][ T4261] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 98.648301][ T4883] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 98.665574][ T4883] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 98.770183][ T4892] loop1: detected capacity change from 0 to 32768 [ 98.820367][ T4261] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 98.840894][ T4261] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 98.880146][ T4892] XFS (loop1): Mounting V5 Filesystem [ 98.906840][ T4261] usb 5-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 98.969955][ T4261] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.986139][ T4261] usb 5-1: Product: syz [ 98.990460][ T4261] usb 5-1: Manufacturer: syz [ 98.995452][ T4261] usb 5-1: SerialNumber: syz [ 99.013677][ T4892] XFS (loop1): Ending clean mount [ 99.058501][ T27] audit: type=1800 audit(1790221070.521:74): pid=4892 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.182" name="file1" dev="loop1" ino=4422 res=0 errno=0 [ 99.349513][ T4892] syz.1.182 (4892) used greatest stack depth: 20672 bytes left [ 99.409174][ T4272] XFS (loop1): Unmounting Filesystem [ 99.515534][ T4283] Bluetooth: hci5: command 0x1003 tx timeout [ 99.527609][ T4279] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 100.014838][ T954] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 100.032874][ T4261] usb 5-1: failed to send ARPC request 1: -71 [ 100.044966][ T4261] usb 5-1: failed to execute ARPC: -71 [ 100.065408][ T4261] usb 5-1: failed to set connected state for cport 0: -71 [ 100.086441][ T4261] greybus greybus1: 0/0:0: failed to set connected state: -71 [ 100.106219][ T4261] usb 5-1: failed to send ARPC request 3: -71 [ 100.112631][ T4261] usb 5-1: failed to execute ARPC: -71 [ 100.127666][ T4261] usb 5-1: failed to clear cport 0: -71 [ 100.133468][ T4261] greybus greybus1: 0/0:0: failed to clear host cport: -71 [ 100.160797][ T4261] es2_ap_driver: probe of 5-1:1.0 failed with error -71 [ 100.188456][ T4261] usb 5-1: USB disconnect, device number 4 [ 100.228134][ T4935] loop3: detected capacity change from 0 to 1024 [ 100.232641][ T954] usb 3-1: config index 0 descriptor too short (expected 50, got 32) [ 100.248602][ T954] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 100.278614][ T954] usb 3-1: New USB device found, idVendor=0525, idProduct=127a, bcdDevice= 1.00 [ 100.313754][ T954] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.338840][ T954] usb 3-1: Product: syz [ 100.343055][ T954] usb 3-1: Manufacturer: syz [ 100.352592][ T954] usb 3-1: SerialNumber: syz [ 100.383469][ T954] usb_debug 3-1:1.0: debug converter detected [ 100.399300][ T954] usb 3-1: debug converter now attached to ttyUSB0 [ 100.562078][ T4943] Illegal XDP return value 4294967274 on prog (id 21) dev N/A, expect packet loss! [ 100.590831][ T4772] usb 3-1: USB disconnect, device number 2 [ 100.627025][ T4772] debug ttyUSB0: debug converter now disconnected from ttyUSB0 [ 100.635988][ T4772] usb_debug 3-1:1.0: device disconnected [ 101.977204][ T4988] netlink: 80 bytes leftover after parsing attributes in process `syz.4.215'. [ 102.544434][ T4985] loop0: detected capacity change from 0 to 32768 [ 102.575721][ T4985] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.216 (4985) [ 102.642661][ T4985] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 102.662944][ T4985] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 102.672019][ T4985] BTRFS info (device loop0): force clearing of disk cache [ 102.689316][ T4985] BTRFS info (device loop0): enabling auto defrag [ 102.697318][ T4985] BTRFS info (device loop0): max_inline at 0 [ 102.723647][ T4985] BTRFS info (device loop0): enabling disk space caching [ 102.734335][ T4985] BTRFS info (device loop0): disk space caching is enabled [ 102.989712][ T4985] BTRFS info (device loop0): enabling ssd optimizations [ 103.016521][ T4985] BTRFS info (device loop0): rebuilding free space tree [ 103.065297][ T4985] BTRFS info (device loop0): disabling free space tree [ 103.072472][ T5034] loop4: detected capacity change from 0 to 256 [ 103.079653][ T4985] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 103.090701][ T5034] exfat: Unknown parameter 'dmask&u‹xT0000000P000002002' [ 103.113116][ T4985] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 103.154286][ T5034] nullb0: [CUMANA/ADFS] p1 [ 103.154484][ T5034] nullb0: p1 size 3609636590 extends beyond EOD, truncated [ 103.457854][ T4522] BTRFS info (device loop0): qgroup scan completed (inconsistency flag cleared) [ 103.734750][ T4276] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 103.910247][ T5051] device bond_slave_0 entered promiscuous mode [ 103.916796][ T5051] device bond_slave_1 entered promiscuous mode [ 104.063383][ T5051] device bond_slave_0 left promiscuous mode [ 104.069415][ T5051] device bond_slave_1 left promiscuous mode [ 104.114640][ T5033] loop2: detected capacity change from 0 to 32768 [ 104.205604][ T5058] netlink: 64 bytes leftover after parsing attributes in process `syz.3.241'. [ 104.367189][ T5063] device syzkaller1 entered promiscuous mode [ 104.642043][ T5073] loop0: detected capacity change from 0 to 512 [ 104.719710][ T5073] EXT4-fs error (device loop0): ext4_orphan_get:1409: inode #15: comm syz.0.247: inode has both inline data and extents flags [ 104.798165][ T5073] EXT4-fs error (device loop0): ext4_orphan_get:1414: comm syz.0.247: couldn't read orphan inode 15 (err -117) [ 104.878491][ T5073] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 104.885628][ T5080] loop4: detected capacity change from 0 to 2048 [ 104.948689][ T5080] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 105.054249][ T4276] EXT4-fs (loop0): unmounting filesystem. [ 105.092517][ T5053] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 105.217546][ T5087] loop5: detected capacity change from 0 to 7 [ 105.284133][ T5053] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.316807][ T5053] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 105.391906][ T5053] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.399960][ T5053] usb 2-1: Product: syz [ 105.413808][ T5053] usb 2-1: Manufacturer: syz [ 105.454446][ T5053] usb 2-1: SerialNumber: syz [ 105.685683][ T5081] loop1: detected capacity change from 0 to 8 [ 105.728936][ T5081] SQUASHFS error: Unable to read inode 0x11f [ 105.758436][ T5104] bond0: invalid ARP target specified [ 105.785773][ T5053] cdc_ncm 2-1:1.0: bind() failure [ 105.797388][ T5053] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 105.818210][ T5053] cdc_ncm 2-1:1.1: bind() failure [ 105.854320][ T5053] usb 2-1: USB disconnect, device number 3 [ 106.254976][ T5116] loop3: detected capacity change from 0 to 1024 [ 106.331617][ T5108] loop2: detected capacity change from 0 to 32768 [ 106.358882][ T5108] XFS: noikeep mount option is deprecated. [ 106.438195][ T5108] XFS (loop2): Mounting V5 Filesystem [ 106.468285][ T27] audit: type=1800 audit(1790221077.934:75): pid=5116 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.264" name="file1" dev="loop3" ino=3 res=0 errno=0 [ 106.631200][ T5116] hfsplus: bad catalog file entry [ 106.649048][ T5108] XFS (loop2): Ending clean mount [ 106.683833][ T5108] XFS (loop2): Quotacheck needed: Please wait. [ 106.742212][ T4501] hfsplus: b-tree write err: -5, ino 3 [ 106.836119][ T5108] XFS (loop2): Quotacheck: Done. [ 107.000735][ T5137] netlink: 28 bytes leftover after parsing attributes in process `syz.1.270'. [ 107.058915][ T4280] XFS (loop2): Unmounting Filesystem [ 107.173703][ T5141] loop1: detected capacity change from 0 to 512 [ 107.206912][ T5141] EXT4-fs (loop1): orphan cleanup on readonly fs [ 107.213549][ T5141] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 107.222671][ T5141] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 107.256453][ T5141] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #13: comm syz.1.273: attempt to clear invalid blocks 2 len 1 [ 107.308669][ T5141] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.273: invalid indirect mapped block 1819239214 (level 0) [ 107.373352][ T5141] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.273: invalid indirect mapped block 1819239214 (level 1) [ 107.428729][ T5141] EXT4-fs (loop1): 1 truncate cleaned up [ 107.451034][ T5141] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 107.586519][ T5141] EXT4-fs (loop1): Quota file not on filesystem root. Journaled quota will not work [ 107.711167][ T4272] EXT4-fs (loop1): unmounting filesystem. [ 107.759355][ T5155] loop2: detected capacity change from 0 to 2048 [ 107.859357][ T5155] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 108.068801][ T5168] loop3: detected capacity change from 0 to 764 [ 108.127292][ T5168] rock: directory entry would overflow storage [ 108.180954][ T5168] rock: sig=0x4654, size=5, remaining=4 [ 108.201901][ T5173] loop4: detected capacity change from 0 to 16 [ 108.296970][ T5173] erofs: (device loop4): mounted with root inode @ nid 36. [ 108.323410][ T5154] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 108.400727][ T5154] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 498 with error 28 [ 108.470765][ T5154] EXT4-fs (loop2): This should not happen!! Data will be lost [ 108.470765][ T5154] [ 108.502353][ T5154] EXT4-fs (loop2): Total free blocks count 0 [ 108.540681][ T5154] EXT4-fs (loop2): Free/Dirty block details [ 108.547425][ T5154] EXT4-fs (loop2): free_blocks=4096 [ 108.560147][ T5154] EXT4-fs (loop2): dirty_blocks=512 [ 108.572751][ T5154] EXT4-fs (loop2): Block reservation details [ 108.600277][ T5154] EXT4-fs (loop2): i_reserved_data_blocks=32 [ 108.829989][ T4280] EXT4-fs (loop2): unmounting filesystem. [ 109.023338][ T5192] loop1: detected capacity change from 0 to 2048 [ 109.043577][ T5199] netlink: 180 bytes leftover after parsing attributes in process `syz.3.296'. [ 109.078407][ T5192] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 109.363090][ T5192] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 109.406230][ T5208] EXT4-fs (loop1): Delayed block allocation failed for inode 16 at logical offset 18 with max blocks 496 with error 28 [ 109.465427][ T5208] EXT4-fs (loop1): This should not happen!! Data will be lost [ 109.465427][ T5208] [ 109.484990][ T5208] EXT4-fs (loop1): Total free blocks count 0 [ 109.491991][ T5208] EXT4-fs (loop1): Free/Dirty block details [ 109.498047][ T5208] EXT4-fs (loop1): free_blocks=4096 [ 109.514962][ T14] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 109.530585][ T5208] EXT4-fs (loop1): dirty_blocks=512 [ 109.539680][ T5208] EXT4-fs (loop1): Block reservation details [ 109.549164][ T5208] EXT4-fs (loop1): i_reserved_data_blocks=32 [ 109.678268][ T4272] EXT4-fs (loop1): unmounting filesystem. [ 109.738520][ T14] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 109.757918][ T14] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.781099][ T14] usb 1-1: Product: syz [ 109.785404][ T14] usb 1-1: Manufacturer: syz [ 109.806806][ T14] usb 1-1: SerialNumber: syz [ 109.838395][ T5223] loop1: detected capacity change from 0 to 256 [ 109.897382][ T5223] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xa9436649, utbl_chksum : 0xe619d30d) [ 109.929007][ T4522] Bluetooth: hci5: Frame reassembly failed (-84) [ 110.100348][ T14] rtl8150 1-1:1.0: couldn't reset the device [ 110.106643][ T14] rtl8150: probe of 1-1:1.0 failed with error -5 [ 110.159237][ T14] usb 1-1: USB disconnect, device number 4 [ 110.350075][ T5236] loop3: detected capacity change from 0 to 512 [ 110.376287][ T5236] EXT4-fs (loop3): 1 truncate cleaned up [ 110.387343][ T5236] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 110.676775][ T4286] EXT4-fs (loop3): unmounting filesystem. [ 110.857307][ T5234] netlink: 'syz.2.311': attribute type 4 has an invalid length. [ 111.551006][ T5273] loop3: detected capacity change from 0 to 256 [ 111.624497][ T5273] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011e7e, chksum : 0x04bede55, utbl_chksum : 0xe619d30d) [ 111.948190][ T5283] "syz.3.330" (5283) uses obsolete ecb(arc4) skcipher [ 111.995684][ T4279] Bluetooth: hci5: command 0x1003 tx timeout [ 112.002944][ T4283] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 112.148843][ T14] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 112.228579][ T5053] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 112.339939][ T14] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 112.351468][ T14] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 112.361939][ T14] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 112.371309][ T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.390748][ T5278] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 112.442082][ T5053] usb 3-1: Using ep0 maxpacket: 16 [ 112.453478][ T5053] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 112.484771][ T5293] loop3: detected capacity change from 0 to 32768 [ 112.488762][ T5053] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.503373][ T5053] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 112.514660][ T5053] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 112.527365][ T5293] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.334 (5293) [ 112.569783][ T5053] usb 3-1: config 0 interface 0 has no altsetting 0 [ 112.576675][ T5053] usb 3-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00 [ 112.586504][ T5053] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.602487][ T5293] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 112.614649][ T5053] usb 3-1: config 0 descriptor?? [ 112.653439][ T5293] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 112.672127][ T5293] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 112.683923][ T5293] BTRFS info (device loop3): use zstd compression, level 3 [ 112.693743][ T5293] BTRFS info (device loop3): using free space tree [ 112.793978][ T954] usb 1-1: USB disconnect, device number 5 [ 112.940690][ T5293] BTRFS info (device loop3): enabling ssd optimizations [ 113.077560][ T5053] logitech-djreceiver 0003:046D:C53A.0005: hiddev0,hidraw0: USB HID vff.fc Device [HID 046d:c53a] on usb-dummy_hcd.2-1/input0 [ 113.327962][ T14] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 113.370473][ T5303] loop4: detected capacity change from 0 to 32768 [ 113.447653][ T5303] XFS (loop4): Mounting V5 Filesystem [ 113.481180][ T5303] XFS (loop4): Ending clean mount [ 113.611926][ T14] usb 4-1: unable to get BOS descriptor or descriptor too short [ 113.625684][ T14] usb 4-1: no configurations [ 113.633907][ T14] usb 4-1: can't read configurations, error -22 [ 113.677381][ T4281] XFS (loop4): Unmounting Filesystem [ 114.197406][ T4286] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 114.517357][ T4314] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 114.673791][ T5339] loop0: detected capacity change from 0 to 40427 [ 114.695035][ T5339] F2FS-fs (loop0): Corrupted extension count (64 + 1 > 64) [ 114.716927][ T5339] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 114.728862][ T4314] usb 5-1: Using ep0 maxpacket: 32 [ 114.758154][ T4314] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.781654][ T4314] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 114.794573][ T5339] F2FS-fs (loop0): invalid crc value [ 114.817718][ T4314] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 114.831629][ T4314] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.859213][ T5339] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 114.897500][ T4314] usb 5-1: config 0 descriptor?? [ 115.075407][ T4261] usb 3-1: USB disconnect, device number 3 [ 115.115930][ T5339] F2FS-fs (loop0): Start checkpoint disabled! [ 115.163593][ T5339] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 115.173782][ T5339] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 115.249646][ T5364] netlink: 8 bytes leftover after parsing attributes in process `syz.3.351'. [ 115.325636][ T5366] loop1: detected capacity change from 0 to 128 [ 115.350283][ T4314] savu 0003:1E7D:2D5A.0006: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0 [ 115.389409][ T5366] EXT4-fs (loop1): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 115.428194][ T4388] udevd[4388]: incorrect ext4 checksum on /dev/loop1 [ 115.523471][ T4504] kworker/u4:15: attempt to access beyond end of device [ 115.523471][ T4504] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 115.632916][ T5369] loop3: detected capacity change from 0 to 512 [ 115.652429][ T5054] usb 5-1: USB disconnect, device number 5 [ 115.680551][ T5369] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 115.729614][ T5369] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 115.760921][ T5369] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 115.798601][ T5369] System zones: 0-2, 18-18, 34-35 [ 115.846451][ T5367] fido_id[5367]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 115.887673][ T5369] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 115.910249][ T5378] Bluetooth: MGMT ver 1.22 [ 115.972184][ T5369] fscrypt (loop3, inode 12): Error -61 getting encryption context [ 115.991214][ T5369] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.353: bg 0: block 353: padding at end of block bitmap is not set [ 116.134503][ T4286] EXT4-fs (loop3): unmounting filesystem. [ 116.441756][ T5390] loop0: detected capacity change from 0 to 512 [ 116.495577][ T5390] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802c198, mo2=0003] [ 116.514315][ T5390] System zones: 1-12 [ 116.567644][ T5390] EXT4-fs (loop0): 1 truncate cleaned up [ 116.573956][ T5390] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 116.583015][ T5053] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 116.710874][ T4276] EXT4-fs (loop0): unmounting filesystem. [ 116.789981][ T5053] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 116.816862][ T5053] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 116.838748][ T5400] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 116.847999][ T5053] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 116.896840][ T5053] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 116.914193][ T5053] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.929838][ T5053] usb 4-1: Product: syz [ 116.964545][ T5053] usb 4-1: Manufacturer: syz [ 116.970300][ T5053] usb 4-1: SerialNumber: syz [ 117.000944][ T5053] hub 4-1:1.0: bad descriptor, ignoring hub [ 117.036071][ T5053] hub: probe of 4-1:1.0 failed with error -5 [ 117.170704][ T5412] loop2: detected capacity change from 0 to 1024 [ 117.218690][ T5053] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 117.333315][ T5412] hfsplus: xattr searching failed [ 117.425937][ T4520] hfsplus: b-tree write err: -5, ino 3 [ 117.479974][ T14] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 117.705789][ T14] usb 2-1: Using ep0 maxpacket: 16 [ 117.717982][ T14] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 117.739997][ T14] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.759508][ T14] usb 2-1: Product: syz [ 117.765904][ T14] usb 2-1: Manufacturer: syz [ 117.770539][ T14] usb 2-1: SerialNumber: syz [ 117.788956][ T5409] loop4: detected capacity change from 0 to 32768 [ 117.805744][ T5384] usb 4-1: reset high-speed USB device number 5 using dummy_hcd [ 117.889355][ T5409] XFS (loop4): Mounting V5 Filesystem [ 117.997391][ T5409] XFS (loop4): Ending clean mount [ 118.059046][ T5384] usb 4-1: device firmware changed [ 118.068273][ T5053] usb 4-1: USB disconnect, device number 5 [ 118.080202][ T5053] usblp0: removed [ 118.152005][ T4281] XFS (loop4): Unmounting Filesystem [ 118.265502][ T5053] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 118.487607][ T5053] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 118.517674][ T5053] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 118.548718][ T5053] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 118.606148][ T5053] usb 4-1: string descriptor 0 read error: -22 [ 118.612473][ T5053] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 118.647808][ T5053] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.697218][ T5053] hub 4-1:1.0: bad descriptor, ignoring hub [ 118.713569][ T5053] hub: probe of 4-1:1.0 failed with error -5 [ 118.844713][ T14] snd-usb-audio: probe of 2-1:1.0 failed with error -71 [ 118.877716][ T14] usb 2-1: USB disconnect, device number 4 [ 118.946824][ T5053] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 6 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 119.000484][ T5053] usb 4-1: USB disconnect, device number 6 [ 119.023793][ T5053] usblp0: removed [ 119.670019][ T5474] loop1: detected capacity change from 0 to 4096 [ 119.780090][ T27] audit: type=1800 audit(1790221091.251:76): pid=5474 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.394" name="file1" dev="loop1" ino=0 res=0 errno=0 [ 120.267728][ T5496] device-mapper: ioctl: Invalid ioctl structure: name t, dev f801 [ 120.290233][ T5493] block device autoloading is deprecated and will be removed. [ 120.313851][ T5499] netlink: 8 bytes leftover after parsing attributes in process `syz.0.403'. [ 120.344581][ T5053] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 120.540902][ T5053] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.569941][ T5053] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 120.587318][ T5053] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 120.603735][ T5053] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 120.622655][ T5053] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.659224][ T5053] usb 2-1: config 0 descriptor?? [ 120.860458][ T5501] loop4: detected capacity change from 0 to 32768 [ 120.935585][ T5501] JBD2: Ignoring recovery information on journal [ 120.996264][ T5501] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 121.109216][ T5053] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 121.121804][ T5053] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 121.250293][ T4281] ocfs2: Unmounting device (7,4) on (node local) [ 121.407759][ T14] usb 2-1: USB disconnect, device number 5 [ 121.613945][ T4261] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 121.743836][ T49] Bluetooth: hci5: command 0x1003 tx timeout [ 121.751977][ T4283] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 121.810613][ T4261] usb 5-1: unable to get BOS descriptor or descriptor too short [ 121.843250][ T4261] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 121.880231][ T4261] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 121.920277][ T4261] usb 5-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 121.940396][ T4261] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.960624][ T4261] usb 5-1: Product: syz [ 121.965184][ T4261] usb 5-1: Manufacturer: syz [ 121.979505][ T4261] usb 5-1: SerialNumber: syz [ 122.015584][ T4261] usb 5-1: selecting invalid altsetting 1 [ 122.031742][ T4261] usb 5-1: unit 6 not found! [ 122.096658][ T5541] overlayfs: failed to decode file handle (len=2, type=248, flags=0, err=-22) [ 122.313584][ T4318] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 122.452883][ T5543] loop1: detected capacity change from 0 to 32768 [ 122.496305][ T5543] JBD2: Ignoring recovery information on journal [ 122.498883][ T4318] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.543505][ T5543] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 122.563543][ T4318] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.604606][ T4318] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 122.633407][ T4318] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 122.673374][ T4318] usb 4-1: Manufacturer: syz [ 122.702504][ T4318] usb 4-1: config 0 descriptor?? [ 122.787375][ T5543] syz.1.422 (5543) used greatest stack depth: 18624 bytes left [ 122.813854][ T4272] ocfs2: Unmounting device (7,1) on (node local) [ 122.828438][ T4261] usb 5-1: 2:0: failed to get current value for ch 0 (-71) [ 122.894296][ T4261] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 122.923494][ T4261] usb 5-1: USB disconnect, device number 6 [ 122.960685][ T5554] netlink: 12 bytes leftover after parsing attributes in process `syz.2.426'. [ 123.087817][ T5556] loop2: detected capacity change from 0 to 164 [ 123.145220][ T4348] udevd[4348]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 123.168922][ T5556] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 123.546505][ T4318] input: syz Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0008/input/input8 [ 123.647890][ T4318] input: syz Pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0008/input/input9 [ 123.680841][ T4318] input: syz Touch Strip as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0008/input/input10 [ 123.710662][ T5572] input: syz0 as /devices/virtual/input/input12 [ 123.729372][ T4318] input: syz Dial as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0008/input/input11 [ 123.786311][ T4318] uclogic 0003:256C:006D.0008: input,hiddev0,hidraw0: USB HID v0.00 Keypad [syz] on usb-dummy_hcd.3-1/input0 [ 123.843509][ T4318] usb 4-1: USB disconnect, device number 7 [ 124.046169][ T5581] netlink: 'syz.1.436': attribute type 7 has an invalid length. [ 124.069681][ T5581] netlink: 32 bytes leftover after parsing attributes in process `syz.1.436'. [ 124.093235][ T5581] netlink: 8 bytes leftover after parsing attributes in process `syz.1.436'. [ 124.117193][ T5578] fido_id[5578]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 124.244752][ T5586] loop1: detected capacity change from 0 to 512 [ 124.268505][ T5586] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 124.283815][ T5586] System zones: 1-12 [ 124.326215][ T5586] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #12: comm syz.1.438: missing EA_INODE flag [ 124.443532][ T5586] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.438: error while reading EA inode 12 err=-117 [ 124.512573][ T5586] EXT4-fs (loop1): 1 orphan inode deleted [ 124.518430][ T5586] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 124.898186][ T4272] EXT4-fs (loop1): unmounting filesystem. [ 125.156610][ T5617] loop3: detected capacity change from 0 to 256 [ 125.362042][ T4318] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 125.404162][ T5619] delete_channel: no stack [ 125.529753][ T4261] kernel read not supported for file /usbmon9 (pid: 4261 comm: kworker/1:3) [ 125.555325][ T4318] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 125.568693][ T4318] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 125.598406][ T4318] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 125.624928][ T4318] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 125.694193][ T4318] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 125.720619][ T4318] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 125.741202][ T4318] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 125.757301][ T4318] usb 2-1: Product: syz [ 125.767184][ T4318] usb 2-1: Manufacturer: syz [ 125.793864][ T4318] cdc_wdm 2-1:1.0: skipping garbage [ 125.806842][ T4318] cdc_wdm 2-1:1.0: skipping garbage [ 125.848985][ T4318] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 125.869884][ T4318] cdc_wdm 2-1:1.0: Unknown control protocol [ 126.038489][ T5626] loop2: detected capacity change from 0 to 32768 [ 126.107095][ T5626] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 126.137168][ T5626] JBD2: Ignoring recovery information on journal [ 126.213421][ T5626] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 126.282643][ T27] audit: type=1326 audit(1790221097.764:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5647 comm="syz.0.460" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59f539e159 code=0x7ffc0000 [ 126.369626][ T27] audit: type=1326 audit(1790221097.794:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5647 comm="syz.0.460" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59f539e159 code=0x7ffc0000 [ 126.426342][ T5617] FAT-fs (loop3): error, fat_get_cluster: detected the cluster chain loop (i_pos 194) [ 126.439764][ T27] audit: type=1326 audit(1790221097.804:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5647 comm="syz.0.460" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59f539e159 code=0x7ffc0000 [ 126.522317][ T27] audit: type=1326 audit(1790221097.804:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5647 comm="syz.0.460" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59f539e159 code=0x7ffc0000 [ 126.563941][ T27] audit: type=1326 audit(1790221097.804:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5647 comm="syz.0.460" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f59f539e159 code=0x7ffc0000 [ 126.598153][ T27] audit: type=1326 audit(1790221097.804:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5647 comm="syz.0.460" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f59f533f4d9 code=0x7ffc0000 [ 126.626437][ T4280] ocfs2: Unmounting device (7,2) on (node local) [ 126.632895][ T27] audit: type=1326 audit(1790221097.804:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5647 comm="syz.0.460" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59f539e159 code=0x7ffc0000 [ 126.773535][ T27] audit: type=1326 audit(1790221097.804:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5647 comm="syz.0.460" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59f539e159 code=0x7ffc0000 [ 126.798366][ T5054] usb 2-1: USB disconnect, device number 6 [ 126.830166][ T5655] 9pnet: p9_errstr2errno: server reported unknown error Dfß ¥®r [ 126.830166][ T5655] °’°µ [ 126.893074][ T5657] bridge0: port 3(vlan2) entered blocking state [ 126.911208][ T27] audit: type=1326 audit(1790221097.804:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5647 comm="syz.0.460" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59f539e159 code=0x7ffc0000 [ 126.917365][ T5657] bridge0: port 3(vlan2) entered disabled state [ 126.988056][ T27] audit: type=1326 audit(1790221097.804:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5647 comm="syz.0.460" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59f539e159 code=0x7ffc0000 [ 127.012558][ T5657] device vlan2 entered promiscuous mode [ 127.012573][ T5657] device syz_tun entered promiscuous mode [ 127.018232][ T5657] bridge0: port 3(vlan2) entered blocking state [ 127.030623][ T5657] bridge0: port 3(vlan2) entered forwarding state [ 127.888311][ T5690] loop1: detected capacity change from 0 to 512 [ 127.892676][ T5689] netlink: 52 bytes leftover after parsing attributes in process `syz.4.477'. [ 127.959507][ T5690] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 127.997097][ T5690] ext4 filesystem being mounted at /92/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.196396][ T4272] EXT4-fs (loop1): unmounting filesystem. [ 128.366796][ T5700] bridge0: port 3(syz_tun) entered blocking state [ 128.393376][ T5700] bridge0: port 3(syz_tun) entered disabled state [ 128.413010][ T5700] device syz_tun entered promiscuous mode [ 128.432344][ T5700] bridge0: port 3(syz_tun) entered blocking state [ 128.439993][ T5700] bridge0: port 3(syz_tun) entered forwarding state [ 128.465808][ T5705] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 128.610584][ T5053] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 128.800209][ T5053] usb 4-1: Using ep0 maxpacket: 16 [ 128.840809][ T5053] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 128.850044][ T5053] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.868148][ T5711] input: syz0 as /devices/virtual/input/input13 [ 128.898034][ T5053] usb 4-1: Product: syz [ 128.910130][ T5053] usb 4-1: Manufacturer: syz [ 128.920418][ T5053] usb 4-1: SerialNumber: syz [ 128.943427][ T5053] usb 4-1: config 0 descriptor?? [ 128.963127][ T5053] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 128.994251][ T5053] usb 4-1: Detected FT-X [ 129.169801][ T5053] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 129.235441][ T5720] loop2: detected capacity change from 0 to 1024 [ 129.268190][ T5704] loop4: detected capacity change from 0 to 32768 [ 129.471181][ T5704] XFS (loop4): Mounting V5 Filesystem [ 129.601153][ T5053] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 129.673924][ T5704] XFS (loop4): Ending clean mount [ 129.713845][ T5704] XFS (loop4): Quotacheck needed: Please wait. [ 129.819151][ T5342] usb 4-1: USB disconnect, device number 8 [ 129.825131][ T4283] Bluetooth: hci4: command 0x0411 tx timeout [ 129.845554][ T5704] XFS (loop4): Quotacheck: Done. [ 129.885119][ T5342] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 129.935850][ T5342] ftdi_sio 4-1:0.0: device disconnected [ 130.070990][ T4281] XFS (loop4): Unmounting Filesystem [ 130.789098][ T5763] loop4: detected capacity change from 0 to 128 [ 130.790214][ T5761] loop1: detected capacity change from 0 to 1024 [ 130.855109][ T5761] EXT4-fs error (device loop1): __ext4_fill_super:5465: comm syz.1.505: inode #2: comm syz.1.505: iget: illegal inode # [ 130.889202][ T4261] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 130.926152][ T5761] EXT4-fs (loop1): get root inode failed [ 130.934190][ T5761] EXT4-fs (loop1): mount failed [ 131.049943][ T5773] loop2: detected capacity change from 0 to 16 [ 131.067504][ T5773] erofs: (device loop2): mounted with root inode @ nid 36. [ 131.081432][ T4261] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.098853][ T5773] overlayfs: upper fs does not support file handles, falling back to index=off. [ 131.113135][ T4261] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.145088][ T4261] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 131.176182][ T4261] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.207438][ T4261] usb 1-1: config 0 descriptor?? [ 131.347352][ T5776] loop3: detected capacity change from 0 to 4096 [ 131.361170][ T5776] EXT4-fs: inline encryption not supported [ 131.386583][ T5776] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 131.440502][ T4261] usbhid 1-1:0.0: can't add hid device: -71 [ 131.446628][ T4261] usbhid: probe of 1-1:0.0 failed with error -71 [ 131.489878][ T4314] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 131.506789][ T5776] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=8842c019, mo2=0003] [ 131.527152][ T4261] usb 1-1: USB disconnect, device number 6 [ 131.553803][ T5776] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 131.603128][ T5776] EXT4-fs (loop3): shut down requested (2) [ 131.703630][ T4314] usb 2-1: Using ep0 maxpacket: 8 [ 131.710706][ T4314] usb 2-1: config 0 has no interfaces? [ 131.733562][ T4286] EXT4-fs (loop3): unmounting filesystem. [ 131.735153][ T4314] usb 2-1: New USB device found, idVendor=12d1, idProduct=fae2, bcdDevice=70.8b [ 131.759801][ T4314] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.768122][ T4314] usb 2-1: Product: syz [ 131.778011][ T4314] usb 2-1: Manufacturer: syz [ 131.783477][ T4314] usb 2-1: SerialNumber: syz [ 131.830050][ T4314] usb 2-1: config 0 descriptor?? [ 131.938664][ T5784] loop2: detected capacity change from 0 to 512 [ 131.968311][ T5784] EXT4-fs: Ignoring removed nobh option [ 132.054958][ T4318] usb 2-1: USB disconnect, device number 7 [ 132.065755][ T5784] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 132.068895][ T4261] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 132.096909][ T5784] ext4 filesystem being mounted at /109/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 132.178330][ T5792] loop4: detected capacity change from 0 to 256 [ 132.214017][ T5792] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011e7e, chksum : 0x04bede55, utbl_chksum : 0xe619d30d) [ 132.247161][ T4280] EXT4-fs (loop2): unmounting filesystem. [ 132.269987][ T4261] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.291376][ T4261] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.316183][ T4261] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 132.375241][ T4261] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.415209][ T4261] usb 1-1: config 0 descriptor?? [ 132.466411][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.666334][ T5802] loop4: detected capacity change from 0 to 256 [ 132.686774][ T5802] exfat: Deprecated parameter 'namecase' [ 132.688520][ T4314] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 132.711764][ T5802] exfat: Deprecated parameter 'namecase' [ 132.782898][ T5802] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 132.843165][ T4261] cp2112 0003:10C4:EA90.0009: unknown main item tag 0x0 [ 132.854356][ T4261] cp2112 0003:10C4:EA90.0009: unknown main item tag 0x0 [ 132.878848][ T4261] cp2112 0003:10C4:EA90.0009: unknown main item tag 0x0 [ 132.885960][ T4261] cp2112 0003:10C4:EA90.0009: unknown main item tag 0x0 [ 132.899667][ T4314] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 132.918325][ T4314] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 132.928798][ T4261] cp2112 0003:10C4:EA90.0009: unknown main item tag 0x0 [ 132.935791][ T4261] cp2112 0003:10C4:EA90.0009: unknown main item tag 0x0 [ 132.945059][ T4314] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 132.955278][ T4261] cp2112 0003:10C4:EA90.0009: unknown main item tag 0x0 [ 132.962412][ T4314] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 132.976834][ T4261] cp2112 0003:10C4:EA90.0009: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 132.998343][ T4314] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 133.018239][ T5342] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 133.023992][ T4314] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 133.056047][ T4314] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 133.066162][ T4314] usb 4-1: Product: syz [ 133.076291][ T4314] usb 4-1: Manufacturer: syz [ 133.095380][ T4261] cp2112 0003:10C4:EA90.0009: error requesting version [ 133.111883][ T4314] cdc_wdm 4-1:1.0: skipping garbage [ 133.129251][ T4261] cp2112: probe of 0003:10C4:EA90.0009 failed with error -71 [ 133.137180][ T4314] cdc_wdm 4-1:1.0: skipping garbage [ 133.165358][ T4261] usb 1-1: USB disconnect, device number 7 [ 133.174324][ T4314] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 133.192470][ T4314] cdc_wdm 4-1:1.0: Unknown control protocol [ 133.219538][ T5808] loop4: detected capacity change from 0 to 4096 [ 133.262466][ T5342] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 133.276861][ T5808] EXT4-fs: inline encryption not supported [ 133.284959][ T5342] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.300058][ T5342] usb 2-1: Product: syz [ 133.307417][ T5342] usb 2-1: Manufacturer: syz [ 133.317945][ T5342] usb 2-1: SerialNumber: syz [ 133.325467][ T5342] usb 2-1: config 0 descriptor?? [ 133.345358][ T5808] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 133.366490][ T5808] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=8842c019, mo2=0003] [ 133.393250][ T5808] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 133.439681][ T5806] loop2: detected capacity change from 0 to 32768 [ 133.472811][ T5808] EXT4-fs (loop4): shut down requested (2) [ 133.492278][ T5809] fido_id[5809]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 133.522166][ T5806] JBD2: Ignoring recovery information on journal [ 133.603670][ T5806] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 133.668361][ T4281] EXT4-fs (loop4): unmounting filesystem. [ 133.749562][ T5342] usb 2-1: Firmware version (0.0) predates our first public release. [ 133.787795][ T5342] usb 2-1: Please update to version 0.2 or newer [ 133.812333][ T5342] usb 2-1: Firmware: build [ 133.863317][ T4280] ocfs2: Unmounting device (7,2) on (node local) [ 134.042026][ T5342] usb 2-1: USB disconnect, device number 8 [ 134.146413][ T5053] usb 4-1: USB disconnect, device number 9 [ 134.833562][ T5841] loop1: detected capacity change from 0 to 4096 [ 134.854461][ T5841] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512) [ 134.957873][ T5841] ntfs3: loop1: ino=5, "/" directory corrupted [ 134.976525][ T5841] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 135.572869][ T5845] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.537 (5845) [ 136.393294][ T5853] set_capacity_and_notify: 1 callbacks suppressed [ 136.393309][ T5853] loop1: detected capacity change from 0 to 32768 [ 136.420356][ T5845] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 136.456301][ C0] sched: RT throttling activated [ 136.456576][ T5845] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 136.601332][ T5845] BTRFS info (device loop4): force clearing of disk cache [ 136.618039][ T5853] JBD2: Ignoring recovery information on journal [ 136.665543][ T5845] BTRFS info (device loop4): enabling auto defrag [ 136.724278][ T5845] BTRFS info (device loop4): max_inline at 0 [ 136.776820][ T5845] BTRFS info (device loop4): enabling disk space caching [ 136.862413][ T5853] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 136.871752][ T5845] BTRFS info (device loop4): disk space caching is enabled [ 136.974058][ T4318] input: syz0 as /devices/virtual/misc/uhid/0005:FFFD057E:0305.000A/input/input14 [ 137.073819][ T4318] hid-generic 0005:FFFD057E:0305.000A: input,hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 137.242859][ T5845] BTRFS info (device loop4): enabling ssd optimizations [ 137.299573][ T5845] BTRFS info (device loop4): rebuilding free space tree [ 137.374306][ T5845] BTRFS info (device loop4): disabling free space tree [ 137.383229][ T4272] ocfs2: Unmounting device (7,1) on (node local) [ 137.452779][ T4318] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 137.466114][ T5845] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 137.490509][ T5845] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 137.667565][ T4318] usb 3-1: unable to get BOS descriptor or descriptor too short [ 137.695785][ T4318] usb 3-1: no configurations [ 137.703430][ T4318] usb 3-1: can't read configurations, error -22 [ 137.731646][ T4512] BTRFS info (device loop4): qgroup scan completed (inconsistency flag cleared) [ 137.783235][ T4281] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 138.015929][ T5921] netlink: 56 bytes leftover after parsing attributes in process `syz.3.560'. [ 138.391353][ T5930] loop3: detected capacity change from 0 to 512 [ 138.465287][ T5930] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 138.526300][ T5930] System zones: 1-12 [ 138.540570][ T5936] loop2: detected capacity change from 0 to 1024 [ 138.551852][ T5930] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #12: comm syz.3.562: missing EA_INODE flag [ 138.578100][ T5930] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.562: error while reading EA inode 12 err=-117 [ 138.605917][ T5936] EXT4-fs error (device loop2): __ext4_fill_super:5465: comm syz.2.565: inode #2: comm syz.2.565: iget: illegal inode # [ 138.621392][ T5930] EXT4-fs (loop3): 1 orphan inode deleted [ 138.632242][ T5938] device syzkaller1 entered promiscuous mode [ 138.634396][ T5930] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 138.677050][ T5936] EXT4-fs (loop2): get root inode failed [ 138.683073][ T5936] EXT4-fs (loop2): mount failed [ 138.725242][ T5926] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 138.917192][ T5926] usb 1-1: Using ep0 maxpacket: 16 [ 138.929609][ T5926] usb 1-1: unable to get BOS descriptor or descriptor too short [ 138.962528][ T5926] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 138.988340][ T5926] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 139.022654][ T5926] usb 1-1: New USB device found, idVendor=1235, idProduct=8212, bcdDevice= 0.40 [ 139.043668][ T4286] EXT4-fs (loop3): unmounting filesystem. [ 139.053115][ T5926] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.064857][ T5926] usb 1-1: Product: syz [ 139.074022][ T5926] usb 1-1: Manufacturer: syz [ 139.081922][ T5926] usb 1-1: SerialNumber: syz [ 139.285257][ T4316] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 139.314148][ T5926] usb 1-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8212); report any issues to g@b4.vu [ 139.350228][ T5926] usb 1-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 139.372366][ T5926] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 139.382880][ T5926] usb 1-1: USB disconnect, device number 8 [ 139.412331][ T5956] loop4: detected capacity change from 0 to 2048 [ 139.444695][ T5956] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 139.506058][ T4316] usb 3-1: Using ep0 maxpacket: 8 [ 139.513541][ T4316] usb 3-1: config 0 has no interfaces? [ 139.551909][ T4316] usb 3-1: New USB device found, idVendor=12d1, idProduct=fae2, bcdDevice=70.8b [ 139.571424][ T4316] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.589463][ T4316] usb 3-1: Product: syz [ 139.613950][ T4316] usb 3-1: Manufacturer: syz [ 139.628980][ T4316] usb 3-1: SerialNumber: syz [ 139.645712][ T5602] udevd[5602]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 139.662652][ T4316] usb 3-1: config 0 descriptor?? [ 139.787625][ T5952] loop3: detected capacity change from 0 to 32768 [ 139.837465][ T5952] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.569 (5952) [ 139.880825][ T4316] usb 3-1: USB disconnect, device number 6 [ 139.915788][ T5952] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 139.936304][ T5952] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 139.947332][ T5952] BTRFS info (device loop3): force clearing of disk cache [ 139.995739][ T5952] BTRFS info (device loop3): enabling auto defrag [ 140.040234][ T5952] BTRFS info (device loop3): max_inline at 0 [ 140.050907][ T5952] BTRFS info (device loop3): enabling disk space caching [ 140.076878][ T5952] BTRFS info (device loop3): disk space caching is enabled [ 140.354878][ T5952] BTRFS info (device loop3): enabling ssd optimizations [ 140.375857][ T5952] BTRFS info (device loop3): rebuilding free space tree [ 140.410895][ T5952] BTRFS info (device loop3): disabling free space tree [ 140.429530][ T5952] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 140.442941][ T5952] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 140.614517][ T4316] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 140.628162][ T4512] BTRFS info (device loop3): qgroup scan completed (inconsistency flag cleared) [ 140.641857][ T5994] loop2: detected capacity change from 0 to 512 [ 140.717942][ T4286] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 140.744738][ T5994] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 140.773113][ T5994] System zones: 1-12 [ 140.821266][ T5994] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #12: comm syz.2.580: missing EA_INODE flag [ 140.851168][ T5994] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.580: error while reading EA inode 12 err=-117 [ 140.864061][ T4316] usb 1-1: unable to get BOS descriptor or descriptor too short [ 140.886251][ T4316] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 140.905176][ T5994] EXT4-fs (loop2): 1 orphan inode deleted [ 140.914512][ T5994] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 140.924185][ T4316] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 140.956012][ T4316] usb 1-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 140.974501][ T4316] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.982549][ T4316] usb 1-1: Product: syz [ 141.006571][ T4316] usb 1-1: Manufacturer: syz [ 141.011231][ T4316] usb 1-1: SerialNumber: syz [ 141.043304][ T4316] usb 1-1: selecting invalid altsetting 1 [ 141.069128][ T4316] usb 1-1: unit 6 not found! [ 141.372757][ T4280] EXT4-fs (loop2): unmounting filesystem. [ 141.851418][ T4316] usb 1-1: 2:0: failed to get current value for ch 0 (-71) [ 141.897583][ T4316] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 141.915444][ T4316] usb 1-1: USB disconnect, device number 9 [ 142.051392][ T6013] loop2: detected capacity change from 0 to 128 [ 142.125717][ T5602] udevd[5602]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 142.162010][ T6013] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 142.214585][ T6013] ext4 filesystem being mounted at /127/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 142.534165][ T4280] EXT4-fs (loop2): unmounting filesystem. [ 142.639198][ T6031] loop1: detected capacity change from 0 to 1024 [ 143.131172][ T6048] Invalid argument reading file caps for ./file0 [ 143.177295][ T6052] loop1: detected capacity change from 0 to 256 [ 143.572348][ T6065] input: syz1 as /devices/virtual/input/input15 [ 143.611196][ T6062] loop1: detected capacity change from 0 to 2048 [ 143.786833][ T6062] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 144.080096][ T6072] loop2: detected capacity change from 0 to 128 [ 144.240899][ T6072] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 144.280747][ T6072] ext4 filesystem being mounted at /133/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 144.589632][ T6069] loop4: detected capacity change from 0 to 131072 [ 144.642385][ T6069] F2FS-fs (loop4): Invalid log sectorsize (67108873) [ 144.649189][ T6069] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 144.659838][ T6069] F2FS-fs (loop4): invalid crc value [ 144.721626][ T6069] F2FS-fs (loop4): Found nat_bits in checkpoint [ 144.801545][ T6069] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 144.811662][ T6069] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 144.838769][ T6084] loop1: detected capacity change from 0 to 2048 [ 144.901316][ T6084] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 144.913299][ T27] kauditd_printk_skb: 7 callbacks suppressed [ 144.913312][ T27] audit: type=1800 audit(1790221116.403:94): pid=6069 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.612" name="file1" dev="loop4" ino=7 res=0 errno=0 [ 144.914637][ T6086] device syzkaller1 entered promiscuous mode [ 144.948165][ T4280] EXT4-fs (loop2): unmounting filesystem. [ 145.038955][ T6090] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 146.006960][ T6111] loop4: detected capacity change from 0 to 1024 [ 146.026013][ T6111] EXT4-fs: Ignoring removed nomblk_io_submit option [ 146.074665][ T4318] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 146.120497][ T6111] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 146.313915][ T4318] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 146.324232][ T4318] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 146.357128][ T4318] usb 3-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice= 1.00 [ 146.385834][ T4318] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.412645][ T4281] EXT4-fs (loop4): unmounting filesystem. [ 146.422186][ T4318] idmouse 3-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached [ 146.810988][ T6131] device syzkaller1 entered promiscuous mode [ 147.336624][ T6141] loop4: detected capacity change from 0 to 2048 [ 147.392907][ T6141] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 147.457073][ T6146] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 148.313698][ T5926] usb 3-1: USB disconnect, device number 7 [ 148.335246][ T5926] idmouse 3-1:1.0: disconnected [ 148.842491][ T6162] nvme nvme0: failed to connect socket: -101 [ 148.900334][ T4318] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 149.090136][ T4318] usb 5-1: Using ep0 maxpacket: 8 [ 149.096890][ T4318] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 149.132834][ T4318] usb 5-1: config 179 has no interface number 0 [ 149.139172][ T4318] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 149.189901][ T6178] device bridge0 entered promiscuous mode [ 149.198353][ T4318] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 149.216335][ T27] audit: type=1800 audit(1790221120.696:95): pid=6179 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.652" name="report_length" dev="configfs" ino=39556 res=0 errno=0 [ 149.249991][ T4318] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 149.259175][ T6178] device dummy0 entered promiscuous mode [ 149.281655][ T4318] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 149.313615][ T4318] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 149.320167][ T6178] device bridge0 left promiscuous mode [ 149.348610][ T4318] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 149.368059][ T4318] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.400872][ T6166] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 149.462191][ T6178] device dummy0 left promiscuous mode [ 149.741860][ T5926] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input16 [ 150.117744][ T5926] usb 5-1: USB disconnect, device number 7 [ 150.123892][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 150.132213][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 150.149493][ T5926] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 150.292629][ T6199] loop3: detected capacity change from 0 to 256 [ 150.948243][ T6214] loop1: detected capacity change from 0 to 128 [ 151.064875][ T6214] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 151.112383][ T6214] hpfs: filesystem error: improperly stopped [ 151.118450][ T6214] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 151.166549][ T6214] hpfs: You really don't want any checks? You are crazy... [ 151.215805][ T6214] hpfs: hpfs_map_sector(): read error [ 151.309049][ T6214] hpfs: code page support is disabled [ 151.333452][ T6214] hpfs: hpfs_map_4sectors(): unaligned read [ 151.401378][ T6214] hpfs: hpfs_map_4sectors(): unaligned read [ 151.444183][ T6214] hpfs: filesystem error: unable to find root dir [ 151.641540][ T6214] hpfs: hpfs_map_4sectors(): unaligned read [ 151.750420][ T6214] hpfs: hpfs_map_sector(): read error [ 151.772377][ T6214] hpfs: hpfs_map_4sectors(): unaligned read [ 151.834067][ T6214] hpfs: hpfs_map_sector(): read error [ 152.004234][ T6239] netlink: 8 bytes leftover after parsing attributes in process `syz.0.681'. [ 152.055914][ T6239] netlink: 8 bytes leftover after parsing attributes in process `syz.0.681'. [ 152.183552][ T6244] netlink: 40 bytes leftover after parsing attributes in process `syz.4.683'. [ 152.231588][ T6244] netlink: 2 bytes leftover after parsing attributes in process `syz.4.683'. [ 152.454732][ T6255] loop3: detected capacity change from 0 to 128 [ 152.517358][ T6255] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 152.568379][ T6255] hpfs: filesystem error: improperly stopped [ 152.594811][ T6255] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 152.638385][ T6255] hpfs: You really don't want any checks? You are crazy... [ 152.661248][ T6255] hpfs: hpfs_map_sector(): read error [ 152.671895][ T6255] hpfs: code page support is disabled [ 152.688934][ T6255] hpfs: hpfs_map_4sectors(): unaligned read [ 152.695060][ T6255] hpfs: hpfs_map_4sectors(): unaligned read [ 152.742203][ T6255] hpfs: filesystem error: unable to find root dir [ 152.820788][ T6255] hpfs: hpfs_map_4sectors(): unaligned read [ 152.826944][ T6255] hpfs: hpfs_map_sector(): read error [ 153.074738][ T6273] input: syz0 as /devices/virtual/input/input17 [ 153.090036][ T6272] device bridge0 entered promiscuous mode [ 153.113541][ T6272] device dummy0 entered promiscuous mode [ 153.152192][ T6272] device bridge0 left promiscuous mode [ 153.178340][ T6272] device dummy0 left promiscuous mode [ 154.018253][ T4317] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 154.127118][ T6311] loop3: detected capacity change from 0 to 2048 [ 154.169625][ T6311] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 154.237660][ T4317] usb 2-1: Using ep0 maxpacket: 8 [ 154.246711][ T4317] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 154.279946][ T4317] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 154.289320][ T6319] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 154.317412][ T4317] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.365886][ T4317] usb 2-1: config 0 descriptor?? [ 154.609814][ T4317] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 154.864282][ T4317] usb 2-1: USB disconnect, device number 9 [ 154.870300][ C0] iowarrior 2-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19 [ 155.436937][ T4317] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 155.638722][ T4317] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 155.659923][ T4317] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 155.704179][ T4317] usb 1-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice= 1.00 [ 155.725088][ T4317] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.805573][ T4317] idmouse 1-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached [ 156.596163][ T6369] device vxcan3 entered promiscuous mode [ 157.649044][ T6398] loop8: detected capacity change from 0 to 8 [ 157.676802][ T126] usb 1-1: USB disconnect, device number 10 [ 157.692359][ T6398] Dev loop8: unable to read RDB block 8 [ 157.705602][ T126] idmouse 1-1:1.0: disconnected [ 157.721969][ T6398] loop8: unable to read partition table [ 157.738077][ T6398] loop8: partition table beyond EOD, truncated [ 157.775737][ T6398] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 157.992200][ T6410] loop2: detected capacity change from 0 to 128 [ 158.029919][ T6410] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 158.042429][ T6410] ext4 filesystem being mounted at /165/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 158.221920][ T4280] EXT4-fs (loop2): unmounting filesystem. [ 158.795357][ T126] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 158.903023][ T6436] FAULT_INJECTION: forcing a failure. [ 158.903023][ T6436] name failslab, interval 1, probability 0, space 0, times 0 [ 158.994740][ T6436] CPU: 1 PID: 6436 Comm: syz.3.766 Not tainted syzkaller #0 [ 159.002122][ T6436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 159.012232][ T6436] Call Trace: [ 159.015546][ T6436] [ 159.018513][ T6436] dump_stack_lvl+0x188/0x24e [ 159.023238][ T6436] ? show_regs_print_info+0x12/0x12 [ 159.028621][ T6436] ? load_image+0x410/0x410 [ 159.033171][ T6436] ? __might_sleep+0xd0/0xd0 [ 159.037810][ T6436] ? __lock_acquire+0x7c40/0x7c40 [ 159.042903][ T6436] should_fail_ex+0x390/0x4c0 [ 159.047641][ T6436] should_failslab+0x5/0x20 [ 159.052173][ T6436] slab_pre_alloc_hook+0x59/0x300 [ 159.057241][ T6436] ? __ia32_sys_get_robust_list+0x100/0x100 [ 159.059468][ T126] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 159.063162][ T6436] kmem_cache_alloc+0x56/0x2f0 [ 159.063192][ T6436] ? prepare_creds+0x3c/0x610 [ 159.083598][ T6436] prepare_creds+0x3c/0x610 [ 159.088151][ T6436] do_faccessat+0xe8/0x9e0 [ 159.092623][ T6436] ? __sb_end_write+0x1c0/0x1c0 [ 159.097535][ T6436] ? lockdep_hardirqs_on+0x94/0x140 [ 159.101256][ T126] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 159.102775][ T6436] do_syscall_64+0x4c/0xa0 [ 159.102802][ T6436] ? clear_bhb_loop+0x60/0xb0 [ 159.102825][ T6436] ? clear_bhb_loop+0x60/0xb0 [ 159.126417][ T6436] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 159.132384][ T6436] RIP: 0033:0x7f8e4b19e159 [ 159.136839][ T6436] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 159.141915][ T126] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 159.156554][ T6436] RSP: 002b:00007f8e4c036028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b7 [ 159.156580][ T6436] RAX: ffffffffffffffda RBX: 00007f8e4b425fa0 RCX: 00007f8e4b19e159 [ 159.156594][ T6436] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 159.156605][ T6436] RBP: 00007f8e4b23506b R08: 0000000000000000 R09: 0000000000000000 [ 159.156616][ T6436] R10: 0000000000001100 R11: 0000000000000246 R12: 0000000000000000 [ 159.156628][ T6436] R13: 00007f8e4b426038 R14: 00007f8e4b425fa0 R15: 00007ffcff8979e8 [ 159.156654][ T6436] [ 159.350951][ T126] usb 1-1: New USB device found, idVendor=056a, idProduct=002a, bcdDevice= 0.00 [ 159.401484][ T126] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.426201][ T126] usb 1-1: config 0 descriptor?? [ 159.881776][ T126] wacom 0003:056A:002A.000B: ignoring exceeding usage max [ 159.893266][ T126] wacom 0003:056A:002A.000B: Unknown device_type for 'HID 056a:002a'. Assuming pen. [ 159.934748][ T126] wacom 0003:056A:002A.000B: hidraw0: USB HID v0.00 Device [HID 056a:002a] on usb-dummy_hcd.0-1/input0 [ 159.948118][ T126] input: Wacom Intuos5 M Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:056A:002A.000B/input/input18 [ 160.100362][ T126] usb 1-1: USB disconnect, device number 11 [ 160.470703][ T6450] fido_id[6450]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 160.684462][ T4313] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 160.896020][ T4313] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 160.907064][ T4313] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 160.937549][ T4313] usb 2-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice= 1.00 [ 160.969934][ T6472] loop2: detected capacity change from 0 to 512 [ 160.977152][ T4313] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.031608][ T4313] idmouse 2-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached [ 161.099178][ T6472] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 161.333204][ T4280] EXT4-fs (loop2): unmounting filesystem. [ 162.330865][ T6514] bq24190-charger 0-006b: No support for SMBUS_BYTE_DATA [ 162.349808][ T6514] i2c i2c-0: new_device: Instantiated device bq24190 at 0x6b [ 162.829978][ T6532] loop4: detected capacity change from 0 to 8 [ 162.865528][ T6532] SQUASHFS error: lzo decompression failed, data probably corrupt [ 162.903310][ T6532] SQUASHFS error: Failed to read block 0x91: -5 [ 162.929974][ T6532] SQUASHFS error: Unable to read metadata cache entry [8f] [ 162.940974][ T126] usb 2-1: USB disconnect, device number 10 [ 162.954821][ T126] idmouse 2-1:1.0: disconnected [ 162.960631][ T6532] SQUASHFS error: Unable to read inode 0x11f [ 163.021221][ T6536] loop3: detected capacity change from 0 to 64 [ 163.355446][ T4286] hfs: node 4:3 still has 1 user(s)! [ 163.813359][ T6561] loop4: detected capacity change from 0 to 256 [ 164.131094][ T6571] loop3: detected capacity change from 0 to 512 [ 164.213557][ T6571] EXT4-fs: Ignoring removed oldalloc option [ 164.312138][ T6571] EXT4-fs (loop3): Test dummy encryption mode enabled [ 164.360151][ T6571] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 164.579987][ T4286] EXT4-fs (loop3): unmounting filesystem. [ 165.050293][ T6595] loop3: detected capacity change from 0 to 2048 [ 165.098086][ T6595] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 165.178349][ T27] audit: type=1800 audit(1790221136.674:96): pid=6595 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.829" name="file1" dev="loop3" ino=1415 res=0 errno=0 [ 165.761852][ T4315] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 165.900510][ T6624] loop6: detected capacity change from 0 to 8 [ 165.910513][ T5602] Dev loop6: unable to read RDB block 8 [ 165.916897][ T5602] loop6: unable to read partition table [ 165.925617][ T5602] loop6: partition table beyond EOD, truncated [ 165.940825][ T6624] Dev loop6: unable to read RDB block 8 [ 165.951652][ T6624] loop6: unable to read partition table [ 165.961780][ T4315] usb 1-1: Using ep0 maxpacket: 32 [ 165.968026][ T6624] loop6: partition table beyond EOD, truncated [ 165.975692][ T4315] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 165.999178][ T6624] loop_reread_partitions: partition scan of loop6 (þ被xü^>Ñà–ì) failed (rc=-5) [ 166.014394][ T4315] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 42170, setting to 1024 [ 166.048926][ T4315] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 166.058627][ T4315] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.104916][ T4315] usb 1-1: config 0 descriptor?? [ 166.131714][ T6610] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 166.148846][ T4315] hub 1-1:0.0: USB hub found [ 166.362750][ T4315] hub 1-1:0.0: 1 port detected [ 167.175846][ T6656] netlink: 'syz.4.856': attribute type 1 has an invalid length. [ 167.199127][ T4315] hub 1-1:0.0: hub_ext_port_status failed (err = -71) [ 167.212993][ T126] usb 1-1: USB disconnect, device number 12 [ 167.404880][ T6655] netlink: 8 bytes leftover after parsing attributes in process `syz.4.856'. [ 167.645566][ T6658] netlink: 8 bytes leftover after parsing attributes in process `syz.2.857'. [ 167.670652][ T6658] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 168.210894][ T6673] device erspan0 entered promiscuous mode [ 168.255936][ T6676] i2c i2c-0: Failed to register i2c client bq24190 at 0x6b (-16) [ 168.715612][ T6695] netlink: 16 bytes leftover after parsing attributes in process `syz.4.873'. [ 168.814582][ T6701] loop3: detected capacity change from 0 to 128 [ 168.976381][ T6703] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 169.009545][ T6705] capability: warning: `syz.1.878' uses deprecated v2 capabilities in a way that may be insecure [ 169.612723][ T6723] netlink: 8 bytes leftover after parsing attributes in process `syz.4.884'. [ 169.625889][ T6725] loop3: detected capacity change from 0 to 256 [ 169.676991][ T6725] exfat: Deprecated parameter 'utf8' [ 169.688648][ T6725] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xdbc48169, utbl_chksum : 0xe619d30d) [ 169.900741][ T6729] loop4: detected capacity change from 0 to 512 [ 169.919705][ T4315] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 169.964588][ T6729] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 170.013595][ T6729] System zones: 1-12 [ 170.059919][ T6729] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #12: comm syz.4.888: missing EA_INODE flag [ 170.100344][ T6729] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.888: error while reading EA inode 12 err=-117 [ 170.139872][ T4315] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 170.159895][ T6729] EXT4-fs (loop4): 1 orphan inode deleted [ 170.171372][ T6729] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 170.180042][ T4315] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 170.220219][ T4315] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 170.252077][ T4315] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.285533][ T4315] usb 2-1: Product: syz [ 170.296057][ T4315] usb 2-1: Manufacturer: syz [ 170.300792][ T4315] usb 2-1: SerialNumber: syz [ 170.320290][ T4315] usb 2-1: config 0 descriptor?? [ 170.328008][ T6727] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 170.338958][ T6727] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 170.505818][ T4281] EXT4-fs (loop4): unmounting filesystem. [ 170.556886][ T6727] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 170.586076][ T6739] netlink: 656 bytes leftover after parsing attributes in process `syz.2.894'. [ 170.595667][ T6727] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 170.825699][ T6750] loop4: detected capacity change from 0 to 1024 [ 170.876802][ T6750] EXT4-fs (loop4): can't mount with data_err=abort, fs mounted w/o journal [ 170.916995][ T6750] netlink: 12 bytes leftover after parsing attributes in process `syz.4.896'. [ 170.967233][ T6750] netlink: 12 bytes leftover after parsing attributes in process `syz.4.896'. [ 171.021210][ T6727] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.050214][ T6727] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.066313][ T4315] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 171.279040][ T4315] dm9601 2-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 171.330965][ T4315] usb 2-1: USB disconnect, device number 11 [ 171.349458][ T6761] loop2: detected capacity change from 0 to 4096 [ 171.374756][ T6761] EXT4-fs: Ignoring removed mblk_io_submit option [ 171.578989][ T5926] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 171.667872][ T6761] EXT4-fs (loop2): Test dummy encryption mode enabled [ 171.690996][ T6761] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 171.760777][ T5926] usb 1-1: not running at top speed; connect to a high speed hub [ 171.787115][ T5926] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 171.803385][ T6780] loop3: detected capacity change from 0 to 128 [ 171.845698][ T5926] usb 1-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 171.905474][ T6780] FAT-fs (loop3): error, corrupted file size (i_pos 548, 512) [ 171.909032][ T5926] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.972575][ T6780] FAT-fs (loop3): Filesystem has been set read-only [ 171.982020][ T5926] usb 1-1: Found UVC 1.00 device (046d:0825) [ 172.012132][ T6783] FAT-fs (loop3): error, corrupted file size (i_pos 548, 512) [ 172.045783][ T6786] loop1: detected capacity change from 0 to 512 [ 172.074121][ T6786] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 172.117395][ T6784] loop4: detected capacity change from 0 to 2048 [ 172.134007][ T6786] EXT4-fs (loop1): 1 truncate cleaned up [ 172.148679][ T6786] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 172.191663][ T6786] EXT4-fs (loop1): shut down requested (1) [ 172.227147][ T6784] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 172.275920][ T4272] EXT4-fs (loop1): unmounting filesystem. [ 172.338121][ T6761] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 172.373331][ T27] audit: type=1800 audit(1790221143.867:97): pid=6784 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.908" name="file1" dev="loop4" ino=1415 res=0 errno=0 [ 172.394971][ T5926] usb 1-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 172.399783][ T6793] netlink: 'syz.3.911': attribute type 12 has an invalid length. [ 172.437845][ T6793] netlink: 'syz.3.911': attribute type 29 has an invalid length. [ 172.448613][ T6793] netlink: 148 bytes leftover after parsing attributes in process `syz.3.911'. [ 172.463783][ T5926] videodev: could not get a free minor [ 172.482150][ T6793] netlink: 'syz.3.911': attribute type 1 has an invalid length. [ 172.498409][ T5926] uvcvideo 1-1:1.1: Failed to register meta-cap device (-23). [ 172.662984][ T4280] EXT4-fs (loop2): unmounting filesystem. [ 172.671266][ T4315] usb 1-1: USB disconnect, device number 13 [ 173.163777][ T6811] loop3: detected capacity change from 0 to 256 [ 173.179662][ T6811] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 173.232715][ T6812] input: syz1 as /devices/virtual/input/input21 [ 173.598534][ T6824] loop3: detected capacity change from 0 to 128 [ 173.645355][ T6824] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 173.694357][ T6824] hpfs: filesystem error: improperly stopped [ 173.728969][ T6824] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 173.736770][ T6824] hpfs: You really don't want any checks? You are crazy... [ 173.751060][ T6824] hpfs: Code page index out of array [ 173.756512][ T6824] hpfs: code page support is disabled [ 173.762618][ T6824] hpfs: hpfs_map_4sectors(): unaligned read [ 173.771153][ T6824] hpfs: hpfs_map_4sectors(): unaligned read [ 173.782437][ T6824] hpfs: filesystem error: unable to find root dir [ 174.370612][ T6853] syz.1.935 sent an empty control message without MSG_MORE. [ 174.566488][ T6855] netlink: 16 bytes leftover after parsing attributes in process `syz.1.937'. [ 174.736577][ T6863] netlink: 8 bytes leftover after parsing attributes in process `syz.0.941'. [ 174.816193][ T6867] device-mapper: ioctl: Unable to rename non-existent device, to j [ 174.902193][ T6869] loop1: detected capacity change from 0 to 2048 [ 174.976557][ T6869] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 174.986077][ T6869] ext4 filesystem being mounted at /172/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 175.034105][ T6869] fs-verity: sha512 using implementation "sha512-avx2" [ 175.144912][ T4272] EXT4-fs (loop1): unmounting filesystem. [ 175.258786][ T6882] netlink: 'syz.3.949': attribute type 1 has an invalid length. [ 177.150119][ T6922] loop2: detected capacity change from 0 to 32768 [ 177.166082][ T4315] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 177.241490][ T6922] XFS (loop2): Mounting V5 Filesystem [ 177.303975][ T6922] XFS (loop2): Ending clean mount [ 177.366299][ T4315] usb 2-1: Using ep0 maxpacket: 32 [ 177.380521][ T4315] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 177.407502][ T6922] XFS (loop2): Quotacheck needed: Please wait. [ 177.421130][ T4315] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 177.432864][ T4315] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 177.453969][ T4315] usb 2-1: Product: syz [ 177.470148][ T4315] usb 2-1: Manufacturer: syz [ 177.487713][ T4315] usb 2-1: SerialNumber: syz [ 177.516533][ T6922] XFS (loop2): Quotacheck: Done. [ 177.520417][ T4315] usb 2-1: config 0 descriptor?? [ 177.534351][ T6938] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 177.544466][ T4315] hub 2-1:0.0: bad descriptor, ignoring hub [ 177.551018][ T4315] hub: probe of 2-1:0.0 failed with error -5 [ 177.656808][ T6958] FAULT_INJECTION: forcing a failure. [ 177.656808][ T6958] name failslab, interval 1, probability 0, space 0, times 0 [ 177.679767][ T6958] CPU: 1 PID: 6958 Comm: syz.0.975 Not tainted syzkaller #0 [ 177.687119][ T6958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 177.697232][ T6958] Call Trace: [ 177.700543][ T6958] [ 177.703507][ T6958] dump_stack_lvl+0x188/0x24e [ 177.708244][ T6958] ? show_regs_print_info+0x12/0x12 [ 177.713499][ T6958] ? load_image+0x410/0x410 [ 177.718060][ T6958] ? __might_sleep+0xd0/0xd0 [ 177.722698][ T6958] ? __lock_acquire+0x7c40/0x7c40 [ 177.727788][ T6958] should_fail_ex+0x390/0x4c0 [ 177.732562][ T6958] should_failslab+0x5/0x20 [ 177.737096][ T6958] slab_pre_alloc_hook+0x59/0x300 [ 177.742216][ T6958] ? copy_net_ns+0x17c/0x5b0 [ 177.746884][ T6958] __kmem_cache_alloc_node+0x4f/0x270 [ 177.752308][ T6958] ? copy_net_ns+0x17c/0x5b0 [ 177.756995][ T6958] kmalloc_trace+0x26/0xe0 [ 177.761457][ T6958] copy_net_ns+0x17c/0x5b0 [ 177.765936][ T6958] create_new_namespaces+0x3ce/0x700 [ 177.771290][ T6958] unshare_nsproxy_namespaces+0x116/0x160 [ 177.777055][ T6958] ksys_unshare+0x4f6/0x8e0 [ 177.781587][ T6958] ? sighand_ctor+0x40/0x40 [ 177.786120][ T6958] ? lock_chain_count+0x20/0x20 [ 177.791008][ T6958] ? syscall_enter_from_user_mode+0x21/0x80 [ 177.796943][ T6958] __x64_sys_unshare+0x34/0x40 [ 177.801727][ T6958] do_syscall_64+0x4c/0xa0 [ 177.806169][ T6958] ? clear_bhb_loop+0x60/0xb0 [ 177.810856][ T6958] ? clear_bhb_loop+0x60/0xb0 [ 177.815566][ T6958] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 177.821490][ T6958] RIP: 0033:0x7f59f539e159 [ 177.825927][ T6958] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 177.845576][ T6958] RSP: 002b:00007f59f61d9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 177.854022][ T6958] RAX: ffffffffffffffda RBX: 00007f59f5625fa0 RCX: 00007f59f539e159 [ 177.862010][ T6958] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000042000000 [ 177.870003][ T6958] RBP: 00007f59f543506b R08: 0000000000000000 R09: 0000000000000000 [ 177.878014][ T6958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 177.886022][ T6958] R13: 00007f59f5626038 R14: 00007f59f5625fa0 R15: 00007ffc7ba65bf8 [ 177.894046][ T6958] [ 178.027336][ T6964] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 178.043287][ T4280] XFS (loop2): Unmounting Filesystem [ 178.346078][ T6972] netlink: 11 bytes leftover after parsing attributes in process `syz.4.982'. [ 178.355118][ T6972] netlink: 28 bytes leftover after parsing attributes in process `syz.4.982'. [ 178.364389][ T6972] netlink: 28 bytes leftover after parsing attributes in process `syz.4.982'. [ 178.381236][ T4316] usb 2-1: USB disconnect, device number 12 [ 178.516294][ T6976] loop4: detected capacity change from 0 to 4096 [ 178.556694][ T4316] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 178.601435][ T6976] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 178.757262][ T4316] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 1024, setting to 64 [ 178.817646][ T4316] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 178.845150][ T4316] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 178.871200][ T4316] usb 2-1: Product: syz [ 178.876150][ T4316] usb 2-1: Manufacturer: syz [ 178.880789][ T4316] usb 2-1: SerialNumber: syz [ 178.917489][ T4316] usb 2-1: config 0 descriptor?? [ 178.924592][ T6963] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 178.943425][ T4281] EXT4-fs (loop4): unmounting filesystem. [ 178.952205][ T4316] hub 2-1:0.0: bad descriptor, ignoring hub [ 178.988358][ T4316] hub: probe of 2-1:0.0 failed with error -5 [ 179.285227][ T4316] usb 2-1: USB disconnect, device number 13 [ 180.032843][ T6994] loop4: detected capacity change from 0 to 40427 [ 180.093288][ T6994] F2FS-fs (loop4): Invalid log blocks per segment (1) [ 180.156228][ T6994] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 180.205122][ T6994] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x35f7 [ 180.213335][ T6994] F2FS-fs (loop4): build fault injection attr: rate: 690, type: 0x3ffff [ 180.325340][ T6994] F2FS-fs (loop4): invalid crc value [ 180.356453][ T6994] F2FS-fs (loop4): Found nat_bits in checkpoint [ 180.479803][ T6994] F2FS-fs (loop4): Start checkpoint disabled! [ 180.534361][ T6994] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 180.541511][ T6994] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 180.648776][ T27] audit: type=1800 audit(1790221152.151:98): pid=6994 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.990" name="file1" dev="loop4" ino=10 res=0 errno=0 [ 180.712610][ T6994] syz.4.990: attempt to access beyond end of device [ 180.712610][ T6994] loop4: rw=2049, sector=45096, nr_sectors = 128 limit=40427 [ 180.724333][ T27] audit: type=1800 audit(1790221152.191:99): pid=6994 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.990" name="file1" dev="loop4" ino=10 res=0 errno=0 [ 180.792245][ T7038] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1008'. [ 180.821856][ T6994] F2FS-fs (loop4) : inject write IO error in f2fs_write_end_io of __submit_merged_bio+0x290/0x6c0 [ 181.155101][ T4520] kworker/u4:22: attempt to access beyond end of device [ 181.155101][ T4520] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 181.179316][ T7027] loop3: detected capacity change from 0 to 32768 [ 181.259193][ T7045] loop2: detected capacity change from 0 to 2048 [ 181.307218][ T7027] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 181.464945][ T7045] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 181.473513][ T7045] ext4 filesystem being mounted at /218/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 181.650791][ T4286] ocfs2: Unmounting device (7,3) on (node local) [ 181.661799][ T4280] EXT4-fs (loop2): unmounting filesystem. [ 182.096730][ T7070] loop3: detected capacity change from 0 to 256 [ 182.732330][ T7090] loop3: detected capacity change from 0 to 2048 [ 182.821812][ T7095] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 182.886000][ T7095] NILFS (loop3): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 182.907387][ T7095] NILFS error (device loop3): nilfs_bmap_propagate: broken bmap (inode number=4) [ 182.971792][ T7095] Remounting filesystem read-only [ 183.563035][ T4286] NILFS (loop3): disposed unprocessed dirty file(s) when stopping log writer [ 184.341325][ T7140] loop1: detected capacity change from 0 to 1024 [ 184.356785][ T7140] EXT4-fs: Ignoring removed bh option [ 184.459394][ T7140] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 184.479369][ T7140] ext4 filesystem being mounted at /190/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 184.611136][ T7140] EXT4-fs error (device loop1): ext4_map_blocks:747: inode #15: block 3: comm syz.1.1052: lblock 3 mapped to illegal pblock 3 (length 3) [ 184.689858][ T7140] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 184.750406][ T7140] EXT4-fs (loop1): This should not happen!! Data will be lost [ 184.750406][ T7140] [ 184.771253][ T7151] EXT4-fs error (device loop1): ext4_ext_remove_space:2945: inode #15: comm syz.1.1052: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 184.799431][ T7128] loop4: detected capacity change from 0 to 32768 [ 184.816278][ T7150] loop2: detected capacity change from 0 to 4096 [ 184.837590][ T7128] (syz.4.1046,7128,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 184.868566][ T7128] (syz.4.1046,7128,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 184.869324][ T7151] EXT4-fs error (device loop1) in ext4_setattr:5695: Corrupt filesystem [ 184.903083][ T7150] EXT4-fs: Ignoring removed nomblk_io_submit option [ 184.947826][ T7150] EXT4-fs (loop2): Test dummy encryption mode enabled [ 184.963511][ T7150] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 184.974277][ T7128] JBD2: Ignoring recovery information on journal [ 184.985336][ T7150] System zones: 0-5 [ 185.003857][ T7150] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 185.073123][ T7150] EXT4-fs (loop2): shut down requested (2) [ 185.093292][ T7128] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 185.266726][ T4272] EXT4-fs (loop1): unmounting filesystem. [ 185.292921][ T4280] EXT4-fs (loop2): unmounting filesystem. [ 185.330205][ T7128] [ 185.332622][ T7128] ====================================================== [ 185.339665][ T7128] WARNING: possible circular locking dependency detected [ 185.346707][ T7128] syzkaller #0 Not tainted [ 185.351134][ T7128] ------------------------------------------------------ [ 185.358160][ T7128] syz.4.1046/7128 is trying to acquire lock: [ 185.364147][ T7128] ffff88807d60c650 (sb_internal#3){.+.+}-{0:0}, at: ocfs2_acquire_dquot+0x69a/0xb80 [ 185.373571][ T7128] [ 185.373571][ T7128] but task is already holding lock: [ 185.380951][ T7128] ffff888072546a20 (&ocfs2_quota_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_lock_global_qf+0x1fe/0x290 [ 185.391842][ T7128] [ 185.391842][ T7128] which lock already depends on the new lock. [ 185.391842][ T7128] [ 185.402346][ T7128] [ 185.402346][ T7128] the existing dependency chain (in reverse order) is: [ 185.411371][ T7128] [ 185.411371][ T7128] -> #6 (&ocfs2_quota_ip_alloc_sem_key){++++}-{3:3}: [ 185.420249][ T7128] down_write+0x36/0x60 [ 185.424951][ T7128] ocfs2_lock_global_qf+0x1fe/0x290 [ 185.430685][ T7128] ocfs2_acquire_dquot+0x2b8/0xb80 [ 185.436335][ T7128] dqget+0x713/0xbb0 [ 185.440772][ T7128] __dquot_initialize+0x3a9/0xd00 [ 185.446339][ T7128] ocfs2_get_init_inode+0x144/0x1b0 [ 185.452097][ T7128] ocfs2_mknod+0xbe8/0x25e0 [ 185.457135][ T7128] ocfs2_mkdir+0x1b6/0x4b0 [ 185.462082][ T7128] vfs_mkdir+0x386/0x570 [ 185.466869][ T7128] do_mkdirat+0x1d8/0x440 [ 185.471750][ T7128] __x64_sys_mkdirat+0x85/0x90 [ 185.477055][ T7128] do_syscall_64+0x4c/0xa0 [ 185.482030][ T7128] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 185.488470][ T7128] [ 185.488470][ T7128] -> #5 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#7){+.+.}-{3:3}: [ 185.499005][ T7128] down_write+0x36/0x60 [ 185.503702][ T7128] ocfs2_lock_global_qf+0x1d7/0x290 [ 185.509440][ T7128] ocfs2_acquire_dquot+0x2b8/0xb80 [ 185.515092][ T7128] dqget+0x713/0xbb0 [ 185.519524][ T7128] __dquot_initialize+0x3a9/0xd00 [ 185.525101][ T7128] ocfs2_get_init_inode+0x144/0x1b0 [ 185.530854][ T7128] ocfs2_mknod+0xbe8/0x25e0 [ 185.535901][ T7128] ocfs2_mkdir+0x1b6/0x4b0 [ 185.540854][ T7128] vfs_mkdir+0x386/0x570 [ 185.545643][ T7128] do_mkdirat+0x1d8/0x440 [ 185.550511][ T7128] __x64_sys_mkdirat+0x85/0x90 [ 185.555811][ T7128] do_syscall_64+0x4c/0xa0 [ 185.560766][ T7128] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 185.567206][ T7128] [ 185.567206][ T7128] -> #4 (&dquot->dq_lock){+.+.}-{3:3}: [ 185.574887][ T7128] __mutex_lock+0x12d/0xae0 [ 185.579933][ T7128] dquot_commit+0x5a/0x410 [ 185.584912][ T7128] ext4_write_dquot+0x1f0/0x360 [ 185.590302][ T7128] mark_all_dquot_dirty+0xf9/0x400 [ 185.596001][ T7128] __dquot_free_space+0x7f8/0xbc0 [ 185.601659][ T7128] ext4_free_blocks+0x1be5/0x26a0 [ 185.607226][ T7128] ext4_clear_blocks+0x36c/0x3e0 [ 185.612715][ T7128] ext4_ind_truncate+0x60e/0xbc0 [ 185.618235][ T7128] ext4_truncate+0xa12/0x12a0 [ 185.623445][ T7128] ext4_evict_inode+0xb21/0x10e0 [ 185.628916][ T7128] evict+0x4b6/0x8b0 [ 185.633353][ T7128] vfs_rmdir+0x374/0x4a0 [ 185.638133][ T7128] do_rmdir+0x29a/0x5c0 [ 185.642839][ T7128] __x64_sys_unlinkat+0xc0/0xe0 [ 185.648227][ T7128] do_syscall_64+0x4c/0xa0 [ 185.653182][ T7128] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 185.659622][ T7128] [ 185.659622][ T7128] -> #3 (&ei->i_data_sem){++++}-{3:3}: [ 185.667376][ T7128] down_read+0x42/0x2d0 [ 185.672073][ T7128] ext4_map_blocks+0x338/0x1a90 [ 185.677453][ T7128] ext4_append+0x22d/0x560 [ 185.682407][ T7128] ext4_init_new_dir+0x2b8/0x550 [ 185.687894][ T7128] ext4_mkdir+0x4c3/0xc90 [ 185.692769][ T7128] vfs_mkdir+0x386/0x570 [ 185.697551][ T7128] do_mkdirat+0x1d8/0x440 [ 185.702411][ T7128] __x64_sys_mkdir+0x6a/0x80 [ 185.707558][ T7128] do_syscall_64+0x4c/0xa0 [ 185.712511][ T7128] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 185.718972][ T7128] [ 185.718972][ T7128] -> #2 (jbd2_handle){++++}-{0:0}: [ 185.726300][ T7128] wait_transaction_locked+0x1bf/0x270 [ 185.732308][ T7128] start_this_handle+0x7e7/0x2240 [ 185.737871][ T7128] jbd2__journal_start+0x2b7/0x5a0 [ 185.743512][ T7128] jbd2_journal_start+0x26/0x30 [ 185.748895][ T7128] ocfs2_start_trans+0x3b0/0x6f0 [ 185.754378][ T7128] ocfs2_run_deallocs+0xfd4/0x1620 [ 185.760021][ T7128] ocfs2_remove_value_outside+0x4d8/0x6f0 [ 185.766279][ T7128] ocfs2_xattr_remove+0x689/0x1650 [ 185.771921][ T7128] ocfs2_evict_inode+0x1639/0x46d0 [ 185.777569][ T7128] evict+0x4b6/0x8b0 [ 185.781999][ T7128] vfs_rmdir+0x374/0x4a0 [ 185.786797][ T7128] do_rmdir+0x29a/0x5c0 [ 185.791493][ T7128] __x64_sys_rmdir+0x45/0x50 [ 185.796615][ T7128] do_syscall_64+0x4c/0xa0 [ 185.801592][ T7128] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 185.808047][ T7128] [ 185.808047][ T7128] -> #1 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 185.816603][ T7128] down_read+0x42/0x2d0 [ 185.821306][ T7128] ocfs2_start_trans+0x3a4/0x6f0 [ 185.826799][ T7128] ocfs2_mknod+0x12d7/0x25e0 [ 185.831925][ T7128] ocfs2_mkdir+0x1b6/0x4b0 [ 185.836876][ T7128] vfs_mkdir+0x386/0x570 [ 185.841694][ T7128] do_mkdirat+0x1d8/0x440 [ 185.846576][ T7128] __x64_sys_mkdirat+0x85/0x90 [ 185.851917][ T7128] do_syscall_64+0x4c/0xa0 [ 185.856875][ T7128] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 185.863308][ T7128] [ 185.863308][ T7128] -> #0 (sb_internal#3){.+.+}-{0:0}: [ 185.870807][ T7128] __lock_acquire+0x2d18/0x7c40 [ 185.876191][ T7128] lock_acquire+0x1bb/0x4a0 [ 185.881230][ T7128] ocfs2_start_trans+0x2a5/0x6f0 [ 185.886709][ T7128] ocfs2_acquire_dquot+0x69a/0xb80 [ 185.892360][ T7128] dqget+0x713/0xbb0 [ 185.896800][ T7128] __dquot_initialize+0x3a9/0xd00 [ 185.902359][ T7128] ocfs2_get_init_inode+0x144/0x1b0 [ 185.908083][ T7128] ocfs2_mknod+0xbe8/0x25e0 [ 185.913115][ T7128] ocfs2_mkdir+0x1b6/0x4b0 [ 185.918059][ T7128] vfs_mkdir+0x386/0x570 [ 185.922837][ T7128] do_mkdirat+0x1d8/0x440 [ 185.927769][ T7128] __x64_sys_mkdirat+0x85/0x90 [ 185.933105][ T7128] do_syscall_64+0x4c/0xa0 [ 185.938063][ T7128] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 185.944495][ T7128] [ 185.944495][ T7128] other info that might help us debug this: [ 185.944495][ T7128] [ 185.954729][ T7128] Chain exists of: [ 185.954729][ T7128] sb_internal#3 --> &ocfs2_sysfile_lock_key[args->fi_sysfile_type]#7 --> &ocfs2_quota_ip_alloc_sem_key [ 185.954729][ T7128] [ 185.971705][ T7128] Possible unsafe locking scenario: [ 185.971705][ T7128] [ 185.979170][ T7128] CPU0 CPU1 [ 185.984546][ T7128] ---- ---- [ 185.989923][ T7128] lock(&ocfs2_quota_ip_alloc_sem_key); [ 185.995574][ T7128] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#7); [ 186.005402][ T7128] lock(&ocfs2_quota_ip_alloc_sem_key); [ 186.013565][ T7128] lock(sb_internal#3); [ 186.017822][ T7128] [ 186.017822][ T7128] *** DEADLOCK *** [ 186.017822][ T7128] [ 186.025974][ T7128] 6 locks held by syz.4.1046/7128: [ 186.031101][ T7128] #0: ffff88807d60c460 (sb_writers#21){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 186.040357][ T7128] #1: ffff888072545f48 (&type->i_mutex_dir_key#12/1){+.+.}-{3:3}, at: filename_create+0x20b/0x450 [ 186.051125][ T7128] #2: ffff88805529d108 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#2){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x16a/0x4810 [ 186.064808][ T7128] #3: ffff8880553f80a8 (&dquot->dq_lock){+.+.}-{3:3}, at: ocfs2_acquire_dquot+0x2ab/0xb80 [ 186.074878][ T7128] #4: ffff888072546d88 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#7){+.+.}-{3:3}, at: ocfs2_lock_global_qf+0x1d7/0x290 [ 186.087875][ T7128] #5: ffff888072546a20 (&ocfs2_quota_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_lock_global_qf+0x1fe/0x290 [ 186.099219][ T7128] [ 186.099219][ T7128] stack backtrace: [ 186.105132][ T7128] CPU: 1 PID: 7128 Comm: syz.4.1046 Not tainted syzkaller #0 [ 186.112523][ T7128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 186.122594][ T7128] Call Trace: [ 186.125894][ T7128] [ 186.128843][ T7128] dump_stack_lvl+0x188/0x24e [ 186.133542][ T7128] ? load_image+0x410/0x410 [ 186.138075][ T7128] ? show_regs_print_info+0x12/0x12 [ 186.143306][ T7128] ? print_circular_bug+0x12b/0x1a0 [ 186.148534][ T7128] check_noncircular+0x296/0x330 [ 186.153500][ T7128] ? add_chain_block+0x9b0/0x9b0 [ 186.158456][ T7128] ? lockdep_lock+0xf1/0x1f0 [ 186.163088][ T7128] ? _find_first_zero_bit+0xd2/0x100 [ 186.168418][ T7128] __lock_acquire+0x2d18/0x7c40 [ 186.173314][ T7128] ? verify_lock_unused+0x140/0x140 [ 186.178536][ T7128] ? verify_lock_unused+0x140/0x140 [ 186.183758][ T7128] ? mark_lock+0x94/0x320 [ 186.188110][ T7128] ? verify_lock_unused+0x140/0x140 [ 186.193325][ T7128] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 186.199326][ T7128] lock_acquire+0x1bb/0x4a0 [ 186.203873][ T7128] ? ocfs2_acquire_dquot+0x69a/0xb80 [ 186.209195][ T7128] ? __might_sleep+0xd0/0xd0 [ 186.213799][ T7128] ? do_raw_spin_lock+0x128/0x2f0 [ 186.218842][ T7128] ? read_lock_is_recursive+0x10/0x10 [ 186.224246][ T7128] ? __rwlock_init+0x140/0x140 [ 186.229021][ T7128] ? do_raw_spin_unlock+0x11d/0x230 [ 186.234232][ T7128] ocfs2_start_trans+0x2a5/0x6f0 [ 186.239202][ T7128] ? ocfs2_acquire_dquot+0x69a/0xb80 [ 186.244503][ T7128] ? ocfs2_recovery_exit+0x50/0x50 [ 186.249635][ T7128] ? do_raw_spin_unlock+0x11d/0x230 [ 186.254879][ T7128] ? _raw_spin_unlock+0x24/0x40 [ 186.259757][ T7128] ? ocfs2_qinfo_unlock+0x11a/0x140 [ 186.264976][ T7128] ocfs2_acquire_dquot+0x69a/0xb80 [ 186.270114][ T7128] ? ocfs2_destroy_dquot+0x40/0x40 [ 186.275245][ T7128] ? percpu_counter_add_batch+0x135/0x150 [ 186.280990][ T7128] dqget+0x713/0xbb0 [ 186.284918][ T7128] __dquot_initialize+0x3a9/0xd00 [ 186.289963][ T7128] ? do_raw_spin_unlock+0x11d/0x230 [ 186.295182][ T7128] ? dquot_initialize+0x20/0x20 [ 186.300051][ T7128] ? do_raw_spin_unlock+0x11d/0x230 [ 186.305265][ T7128] ? inode_init_owner+0x277/0x420 [ 186.310317][ T7128] ocfs2_get_init_inode+0x144/0x1b0 [ 186.315532][ T7128] ? ocfs2_create_inode_in_orphan+0x1180/0x1180 [ 186.321791][ T7128] ? tomoyo_path_mkdir+0xad/0xf0 [ 186.326751][ T7128] ocfs2_mknod+0xbe8/0x25e0 [ 186.331275][ T7128] ? ocfs2_mkdir+0x4b0/0x4b0 [ 186.335880][ T7128] ? mark_lock+0x94/0x320 [ 186.340232][ T7128] ? __lock_acquire+0x1465/0x7c40 [ 186.345302][ T7128] ? ocfs2_inode_lock_tracker+0x433/0x700 [ 186.351040][ T7128] ? __kmem_cache_free+0xb6/0x200 [ 186.356125][ T7128] ? __lock_acquire+0x7c40/0x7c40 [ 186.361178][ T7128] ? do_raw_spin_lock+0x128/0x2f0 [ 186.366224][ T7128] ? ocfs2_inode_unlock_tracker+0x26c/0x2e0 [ 186.372136][ T7128] ? __lock_acquire+0x7c40/0x7c40 [ 186.377199][ T7128] ? __rwlock_init+0x140/0x140 [ 186.381991][ T7128] ? ocfs2_lookup+0x51c/0xae0 [ 186.386690][ T7128] ? do_raw_spin_unlock+0x11d/0x230 [ 186.391907][ T7128] ? put_pid+0xda/0x120 [ 186.396086][ T7128] ocfs2_mkdir+0x1b6/0x4b0 [ 186.400535][ T7128] ? make_kgid+0x650/0x650 [ 186.404976][ T7128] ? ocfs2_symlink+0x2810/0x2810 [ 186.409929][ T7128] ? HAS_UNMAPPED_ID+0x1c5/0x220 [ 186.414897][ T7128] ? ocfs2_getattr+0x360/0x360 [ 186.419678][ T7128] ? inode_permission+0xef/0x480 [ 186.424658][ T7128] ? bpf_lsm_inode_mkdir+0x5/0x10 [ 186.429701][ T7128] ? security_inode_mkdir+0xb3/0x100 [ 186.435004][ T7128] vfs_mkdir+0x386/0x570 [ 186.439265][ T7128] do_mkdirat+0x1d8/0x440 [ 186.443611][ T7128] ? vfs_mkdir+0x570/0x570 [ 186.448084][ T7128] __x64_sys_mkdirat+0x85/0x90 [ 186.452877][ T7128] do_syscall_64+0x4c/0xa0 [ 186.457303][ T7128] ? clear_bhb_loop+0x60/0xb0 [ 186.461995][ T7128] ? clear_bhb_loop+0x60/0xb0 [ 186.466688][ T7128] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 186.472612][ T7128] RIP: 0033:0x7f0219f9cfc7 [ 186.477037][ T7128] Code: 00 66 90 48 89 f2 b9 00 01 00 00 48 89 fe bf 9c ff ff ff e9 db f7 ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 186.496653][ T7128] RSP: 002b:00007f021ae82e58 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 186.505082][ T7128] RAX: ffffffffffffffda RBX: 00007f021ae82ee0 RCX: 00007f0219f9cfc7 [ 186.513073][ T7128] RDX: 00000000000001ff RSI: 0000200000000540 RDI: 00000000ffffff9c [ 186.521057][ T7128] RBP: 0000000000000000 R08: 0000200000000240 R09: 0000000000000000 [ 186.529042][ T7128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000540 [ 186.537031][ T7128] R13: 00007f021ae82ea0 R14: 0000000000000000 R15: 0000000000000000 [ 186.545024][ T7128] [ 186.646146][ T27] audit: type=1800 audit(1790221158.154:100): pid=7128 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1046" name="file1" dev="loop4" ino=16979 res=0 errno=0 [ 186.729333][ T4281] ocfs2: Unmounting device (7,4) on (node local) [ 193.873477][ T1280] ieee802154 phy1 wpan1: encryption failed: -22