last executing test programs: 2m15.7374106s ago: executing program 4 (id=143): r0 = syz_usb_connect$uac1(0x2, 0xa5, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902930003010000000904000000010100000a240100000002010213240600000600000000000000dfff000000000924030000000000000924050000f8431cfd09240300000300040206240504"], 0x0) syz_usb_control_io(r0, &(0x7f00000009c0)={0x2c, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x816}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000540)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io$rtl8150(r0, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x6d, @string={0x6d, 0x3, "7f932e44a748da6f52de51cc5474929746b51890bc932e8a75f6be61d90fa273c2b99def788ee2416b8de4a7957e6a33de3a698f7bd45988d38b72c009b002e45881af3451e0645f2a47d9179abcef36d27329f39a42924a40ad893a8b85699218a6ff198732d08c2473e3"}}}, 0x0) 2m13.54220209s ago: executing program 4 (id=160): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00') fchdir(r0) exit(0x200020000ffff) newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', &(0x7f0000000100), 0x6000) 2m12.425936606s ago: executing program 4 (id=171): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80000) recvfrom$packet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 2m12.226995642s ago: executing program 4 (id=174): syz_mount_image$jfs(&(0x7f0000000040), &(0x7f0000000480)='./file0\x00', 0x10000, &(0x7f0000000340)=ANY=[], 0xff, 0x6370, &(0x7f0000013cc0)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20400, 0x38) getdents64(r0, 0x0, 0xd8) 2m10.71715507s ago: executing program 4 (id=184): r0 = creat(&(0x7f0000000040)='./bus\x00', 0x8) close(r0) r1 = socket(0x2b, 0x80801, 0x1) mount$9p_fd(0x0, &(0x7f0000000080)='./bus\x00', &(0x7f00000000c0), 0x10c02, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 2m9.933934695s ago: executing program 4 (id=190): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20085e, &(0x7f0000000100)={[{@grpjquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xa32}}, {@abort}]}, 0x1, 0x548, &(0x7f00000008c0)="$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") truncate(&(0x7f0000000040)='./file1\x00', 0x8800000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x84042, 0x1fb) write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0xfffffffffffffecb, 0x4d, 0x1}, 0xffffffd7) 2m9.435661571s ago: executing program 32 (id=190): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20085e, &(0x7f0000000100)={[{@grpjquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xa32}}, {@abort}]}, 0x1, 0x548, &(0x7f00000008c0)="$eJzs3c9vI1cdAPDvOLGT3U2bbekBELRLW1jQap2Nt11VPUA5IYQqIXoEaRsSbxTFjqPYKU1YifTMFYlKnODIH8C5J+5cENy4lAMSPyJQg8Rh0IwnWSexk7SbxJH9+WhHnjdjz/e9Tea98dfxvADG1q2I2ImISkS8GxGzxfakWOKt7pI975Pdx4t7u48Xk0jTd/6Z5PuzbdHzmsyN4pjTEfGD70T8ODket721vbrQaNQ3ivJcp7k+197avrvSXFiuL9fXarUH8w/uvXH/9dqnaM30iXtfalaKtS9//Iedb/w0q9ZMsaW3Heep2/TyQZzMZER87yKCDcFE0Z7KsCvCZ1KKiOcj4uX8/J+NifynCQCMsjSdjXS2twwAjLpuDiwpVYtcwEyUStVqN4f3QlwvNVrtzp1Hrc21pW6u7GaUS49WGvV7Ra7wZpSTrDyfrz8p146U70fEcxHxi6nIy9XFVmNpmBc+ADDGbhwZ//8z1R3/AYARd/KfzQAAo8j4DwDjx/gPAOPH+A8A46c7/l/7tC9L0/RnF1EdAOAS5ON/n5t0AQCjS/4fAMbK999+O1vSveL+10vvbW2utt67u1Rvr1abm4vVxdbGenW51VrO79nTPO14jVZrff612Hz/5jfX25259tb2w2Zrc63zML+v98N6OX/WziW0DAAY5LmXPvpzko3Ib17Ll+iZy6E81JoBF6007AoAQzNxfJNPA2BMdGf78rc/MI6evMcfNOwPnNlRegBGxGlXANP9viCUpml6cVUCLtjtL8j/w7gq8v+T8n4wfvrk/w/J5wb2ISGMpMlhVwAYmjRNzjrnf5z1iQDA1XZCjv/mZV6HAMMz4PP/54vH3xYfDvxo6egzPrzIWgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDVtj//b7WY5ncmSqVqNeKZfAKgcvJopVG/FxHPRsSfpspTWXl+yHUGAJ5W6W9JMf/X7dlXZw7tevHGwWolIn7yq3d++f5Cp7Pxx4hK8q+p/e2dD4vttVODTV9ECwCAk+2P0/ljzxv5T3YfL+4vl1mfv3+7e1WQxd3brcTeQfzJmMwfp6McEdf/nRTlrqQnd/E0dj6IiM/3a38SM3kOpHvJcjR+FvuZc4o/cab4pUPxS8UEzaXi/+Jz51AXGDcfZf3PW/3Ov1Lcyh/7n//TeQ/19Ir+LzvU4l7eBz6Jv9//TQzo/24dP9xU3xiv/f673bVrx/d9EPHFyYj92Hs9/c/+HPHJgPivnrGNf/nSiy8P2pf+OuJ29I/fG2uu01yfa29t311pLizXl+trtdqD+Qf33rj/em0uz1HPDR4N/vHmnWePbCr3tv/6gPjdn/x0DGr/VweNQUfe5f7mf+/+8CsD6pbF//or/eKX4oUT4mcN+NrAFh+2cP13A993Z/GXjrc/yf5NntL+O2eM//Fft49NGw4ADE97a3t1odGob1gZ0ZXK1ajG+axkv7JXoBp9V751WbEq0X/Xz1/pntNHdqXpiQesRN9XNQb1GOeRdQOugoOTPiL+O+zKAAAAAAAAAAAAAAAAfV3GN5aG3UYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABG1/8DAAD//6XW2Bk=") truncate(&(0x7f0000000040)='./file1\x00', 0x8800000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x84042, 0x1fb) write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0xfffffffffffffecb, 0x4d, 0x1}, 0xffffffd7) 40.674386614s ago: executing program 2 (id=738): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$exfat(&(0x7f00000009c0), &(0x7f0000000000)='./file1\x00', 0x200005c, &(0x7f0000000200)={[{@umask={'umask', 0x3d, 0x3}}, {@utf8}, {@uid={'uid', 0x3d, 0xee01}}, {}, {@iocharset={'iocharset', 0x3d, 'cp869'}}, {@umask={'umask', 0x3d, 0x2}}, {@errors_remount}, {@dmask={'dmask', 0x3d, 0x8}}, {@discard}, {@gid}]}, 0x1, 0x152b, &(0x7f0000001240)="$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") r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 40.17580075s ago: executing program 2 (id=742): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) write$uinput_user_dev(r0, &(0x7f0000000a40)={'syz1\x00', {0x0, 0x0, 0x0, 0x1f}, 0x4d, [0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x4001, 0x0, 0x2, 0xfffffe00, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x401, 0x0, 0x0, 0xfffffffe, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0xffffffff, 0x3, 0x10000002, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x800, 0x9262, 0x4, 0x0, 0x0, 0x0, 0x4, 0xffffffff, 0x400000, 0x1, 0x5, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x1000, 0x401c, 0x0, 0x0, 0x0, 0x4, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0xfd5], [0x0, 0x80000000, 0x0, 0x20000002, 0x0, 0x5, 0x0, 0x0, 0xffffffff, 0x0, 0xfffffffe, 0x800, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8000000, 0x0, 0x0, 0x6, 0x0, 0x3, 0x0, 0x80, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x100, 0x0, 0x6, 0x6], [0x81, 0x5, 0x5d30, 0x1, 0x0, 0x100000, 0xdbc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x8, 0x0, 0x2, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe58b, 0xfffffff9, 0x0, 0x0, 0x0, 0x4, 0x1ff]}, 0x45c) 39.776513612s ago: executing program 2 (id=744): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x30, r1, 0x5, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random="e5"}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}]]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x810) 39.5118938s ago: executing program 2 (id=756): syz_mount_image$jfs(&(0x7f0000000040), &(0x7f0000000480)='./file0\x00', 0x10000, &(0x7f0000000340)=ANY=[], 0xff, 0x6370, &(0x7f0000013cc0)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20400, 0x38) getdents64(r0, 0x0, 0xd8) 38.445851624s ago: executing program 2 (id=754): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)={0x30, r2, 0x1, 0x70bd2c, 0x0, {{0x2}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x22, 0x26}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x143c}]]}, 0x30}, 0x1, 0x0, 0x0, 0x8001}, 0x4040000) 37.689841498s ago: executing program 2 (id=776): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x80800) syz_usb_disconnect(r0) syz_usb_connect(0x4, 0x24, &(0x7f0000000040)=ANY=[], 0x0) ioctl$EVIOCRMFF(r0, 0xc0085508, &(0x7f0000000080)=0x4027) 37.382067998s ago: executing program 33 (id=776): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x80800) syz_usb_disconnect(r0) syz_usb_connect(0x4, 0x24, &(0x7f0000000040)=ANY=[], 0x0) ioctl$EVIOCRMFF(r0, 0xc0085508, &(0x7f0000000080)=0x4027) 6.881629678s ago: executing program 1 (id=994): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000d4c000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r0, 0x0) mremap(&(0x7f0000d4d000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil) 6.562887518s ago: executing program 1 (id=997): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="201109"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000080)={0x1, 0x7, 0x5, &(0x7f0000000040)={0xe, "810556c721393f4084aa00"}}) 4.687380549s ago: executing program 1 (id=1025): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0xa0000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)=@x86={0x6, 0x5, 0x8, 0x0, 0x9, 0x7, 0xd, 0x1, 0x1, 0x10, 0xd, 0x4, 0x0, 0xfffff800, 0x10, 0x2, 0x7, 0xae, 0xf, '\x00', 0x5, 0x8}) 4.395819878s ago: executing program 1 (id=1018): syz_mount_image$xfs(&(0x7f0000000200), &(0x7f0000000100)='./file1\x00', 0x8000, &(0x7f0000000040), 0x4, 0x9836, &(0x7f0000009b80)="$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") setxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file0\x00', &(0x7f00000004c0), &(0x7f00000009c0)=ANY=[], 0x841, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0/../file0\x00', 0x101800, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0xc0205838, &(0x7f0000000000)={0x403, 0xfffffffffffffffd, 0x1000000000007, 0x4, 0xb, 0xfffd}) 2.826435809s ago: executing program 5 (id=1035): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x34, r0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x76}]}, 0x34}, 0x1, 0x0, 0x0, 0x40095}, 0x8040) 2.637975935s ago: executing program 1 (id=1036): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) readv(r1, &(0x7f0000000600)=[{&(0x7f0000000340)=""/27, 0x1b}], 0x1) 2.598795196s ago: executing program 0 (id=1037): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000024c0)={&(0x7f0000000480)=@newlink={0x38, 0x10, 0x401, 0x70bd2a, 0xfffffffe, {0x0, 0x0, 0x0, r1, 0x4982, 0x701ca}, [@IFLA_LINKINFO={0x18, 0x37, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}, 0x1, 0x0, 0x0, 0xc10}, 0x8000) 2.459592001s ago: executing program 5 (id=1038): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000001c0)={0x2, &(0x7f0000000280)=[{0x28, 0x8, 0x0, 0xbfffdffe}, {0x80000006, 0x9, 0xd, 0x7fff}]}, 0x10) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000000)="09000000010017", 0x7) 2.458038981s ago: executing program 3 (id=1039): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x1d, 0x7ffc0001}]}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2208c08, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0xa) 2.074059123s ago: executing program 3 (id=1040): r0 = socket$alg(0x26, 0x5, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x88, 0x0, 0x20, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x74, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x40}, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'authenc(michael_mic-generic,pcbc(fcrypt-generic))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000480), 0xb7) 2.058112513s ago: executing program 6 (id=1041): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}}], {0x14}}, 0x3c}}, 0x40) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001300050000000000feffffff07000000", @ANYRES32=r1, @ANYBLOB="003000000000000014001a80100004800c00098008"], 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) 2.038052124s ago: executing program 5 (id=1042): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f00000023c0)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xa}, 0x1c, &(0x7f0000000000)=[{&(0x7f00000002c0)='G', 0x1}], 0x1}}, {{&(0x7f00000004c0)={0xa, 0x4e21, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000001300)="1f", 0x1}], 0x1}}], 0x2, 0x880) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000380)={0x0, 0xfff}, 0x8) 1.777827223s ago: executing program 3 (id=1043): futex(&(0x7f000000cffc), 0xb, 0x0, 0x0, &(0x7f0000048000)=0x1, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) futex(&(0x7f000000cffc), 0xb, 0x0, 0x0, &(0x7f0000048000)=0x1, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) 1.776170723s ago: executing program 0 (id=1053): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x94, 0x24, 0xf0b, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x1], 0x0, [0x8, 0x4, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x6, 0x0, 0x10]}}]}}]}, 0x94}}, 0x0) 1.728358764s ago: executing program 6 (id=1044): syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4880, 0x0, 0x8, 0x0, &(0x7f0000000000)) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000140)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000000), 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000340)={'veth1_vlan\x00', &(0x7f0000000040)=@ethtool_rxnfc={0x32, 0xb, 0x6, {0x0, @hdata="c3b467aca79221c2e4d626bfd283e0a10e23d2fa504990e9ce34004c56937b82a7c45294652cad4e6b3175264e735c411738e756", {0x0, @remote, 0x7f, 0xb6, [0x8, 0x7]}, @esp_ip6_spec={@private2={0xfc, 0x2, '\x00', 0x1}, @remote, 0x9, 0x40}, {0x0, @link_local, 0x5, 0xd6, [0x1ff, 0x8]}, 0xad, 0xf1}}}) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) 1.646545437s ago: executing program 5 (id=1045): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x11, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ed1}, [@call={0x85, 0x0, 0x0, 0x2e}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0xfffdfffc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.604361638s ago: executing program 1 (id=1046): syz_mount_image$jfs(&(0x7f0000000400), &(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1c802, &(0x7f0000000000)=ANY=[], 0x3, 0x5f74, &(0x7f0000002040)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000040)='./bus\x00', 0x1080000, 0x0, 0xbe, 0x0, &(0x7f00000007c0)) chdir(&(0x7f00000003c0)='./bus\x00') creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 1.484952242s ago: executing program 0 (id=1047): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000001380)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000003c0)="0f", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000005c40)=[{0x0}], 0x1}}, {{0x0, 0x0, &(0x7f00000009c0), 0x281}}], 0x3, 0x608d8d0) 1.461038783s ago: executing program 6 (id=1048): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x80) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r0, r2, 0x25, 0x8, @void}, 0x10) 1.174612452s ago: executing program 0 (id=1049): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_SETMODE(r1, 0x5602, &(0x7f0000000040)={0x0, 0x9, 0x4, 0x8000, 0x3}) ioctl$KDFONTOP_GET(r0, 0x560f, &(0x7f0000000040)={0x1, 0x4002, 0x3f, 0x2, 0x3f000000, 0x0}) 1.110215714s ago: executing program 6 (id=1050): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r0, 0x7b1, &(0x7f00000017c0)={0x0, 0x2, 0x0, 0x9}) 922.52801ms ago: executing program 0 (id=1051): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x128, 0x10, 0x7, 0x0, 0x0, {{@in=@remote, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae7}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x34}, [@coaddr={0x14, 0xe, @in6=@remote}, @lifetime_val={0x24, 0x9, {0x400000000000003, 0x8000000000000001, 0xb4, 0x9}}]}, 0x128}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=@newsa={0x104, 0x1a, 0x7, 0x70bd2a, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast1, 0x3, 0x0, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x5a, 0xb400, 0x2, 0x7, 0x0, 0x60000, 0x0, 0x2000000001}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) 808.659884ms ago: executing program 6 (id=1052): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x10008, &(0x7f0000000000)={[{@jqfmt_vfsv0}, {@nodiscard}]}, 0xff, 0x49d, &(0x7f0000000f40)="$eJzs3M9vFFUcAPDvbH/Qyo9WRBQEraCR+KOlBZWDBzSaeNDERA94rG1BZKGG1gRIo8UYPBoS78ajiX+BNy9GPRgTr5p4NCREe6F4qpmdGbpsd0u3tF3pfj7Jdt+bH/ved+a93TcznQmgbQ2kf5KIbRHxe0T0ZdnbFxjI3ubnZsZuzs2MJbGw8PbfSWW5G3MzY8WixXpb88yhUkTpsySOJ0vLnbp46cxouTxxPs8PTZ/9cGjq4qXnTp8dPTVxauLcyLFjR48Mv/jCyPNrEmca1429H0/u2/P6u1ffHDtx9b2fvk2rtXt/Nr86jju6WSegOgbSrfbPQkXtvCebqPu9YHtVOulsYUVoSkdEpLurq9L/+6IjFndeX7z2aUsrB6yr9LdpS+PZswvAJpZEq2sAtEbxQ58e/xavDRp6/C9cfzmiO0/Pz82Mzd+KvzNK+fSudSx/ICJOzP77VfqKZs9DAACsQmVs82y98V8pdlfes2sdO/JrKP0RcX9E7IyIByJiV0Q8GFFZ9qGIeDhbeaFvheUP1OSXjn9K1+rWeY2k47+XqsZ+81Xx52/9HXlueyX+ruTk6fLE4XybHIquLWl+eJkyvn/1ty8azase/6WvtPxiLJhX4FpnzQm68dHp0bXaCNcvR+ztrBd/cutKQNoC9kTE3uY+ekeROP30N/saLXTn+JexBteZFr6OeCrb/7NRE38hWf765FBPlCcODxWtYqmff73yVqPy7yr+NXD9wCNZYnH/1yxR1dDK5YnzU82XceWPzxse06y2/Xcn71T65C/vZ9MujE5Pnx+O6E7eqOSLY7rK9JHFdS+MTvem+WL5tP0fOli//+/M10n3f7qV0ka8PyIejYjH8ro/HhEHIuLgMvH/+MoTHywTfxJJtG7/X44Yr/v9d6v99yfV1+tXkeg488N3ja6Yr2z/H43ZyndtpvL9dwcrreBdbj4AAAC4J5QiYlskpcEsPbAtSqXBwex/+HfFfaXy5NT0MycnPzo3nt0j0B9dpeJMV1/V+dDhZDb/xCw/kp8rLuYfyc8bf9nRW8kPjk2Wx1scO7S7rbf3/yj6f+qvjlbXDlh37teC9lXb/0stqgew8Vby++9YADan2/t/T/qnt1V1ATaW439oX/X6/yc1eeN/2JyW9v8/6zyyDtiMjP+hfen/0L70f2hLzdzOH8cbzeqJiGYeC1DcLLD6pwr0rPgO/3ZJFE+8WM+yeuPSme58SpRaFGlHk41tUyTSHrOxhS4+QwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBe9l8AAAD//3ow3kU=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x2a) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f00000000c0)={0x17c04, 0xffffffffffffffff, 0xf4fb, 0x3ff, 0x71de, 0xfffffffffffffffd}) 717.882327ms ago: executing program 3 (id=1054): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x4, 0x0, 0x0, 0xa, 0x0, 0x20, 0x87}, {0x0, 0x7fffffffffffffff, 0x0, 0x10000, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x4, 0x200000000000000}, 0x0, 0x0, 0x0, 0x1, 0x3, 0x2}}, 0xb8}}, 0x2c000010) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0xf1f, 0x0, 0x25dfdbfd, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@remote, 0x4e20, 0x0, 0x4e23, 0xfffc, 0xa, 0x10, 0x0, 0x2}, {0x8, 0x1, 0x0, 0x0, 0x100, 0x0, 0xffffffff, 0xffffffffffffffff}, {0x0, 0xfffffffffffffffa, 0x4, 0x3}, 0x4, 0x6e6bb5, 0x0, 0x1, 0x3, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x2000c810}, 0x4) recvmsg(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x40000000) 661.827719ms ago: executing program 0 (id=1055): syz_mount_image$jfs(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x20108c0, &(0x7f0000000940)=ANY=[], 0xf0, 0x629d, &(0x7f0000000bc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000080)={0xffa1, 0xd001000}) lsetxattr$trusted_overlay_upper(&(0x7f0000000080)='./file1\x00', &(0x7f0000000840), &(0x7f0000000940)=ANY=[], 0x361, 0x1) 385.911208ms ago: executing program 5 (id=1056): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x14, 0x0, 0x1, 0x401, 0x21, 0x0, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x8d7f1b7f2655925c}, 0x0) unshare(0x2a020480) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={r0, 0x88, &(0x7f0000000300)}, 0x10) 383.764358ms ago: executing program 3 (id=1066): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0xd, &(0x7f0000000080)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x3, 0x98, &(0x7f0000000100)=""/152, 0x41000, 0xa}, 0x94) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, 0x0, &(0x7f0000000180)) 115.689716ms ago: executing program 5 (id=1057): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000100)={0x0, 0x2}, 0x8) 114.017857ms ago: executing program 3 (id=1068): bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="201006000000065f01"], 0x0, 0x0, 0x0, 0x0}, 0x0) 0s ago: executing program 6 (id=1058): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xe}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1e, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000001a00), &(0x7f0000001a40)=0x4) kernel console output (not intermixed with test programs): deprecated and scheduled to be removed from the kernel in 2025 [ 162.799718][ T5295] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 162.836343][ T5295] REISERFS (device loop3): using ordered data mode [ 162.864074][ T5295] reiserfs: using flush barriers [ 162.888019][ T5295] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 162.967308][ T5295] REISERFS (device loop3): checking transaction log (loop3) [ 163.067254][ T5295] REISERFS (device loop3): Using r5 hash to sort names [ 163.121595][ T5295] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 163.237596][ T5313] program syz.0.271 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 163.309241][ T5311] loop2: detected capacity change from 0 to 2048 [ 163.343507][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 163.376485][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 163.413256][ T5311] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 163.513532][ T26] kauditd_printk_skb: 6 callbacks suppressed [ 163.513547][ T26] audit: type=1800 audit(1781009562.209:5): pid=5311 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.270" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 163.568654][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 163.599740][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 163.621275][ T5071] device veth0_vlan entered promiscuous mode [ 163.643605][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 163.670024][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 163.748989][ T5071] device veth1_vlan entered promiscuous mode [ 163.767223][ T4282] EXT4-fs (loop2): unmounting filesystem. [ 163.837129][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 163.861499][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 163.895282][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 163.916460][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 163.978891][ T5071] device veth0_macvtap entered promiscuous mode [ 164.024252][ T5071] device veth1_macvtap entered promiscuous mode [ 164.104937][ T5071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.177794][ T5071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.207193][ T5071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.243090][ T5071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.272847][ T5071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.317748][ T5071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.367729][ T5071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.408839][ T5071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.453937][ T5071] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 164.489989][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 164.508710][ T5346] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 164.515841][ T5346] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 164.528674][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 164.543570][ T5346] vhci_hcd vhci_hcd.0: Device attached [ 164.559353][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 164.598575][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 164.632987][ T5071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.660516][ T5071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.697889][ T5071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.714247][ T5071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.755681][ T5071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.787778][ T5071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.808254][ T4369] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 164.825692][ T5353] loop3: detected capacity change from 0 to 512 [ 164.832835][ T5071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.844083][ T4451] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 164.867801][ T5071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.915752][ T5071] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 164.946808][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 164.984765][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 165.027105][ T5071] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.038813][ T4451] usb 2-1: Using ep0 maxpacket: 32 [ 165.051852][ T4451] usb 2-1: config 0 has no interfaces? [ 165.077852][ T5071] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.089050][ T4451] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 165.117852][ T5071] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.126721][ T4451] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.157137][ T5071] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.166240][ T4451] usb 2-1: Product: syz [ 165.177736][ T4451] usb 2-1: Manufacturer: syz [ 165.192644][ T4451] usb 2-1: SerialNumber: syz [ 165.243417][ T4451] usb 2-1: config 0 descriptor?? [ 165.260905][ T5333] loop0: detected capacity change from 0 to 32768 [ 165.342116][ T5333] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.276 (5333) [ 165.434548][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 165.437795][ T5333] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 165.463963][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 165.477511][ T5347] usb 35-1: recv xbuf, 0 [ 165.485680][ T4330] usb 2-1: USB disconnect, device number 3 [ 165.502071][ T46] vhci_hcd: stop threads [ 165.507275][ T46] vhci_hcd: release socket [ 165.520277][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 165.545093][ T46] vhci_hcd: disconnect device [ 165.550888][ T5333] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 165.577838][ T4369] vhci_hcd: vhci_device speed not set [ 165.592941][ T5333] BTRFS info (device loop0): setting nodatacow, compression disabled [ 165.604241][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 165.615940][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 165.632116][ T5333] BTRFS info (device loop0): turning on flush-on-commit [ 165.643968][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 165.657361][ T5333] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8) [ 165.694074][ T5333] BTRFS info (device loop0): use lzo compression, level 0 [ 165.756996][ T5333] BTRFS info (device loop0): setting nodatasum [ 165.788804][ T5333] BTRFS info (device loop0): use no compression [ 165.795158][ T5333] BTRFS info (device loop0): trying to use backup root at mount time [ 165.889461][ T5333] BTRFS info (device loop0): max_inline at 0 [ 165.895532][ T5333] BTRFS info (device loop0): using free space tree [ 165.949664][ T5368] loop2: detected capacity change from 0 to 512 [ 166.032054][ T5368] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 166.042803][ T5368] ext4 filesystem being mounted at /58/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 166.090431][ T5380] loop5: detected capacity change from 0 to 256 [ 166.126404][ T5380] exFAT-fs (loop5): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 166.156527][ T26] audit: type=1800 audit(1781009564.849:6): pid=5380 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.287" name="file1" dev="loop5" ino=1048611 res=0 errno=0 [ 166.264905][ T4282] EXT4-fs (loop2): unmounting filesystem. [ 166.331848][ T4310] BTRFS warning (device loop0): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0xcee3a718 level 0 [ 166.387211][ T5392] usb usb8: usbfs: interface 0 claimed by hub while 'syz.1.289' resets device [ 166.387557][ T5333] BTRFS warning (device loop0): couldn't read tree root [ 166.478075][ T5333] BTRFS warning (device loop0): try to load backup roots slot 1 [ 166.498182][ T63] BTRFS warning (device loop0): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0xe06dfc66 level 0 [ 166.569465][ T5333] BTRFS warning (device loop0): couldn't read tree root [ 166.579989][ T5333] BTRFS warning (device loop0): try to load backup roots slot 2 [ 166.638849][ T5333] BTRFS error (device loop0): parent transid verify failed on logical 5255168 mirror 1 wanted 5 found 7 [ 166.733208][ T5333] BTRFS warning (device loop0): couldn't read tree root [ 166.783158][ T5333] BTRFS warning (device loop0): try to load backup roots slot 3 [ 166.900356][ T5333] BTRFS info (device loop0): enabling ssd optimizations [ 166.946874][ T5333] BTRFS info (device loop0): rebuilding free space tree [ 167.052330][ T5406] netlink: 60 bytes leftover after parsing attributes in process `syz.5.293'. [ 167.075325][ T5406] netlink: 60 bytes leftover after parsing attributes in process `syz.5.293'. [ 167.116051][ T5406] netlink: 60 bytes leftover after parsing attributes in process `syz.5.293'. [ 167.126222][ T5333] BTRFS info (device loop0): checking UUID tree [ 167.158542][ T5333] BTRFS warning (device loop0): failed to start uuid_rescan task [ 167.166371][ T5333] BTRFS warning (device loop0): failed to check the UUID tree: -4 [ 167.176591][ T5406] netlink: 60 bytes leftover after parsing attributes in process `syz.5.293'. [ 167.217572][ T5406] Zero length message leads to an empty skb [ 167.316066][ T5333] BTRFS error (device loop0): open_ctree failed: -4 [ 167.445709][ T4274] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by udevd (4274) [ 167.539502][ T26] audit: type=1326 audit(1781009566.219:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5417 comm="syz.5.296" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f939519ce59 code=0x7ffc0000 [ 167.575985][ T5364] loop3: detected capacity change from 0 to 40427 [ 167.604442][ T26] audit: type=1326 audit(1781009566.289:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5417 comm="syz.5.296" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7f939519ce59 code=0x7ffc0000 [ 167.630764][ T5364] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 167.654508][ T5364] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 167.729525][ T5364] F2FS-fs (loop3): Found nat_bits in checkpoint [ 167.753288][ T26] audit: type=1326 audit(1781009566.289:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5417 comm="syz.5.296" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f939519ce59 code=0x7ffc0000 [ 167.904538][ T26] audit: type=1326 audit(1781009566.289:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5417 comm="syz.5.296" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f939519ce59 code=0x7ffc0000 [ 167.932209][ T5431] netlink: 8 bytes leftover after parsing attributes in process `syz.0.297'. [ 167.943674][ T5409] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 168.004616][ T5364] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 168.008692][ T5431] netlink: 20 bytes leftover after parsing attributes in process `syz.0.297'. [ 168.039558][ T5364] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 168.078288][ T26] audit: type=1326 audit(1781009566.289:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5417 comm="syz.5.296" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f939519ce59 code=0x7ffc0000 [ 168.212081][ T26] audit: type=1326 audit(1781009566.299:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5417 comm="syz.5.296" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=438 compat=0 ip=0x7f939519ce59 code=0x7ffc0000 [ 168.293681][ T5440] loop1: detected capacity change from 0 to 256 [ 168.323916][ T26] audit: type=1326 audit(1781009566.369:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5417 comm="syz.5.296" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f939519ce59 code=0x7ffc0000 [ 168.401203][ T5440] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 168.448248][ T26] audit: type=1326 audit(1781009566.369:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5417 comm="syz.5.296" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f939519ce59 code=0x7ffc0000 [ 168.805154][ T5454] loop2: detected capacity change from 0 to 128 [ 168.862212][ T5454] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 168.946518][ T5454] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 169.670269][ T5472] loop0: detected capacity change from 0 to 512 [ 169.828142][ T5472] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.312: invalid indirect mapped block 10 (level 1) [ 169.913701][ T5472] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.312: invalid indirect mapped block 8 (level 1) [ 169.972535][ T5472] EXT4-fs (loop0): 1 truncate cleaned up [ 170.007789][ T5472] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 170.220019][ T4283] EXT4-fs (loop0): unmounting filesystem. [ 170.486571][ T5489] loop0: detected capacity change from 0 to 1024 [ 170.694551][ T5489] hfsplus: catalog searching failed [ 170.848839][ T9] hfsplus: b-tree write err: -5, ino 3 [ 170.911416][ T5466] loop2: detected capacity change from 0 to 40427 [ 170.989664][ T5502] netlink: 'syz.5.321': attribute type 3 has an invalid length. [ 171.006036][ T5466] F2FS-fs (loop2): invalid crc value [ 171.029154][ T5466] F2FS-fs (loop2): Found nat_bits in checkpoint [ 171.303653][ T5466] F2FS-fs (loop2): Start checkpoint disabled! [ 171.367873][ T5510] netlink: 12 bytes leftover after parsing attributes in process `syz.5.325'. [ 171.387153][ T5466] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 171.448506][ T5466] F2FS-fs (loop2): switch discard_unit option is not allowed [ 173.216335][ T5563] loop2: detected capacity change from 0 to 256 [ 173.298413][ T5563] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001207b, chksum : 0x1e8dde4d, utbl_chksum : 0xe619d30d) [ 173.555243][ T5565] loop5: detected capacity change from 0 to 32768 [ 173.573136][ T5565] ocfs2: Slot 0 on device (7,5) was already allocated to this node! [ 173.585077][ T5565] JBD2: Ignoring recovery information on journal [ 173.654421][ T5565] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 173.684553][ T5565] OCFS2: ERROR (device loop5): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #32 has an invalid fs_generation of #1 [ 173.701631][ T5565] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 173.711551][ T5565] OCFS2: File system is now read-only. [ 173.717057][ T5565] (syz.5.344,5565,1):ocfs2_search_chain:1761 ERROR: status = -30 [ 173.725552][ T5565] (syz.5.344,5565,1):ocfs2_search_chain:1871 ERROR: status = -30 [ 173.733603][ T5565] (syz.5.344,5565,1):ocfs2_claim_suballoc_bits:1950 ERROR: status = -30 [ 173.742119][ T5565] (syz.5.344,5565,1):ocfs2_claim_suballoc_bits:1993 ERROR: status = -30 [ 173.751136][ T5565] (syz.5.344,5565,1):__ocfs2_claim_clusters:2365 ERROR: status = -30 [ 173.759376][ T5565] (syz.5.344,5565,1):__ocfs2_claim_clusters:2373 ERROR: status = -30 [ 173.767512][ T5565] (syz.5.344,5565,1):ocfs2_local_alloc_new_window:1203 ERROR: status = -30 [ 173.778995][ T5565] (syz.5.344,5565,1):ocfs2_local_alloc_new_window:1228 ERROR: status = -30 [ 173.787660][ T5565] (syz.5.344,5565,1):ocfs2_local_alloc_slide_window:1302 ERROR: status = -30 [ 173.797209][ T5565] (syz.5.344,5565,1):ocfs2_local_alloc_slide_window:1321 ERROR: status = -30 [ 173.806671][ T5565] (syz.5.344,5565,1):ocfs2_reserve_local_alloc_bits:671 ERROR: status = -30 [ 173.815464][ T5565] (syz.5.344,5565,1):ocfs2_reserve_local_alloc_bits:709 ERROR: status = -30 [ 173.824833][ T5565] (syz.5.344,5565,1):ocfs2_reserve_clusters_with_limit:1166 ERROR: status = -30 [ 173.834034][ T5565] (syz.5.344,5565,1):ocfs2_reserve_clusters_with_limit:1215 ERROR: status = -30 [ 173.843182][ T5565] (syz.5.344,5565,1):ocfs2_symlink:1911 ERROR: status = -30 [ 173.851585][ T5565] (syz.5.344,5565,1):ocfs2_symlink:2065 ERROR: status = -30 [ 174.002603][ T5071] ocfs2: Unmounting device (7,5) on (node local) [ 174.037141][ T5577] netlink: 12 bytes leftover after parsing attributes in process `syz.0.347'. [ 174.072037][ T5576] loop4: detected capacity change from 0 to 1 [ 174.164192][ T5576] Dev loop4: unable to read RDB block 1 [ 174.197799][ T5576] loop4: unable to read partition table [ 174.203759][ T5576] loop4: partition table beyond EOD, truncated [ 174.223338][ T5582] loop1: detected capacity change from 0 to 256 [ 174.256368][ T5576] loop_reread_partitions: partition scan of loop4 (þ被xü^>Ñà– ) failed (rc=-5) [ 175.056358][ T5600] loop3: detected capacity change from 0 to 4096 [ 175.139936][ T5600] ntfs: volume version 3.1. [ 175.396015][ T5608] loop1: detected capacity change from 0 to 512 [ 175.451617][ T5608] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8840c01c, mo2=0002] [ 175.488319][ T5608] EXT4-fs (loop1): orphan cleanup on readonly fs [ 175.575284][ T5608] EXT4-fs warning (device loop1): ext4_enable_quotas:7093: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 175.658490][ T5608] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 175.666489][ T5608] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #13: comm syz.1.358: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 175.705555][ T5608] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.358: couldn't read orphan inode 13 (err -117) [ 175.728172][ T5608] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 175.786990][ T5615] loop5: detected capacity change from 0 to 512 [ 175.794078][ T5608] EXT4-fs (loop1): shut down requested (1) [ 175.884208][ T5615] EXT4-fs: Ignoring removed nomblk_io_submit option [ 175.931938][ T5615] EXT4-fs: Ignoring removed mblk_io_submit option [ 175.965450][ T4281] EXT4-fs (loop1): unmounting filesystem. [ 175.989152][ T5615] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 176.075849][ T5615] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2 [ 176.153803][ T5615] EXT4-fs (loop5): 1 truncate cleaned up [ 176.226176][ T5615] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 176.306842][ T5615] EXT4-fs (loop5): shut down requested (2) [ 176.394511][ T5629] loop3: detected capacity change from 0 to 512 [ 176.446488][ T5629] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 176.511935][ T5629] EXT4-fs error (device loop3): dx_probe:823: inode #2: comm syz.3.359: Attempting to read directory block (0) that is past i_size (256) [ 176.627944][ T5629] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 176.642718][ T5638] loop2: detected capacity change from 0 to 64 [ 176.665697][ T5629] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 176.795619][ T5638] syz.2.366: attempt to access beyond end of device [ 176.795619][ T5638] loop2: rw=0, sector=1024, nr_sectors = 2 limit=64 [ 176.827784][ T5425] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 176.836507][ T5638] Buffer I/O error on dev loop2, logical block 512, async page read [ 176.866558][ T5071] EXT4-fs (loop5): unmounting filesystem. [ 176.887956][ T5638] syz.2.366: attempt to access beyond end of device [ 176.887956][ T5638] loop2: rw=0, sector=113152, nr_sectors = 2 limit=64 [ 176.909096][ T5638] Buffer I/O error on dev loop2, logical block 56576, async page read [ 177.031193][ T5425] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 177.043663][ T5425] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 177.073094][ T5425] usb 2-1: New USB device found, idVendor=056a, idProduct=030c, bcdDevice= 0.00 [ 177.092863][ T5644] netlink: 277 bytes leftover after parsing attributes in process `syz.5.367'. [ 177.117895][ T5425] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.139857][ T5425] usb 2-1: config 0 descriptor?? [ 177.490421][ T4287] EXT4-fs (loop3): unmounting filesystem. [ 178.079576][ T5669] netlink: 8 bytes leftover after parsing attributes in process `syz.5.376'. [ 178.367780][ T4369] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 178.552848][ T5425] wacom 0003:056A:030C.0004: hidraw0: USB HID v0.06 Device [HID 056a:030c] on usb-dummy_hcd.1-1/input0 [ 178.568059][ T4369] usb 1-1: Using ep0 maxpacket: 16 [ 178.578404][ T4369] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 178.585639][ T5684] loop3: detected capacity change from 0 to 256 [ 178.589121][ T4369] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 178.623511][ T4369] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 178.634097][ T4369] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 178.644322][ T4452] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 178.652786][ T4369] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 178.688533][ T4369] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 178.700293][ T4369] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 178.712252][ T4369] usb 1-1: Manufacturer: syz [ 178.736228][ T4369] usb 1-1: config 0 descriptor?? [ 178.743619][ T27] usb 2-1: USB disconnect, device number 4 [ 178.867778][ T4452] usb 6-1: Using ep0 maxpacket: 32 [ 178.875155][ T4452] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 178.915503][ T4452] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.939115][ T4452] usb 6-1: config 0 descriptor?? [ 178.984556][ T5687] fido_id[5687]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 179.163648][ T4452] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 179.176804][ T4452] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 179.188543][ T4452] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 179.195754][ T4452] usb 6-1: media controller created [ 179.207915][ T4369] rc_core: IR keymap rc-hauppauge not found [ 179.213992][ T4369] Registered IR keymap rc-empty [ 179.254903][ T4369] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 179.265602][ T4452] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 179.333491][ T4369] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 179.365907][ T4452] az6027: usb out operation failed. (-71) [ 179.389370][ T4369] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 179.411220][ T4452] az6027: usb out operation failed. (-71) [ 179.424987][ T4452] stb0899_attach: Driver disabled by Kconfig [ 179.439509][ T4369] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input10 [ 179.466964][ T4452] az6027: no front-end attached [ 179.466964][ T4452] [ 179.493314][ T4452] az6027: usb out operation failed. (-71) [ 179.523976][ T4452] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 179.546530][ T4369] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 179.569358][ T4452] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input11 [ 179.603457][ T4452] dvb-usb: schedule remote query interval to 400 msecs. [ 179.610958][ T4369] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 179.625610][ T4452] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 179.667211][ T4369] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 179.691941][ T4452] usb 6-1: USB disconnect, device number 2 [ 179.737980][ T4369] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 179.797998][ T4369] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 179.833375][ T4452] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 179.842317][ T4369] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 179.888033][ T4369] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 179.943024][ T4369] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 179.988039][ T4369] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 180.017815][ T4369] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 180.049387][ T4369] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 180.064246][ T4369] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 180.125061][ T4369] usb 1-1: USB disconnect, device number 4 [ 180.221342][ T5717] loop5: detected capacity change from 0 to 512 [ 180.266589][ T5717] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 180.368641][ T5717] EXT4-fs (loop5): 1 truncate cleaned up [ 180.375650][ T5717] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 180.525977][ T5071] EXT4-fs (loop5): unmounting filesystem. [ 180.558953][ T27] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 180.714540][ T5729] netlink: 'syz.5.396': attribute type 1 has an invalid length. [ 180.733907][ T5729] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 180.741679][ T5729] IPv6: NLM_F_CREATE should be set when creating new route [ 180.753604][ T27] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 180.775068][ T27] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 180.791881][ T27] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 180.808950][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.849813][ T27] usb 4-1: config 0 descriptor?? [ 180.996782][ T5735] loop1: detected capacity change from 0 to 1024 [ 181.103369][ T5735] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 181.127518][ T5735] ext4 filesystem being mounted at /87/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 181.264755][ T27] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 181.288190][ T27] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 181.332662][ T27] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 181.352925][ T27] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 181.393392][ T27] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 181.415819][ T4281] EXT4-fs (loop1): unmounting filesystem. [ 181.424013][ T27] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 181.446869][ T27] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 181.578159][ T27] cp2112 0003:10C4:EA90.0005: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 181.710494][ T27] cp2112 0003:10C4:EA90.0005: Part Number: 0x00 Device Version: 0x00 [ 181.920661][ T27] cp2112 0003:10C4:EA90.0005: error requesting SMBus config [ 181.965983][ T27] cp2112: probe of 0003:10C4:EA90.0005 failed with error -71 [ 182.002591][ T27] usb 4-1: USB disconnect, device number 4 [ 182.014849][ T5768] loop0: detected capacity change from 0 to 2048 [ 182.065582][ T5768] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 182.117365][ T5768] ext4 filesystem being mounted at /89/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 182.387170][ T4283] EXT4-fs (loop0): unmounting filesystem. [ 182.414680][ T5774] fido_id[5774]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 182.868034][ T27] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 182.982952][ T5801] loop1: detected capacity change from 0 to 256 [ 183.067870][ T27] usb 3-1: Using ep0 maxpacket: 8 [ 183.074879][ T27] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 183.127997][ T27] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 183.188047][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.227194][ T27] usb 3-1: config 0 descriptor?? [ 183.476340][ T27] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 183.508650][ T26] audit: type=1326 audit(1781009582.209:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5814 comm="syz.5.429" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f939519ce59 code=0x7ffc0000 [ 183.566402][ T26] audit: type=1326 audit(1781009582.239:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5814 comm="syz.5.429" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f939519ce59 code=0x7ffc0000 [ 183.675923][ T4369] usb 3-1: USB disconnect, device number 4 [ 183.697916][ T26] audit: type=1326 audit(1781009582.259:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5814 comm="syz.5.429" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f939519ce59 code=0x7ffc0000 [ 183.817789][ T26] audit: type=1326 audit(1781009582.259:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5814 comm="syz.5.429" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f939519ce59 code=0x7ffc0000 [ 183.924883][ T26] audit: type=1326 audit(1781009582.259:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5814 comm="syz.5.429" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f939519ce59 code=0x7ffc0000 [ 184.023709][ T26] audit: type=1326 audit(1781009582.259:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5814 comm="syz.5.429" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f939519ce59 code=0x7ffc0000 [ 184.142070][ T26] audit: type=1326 audit(1781009582.259:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5814 comm="syz.5.429" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f939519ce59 code=0x7ffc0000 [ 184.220503][ T26] audit: type=1326 audit(1781009582.259:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5814 comm="syz.5.429" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f939519ce59 code=0x7ffc0000 [ 184.344330][ T26] audit: type=1326 audit(1781009582.259:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5814 comm="syz.5.429" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f939519ce59 code=0x7ffc0000 [ 184.457355][ T26] audit: type=1326 audit(1781009582.259:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5814 comm="syz.5.429" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f939519ce59 code=0x7ffc0000 [ 184.863587][ T5826] loop5: detected capacity change from 0 to 32768 [ 185.028967][ T5826] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 185.200597][ T5071] ocfs2: Unmounting device (7,5) on (node local) [ 185.353831][ T5867] loop1: detected capacity change from 0 to 16 [ 185.449648][ T5867] erofs: (device loop1): mounted with root inode @ nid 36. [ 185.733643][ T5877] loop5: detected capacity change from 0 to 512 [ 185.812575][ T5877] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 185.888662][ T5884] loop0: detected capacity change from 0 to 2048 [ 185.949494][ T5877] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 185.968050][ T5877] ext4 filesystem being mounted at /34/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 186.051618][ T5892] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 186.087512][ T5877] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:3861: comm syz.5.449: Allocating blocks 64-65 which overlap fs metadata [ 186.149071][ T5877] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:3861: comm syz.5.449: Allocating blocks 64-65 which overlap fs metadata [ 186.244892][ T5884] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 186.258956][ T5876] EXT4-fs (loop5): pa ffff888073b19000: logic 1, phys. 44, len 84 [ 186.267382][ T5876] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:4894: group 0, free 63, pa_free 64 [ 186.280578][ T5425] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 186.314093][ T5884] Remounting filesystem read-only [ 186.450130][ T5071] EXT4-fs (loop5): unmounting filesystem. [ 186.467783][ T5425] usb 4-1: Using ep0 maxpacket: 16 [ 186.486922][ T5425] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 186.526099][ T5425] usb 4-1: config 0 has no interface number 0 [ 186.552779][ T5425] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 186.605805][ T5425] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 186.678018][ T5425] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 186.687346][ T5425] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 186.701610][ T5425] usb 4-1: Product: syz [ 186.706210][ T5425] usb 4-1: SerialNumber: syz [ 186.718830][ T5425] usb 4-1: config 0 descriptor?? [ 186.727365][ T5425] cm109 4-1:0.8: invalid payload size 0, expected 4 [ 186.752595][ T5425] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input12 [ 186.994078][ T5891] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.031700][ T5891] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.129653][ T27] usb 4-1: USB disconnect, device number 5 [ 187.129671][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 187.142913][ C0] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 187.160134][ T27] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 187.372909][ T5919] loop2: detected capacity change from 0 to 64 [ 187.426642][ T5897] loop1: detected capacity change from 0 to 32768 [ 187.523359][ T5897] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 187.925559][ T4281] ocfs2: Unmounting device (7,1) on (node local) [ 188.541182][ T5954] loop1: detected capacity change from 0 to 128 [ 188.645667][ T5957] loop3: detected capacity change from 0 to 2048 [ 188.739527][ T5954] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 188.828665][ T5954] ext4 filesystem being mounted at /101/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 188.880971][ T5957] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 189.326765][ T4281] EXT4-fs (loop1): unmounting filesystem. [ 189.599465][ T5955] loop2: detected capacity change from 0 to 131072 [ 189.630351][ T5955] F2FS-fs (loop2): invalid crc value [ 189.696322][ T5955] F2FS-fs (loop2): Found nat_bits in checkpoint [ 189.785578][ T5955] F2FS-fs (loop2): Cannot turn on quotas: -2 on 2 [ 189.810829][ T5955] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 189.833102][ T5972] Illegal XDP return value 32768 on prog (id 29) dev N/A, expect packet loss! [ 190.048711][ T5425] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 190.195960][ T5980] loop5: detected capacity change from 0 to 512 [ 190.234736][ T5980] UDF-fs: warning (device loop5): udf_load_vrs: No VRS found [ 190.249736][ T5425] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 190.263103][ T5980] UDF-fs: Scanning with blocksize 512 failed [ 190.273441][ T5425] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.281209][ T5982] loop3: detected capacity change from 0 to 512 [ 190.312893][ T5425] usb 2-1: config 0 descriptor?? [ 190.320941][ T5980] UDF-fs: warning (device loop5): udf_load_vrs: No VRS found [ 190.353464][ T5982] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: comm syz.3.485: inode #1: comm syz.3.485: iget: illegal inode # [ 190.368707][ T5425] cp210x 2-1:0.0: cp210x converter detected [ 190.385068][ T5980] UDF-fs: Scanning with blocksize 1024 failed [ 190.395188][ T5982] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.485: error while reading EA inode 1 err=-117 [ 190.409889][ T5982] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: comm syz.3.485: inode #1: comm syz.3.485: iget: illegal inode # [ 190.423607][ T5982] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.485: error while reading EA inode 1 err=-117 [ 190.439267][ T5980] UDF-fs: warning (device loop5): udf_load_vrs: No VRS found [ 190.440522][ T5982] EXT4-fs (loop3): 1 orphan inode deleted [ 190.452832][ T5982] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 190.477923][ T5980] UDF-fs: Scanning with blocksize 2048 failed [ 190.533184][ T5980] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 190.604591][ T5980] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 190.717107][ T4287] EXT4-fs (loop3): unmounting filesystem. [ 190.734656][ T5967] loop0: detected capacity change from 0 to 32768 [ 190.782393][ T5425] usb 2-1: cp210x converter now attached to ttyUSB0 [ 190.918583][ T5967] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 190.980690][ T5425] usb 2-1: USB disconnect, device number 5 [ 191.019190][ T5425] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 191.082682][ T5425] cp210x 2-1:0.0: device disconnected [ 191.146492][ T4283] ocfs2: Unmounting device (7,0) on (node local) [ 191.242481][ T5994] loop5: detected capacity change from 0 to 64 [ 191.673446][ T5998] loop0: detected capacity change from 0 to 64 [ 191.889926][ T6005] netlink: 332 bytes leftover after parsing attributes in process `syz.5.491'. [ 191.942885][ T6005] netlink: 'syz.5.491': attribute type 9 has an invalid length. [ 192.159141][ T5987] loop2: detected capacity change from 0 to 32768 [ 192.299250][ T6012] loop3: detected capacity change from 0 to 512 [ 192.327022][ T6012] EXT4-fs: Ignoring removed nomblk_io_submit option [ 192.480670][ T6012] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 192.552522][ T6012] EXT4-fs error (device loop3): ext4_iget_extra_inode:4763: inode #15: comm syz.3.497: corrupted in-inode xattr [ 192.619847][ T4453] kernel write not supported for file /sg0 (pid: 4453 comm: kworker/0:10) [ 192.633705][ T6012] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.497: couldn't read orphan inode 15 (err -117) [ 192.773497][ T6012] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 193.117133][ T4287] EXT4-fs (loop3): unmounting filesystem. [ 193.290781][ T6014] loop5: detected capacity change from 0 to 131072 [ 193.310531][ T6014] F2FS-fs (loop5): invalid crc value [ 193.319968][ T6014] F2FS-fs (loop5): Found nat_bits in checkpoint [ 193.383398][ T6014] F2FS-fs (loop5): Cannot turn on quotas: -2 on 2 [ 193.394622][ T6014] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 193.816453][ T6042] device macvlan0 entered promiscuous mode [ 193.849060][ T6042] netlink: 'syz.5.502': attribute type 1 has an invalid length. [ 193.897600][ T6042] netlink: 'syz.5.502': attribute type 2 has an invalid length. [ 193.909808][ T6046] Bluetooth: MGMT ver 1.22 [ 194.252470][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.258884][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.452038][ T6027] loop0: detected capacity change from 0 to 32768 [ 194.487831][ T4453] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 194.611535][ T6027] XFS (loop0): Mounting V5 Filesystem [ 194.677818][ T4453] usb 6-1: Using ep0 maxpacket: 16 [ 194.686684][ T4453] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 194.779600][ T4453] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 194.820678][ T6027] XFS (loop0): Ending clean mount [ 194.828053][ T4453] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 194.837162][ T4453] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.898633][ T4453] usb 6-1: Product: syz [ 194.902881][ T4453] usb 6-1: Manufacturer: syz [ 194.907509][ T4453] usb 6-1: SerialNumber: syz [ 195.164335][ T4283] XFS (loop0): Unmounting Filesystem [ 195.178241][ T4453] usb 6-1: 0:2 : does not exist [ 195.194386][ T4453] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 195.220252][ T6048] loop2: detected capacity change from 0 to 32768 [ 195.338133][ T4453] usb 6-1: USB disconnect, device number 3 [ 195.368545][ T6048] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 195.698253][ T4282] ocfs2: Unmounting device (7,2) on (node local) [ 196.373124][ T6095] loop2: detected capacity change from 0 to 2048 [ 196.562897][ T6095] loop2: p1 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 [ 196.748045][ T4366] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 196.901116][ T6078] loop3: detected capacity change from 0 to 32768 [ 197.135969][ T6093] loop1: detected capacity change from 0 to 131072 [ 197.146650][ T6093] F2FS-fs (loop1): invalid crc value [ 197.218009][ T6093] F2FS-fs (loop1): Found nat_bits in checkpoint [ 197.257445][ T6093] F2FS-fs (loop1): Cannot turn on quotas: -2 on 2 [ 197.294553][ T6093] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 197.377879][ T4366] usb 3-1: Using ep0 maxpacket: 16 [ 197.417251][ T4366] usb 3-1: config 0 has no interfaces? [ 197.441478][ T4366] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 197.492446][ T4366] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.527152][ T4366] usb 3-1: Product: syz [ 197.537812][ T4366] usb 3-1: Manufacturer: syz [ 197.542503][ T4366] usb 3-1: SerialNumber: syz [ 197.601285][ T4366] usb 3-1: config 0 descriptor?? [ 198.497824][ T5425] usb 3-1: USB disconnect, device number 5 [ 199.334330][ T6139] loop3: detected capacity change from 0 to 4096 [ 199.495812][ T6147] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 199.963530][ T6139] syz.3.523 (6139) used greatest stack depth: 19536 bytes left [ 199.971844][ T6118] loop0: detected capacity change from 0 to 32768 [ 200.943920][ T4274] udevd[4274]: inotify_add_watch(7, /dev/loop2p22, 10) failed: No such file or directory [ 200.958641][ T6134] udevd[6134]: inotify_add_watch(7, /dev/loop2p24, 10) failed: No such file or directory [ 200.958870][ T4300] udevd[4300]: inotify_add_watch(7, /dev/loop2p23, 10) failed: No such file or directory [ 200.982090][ T4860] udevd[4860]: inotify_add_watch(7, /dev/loop2p28, 10) failed: No such file or directory [ 200.982719][ T6141] udevd[6141]: inotify_add_watch(7, /dev/loop2p25, 10) failed: No such file or directory [ 201.004973][ T4275] udevd[4275]: inotify_add_watch(7, /dev/loop2p30, 10) failed: No such file or directory [ 201.015492][ T4861] udevd[4861]: inotify_add_watch(7, /dev/loop2p29, 10) failed: No such file or directory [ 201.016986][ T4299] udevd[4299]: inotify_add_watch(7, /dev/loop2p27, 10) failed: No such file or directory [ 201.028084][ T6136] udevd[6136]: inotify_add_watch(7, /dev/loop2p26, 10) failed: No such file or directory [ 201.071075][ T4858] udevd[4858]: inotify_add_watch(7, /dev/loop2p31, 10) failed: No such file or directory [ 201.575517][ T6165] loop3: detected capacity change from 0 to 32768 [ 201.781213][ T6165] XFS (loop3): Mounting V5 Filesystem [ 201.883472][ T6165] XFS (loop3): Ending clean mount [ 201.984764][ T6182] loop1: detected capacity change from 0 to 32768 [ 202.204641][ T6182] XFS (loop1): Mounting V5 Filesystem [ 202.447263][ T6182] XFS (loop1): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 202.619836][ T6182] XFS (loop1): Starting recovery (logdev: internal) [ 202.643546][ T4287] XFS (loop3): Unmounting Filesystem [ 202.795416][ T6182] XFS (loop1): Ending recovery (logdev: internal) [ 202.805991][ T6208] loop2: detected capacity change from 0 to 4096 [ 202.937129][ T6208] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 203.196433][ T6208] ntfs3: loop2: ino=1b, "file0" directory corrupted [ 203.316583][ T4281] XFS (loop1): Unmounting Filesystem [ 204.004674][ T6228] loop1: detected capacity change from 0 to 2048 [ 204.171424][ T6228] loop1: p1 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 [ 204.275916][ T6235] loop2: detected capacity change from 0 to 4096 [ 204.363295][ C0] vkms_vblank_simulate: vblank timer overrun [ 204.427907][ T27] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 204.503061][ T6238] loop3: detected capacity change from 0 to 128 [ 204.536378][ T6210] loop0: detected capacity change from 0 to 40427 [ 204.617828][ T27] usb 2-1: Using ep0 maxpacket: 16 [ 204.625227][ T6210] F2FS-fs (loop0): build fault injection attr: rate: 14, type: 0x3ffff [ 204.633835][ T6238] overlayfs: upper fs needs to support d_type. [ 204.643248][ T27] usb 2-1: config 0 has no interfaces? [ 204.666714][ T6238] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 204.682819][ T27] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 204.719244][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.746523][ T6238] overlayfs: failed to set xattr on upper [ 204.754918][ T6210] F2FS-fs (loop0): invalid crc value [ 204.766538][ T27] usb 2-1: Product: syz [ 204.779981][ T6238] overlayfs: ...falling back to index=off,metacopy=off. [ 204.787986][ T27] usb 2-1: Manufacturer: syz [ 204.812723][ T6210] F2FS-fs (loop0): Found nat_bits in checkpoint [ 204.821365][ T27] usb 2-1: SerialNumber: syz [ 204.870848][ T27] usb 2-1: config 0 descriptor?? [ 204.916757][ T6243] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 205.128417][ T6210] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 205.355700][ T6226] loop5: detected capacity change from 0 to 32768 [ 205.613859][ T6252] ialloc: diAlloc returned -28! [ 206.570424][ T6268] loop5: detected capacity change from 0 to 4096 [ 206.605035][ T6268] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 206.740177][ T6268] ntfs3: loop5: ino=1b, "file0" directory corrupted [ 206.933424][ T6253] loop2: detected capacity change from 0 to 32768 [ 206.972121][ T6253] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.549 (6253) [ 207.037115][ T6253] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 207.060171][ T3639] loop1: p1 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 [ 207.066875][ T6253] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 207.096633][ T6278] netlink: 16 bytes leftover after parsing attributes in process `syz.5.557'. [ 207.154157][ C0] vkms_vblank_simulate: vblank timer overrun [ 207.240168][ T6253] BTRFS info (device loop2): using free space tree [ 207.475185][ T6253] BTRFS info (device loop2): enabling ssd optimizations [ 207.883570][ T4282] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 208.262251][ T6312] loop5: detected capacity change from 0 to 4096 [ 208.328323][ T22] usb 2-1: USB disconnect, device number 6 [ 208.456535][ T6321] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 208.495206][ T6322] loop3: detected capacity change from 0 to 128 [ 208.573768][ T6322] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 208.583862][ T6322] ext4 filesystem being mounted at /110/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 208.622001][ T6322] EXT4-fs (loop3): resizing filesystem from 64 to 2 blocks [ 208.665958][ T6327] loop0: detected capacity change from 0 to 1024 [ 208.670136][ T6322] EXT4-fs warning (device loop3): ext4_resize_fs:2051: can't shrink FS - resize aborted [ 208.743627][ T6327] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 208.813592][ T4287] EXT4-fs (loop3): unmounting filesystem. [ 208.881019][ T6332] loop2: detected capacity change from 0 to 2048 [ 208.898861][ T6332] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 208.939774][ T6332] NILFS (loop2): mounting unchecked fs [ 208.983811][ T6332] NILFS (loop2): recovery complete [ 209.002797][ T6335] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 209.044045][ T4283] EXT4-fs (loop0): unmounting filesystem. [ 209.883566][ T6356] loop1: detected capacity change from 0 to 8 [ 210.069999][ T6356] SQUASHFS error: Unable to read directory block [249:c] [ 210.401610][ T6341] loop0: detected capacity change from 0 to 32768 [ 210.444874][ T6341] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.571 (6341) [ 210.513181][ T6341] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 210.529542][ T6134] udevd[6134]: inotify_add_watch(7, /dev/loop1p5, 10) failed: No such file or directory [ 210.543316][ T6136] udevd[6136]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 210.543638][ T6141] udevd[6141]: inotify_add_watch(7, /dev/loop1p6, 10) failed: No such file or directory [ 210.564688][ T4299] udevd[4299]: inotify_add_watch(7, /dev/loop1p8, 10) failed: No such file or directory [ 210.577031][ T4274] udevd[4274]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 210.591080][ T4861] udevd[4861]: inotify_add_watch(7, /dev/loop1p10, 10) failed: No such file or directory [ 210.593775][ T4860] udevd[4860]: inotify_add_watch(7, /dev/loop1p9, 10) failed: No such file or directory [ 210.614804][ T4275] udevd[4275]: inotify_add_watch(7, /dev/loop1p11, 10) failed: No such file or directory [ 210.616405][ T4300] udevd[4300]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 210.635551][ T6132] udevd[6132]: inotify_add_watch(7, /dev/loop1p13, 10) failed: No such file or directory [ 210.647776][ T6341] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 210.656502][ T6341] BTRFS info (device loop0): using free space tree [ 211.182590][ T6382] loop1: detected capacity change from 0 to 4096 [ 211.328037][ T6341] BTRFS info (device loop0): enabling ssd optimizations [ 211.336834][ T6386] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 211.506572][ T26] kauditd_printk_skb: 8 callbacks suppressed [ 211.506588][ T26] audit: type=1800 audit(1781009610.199:33): pid=6382 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.581" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 211.600606][ T4283] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 212.567352][ T6401] program syz.5.589 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 212.971272][ T6408] nr0: tun_chr_ioctl cmd 1074025677 [ 213.006869][ T6408] nr0: linktype set to 774 [ 213.059624][ T6409] netlink: 4 bytes leftover after parsing attributes in process `syz.5.592'. [ 213.430069][ T6412] loop5: detected capacity change from 0 to 64 [ 213.694631][ T6394] loop3: detected capacity change from 0 to 32768 [ 213.954007][ T6394] UFO tlock:0xffffc9000286a048 [ 214.359876][ T6418] loop5: detected capacity change from 0 to 4096 [ 214.444846][ T6403] loop0: detected capacity change from 0 to 32768 [ 214.473032][ T6419] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 214.517613][ T6403] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.586 (6403) [ 214.555687][ T6406] loop2: detected capacity change from 0 to 40427 [ 214.597713][ T6403] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 214.608654][ T6406] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 214.616443][ T6406] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 214.636962][ T6403] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 214.656819][ T6403] BTRFS info (device loop0): setting nodatasum [ 214.670643][ T6403] BTRFS info (device loop0): force zlib compression, level 3 [ 214.686930][ T6403] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8) [ 214.698685][ T6403] BTRFS info (device loop0): use lzo compression, level 0 [ 214.706780][ T6403] BTRFS info (device loop0): turning on flush-on-commit [ 214.715185][ T6403] BTRFS info (device loop0): enabling auto defrag [ 214.721766][ T6406] F2FS-fs (loop2): Found nat_bits in checkpoint [ 214.737949][ T6403] BTRFS info (device loop0): max_inline at 4096 [ 214.750627][ T6403] BTRFS info (device loop0): using free space tree [ 214.880903][ T6406] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 214.950194][ T6406] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 215.017705][ T6403] BTRFS info (device loop0): enabling ssd optimizations [ 215.138281][ T6416] loop1: detected capacity change from 0 to 32768 [ 215.208731][ T6416] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.595 (6416) [ 215.315799][ T6416] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 215.368095][ T6416] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 215.449583][ T6416] BTRFS info (device loop1): using free space tree [ 215.560451][ T4283] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 215.957912][ T6416] BTRFS info (device loop1): enabling ssd optimizations [ 216.197041][ T4281] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 216.401566][ T6477] loop3: detected capacity change from 0 to 512 [ 216.476410][ T6477] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 216.569105][ T6477] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #2: comm syz.3.604: missing EA_INODE flag [ 216.591483][ T6477] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.604: error while reading EA inode 2 err=-117 [ 216.671170][ T6477] EXT4-fs (loop3): 1 orphan inode deleted [ 216.677002][ T6477] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 216.870909][ T6488] loop2: detected capacity change from 0 to 128 [ 216.943071][ T6488] EXT4-fs (loop2): Test dummy encryption mode enabled [ 216.994304][ T6488] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a806c018, mo2=0042] [ 217.083408][ T6488] System zones: 1-3, 19-19, 35-36 [ 217.140413][ T6488] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 217.194733][ T6488] ext4 filesystem being mounted at /116/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 217.243916][ T4287] EXT4-fs (loop3): unmounting filesystem. [ 217.682680][ T6488] fscrypt (loop2): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))") [ 217.722400][ T6506] loop3: detected capacity change from 0 to 4096 [ 217.759450][ T6501] fscrypt (loop2): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))") [ 217.887748][ T6519] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 217.944600][ T6521] loop1: detected capacity change from 0 to 256 [ 218.128887][ T6521] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36a12e94, utbl_chksum : 0xe619d30d) [ 218.186553][ T4282] EXT4-fs (loop2): unmounting filesystem. [ 218.608130][ T6527] netlink: 104 bytes leftover after parsing attributes in process `syz.3.614'. [ 218.967641][ T6508] loop5: detected capacity change from 0 to 32768 [ 218.992746][ T6508] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.611 (6508) [ 219.045524][ T6508] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 219.086682][ T6508] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 219.111945][ T6508] BTRFS info (device loop5): using free space tree [ 219.284578][ T6524] loop2: detected capacity change from 0 to 32768 [ 219.391207][ T6508] BTRFS info (device loop5): enabling ssd optimizations [ 219.707985][ T5071] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 220.975574][ T6588] loop5: detected capacity change from 0 to 4096 [ 221.040778][ T6588] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512) [ 221.106092][ T6562] loop3: detected capacity change from 0 to 40427 [ 221.215541][ T6562] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 221.240954][ T6562] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 221.301668][ T6562] F2FS-fs (loop3): build fault injection attr: rate: 17008, type: 0x3ffff [ 221.340698][ T6562] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x1f8 [ 221.383478][ T6562] F2FS-fs (loop3): invalid crc value [ 221.417071][ T6588] ntfs3: loop5: ntfs3_write_inode r=1e failed, -22. [ 221.499967][ T6562] F2FS-fs (loop3): Found nat_bits in checkpoint [ 221.684460][ T6562] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 221.703933][ T6562] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 221.712398][ T5071] ntfs3: loop5: ntfs_evict_inode r=1e failed, -22. [ 221.728527][ T5071] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 221.967499][ T4287] syz-executor: attempt to access beyond end of device [ 221.967499][ T4287] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 221.981888][ T26] audit: type=1326 audit(1781009620.659:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6609 comm="syz.5.632" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f939519ce59 code=0x7ffc0000 [ 222.087851][ T26] audit: type=1326 audit(1781009620.689:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6609 comm="syz.5.632" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f939519ce59 code=0x7ffc0000 [ 222.197759][ T26] audit: type=1326 audit(1781009620.729:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6609 comm="syz.5.632" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f939519ce59 code=0x7ffc0000 [ 222.301628][ T26] audit: type=1326 audit(1781009620.729:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6609 comm="syz.5.632" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7f939519ce59 code=0x7ffc0000 [ 222.387987][ T26] audit: type=1326 audit(1781009620.729:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6609 comm="syz.5.632" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f939519ce59 code=0x7ffc0000 [ 222.509311][ T26] audit: type=1326 audit(1781009620.729:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6609 comm="syz.5.632" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f939519ce59 code=0x7ffc0000 [ 222.593551][ T26] audit: type=1326 audit(1781009620.729:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6609 comm="syz.5.632" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f939519ce59 code=0x7ffc0000 [ 222.689469][ T26] audit: type=1326 audit(1781009620.729:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6609 comm="syz.5.632" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f939519ce59 code=0x7ffc0000 [ 222.791731][ T26] audit: type=1326 audit(1781009620.729:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6609 comm="syz.5.632" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7f939519ce59 code=0x7ffc0000 [ 222.924242][ T26] audit: type=1326 audit(1781009620.729:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6609 comm="syz.5.632" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f939519ce59 code=0x7ffc0000 [ 223.237882][ T6635] netlink: 'syz.3.633': attribute type 29 has an invalid length. [ 223.266493][ T6635] netlink: 'syz.3.633': attribute type 29 has an invalid length. [ 223.309677][ T6639] netlink: 'syz.3.633': attribute type 29 has an invalid length. [ 223.348231][ T6635] netlink: 'syz.3.633': attribute type 29 has an invalid length. [ 223.685748][ T6646] loop1: detected capacity change from 0 to 512 [ 223.821416][ T6646] EXT4-fs error (device loop1): ext4_orphan_get:1431: comm syz.1.642: bad orphan inode 11862016 [ 223.838689][ T6646] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 223.884540][ T6646] ext4 filesystem being mounted at /142/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 224.185990][ T6657] loop0: detected capacity change from 0 to 1024 [ 224.234297][ T4281] EXT4-fs (loop1): unmounting filesystem. [ 224.367989][ T6657] hfsplus: request for non-existent node 16777216 in B*Tree [ 224.395776][ T6657] hfsplus: request for non-existent node 16777216 in B*Tree [ 224.417126][ T6657] hfsplus: request for non-existent node 16777216 in B*Tree [ 224.456332][ T6657] hfsplus: request for non-existent node 16777216 in B*Tree [ 224.486892][ T6662] hfsplus: request for non-existent node 16777216 in B*Tree [ 224.520065][ T6651] loop5: detected capacity change from 0 to 32768 [ 224.527495][ T6662] hfsplus: request for non-existent node 16777216 in B*Tree [ 224.678128][ T6669] overlayfs: unrecognized mount option "\']*=°¢°©æ[\1\,-\=" or missing value [ 224.754559][ T4310] hfsplus: request for non-existent node 16777216 in B*Tree [ 224.827165][ T4310] hfsplus: request for non-existent node 16777216 in B*Tree [ 224.836150][ T6651] XFS (loop5): Mounting V5 Filesystem [ 224.985024][ T6683] loop0: detected capacity change from 0 to 512 [ 225.010319][ T6675] loop3: detected capacity change from 0 to 4096 [ 225.065399][ T6651] XFS (loop5): Ending clean mount [ 225.203237][ T6683] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 225.245446][ T6683] EXT4-fs (loop0): orphan file too big: 4294967295 [ 225.273541][ T5071] XFS (loop5): Unmounting Filesystem [ 225.303391][ T6683] EXT4-fs (loop0): mount failed [ 226.517819][ T4331] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 226.712940][ T4331] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 226.737625][ T4331] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.784979][ T4331] usb 6-1: config 0 descriptor?? [ 227.027883][ T4331] [drm] vendor descriptor length:6 data:06 5f 01 00 00 00 00 00 00 00 00 [ 227.036494][ T4331] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 227.057870][ T6724] netlink: 14 bytes leftover after parsing attributes in process `syz.0.659'. [ 227.248080][ T4331] [drm:udl_init] *ERROR* Selecting channel failed [ 227.301171][ T4331] [drm] Initialized udl 0.0.1 20120220 for 6-1:0.0 on minor 2 [ 227.357772][ T4331] [drm] Initialized udl on minor 2 [ 227.392138][ T4331] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 227.414603][ T4331] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 227.464543][ T4331] usb 6-1: USB disconnect, device number 4 [ 227.499019][ T4557] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 227.540363][ T4557] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 227.566823][ T4557] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 227.821873][ T6735] loop1: detected capacity change from 0 to 256 [ 228.006731][ T6740] loop0: detected capacity change from 0 to 256 [ 228.046913][ T6735] FAT-fs (loop1): Directory bread(block 64) failed [ 228.113966][ T6735] FAT-fs (loop1): Directory bread(block 65) failed [ 228.207916][ T6735] FAT-fs (loop1): Directory bread(block 66) failed [ 228.214578][ T6735] FAT-fs (loop1): Directory bread(block 67) failed [ 228.308692][ T6735] FAT-fs (loop1): Directory bread(block 68) failed [ 228.315320][ T6735] FAT-fs (loop1): Directory bread(block 69) failed [ 228.385529][ T6735] FAT-fs (loop1): Directory bread(block 70) failed [ 228.427728][ T6735] FAT-fs (loop1): Directory bread(block 71) failed [ 228.434546][ T6735] FAT-fs (loop1): Directory bread(block 72) failed [ 228.487845][ T6735] FAT-fs (loop1): Directory bread(block 73) failed [ 228.761114][ T6752] can0: slcan on ttyS3. [ 228.918928][ T6752] can0 (unregistered): slcan off ttyS3. [ 229.008796][ T4287] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22. [ 229.077823][ T4287] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 229.544937][ T6747] loop2: detected capacity change from 0 to 32768 [ 229.607157][ T6747] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.667 (6747) [ 229.684138][ T6747] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 229.715144][ T6747] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 229.770471][ T6747] BTRFS info (device loop2): using free space tree [ 230.228471][ T6747] BTRFS info (device loop2): enabling ssd optimizations [ 230.335277][ T6810] netlink: 8 bytes leftover after parsing attributes in process `syz.5.682'. [ 230.488463][ T4282] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 230.636119][ T6817] device erspan0 entered promiscuous mode [ 231.362623][ T6830] netlink: 12 bytes leftover after parsing attributes in process `syz.5.691'. [ 231.740387][ T6840] loop3: detected capacity change from 0 to 1024 [ 231.910225][ T9] hfsplus: bad catalog file entry [ 231.916447][ T6837] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 231.962537][ T6837] syzkaller0: linktype set to 825 [ 232.168159][ T4295] Bluetooth: hci1: command 0x0406 tx timeout [ 232.174296][ T4295] Bluetooth: hci2: command 0x0406 tx timeout [ 232.187926][ T4297] Bluetooth: hci3: command 0x0406 tx timeout [ 232.384525][ T6851] loop3: detected capacity change from 0 to 256 [ 232.476395][ T6853] netlink: 26332 bytes leftover after parsing attributes in process `syz.5.694'. [ 232.875226][ T6815] loop1: detected capacity change from 0 to 32768 [ 232.888546][ T6864] loop5: detected capacity change from 0 to 512 [ 232.916219][ T6864] EXT4-fs: Ignoring removed bh option [ 232.966876][ T6864] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 233.069692][ T6815] XFS (loop1): Mounting V5 Filesystem [ 233.077035][ T6864] EXT4-fs (loop5): 1 truncate cleaned up [ 233.103042][ T6864] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 233.103050][ T6815] XFS (loop1): Ending clean mount [ 233.313063][ T5071] EXT4-fs (loop5): unmounting filesystem. [ 233.488991][ T4281] XFS (loop1): Unmounting Filesystem [ 233.613391][ T6886] 8021q: adding VLAN 0 to HW filter on device bond1 [ 233.629855][ T6886] bond0: (slave bond1): Enslaving as an active interface with an up link [ 233.817334][ T6893] loop3: detected capacity change from 0 to 1024 [ 233.974155][ T6893] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 234.041493][ T6901] loop0: detected capacity change from 0 to 256 [ 234.098219][ T6903] loop5: detected capacity change from 0 to 256 [ 234.114818][ T6901] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 234.178560][ T6903] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x596330fe, utbl_chksum : 0xe619d30d) [ 234.289875][ T4287] EXT4-fs (loop3): unmounting filesystem. [ 234.843944][ T6915] loop5: detected capacity change from 0 to 256 [ 234.891099][ T6915] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 234.971808][ T6917] loop3: detected capacity change from 0 to 1024 [ 234.978058][ T4558] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 234.998513][ T6900] loop2: detected capacity change from 0 to 32768 [ 235.018816][ T6917] EXT4-fs: Ignoring removed i_version option [ 235.025017][ T6917] EXT4-fs: inline encryption not supported [ 235.062764][ T6917] EXT4-fs (loop3): Test dummy encryption mode enabled [ 235.087889][ T26] kauditd_printk_skb: 9 callbacks suppressed [ 235.087904][ T26] audit: type=1800 audit(1781009633.779:53): pid=6900 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.712" name="file1" dev="loop2" ino=4 res=0 errno=0 [ 235.141610][ T6917] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 235.170809][ T4558] usb 1-1: config 0 interface 0 altsetting 251 bulk endpoint 0x9 has invalid maxpacket 99 [ 235.230529][ T6921] tap0: tun_chr_ioctl cmd 1074025681 [ 235.252809][ T4558] usb 1-1: config 0 interface 0 has no altsetting 0 [ 235.294545][ T6917] EXT4-fs (loop3): unmounting filesystem. [ 235.319905][ T4558] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 235.361295][ T4558] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 235.377779][ T4558] usb 1-1: Product: syz [ 235.384920][ T4558] usb 1-1: Manufacturer: syz [ 235.390369][ T4558] usb 1-1: SerialNumber: syz [ 235.418594][ T4558] usb 1-1: config 0 descriptor?? [ 235.425360][ T6911] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 235.482407][ T4558] usb 1-1: selecting invalid altsetting 0 [ 235.723260][ T6911] usb 1-1: cannot submit urb 0, error -2: endpoint not enabled [ 235.796366][ T4558] usb 1-1: USB disconnect, device number 5 [ 236.187965][ T4331] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 236.387801][ T4331] usb 4-1: Using ep0 maxpacket: 8 [ 236.395132][ T4331] usb 4-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 236.457109][ T4331] usb 4-1: config 0 interface 0 has no altsetting 0 [ 236.463961][ T4331] usb 4-1: New USB device found, idVendor=046d, idProduct=c295, bcdDevice= 0.00 [ 236.497845][ T4331] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.539252][ T4331] usb 4-1: config 0 descriptor?? [ 236.852496][ T6934] loop5: detected capacity change from 0 to 32768 [ 236.937567][ T6934] [ 236.937567][ T6934] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 236.937567][ T6934] [ 236.954644][ T6933] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.000011][ T6933] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.083299][ T4331] logitech 0003:046D:C295.0006: unknown main item tag 0x0 [ 237.104652][ T4331] logitech 0003:046D:C295.0006: unknown main item tag 0x4 [ 237.116806][ T6934] read_mapping_page failed! [ 237.153029][ T6934] ERROR: (device loop5): txCommit: [ 237.153029][ T6934] [ 237.163218][ T4331] logitech 0003:046D:C295.0006: unknown main item tag 0x0 [ 237.207952][ T4331] logitech 0003:046D:C295.0006: unknown main item tag 0x0 [ 237.259288][ T4331] logitech 0003:046D:C295.0006: unknown main item tag 0x0 [ 237.320300][ T4331] logitech 0003:046D:C295.0006: unknown main item tag 0x2 [ 237.327527][ T4331] logitech 0003:046D:C295.0006: unknown main item tag 0x0 [ 237.416561][ T4331] logitech 0003:046D:C295.0006: unknown main item tag 0x0 [ 237.458018][ T4331] logitech 0003:046D:C295.0006: unknown main item tag 0x0 [ 237.465242][ T4331] logitech 0003:046D:C295.0006: unknown main item tag 0x0 [ 237.529517][ T4331] logitech 0003:046D:C295.0006: unknown main item tag 0x2 [ 237.551245][ T4331] logitech 0003:046D:C295.0006: unknown main item tag 0x0 [ 237.577793][ T4331] logitech 0003:046D:C295.0006: item fetching failed at offset 40/41 [ 237.596766][ T4331] logitech 0003:046D:C295.0006: parse failed [ 237.615455][ T4331] logitech: probe of 0003:046D:C295.0006 failed with error -22 [ 237.626233][ T6936] loop0: detected capacity change from 0 to 131072 [ 237.644464][ T6936] F2FS-fs (loop0): Invalid log sectorsize (67108873) [ 237.651490][ T6936] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 237.663353][ T6936] F2FS-fs (loop0): invalid crc value [ 237.713160][ T4331] usb 4-1: USB disconnect, device number 6 [ 237.736930][ T6936] F2FS-fs (loop0): Found nat_bits in checkpoint [ 237.776540][ T5071] [ 237.776540][ T5071] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 237.776540][ T5071] [ 237.822725][ T6936] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 237.826946][ T5071] [ 237.826946][ T5071] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 237.826946][ T5071] [ 237.830084][ T6936] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 237.931427][ T6938] loop2: detected capacity change from 0 to 32768 [ 238.000415][ T6938] JBD2: Ignoring recovery information on journal [ 238.207431][ T6938] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 238.364239][ T6938] (syz.2.729,6938,1):ocfs2_verify_group_and_input:426 ERROR: input chain exceeds the limit. [ 238.377910][ T6575] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 238.404218][ T6938] (syz.2.729,6938,1):ocfs2_group_add:505 ERROR: status = -22 [ 238.541820][ T4282] ocfs2: Unmounting device (7,2) on (node local) [ 238.568476][ T6575] usb 6-1: Using ep0 maxpacket: 16 [ 238.576002][ T6575] usb 6-1: config 0 interface 0 has no altsetting 0 [ 238.613704][ T6575] usb 6-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 238.654205][ T6575] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.725727][ T6575] usb 6-1: config 0 descriptor?? [ 238.797132][ T6961] loop3: detected capacity change from 0 to 1024 [ 238.989720][ T6964] loop2: detected capacity change from 0 to 256 [ 239.018480][ T6964] exfat: Deprecated parameter 'utf8' [ 239.076380][ T6964] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 239.166785][ T6575] uclogic 0003:28BD:0071.0007: interface is invalid, ignoring [ 239.195887][ T6968] loop3: detected capacity change from 0 to 512 [ 239.302352][ T6968] EXT4-fs warning (device loop3): ext4_xattr_inode_get:506: inode #11: comm syz.3.740: EA inode hash validation failed [ 239.335074][ T6968] EXT4-fs error (device loop3): ext4_do_update_inode:5279: inode #15: comm syz.3.740: corrupted inode contents [ 239.389775][ T4453] usb 6-1: USB disconnect, device number 5 [ 239.428156][ T6968] EXT4-fs (loop3): Remounting filesystem read-only [ 239.447818][ T6968] EXT4-fs error (device loop3): ext4_dirty_inode:6156: inode #15: comm syz.3.740: mark_inode_dirty error [ 239.485198][ T6972] loop1: detected capacity change from 0 to 256 [ 239.491559][ T6968] EXT4-fs (loop3): Remounting filesystem read-only [ 239.491725][ T6968] EXT4-fs error (device loop3): ext4_do_update_inode:5279: inode #15: comm syz.3.740: corrupted inode contents [ 239.510967][ T6968] EXT4-fs (loop3): Remounting filesystem read-only [ 239.517568][ T6968] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2947: inode #15: comm syz.3.740: mark_inode_dirty error [ 239.633349][ T6968] EXT4-fs (loop3): Remounting filesystem read-only [ 239.685589][ T6968] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2950: inode #15: comm syz.3.740: mark inode dirty (error -117) [ 239.706786][ T6968] EXT4-fs (loop3): Remounting filesystem read-only [ 239.722256][ T6968] EXT4-fs warning (device loop3): ext4_evict_inode:301: xattr delete (err -117) [ 239.765462][ T6968] EXT4-fs (loop3): 1 orphan inode deleted [ 239.808652][ T6968] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 240.138954][ T27] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 240.274484][ T6986] netlink: 8 bytes leftover after parsing attributes in process `syz.0.758'. [ 240.291863][ T6990] netlink: 60463 bytes leftover after parsing attributes in process `syz.5.747'. [ 240.341413][ T27] usb 4-1: config 0 has an invalid interface number: 28 but max is 0 [ 240.356467][ T27] usb 4-1: config 0 has no interface number 0 [ 240.373556][ T27] usb 4-1: config 0 interface 28 altsetting 168 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 240.417774][ T27] usb 4-1: config 0 interface 28 has no altsetting 0 [ 240.424580][ T27] usb 4-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 240.464384][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.508740][ T27] usb 4-1: config 0 descriptor?? [ 240.543384][ T27] ums-realtek 4-1:0.28: USB Mass Storage device detected [ 240.744041][ T4331] usb 4-1: USB disconnect, device number 7 [ 240.782576][ T6983] loop2: detected capacity change from 0 to 32768 [ 240.827344][ T6983] [ 240.827344][ T6983] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 240.827344][ T6983] [ 240.918422][ T6983] read_mapping_page failed! [ 240.923064][ T6983] ERROR: (device loop2): txCommit: [ 240.923064][ T6983] [ 240.961738][ T6983] ERROR: (device loop2): remounting filesystem as read-only [ 241.066417][ T4282] non-latin1 character 0x3ff found in JFS file name [ 241.086912][ T4282] mount with iocharset=utf8 to access [ 241.329284][ T4287] EXT4-fs (loop3): unmounting filesystem. [ 241.577884][ T4331] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 241.653873][ T33] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.760003][ T4331] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 241.783800][ T4331] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 241.830179][ T4331] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 241.847808][ T4331] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.865154][ T4331] usb 2-1: Product: syz [ 241.875089][ T33] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.878046][ T4331] usb 2-1: Manufacturer: syz [ 241.904230][ T4331] usb 2-1: SerialNumber: syz [ 241.971113][ T6575] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 242.034517][ T33] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.135424][ T33] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.159876][ T6575] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 242.187794][ T6575] usb 6-1: config 0 interface 0 has no altsetting 0 [ 242.197450][ T6575] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 242.225785][ T6575] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 242.252743][ T6575] usb 6-1: Product: syz [ 242.257013][ T6575] usb 6-1: Manufacturer: syz [ 242.282205][ T6575] usb 6-1: SerialNumber: syz [ 242.312162][ T6575] usb 6-1: config 0 descriptor?? [ 242.386930][ T4331] usb 2-1: 0:2 : does not exist [ 242.586504][ T7036] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.770'. [ 242.611324][ T6575] usb 6-1: selecting invalid altsetting 0 [ 242.698283][ T6575] usb 6-1: USB disconnect, device number 6 [ 242.857406][ T4331] usb 2-1: USB disconnect, device number 7 [ 243.036336][ T4284] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 243.045537][ T4284] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 243.061763][ T6136] udevd[6136]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 243.089640][ T4284] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 243.114872][ T4284] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 243.130622][ T4284] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 243.138244][ T4284] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 243.875197][ T7040] chnl_net:caif_netlink_parms(): no params data found [ 244.277782][ T6575] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 244.410393][ T7083] Cannot find add_set index 4 as target [ 244.482113][ T6575] usb 4-1: Using ep0 maxpacket: 16 [ 244.491627][ T6575] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 244.516478][ T6575] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 244.527619][ T6575] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.585638][ T6575] usb 4-1: config 0 descriptor?? [ 244.755507][ T7040] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.772876][ T7040] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.793568][ T7040] device bridge_slave_0 entered promiscuous mode [ 244.890657][ T7040] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.899289][ T7040] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.919868][ T7040] device bridge_slave_1 entered promiscuous mode [ 244.945701][ T33] device hsr_slave_0 left promiscuous mode [ 244.961501][ T33] device hsr_slave_1 left promiscuous mode [ 244.978579][ T33] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 244.996941][ T33] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 245.022181][ T33] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 245.038175][ T6575] mcp2221 0003:04D8:00DD.0008: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 245.067793][ T33] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 245.086487][ T33] device bridge_slave_1 left promiscuous mode [ 245.110433][ T33] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.140849][ T7091] program syz.5.785 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 245.208053][ T4284] Bluetooth: hci2: command 0x0409 tx timeout [ 245.225394][ T33] device bridge_slave_0 left promiscuous mode [ 245.251989][ T33] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.398663][ T33] device veth1_macvtap left promiscuous mode [ 245.404802][ T33] device veth0_macvtap left promiscuous mode [ 245.411737][ T33] device veth1_vlan left promiscuous mode [ 245.418212][ T33] device veth0_vlan left promiscuous mode [ 245.426467][ T7095] program syz.5.787 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 245.474666][ T4453] usb 4-1: USB disconnect, device number 8 [ 245.493797][ T7093] loop0: detected capacity change from 0 to 8192 [ 245.565760][ T7093] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 245.610755][ T7093] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 245.627455][ T7093] REISERFS (device loop0): using ordered data mode [ 245.638166][ T7093] reiserfs: using flush barriers [ 245.659223][ T7093] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 245.752637][ T7093] REISERFS (device loop0): checking transaction log (loop0) [ 245.808514][ T7093] REISERFS (device loop0): Using r5 hash to sort names [ 245.816599][ T7093] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 245.921273][ T7103] loop1: detected capacity change from 0 to 512 [ 246.466177][ T33] bond0 (unregistering): (slave bond1): Releasing backup interface [ 246.476712][ T33] bond1 (unregistering): Released all slaves [ 247.100416][ T33] team0 (unregistering): Port device team_slave_1 removed [ 247.162641][ T33] team0 (unregistering): Port device team_slave_0 removed [ 247.225296][ T33] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 247.285673][ T33] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 247.294658][ T4284] Bluetooth: hci2: command 0x041b tx timeout [ 247.743816][ T33] bond0 (unregistering): Released all slaves [ 247.876065][ T7040] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 247.990024][ T7040] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 248.165138][ T7040] team0: Port device team_slave_0 added [ 248.218762][ T7040] team0: Port device team_slave_1 added [ 248.295496][ T7040] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 248.312545][ T7040] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 248.416327][ T7040] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 248.468738][ T7040] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 248.475750][ T7040] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 248.595659][ T7040] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 248.706343][ T7127] loop0: detected capacity change from 0 to 32768 [ 248.728317][ T7127] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 248.739826][ T7127] JBD2: Ignoring recovery information on journal [ 248.798400][ T7127] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 248.871436][ T7127] OCFS2: ERROR (device loop0): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #32 has an invalid fs_generation of #1 [ 248.888056][ T7127] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 248.897993][ T7127] OCFS2: File system is now read-only. [ 248.903518][ T7127] (syz.0.801,7127,0):ocfs2_search_chain:1761 ERROR: status = -30 [ 248.911766][ T7127] (syz.0.801,7127,0):ocfs2_search_chain:1871 ERROR: status = -30 [ 248.919688][ T7127] (syz.0.801,7127,0):ocfs2_claim_suballoc_bits:1950 ERROR: status = -30 [ 248.928176][ T7127] (syz.0.801,7127,0):ocfs2_claim_suballoc_bits:1993 ERROR: status = -30 [ 248.938171][ T7127] (syz.0.801,7127,0):__ocfs2_claim_clusters:2365 ERROR: status = -30 [ 248.946330][ T7127] (syz.0.801,7127,0):__ocfs2_claim_clusters:2373 ERROR: status = -30 [ 248.954829][ T7127] (syz.0.801,7127,0):ocfs2_local_alloc_new_window:1203 ERROR: status = -30 [ 248.963572][ T7127] (syz.0.801,7127,0):ocfs2_local_alloc_new_window:1228 ERROR: status = -30 [ 248.974601][ T7127] (syz.0.801,7127,0):ocfs2_local_alloc_slide_window:1302 ERROR: status = -30 [ 248.983568][ T7127] (syz.0.801,7127,0):ocfs2_local_alloc_slide_window:1321 ERROR: status = -30 [ 248.992471][ T7127] (syz.0.801,7127,0):ocfs2_reserve_local_alloc_bits:671 ERROR: status = -30 [ 249.001362][ T7127] (syz.0.801,7127,0):ocfs2_reserve_local_alloc_bits:709 ERROR: status = -30 [ 249.010241][ T7127] (syz.0.801,7127,0):ocfs2_reserve_clusters_with_limit:1166 ERROR: status = -30 [ 249.019682][ T7127] (syz.0.801,7127,0):ocfs2_reserve_clusters_with_limit:1215 ERROR: status = -30 [ 249.030673][ T7127] (syz.0.801,7127,0):ocfs2_symlink:1911 ERROR: status = -30 [ 249.038289][ T7127] (syz.0.801,7127,0):ocfs2_symlink:2065 ERROR: status = -30 [ 249.111466][ T7040] device hsr_slave_0 entered promiscuous mode [ 249.134597][ T7040] device hsr_slave_1 entered promiscuous mode [ 249.183213][ T7040] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 249.205568][ T7040] Cannot create hsr debugfs directory [ 249.256786][ T4283] ocfs2: Unmounting device (7,0) on (node local) [ 249.367796][ T4284] Bluetooth: hci2: command 0x040f tx timeout [ 249.703345][ T7040] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 249.750408][ T7040] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 249.831348][ T7040] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 249.882492][ T7040] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 250.203152][ T7040] 8021q: adding VLAN 0 to HW filter on device bond0 [ 250.261477][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 250.279790][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 250.324334][ T7040] 8021q: adding VLAN 0 to HW filter on device team0 [ 250.390201][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 250.410973][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 250.438537][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.445907][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 250.528193][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 250.574098][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 250.612955][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 250.654583][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.662082][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 250.676720][ T7166] mmap: syz.3.810 (7166) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 250.724750][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 250.773516][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 250.799033][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 250.846861][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 250.850910][ T7144] loop1: detected capacity change from 0 to 32768 [ 250.894622][ T7173] netlink: 'syz.5.815': attribute type 2 has an invalid length. [ 250.939492][ T7173] netlink: 'syz.5.815': attribute type 8 has an invalid length. [ 250.947235][ T7173] netlink: 132 bytes leftover after parsing attributes in process `syz.5.815'. [ 251.005582][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 251.020356][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 251.031019][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 251.043009][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 251.052180][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 251.062174][ T7144] XFS (loop1): Mounting V5 Filesystem [ 251.068037][ T7177] netlink: 'syz.5.815': attribute type 2 has an invalid length. [ 251.075867][ T7177] netlink: 'syz.5.815': attribute type 8 has an invalid length. [ 251.084510][ T7177] netlink: 132 bytes leftover after parsing attributes in process `syz.5.815'. [ 251.112040][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 251.138612][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 251.150230][ T7040] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 251.316154][ T7144] XFS (loop1): Starting recovery (logdev: internal) [ 251.378570][ T7144] XFS (loop1): Ending recovery (logdev: internal) [ 251.414809][ T7144] XFS (loop1): User initiated shutdown received. [ 251.438480][ T7144] XFS (loop1): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:499). Shutting down filesystem. [ 251.458185][ T4284] Bluetooth: hci2: command 0x0419 tx timeout [ 251.469693][ T7144] XFS (loop1): Please unmount the filesystem and rectify the problem(s) [ 251.621761][ T4281] XFS (loop1): Unmounting Filesystem [ 251.866658][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 251.877006][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 251.906081][ T7040] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 252.495839][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 252.508292][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 252.540832][ T4864] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 252.554588][ T4864] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 252.567008][ T7040] device veth0_vlan entered promiscuous mode [ 252.579357][ T4864] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 252.588415][ T4864] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 252.602355][ T7040] device veth1_vlan entered promiscuous mode [ 252.636109][ T4864] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 252.646215][ T4864] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 252.655460][ T4864] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 252.665318][ T4864] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 252.678612][ T7040] device veth0_macvtap entered promiscuous mode [ 252.701637][ T7040] device veth1_macvtap entered promiscuous mode [ 252.720626][ T7040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.732857][ T7040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.743178][ T7040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.754544][ T7040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.764906][ T7040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.775730][ T7040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.787223][ T7040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.803811][ T7040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.818185][ T7040] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 252.826765][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 252.836082][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 252.845007][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 252.854124][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 252.865668][ T7040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.876886][ T7040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.900549][ T7040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.916680][ T7040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.933284][ T7040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.944259][ T7040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.956171][ T7040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.967120][ T7040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.979618][ T7040] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 252.989736][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 253.001530][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 253.015184][ T7040] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.024942][ T7040] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.034473][ T7040] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.044830][ T7040] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.161261][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 253.180740][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 253.197032][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 253.214182][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 253.224840][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 253.239786][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 253.420748][ T7230] netlink: 160 bytes leftover after parsing attributes in process `syz.1.826'. [ 253.591843][ T7227] loop5: detected capacity change from 0 to 4096 [ 253.978666][ T5071] ntfs3: loop5: ntfs_evict_inode r=5 failed, -22. [ 253.995663][ T5071] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 254.646369][ T7225] loop0: detected capacity change from 0 to 32768 [ 254.725908][ T7225] JBD2: Ignoring recovery information on journal [ 254.769531][ T7225] jbd2_journal_bmap: journal block not found at offset 32 on loop0-75 [ 254.778348][ T7225] JBD2: bad block at offset 32 [ 254.850486][ T7225] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 254.884132][ T7225] OCFS2: ERROR (device loop0): int __ocfs2_find_path(struct ocfs2_caching_info *, struct ocfs2_extent_list *, u32, path_insert_t *, void *): Owner 65 has invalid tree depth 312 in extent list [ 255.009255][ T7225] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 255.074476][ T7225] OCFS2: File system is now read-only. [ 255.092867][ T7225] (syz.0.825,7225,0):ocfs2_find_leaf:1941 ERROR: status = -30 [ 255.128161][ T7225] (syz.0.825,7225,0):ocfs2_get_clusters_nocache:421 ERROR: status = -30 [ 255.137775][ T7225] (syz.0.825,7225,0):ocfs2_get_clusters:624 ERROR: status = -30 [ 255.155655][ T7225] (syz.0.825,7225,0):ocfs2_extent_map_get_blocks:671 ERROR: status = -30 [ 255.177852][ T7225] (syz.0.825,7225,0):ocfs2_read_virt_blocks:989 ERROR: status = -30 [ 255.185949][ T7225] (syz.0.825,7225,0):ocfs2_read_dir_block:511 ERROR: status = -30 [ 255.253519][ T7225] (syz.0.825,7225,0):ocfs2_find_dir_space_el:3504 ERROR: status = -5 [ 255.278022][ T7225] (syz.0.825,7225,1):ocfs2_prepare_dir_for_insert:4311 ERROR: status = -5 [ 255.297855][ T7225] (syz.0.825,7225,1):ocfs2_mknod:298 ERROR: status = -5 [ 255.310072][ T7244] loop1: detected capacity change from 0 to 32768 [ 255.330738][ T7225] (syz.0.825,7225,1):ocfs2_mknod:502 ERROR: status = -5 [ 255.364464][ T7244] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.819 (7244) [ 255.364678][ T7225] (syz.0.825,7225,1):ocfs2_mkdir:659 ERROR: status = -5 [ 255.449170][ T7244] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 255.506967][ T7244] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 255.548662][ T7244] BTRFS info (device loop1): using free space tree [ 255.626521][ T4283] ocfs2: Unmounting device (7,0) on (node local) [ 255.691194][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.697567][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.778661][ T7284] loop5: detected capacity change from 0 to 64 [ 255.829656][ T7284] MINIX-fs: mounting file system with errors, running fsck is recommended [ 255.848144][ T7244] BTRFS info (device loop1): enabling ssd optimizations [ 256.149040][ T4281] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 256.817761][ T6472] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 256.853432][ T7314] program syz.1.836 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 257.007892][ T6472] usb 4-1: Using ep0 maxpacket: 8 [ 257.016606][ T6472] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 257.059471][ T6472] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.126201][ T6472] pvrusb2: Hardware description: Terratec Grabster AV400 [ 257.154850][ T6472] pvrusb2: ********** [ 257.174756][ T6472] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 257.236113][ T6472] pvrusb2: Important functionality might not be entirely working. [ 257.254583][ T6472] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 257.291142][ T6472] pvrusb2: ********** [ 257.360581][ T2310] pvrusb2: Invalid write control endpoint [ 257.551359][ T7296] pvrusb2: Invalid write control endpoint [ 257.571105][ T6472] usb 4-1: USB disconnect, device number 9 [ 257.608690][ T7327] loop0: detected capacity change from 0 to 736 [ 257.616603][ T7306] loop6: detected capacity change from 0 to 32768 [ 257.666905][ T2310] pvrusb2: Invalid write control endpoint [ 257.697481][ T2310] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 257.754850][ T7306] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 257.770474][ T2310] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 257.802946][ T2310] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 257.848381][ T2310] pvrusb2: Device being rendered inoperable [ 257.897589][ T2310] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 257.905939][ T2310] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 257.952621][ T7040] ocfs2: Unmounting device (7,6) on (node local) [ 258.028656][ T2310] pvrusb2: Attached sub-driver cx25840 [ 258.057765][ T2310] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 258.118974][ T2310] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 258.263254][ T7346] netlink: 12 bytes leftover after parsing attributes in process `syz.0.849'. [ 258.457963][ T6576] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 258.583989][ T7357] loop0: detected capacity change from 0 to 512 [ 258.651892][ T6576] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 258.664587][ T7357] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 258.680576][ T7357] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 258.698052][ T7357] System zones: 0-1, 15-15, 18-18, 34-34 [ 258.709101][ T7357] EXT4-fs (loop0): orphan cleanup on readonly fs [ 258.725907][ T6576] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 258.747975][ T7357] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=0 [ 258.796783][ T7357] EXT4-fs warning (device loop0): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 258.829398][ T6576] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 258.872100][ T6576] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 258.916415][ T6576] usb 7-1: SerialNumber: syz [ 258.938604][ T7357] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 258.958171][ T7357] EXT4-fs error (device loop0): ext4_orphan_get:1431: comm syz.0.854: bad orphan inode 16 [ 259.022601][ T7357] ext4_test_bit(bit=15, block=18) = 1 [ 259.048069][ T7357] is_bad_inode(inode)=0 [ 259.052373][ T7357] NEXT_ORPHAN(inode)=0 [ 259.056532][ T7357] max_ino=32 [ 259.072258][ T7357] i_nlink=2 [ 259.075684][ T7357] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 259.125071][ T7357] fscrypt (loop0, inode 16): Error -61 getting encryption context [ 259.158073][ T7357] fscrypt (loop0, inode 16): Error -61 getting encryption context [ 259.189586][ T6576] usb 7-1: 0:2 : does not exist [ 259.277489][ T6576] usb 7-1: USB disconnect, device number 2 [ 259.380759][ T4283] EXT4-fs (loop0): unmounting filesystem. [ 259.529063][ T4274] udevd[4274]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 259.598185][ T7381] loop5: detected capacity change from 0 to 256 [ 259.656453][ T7381] FAT-fs (loop5): Directory bread(block 64) failed [ 259.685196][ T7381] FAT-fs (loop5): Directory bread(block 65) failed [ 259.737932][ T7381] FAT-fs (loop5): Directory bread(block 66) failed [ 259.744733][ T7381] FAT-fs (loop5): Directory bread(block 67) failed [ 259.789238][ T7381] FAT-fs (loop5): Directory bread(block 68) failed [ 259.824694][ T7381] FAT-fs (loop5): Directory bread(block 69) failed [ 259.880730][ T7381] FAT-fs (loop5): Directory bread(block 70) failed [ 259.915783][ T7381] FAT-fs (loop5): Directory bread(block 71) failed [ 259.940447][ T7381] FAT-fs (loop5): Directory bread(block 72) failed [ 259.963113][ T7381] FAT-fs (loop5): Directory bread(block 73) failed [ 260.137857][ T6576] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 260.340093][ T6576] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 260.359699][ T6576] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.384249][ T6576] usb 4-1: config 0 descriptor?? [ 260.428863][ T6576] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 261.231191][ T6576] usb 4-1: USB disconnect, device number 10 [ 262.046312][ T7455] netlink: 32 bytes leftover after parsing attributes in process `syz.3.884'. [ 262.107380][ T7458] loop1: detected capacity change from 0 to 512 [ 262.138793][ T7458] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 262.186310][ T7458] EXT4-fs (loop1): invalid journal inode [ 262.258243][ T7458] EXT4-fs (loop1): can't get journal size [ 262.318186][ T7464] loop0: detected capacity change from 0 to 256 [ 262.337611][ T7464] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011bf5, chksum : 0xcea91b8a, utbl_chksum : 0xe619d30d) [ 262.345366][ T7458] EXT4-fs (loop1): 1 truncate cleaned up [ 262.360807][ T7464] exFAT-fs (loop0): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 262.431966][ T7458] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 262.647829][ T6575] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 262.724454][ T7472] netlink: 8 bytes leftover after parsing attributes in process `syz.3.891'. [ 262.750977][ T7472] device ip6gre1 entered promiscuous mode [ 262.777043][ T4327] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 262.798178][ T4327] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 262.828142][ T6472] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 262.836979][ T4281] EXT4-fs (loop1): unmounting filesystem. [ 262.859087][ T6575] usb 1-1: Using ep0 maxpacket: 8 [ 262.891137][ T6575] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 262.937828][ T6575] usb 1-1: config 179 has no interface number 0 [ 262.944183][ T6575] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 263.009586][ T6575] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 263.046342][ T6575] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 263.089412][ T6575] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 263.116871][ T6575] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 263.174412][ T6575] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 263.222341][ T6575] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.249998][ T7464] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 263.336320][ T7483] loop1: detected capacity change from 0 to 2048 [ 263.437062][ T7483] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 263.486535][ T7483] ext4 filesystem being mounted at /194/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 263.697372][ T4281] EXT4-fs (loop1): unmounting filesystem. [ 263.866474][ T4327] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 263.876054][ T4453] usb 1-1: USB disconnect, device number 6 [ 263.882062][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 263.882113][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 263.961697][ T4327] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 264.216037][ T7505] program syz.1.900 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 264.772959][ T7525] loop1: detected capacity change from 0 to 256 [ 264.819102][ T7525] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 265.274777][ T7542] loop6: detected capacity change from 0 to 512 [ 265.307910][ T6575] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 265.347418][ T7542] EXT4-fs: Ignoring removed i_version option [ 265.399766][ T7542] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 265.468571][ T7542] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2802e12c, mo2=0002] [ 265.498270][ T7542] System zones: 1-12 [ 265.503155][ T7542] EXT4-fs (loop6): orphan cleanup on readonly fs [ 265.518871][ T7542] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.915: invalid indirect mapped block 12 (level 1) [ 265.555187][ T6575] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 265.617842][ T6575] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 265.657925][ T7542] EXT4-fs (loop6): Remounting filesystem read-only [ 265.665092][ T7542] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.915: invalid indirect mapped block 2 (level 2) [ 265.694229][ T6575] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 265.719983][ T7549] vxcan1: tx address claim with different name [ 265.728819][ T7542] EXT4-fs (loop6): Remounting filesystem read-only [ 265.738398][ T6575] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 265.746461][ T6575] usb 4-1: SerialNumber: syz [ 265.757068][ T7542] EXT4-fs (loop6): 1 truncate cleaned up [ 265.777584][ T7542] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 265.880161][ T7542] EXT4-fs error (device loop6): ext4_map_blocks:637: inode #2: block 5: comm syz.6.915: lblock 0 mapped to illegal pblock 5 (length 1) [ 265.957859][ T7542] EXT4-fs warning (device loop6): dx_probe:823: inode #2: lblock 0: comm syz.6.915: error -117 reading directory block [ 266.013906][ T6575] usb 4-1: 0:2 : does not exist [ 266.095554][ T6575] usb 4-1: USB disconnect, device number 11 [ 266.180262][ T4274] udevd[4274]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 266.182617][ T7040] EXT4-fs (loop6): unmounting filesystem. [ 266.647798][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 266.875562][ T7579] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 267.137582][ T7550] loop1: detected capacity change from 0 to 40427 [ 267.188509][ T7550] F2FS-fs (loop1): build fault injection attr: rate: 771, type: 0x3ffff [ 267.208389][ T7550] F2FS-fs (loop1): invalid crc value [ 267.225296][ T7587] loop5: detected capacity change from 0 to 512 [ 267.233670][ T7550] F2FS-fs (loop1): Found nat_bits in checkpoint [ 267.263228][ T7589] loop6: detected capacity change from 0 to 512 [ 267.292335][ T7587] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 267.305585][ T7587] ext4 filesystem being mounted at /158/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 267.316423][ T7550] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 267.377888][ T7550] syz.1.917: attempt to access beyond end of device [ 267.377888][ T7550] loop1: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 267.396542][ T7589] FAT-fs (loop6): Directory bread(block 199916) failed [ 267.412768][ T7550] syz.1.917: attempt to access beyond end of device [ 267.412768][ T7550] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 267.473350][ T7589] FAT-fs (loop6): Directory bread(block 199917) failed [ 267.522292][ T7589] FAT-fs (loop6): Directory bread(block 199918) failed [ 267.565742][ T5071] EXT4-fs (loop5): unmounting filesystem. [ 267.569449][ T7589] FAT-fs (loop6): Directory bread(block 199919) failed [ 267.648686][ T7589] FAT-fs (loop6): Directory bread(block 199920) failed [ 267.655656][ T7589] FAT-fs (loop6): Directory bread(block 199921) failed [ 267.694911][ T4281] syz-executor: attempt to access beyond end of device [ 267.694911][ T4281] loop1: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 267.757763][ T7589] FAT-fs (loop6): Directory bread(block 199922) failed [ 267.764825][ T7589] FAT-fs (loop6): Directory bread(block 199923) failed [ 267.834160][ T7589] FAT-fs (loop6): Directory bread(block 199916) failed [ 267.895779][ T7589] FAT-fs (loop6): Directory bread(block 199917) failed [ 269.295633][ T7646] tmpfs: Bad value for 'uid' [ 270.072593][ T7674] loop5: detected capacity change from 0 to 64 [ 270.248385][ T7676] loop6: detected capacity change from 0 to 256 [ 270.292789][ T7676] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010895, chksum : 0x816c887a, utbl_chksum : 0xe619d30d) [ 271.006519][ T7704] netlink: 44 bytes leftover after parsing attributes in process `syz.5.979'. [ 271.631852][ T7718] device bond0 entered promiscuous mode [ 271.667855][ T7718] device bond_slave_0 entered promiscuous mode [ 271.674384][ T7718] device bond_slave_1 entered promiscuous mode [ 271.713457][ T7718] device batadv0 entered promiscuous mode [ 271.778580][ T7718] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 271.817211][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 272.528330][ T7716] loop6: detected capacity change from 0 to 32768 [ 272.587897][ T7716] ERROR: (device loop6): dtSearch: DT_GETPAGE: dtree page corrupt [ 272.587897][ T7716] [ 272.661116][ T7716] ERROR: (device loop6): remounting filesystem as read-only [ 272.683218][ T4453] kernel read not supported for file /dsp1 (pid: 4453 comm: kworker/0:10) [ 272.725628][ T7716] jfs_lookup: dtSearch returned -5 [ 272.778626][ T7743] ERROR: (device loop6): dtReadFirst: DT_GETPAGE: dtree page corrupt [ 272.778626][ T7743] [ 272.887373][ T7750] loop0: detected capacity change from 0 to 16 [ 272.919746][ T7750] erofs: (device loop0): mounted with root inode @ nid 36. [ 273.223441][ T7759] device bond0 entered promiscuous mode [ 273.247964][ T7759] device bond_slave_0 entered promiscuous mode [ 273.264468][ T7759] device bond_slave_1 entered promiscuous mode [ 273.298875][ T7759] device batadv0 entered promiscuous mode [ 273.324076][ T7759] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 273.342135][ T7759] Cannot create hsr debugfs directory [ 273.355928][ T7762] loop0: detected capacity change from 0 to 8 [ 273.364982][ T7311] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 273.394425][ T7759] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 273.406301][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 273.482373][ T7762] SQUASHFS error: Unable to read directory block [249:c] [ 273.557839][ T7311] usb 2-1: Using ep0 maxpacket: 32 [ 273.572767][ T7311] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 273.622796][ T7311] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.653441][ T7311] usb 2-1: config 0 descriptor?? [ 273.882437][ T7311] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 273.896202][ T7311] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 273.925765][ T7311] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 273.960137][ T7311] usb 2-1: media controller created [ 274.023030][ T7311] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 274.117791][ T7311] az6027: usb out operation failed. (-71) [ 274.144343][ T7311] az6027: usb out operation failed. (-71) [ 274.192939][ T7311] stb0899_attach: Driver disabled by Kconfig [ 274.219826][ T7311] az6027: no front-end attached [ 274.219826][ T7311] [ 274.244484][ T7311] az6027: usb out operation failed. (-71) [ 274.270302][ T7311] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 274.304260][ T7311] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input14 [ 274.364378][ T7311] dvb-usb: schedule remote query interval to 400 msecs. [ 274.373937][ T7311] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 274.425172][ T7311] usb 2-1: USB disconnect, device number 8 [ 274.453139][ T7787] loop6: detected capacity change from 0 to 2048 [ 274.525795][ T7311] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 274.534870][ T7787] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024) [ 274.564105][ T7787] NILFS (loop6): mounting unchecked fs [ 274.633849][ T7787] NILFS (loop6): recovery complete [ 274.675072][ T7790] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 274.887806][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 274.960155][ T7797] device bond0 entered promiscuous mode [ 274.965791][ T7797] device bond_slave_0 entered promiscuous mode [ 274.986572][ T7797] device bond_slave_1 entered promiscuous mode [ 275.001081][ T7797] device batadv0 entered promiscuous mode [ 275.038704][ T7797] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 275.047499][ T7797] Cannot create hsr debugfs directory [ 275.064458][ T7797] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 275.088534][ T4864] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 275.477566][ T7812] program syz.0.1021 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 276.205630][ T7832] loop3: detected capacity change from 0 to 64 [ 276.216676][ T7831] loop0: detected capacity change from 0 to 512 [ 276.234599][ T7828] nr0: tun_chr_ioctl cmd 1074025677 [ 276.254420][ T7831] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 276.275998][ T7828] nr0: linktype set to 774 [ 276.294168][ T7804] loop1: detected capacity change from 0 to 32768 [ 276.361525][ T7804] XFS (loop1): Mounting V5 Filesystem [ 276.381325][ T7831] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 276.431422][ T7831] ext4 filesystem being mounted at /210/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 276.532773][ T7831] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3861: comm syz.0.1030: Allocating blocks 64-65 which overlap fs metadata [ 276.553910][ T7831] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3861: comm syz.0.1030: Allocating blocks 64-65 which overlap fs metadata [ 276.569434][ T7804] XFS (loop1): Ending clean mount [ 276.614687][ T7830] EXT4-fs (loop0): pa ffff888073a6b0e0: logic 1, phys. 44, len 84 [ 276.622945][ T7830] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:4894: group 0, free 63, pa_free 64 [ 276.823482][ T7851] loop3: detected capacity change from 0 to 256 [ 276.895848][ T4281] XFS (loop1): Unmounting Filesystem [ 276.953246][ T4283] EXT4-fs (loop0): unmounting filesystem. [ 277.201130][ T7858] device macvlan0 entered promiscuous mode [ 277.221425][ T26] audit: type=1326 audit(1781009675.919:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7859 comm="syz.3.1039" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa3939ce59 code=0x7ffc0000 [ 277.244068][ T7858] netlink: 'syz.0.1037': attribute type 1 has an invalid length. [ 277.317910][ T7858] netlink: 'syz.0.1037': attribute type 2 has an invalid length. [ 277.368364][ T26] audit: type=1326 audit(1781009675.979:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7859 comm="syz.3.1039" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa3939ce59 code=0x7ffc0000 [ 277.564653][ T26] audit: type=1326 audit(1781009675.979:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7859 comm="syz.3.1039" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa3939ce59 code=0x7ffc0000 [ 277.694539][ T26] audit: type=1326 audit(1781009675.979:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7859 comm="syz.3.1039" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7ffa3939ce59 code=0x7ffc0000 [ 277.855062][ T26] audit: type=1326 audit(1781009675.979:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7859 comm="syz.3.1039" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa3939ce59 code=0x7ffc0000 [ 277.989493][ T26] audit: type=1326 audit(1781009675.979:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7859 comm="syz.3.1039" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa3939ce59 code=0x7ffc0000 [ 278.134184][ T26] audit: type=1326 audit(1781009675.979:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7859 comm="syz.3.1039" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa3939ce59 code=0x7ffc0000 [ 278.254061][ T26] audit: type=1326 audit(1781009675.979:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7859 comm="syz.3.1039" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa3939ce59 code=0x7ffc0000 [ 278.357693][ T26] audit: type=1326 audit(1781009675.979:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7859 comm="syz.3.1039" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7ffa3939ce59 code=0x7ffc0000 [ 278.467801][ T26] audit: type=1326 audit(1781009675.979:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7859 comm="syz.3.1039" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa3939ce59 code=0x7ffc0000 [ 278.873709][ T7902] loop6: detected capacity change from 0 to 512 [ 278.929763][ T7902] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 279.006315][ T7902] EXT4-fs error (device loop6): ext4_xattr_inode_iget:401: inode #2: comm syz.6.1052: missing EA_INODE flag [ 279.057999][ T7902] EXT4-fs error (device loop6): ext4_xattr_inode_iget:406: comm syz.6.1052: error while reading EA inode 2 err=-117 [ 279.111017][ T7902] EXT4-fs (loop6): 1 orphan inode deleted [ 279.116821][ T7902] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 279.306818][ T7886] loop1: detected capacity change from 0 to 32768 [ 279.445742][ T7886] UFO tlock:0xffffc9000286a1f8 [ 279.522563][ T7040] EXT4-fs (loop6): unmounting filesystem. [ 279.651683][ T107] general protection fault, probably for non-canonical address 0xfbd59c0000000021: 0000 [#1] PREEMPT SMP KASAN [ 279.663465][ T107] KASAN: maybe wild-memory-access in range [0xdead000000000108-0xdead00000000010f] [ 279.672760][ T107] CPU: 0 PID: 107 Comm: jfsCommit Not tainted syzkaller #0 [ 279.679977][ T107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 279.690409][ T107] RIP: 0010:__list_add_valid+0x39/0xe0 [ 279.695924][ T107] Code: 00 00 00 48 89 d3 48 85 d2 0f 84 8c 00 00 00 49 89 f6 49 89 ff 49 bd 00 00 00 00 00 fc ff df 4c 8d 63 08 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 68 b5 bd fd 49 8b 14 24 4c 39 f2 [ 279.715569][ T107] RSP: 0018:ffffc90002cf7bd0 EFLAGS: 00010806 [ 279.721650][ T107] RAX: 1bd5a00000000021 RBX: dead000000000100 RCX: 0000000000000000 [ 279.729806][ T107] RDX: dead000000000100 RSI: ffffc90002649230 RDI: ffff88802f2dfda0 [ 279.737789][ T107] RBP: ffff8880571ef21c R08: 0000000000000003 R09: 0000000000000004 [ 279.745776][ T107] R10: dffffc0000000000 R11: fffff5200059ef5c R12: dead000000000108 [ 279.753855][ T107] R13: dffffc0000000000 R14: ffffc90002649230 R15: ffff88802f2dfda0 [ 279.761943][ T107] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 279.770894][ T107] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 279.777528][ T107] CR2: 00007fef9935d368 CR3: 000000007dc97000 CR4: 00000000003506f0 [ 279.785536][ T107] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 279.793532][ T107] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 279.801778][ T107] Call Trace: [ 279.805083][ T107] [ 279.808025][ T107] dbUpdatePMap+0x6da/0xdb0 [ 279.812551][ T107] txAllocPMap+0x57d/0x6b0 [ 279.817043][ T107] txUpdateMap+0x706/0x890 [ 279.821484][ T107] jfs_lazycommit+0x425/0xa70 [ 279.826187][ T107] ? txFreelock+0x5a0/0x5a0 [ 279.830703][ T107] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 279.836704][ T107] ? do_task_dead+0xd0/0xd0 [ 279.841229][ T107] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 279.847141][ T107] ? __kthread_parkme+0x162/0x1c0 [ 279.852198][ T107] kthread+0x29d/0x330 [ 279.856278][ T107] ? txFreelock+0x5a0/0x5a0 [ 279.860800][ T107] ? kthread_blkcg+0xd0/0xd0 [ 279.865404][ T107] ret_from_fork+0x1f/0x30 [ 279.869848][ T107] [ 279.872886][ T107] Modules linked in: [ 279.876818][ T107] ---[ end trace 0000000000000000 ]--- [ 279.882281][ T107] RIP: 0010:__list_add_valid+0x39/0xe0 [ 279.887755][ T107] Code: 00 00 00 48 89 d3 48 85 d2 0f 84 8c 00 00 00 49 89 f6 49 89 ff 49 bd 00 00 00 00 00 fc ff df 4c 8d 63 08 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 68 b5 bd fd 49 8b 14 24 4c 39 f2 [ 279.907394][ T107] RSP: 0018:ffffc90002cf7bd0 EFLAGS: 00010806 [ 279.913479][ T107] RAX: 1bd5a00000000021 RBX: dead000000000100 RCX: 0000000000000000 [ 279.921462][ T107] RDX: dead000000000100 RSI: ffffc90002649230 RDI: ffff88802f2dfda0 [ 279.930403][ T107] RBP: ffff8880571ef21c R08: 0000000000000003 R09: 0000000000000004 [ 279.938407][ T107] R10: dffffc0000000000 R11: fffff5200059ef5c R12: dead000000000108 [ 279.946389][ T107] R13: dffffc0000000000 R14: ffffc90002649230 R15: ffff88802f2dfda0 [ 279.954463][ T107] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 279.963410][ T107] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 279.970016][ T107] CR2: 00007fef9935d368 CR3: 000000007dc97000 CR4: 00000000003506f0 [ 279.978012][ T107] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 279.986020][ T107] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 279.994035][ T107] Kernel panic - not syncing: Fatal exception [ 281.125184][ T107] Shutting down cpus with NMI [ 281.130532][ T107] Kernel Offset: disabled [ 281.134887][ T107] Rebooting in 86400 seconds..