last executing test programs: 2m22.346758974s ago: executing program 2 (id=3): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c0002800500010000000000080007"], 0x64}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000040)={0x0, 0xfcff, &(0x7f0000000080)={&(0x7f0000000340)={0x68, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x68}}, 0x0) 2m21.605126029s ago: executing program 2 (id=6): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000000c0)={[{@noinit_itable}, {@dax_inode}, {@nolazytime}, {@abort}, {@dax_inode}, {@lazytime}, {@noload}, {}, {@noauto_da_alloc}]}, 0xfe, 0x558, &(0x7f0000000c00)="$eJzs3U1rG0cfAPD/ynbenOeJAyG0PRRDDk1JI8d2X1LoIT2WNjTQ3lNhb0ywHAVLDrEbaHJoLr2UUCilgdIP0HuPoV+gnyLQBkIJpj30orLyylFsyZZtpVaq3w82mdldaXY0+x/PaCQUwMAaz/4pRLwcEV8nEcdajg1HfnB87bzVJ7dmsi2Jev2TP5JI8n3N85P8/9E881JE/PJlxJnC5nKryyvzpXI5XczzE7WF6xPV5ZWzVxdKc+lcem1qevr8W9NT777zds/q+vqlv777+MEH5786tfrtT4+O30viQhzNj7XWYw9ut2bGYzx/TUbiwoYTJ3tQWD9J9vsC2JWhPM5HIusDjsVQHvXAf98XEVEHBlQi/mFANccBzbl9j+bBL4zH769NgDbXf3jtvZE41JgbHVlNnpkZZfPdsR6Un5Xx8+/372Vb9O59CIBt3b4TEeeGhzf3f0ne/+3euS7O2VjGDvu/+g4vCWjxIBv/vNFu/FNYH/9Em/HPaJvY3Y3t47/wqAfFdJSN/95rO/5dX7QaG8pz/2uM+UaSK1fLada3/T8iTsfIwSy/1XrO+dWHHfup1vFftmXlN8eC+XU8Gj747GNmS7XSXurc6vGdiFfajn+T9fZP2rR/9npc6rKMk+n9Vzsd277+z1f9x4jX2rb/0xWtZOv1yYnG/TDRvCs2+/PuyV87lb/f9c/a/8jW9R9LWtdrqzsv44dDf6edju32/j+QfNpIH8j33SzVaouTEQeSjzbvn3r62Ga+eX5W/9Ontu7/2t3/hyPisy7rf/fE3Y6n9kP7z+6o/XeeePjh5993Kr+79n+zkTqd7+mm/+v2Avfy2gEAAAAAAEC/KUTE0UgKxfV0oVAsrn2+40QcKZQr1dqZK5Wla7PR+K7sWIwUmivdoy2fh5jMPw/bzE9tyE9HxPGI+GbocCNfnKmUZ/e78gAAAAAAAAAAAAAAAAAAANAnRjt8/z/z29B+Xx3w3PnJbxhc28Z/L37pCehL/v7D4BL/MLjEPwwu8Q+DS/zD4BL/MLjEPwwu8Q8AAAAAAAAAAAAAAAAAAAAAAAAAAAA9denixWyrrz65NZPlZ28sL81XbpydTavzxYWlmeJMZfF6ca5SmSunxZnKwnbPV65Urk9OxdLNiVparU1Ul1cuL1SWrtUuX10ozaWX05F/pVYAAAAAAAAAAAAAAAAAAADwYqkur8yXyuV0UUJiV4nh/rgMibVEM7D3/IT72y8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQKt/AgAA//+jgjYy") mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}], [], 0x2c}) chdir(&(0x7f0000000080)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000200)=""/55, 0x37) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000000)) r1 = fsopen(&(0x7f0000000180)='securityfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r3, &(0x7f00000000c0)=""/85, 0x55) getdents(r3, 0xfffffffffffffffd, 0x58) pwritev2(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000140)="df998097863c8a8ac7e5778d0f3808105393ca085d9d3c5bcf39232e76cc36facb34e1b8fb1448a217611491674182ddd3e67674c7fc87f4ab3daaaca7b36f13c2657019e316ce67b741eb251a2f65d342ab3288c11180ba3fdc9ebb0003e192c5542a31dcbed9bd7a", 0x69}, {&(0x7f0000000240)="6031ffa89654d62d81d03a23238f4dc67c9e09169fb54de73c1434fe783447c455c1b60cd4466c3b914ae30a0f1b5490d7d147a188b64bcaca17550f95c750b24b398fd3a63b09ca6b6d1c70602a5d7a018299ffb6acdf0080406008a13006f76881852097bfa8fae4c99d0291cbae0e512254e2f41864765508ba9e", 0x7c}, {&(0x7f0000000400)="621d8ac6f04d925a48526c2c688fc28aec187ff793466a4e10e3de512dc65ff059b904cd997e4d5703aa8e42b64670045e08e51bd3e3e7b2fa50d1833962504133bb12982eaaaa54ee798b5317f5d9805347ba270eb85f5c5ae288ed7746f073d5c622e0a83fc7b82664985f53c3423e76f6b847ac3ec95e248777021f2461f5da838bb99bc7c4fb4ca5823b16d1c5dcd6e586c51514c67685b6553128a76a6194a3d0d9e83a58a9fe3cce150ad0130c7c54c24ee89d872e41607772", 0xbc}], 0x3, 0x40, 0x5, 0x0) 2m20.372873093s ago: executing program 2 (id=10): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000003500)=@newtfilter={0x24, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, {0xc, 0x4}, {}, {0x5, 0xf}}}, 0x24}}, 0x20040054) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'veth0_to_batadv\x00', 0x0}) r4 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$SNDCTL_DSP_POST(r4, 0x5008, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000000)=0x0) sendmmsg(r1, &(0x7f00000000c0)=[{{&(0x7f00000001c0)=@nfc_llcp={0x27, r5, 0x1, 0x1, 0x7e, 0xf7, "633d58bc797d44b3ba3054bcdc8ccb619fc5a065993e7079269378b98ac8e9a860f77feebdfe4cc2e99acb1b2df7170bb798a89e0bfc1f42e559d22a17569c", 0x21}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000040)="990ef9a3cf61df3f53631bb098f15bf5a3fb5628364de1f7cd1ebc6f09670f397ad6e75a56de2941a884916fc4e829a641ba9eaedd79e950", 0x38}, {&(0x7f0000000380)="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", 0xfd}, {&(0x7f0000000240)="5551d67e6bb6417de336b10530934b99fb6b2fca6e385c94d3c5329034b641ffdaf8a4c08578dbc99dc6a552dd07c4cbd6cb267d3b2279ec2b113641421d75130b7731ffa0b3b5fac19524e87bab98de8a24d4c8e2718adb30b07ca4e6ecf325e120bc98ab51cfcc1d7bc02bffca1bff0e6c74dc0639e3b9fb4d2c9f511407b07775d85c", 0x84}, {&(0x7f0000000480)="56b3495866f6322d6413a15f6ce419e046f358de530a351e89efb8eae3d4742c26f2dcdb29b1f3b76ec96d9b51418a3c0082ff317ea5e172aa6789ed28093b85ff281bf8af17c887a24a022dad74783f1021f7e72987eb14c22973232f1ffdef0c85586149fc48ed491cb41ae477bc4441cea2781a1b93271a10d2ccd98ae895f9e8cd76f4a777b3ddde277bedd407124c2c892c3965b59e46792a1a67647c31ff6335a472e497d2f298cb53996480cf03ffeba79c1ffcc333d43edb60f8120ad442093b", 0xc4}, {&(0x7f0000000580)="afe4d8f4a1d8415b5263d73a7f750fa7a9aad340c065205f209447cb7b64c2308385cf224f1ea7fef5bfd0f356da17f44e676b3e59e0ae76a2123ddd7c3c9045eaa37e5a866d469e89d2db08d03f375299b19c6fd388ff61ac4f9bb4c3d3dc61a6d6501e33256b91576c2b2f1e71165a8b75491a4908812a860bb6086197762a8686178f1fbb2b95691b92f4ea21406b4ff7b371f60700a118597eec499907db71ea5f37f9017a53d3759856ed353cec2eeeb382fb228dafa07dc0994938447db4ef5f6d2e69", 0xc6}], 0x5, &(0x7f0000000700)=[{0x68, 0x3a, 0x1, "0b14d7ca82ecb077db93d3996eadbdaecbbd4cf5d13de9fa13f27ce506200d53f27b26354557f28d5c08ee025071cae480d1ace93a612fab2cb493e9e14b0435af730c8f82d8359a8940af085b40a416020b"}, {0x30, 0x0, 0x5, "03305d7d73e3d49782c89286754534e1dcbf253291bc94022863"}, {0x30, 0x114, 0x6, "b05a2721fb984b6700f14ceacf3123d67038b6fa893dddff1759a9"}, {0x1010, 0x108, 0x2, "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"}], 0x10d8}}], 0x400000000000358, 0x800) sendto$packet(r2, &(0x7f0000000180)="02030e00d3fc02000000ab5d71acedd7c9560385dcb109a884d388a898062f2405ce811cc352", 0x26, 0x814, &(0x7f0000000140)={0x11, 0x18, r3, 0x1, 0x0, 0x6, @multicast}, 0xffffffffffffffb1) 2m19.204759574s ago: executing program 2 (id=14): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x106f) socket$nl_route(0x10, 0x3, 0x0) open_by_handle_at(r0, &(0x7f00000001c0)=@orangefs={0x14, 0x1, {"34a4b6e79d80f1b77ea7de5d4e2516d6", 0x2}}, 0x20001) r1 = add_key$keyring(&(0x7f0000001540), &(0x7f0000001580)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r2 = request_key(&(0x7f0000000340)='syzkaller\x00', &(0x7f00000014c0)={'syz', 0x0}, &(0x7f0000001500)='vfat\x00', r1) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x200000b, &(0x7f0000000380)=ANY=[@ANYRES8=0x0, @ANYRESOCT=0x0, @ANYRES64, @ANYRES64=0x0], 0x0, 0x257, &(0x7f00000000c0)="$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") r3 = socket$kcm(0x10, 0x400000002, 0x0) write$binfmt_script(r0, &(0x7f00000015c0)={'#! ', './file0', [{0x20, 'syz'}, {0x20, 'keyring\x00'}, {0x20, '(@b.'}, {0x20, '\x00'}, {0x20, 'syz'}], 0xa, "456b50bb2e605fe1dba7fe0866c76097fa87d99aceca4950b7ed40e9b96786310f27bcb154f7863aaf6988dfb3ffefeec31d453092322762c78082dbc2459a71acc66dea83b7477eef04b5dedf14aea4c1fab087"}, 0x77) write$cgroup_subtree(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="0bf600004e00"], 0xfe33) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="1b"], 0x9) socket$nl_generic(0x10, 0x3, 0x10) preadv2(r0, &(0x7f0000000080)=[{&(0x7f00000003c0)=""/194, 0xc2}, {&(0x7f00000004c0)=""/4096, 0x1000}], 0x2, 0x40, 0x7fff, 0x7) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0x1, 0x1, r4, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r5}, &(0x7f0000000840), &(0x7f0000000880)=r4}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r5, &(0x7f0000000900)}, 0x20) syz_emit_vhci(0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, &(0x7f0000001640)=@keyring={'key_or_keyring:', r2}) r6 = socket$inet(0x2, 0x4000000000000001, 0x100) bind$inet(r6, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r6, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0) syz_emit_vhci(0x0, 0x0) 2m15.328280063s ago: executing program 32 (id=14): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x106f) socket$nl_route(0x10, 0x3, 0x0) open_by_handle_at(r0, &(0x7f00000001c0)=@orangefs={0x14, 0x1, {"34a4b6e79d80f1b77ea7de5d4e2516d6", 0x2}}, 0x20001) r1 = add_key$keyring(&(0x7f0000001540), &(0x7f0000001580)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r2 = request_key(&(0x7f0000000340)='syzkaller\x00', &(0x7f00000014c0)={'syz', 0x0}, &(0x7f0000001500)='vfat\x00', r1) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x200000b, &(0x7f0000000380)=ANY=[@ANYRES8=0x0, @ANYRESOCT=0x0, @ANYRES64, @ANYRES64=0x0], 0x0, 0x257, &(0x7f00000000c0)="$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") r3 = socket$kcm(0x10, 0x400000002, 0x0) write$binfmt_script(r0, &(0x7f00000015c0)={'#! ', './file0', [{0x20, 'syz'}, {0x20, 'keyring\x00'}, {0x20, '(@b.'}, {0x20, '\x00'}, {0x20, 'syz'}], 0xa, "456b50bb2e605fe1dba7fe0866c76097fa87d99aceca4950b7ed40e9b96786310f27bcb154f7863aaf6988dfb3ffefeec31d453092322762c78082dbc2459a71acc66dea83b7477eef04b5dedf14aea4c1fab087"}, 0x77) write$cgroup_subtree(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="0bf600004e00"], 0xfe33) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="1b"], 0x9) socket$nl_generic(0x10, 0x3, 0x10) preadv2(r0, &(0x7f0000000080)=[{&(0x7f00000003c0)=""/194, 0xc2}, {&(0x7f00000004c0)=""/4096, 0x1000}], 0x2, 0x40, 0x7fff, 0x7) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0x1, 0x1, r4, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r5}, &(0x7f0000000840), &(0x7f0000000880)=r4}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r5, &(0x7f0000000900)}, 0x20) syz_emit_vhci(0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, &(0x7f0000001640)=@keyring={'key_or_keyring:', r2}) r6 = socket$inet(0x2, 0x4000000000000001, 0x100) bind$inet(r6, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r6, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0) syz_emit_vhci(0x0, 0x0) 32.355710039s ago: executing program 5 (id=265): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, r2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=@newtaction={0x18, 0x32, 0xa01, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 32.086413367s ago: executing program 3 (id=267): r0 = socket$packet(0x11, 0xa, 0x300) recvfrom(r0, 0x0, 0x0, 0x22, &(0x7f0000000100)=@vsock={0x28, 0x0, 0x2710, @my=0x0}, 0x80) 31.874714664s ago: executing program 5 (id=268): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x800042, &(0x7f0000000000), 0xfc, 0x594, &(0x7f0000000cc0)="$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") 30.625057405s ago: executing program 5 (id=272): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x400e, &(0x7f0000000300), 0x1, 0x440, &(0x7f0000000cc0)="$eJzs28tvG8UfAPDv2kn66+uXUJVHH0CgIMoradJSeuACAokDSEhwKMeQpFWo26AmSLSKICBUjqgSJy6IIxJ/ASe4IOCExBXuqFKFcmnhZLT2bmI7thunTlzqz0dad2Z33Jmvd8ee2ckG0LdG05ckYk9E/B4Rw9VsfYHR6j83V5am/15Zmk6iXH7zr6RS7sbK0nReNH/f7jwzEFH4NIlDTepduHT53FSpNHsxy48vnn9vfOHS5Wfnzk+dnT07e2Hy1KkTxyeePzn5XFfiTOO6cfDD+cMHXn376uvTp6++8/O3SR5/QxxdMtru4OPlcper6629NelkoIcNoSPFajeNwUr/H45irJ284Xjlk542DthS5XK5fF/rw8tl4C6WRK9bAPRG/kOfzn/zbZuGHneE6y9WJ0Bp3DezrXpkIApZmcGG+W03jUbE6eV/vkq32Jr7EAAAdb5Pxz/PNBv/FaL2vtD/szWUkYi4JyL2RcTJiNgfEfdGVMreHxEPdFh/4yLJ+vFP4dqmAtugdPz3Qra2VT/+y0d/MVLMcnsr8Q8mZ+ZKs8eyz+RoDO5I8xNt6vjh5d8+b3WsdvyXbmn9+Vgwa8e1gR3175mZWpy6nZhrXf844uBAs/iT1ZWAJCIORMTBTdYx99Q3h1sdu3X8bXRhnan8dcQT1fO/HA3x55L265Pj/4vS7LHx/KpY75dfr7zRqv7bir8L0vO/q+n1vxr/SFK7XrvQyf/+5ZPp65U/Pms5p9ns9T+UvFW374OpxcWLExFDyWvVRtfun2woN7lWPo3/6JHm/X9frH0ShyIivYgfjIiHIuLhrO2PRMSjEXGkzafw00uPvbv5+LdWGv9MR+d/LTEUjXuaJ4rnfvyurtKRTuJPz/+JSupotmcj338baVenVzMAAAD8VxUiYk8khbHVdKEwNlb9G/79satQml9YfPrM/PsXZqrPCIzEYCG/0zVccz90IpvW5/nJhvzx7L7xF8WdlfzY9HxpptfBQ5/b3aL/p/4s9rp1wJbzvBb0L/0f+pf+D/1L/4f+1aT/7+xFO4Dt1+z3/6MetAPYfg3937If9BHzf+hfm+n/vjPg7tC2Lw9tXzuAbbWwM279kLyExLpEFO6IZkhsUaLX30wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADd8W8AAAD//58P56I=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000180)={0x31, 0x8, 0x9, 0xffffffffffffffff, 0x401, 0x5}) 30.624921313s ago: executing program 3 (id=273): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000680)="66baf80cb887c31a8def66bafc0cb093eec4212059a2f86f000066baf80cb89cafa883ef66bafc0cb8e99b36aaeff3440fd6e0c461f851c3b8010000000f01c10f23bc66baf80cb8faf08884ef66bafc0c66ed42c127a3b9800200000f32", 0x5e}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 29.670628127s ago: executing program 3 (id=278): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000840)={[{@max_batch_time={'max_batch_time', 0x3d, 0x8}}, {@jqfmt_vfsold}, {@quota}]}, 0x2, 0x50f, &(0x7f0000001140)="$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") quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000240)='./file0\x00') 29.29980583s ago: executing program 5 (id=279): syz_mount_image$exfat(&(0x7f0000006c00), &(0x7f0000000040)='./file0\x00', 0x208008de, &(0x7f0000000200)=ANY=[@ANYBLOB='namecase=1,discard,errors=continue,uid=', @ANYRESDEC=0x0, @ANYBLOB=',=', @ANYRESDEC, @ANYRESDEC, @ANYBLOB="f32be912e474ad5bd8cc0a19c9d7610b52abc6d5058fd8ecb25b45c12a91c16c105e53a45c82", @ANYRES64], 0x80, 0x1511, &(0x7f0000001ac0)="$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") syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000700)='./file0\x00', 0x301c470, &(0x7f00000008c0)=ANY=[@ANYRESOCT, @ANYRESOCT, @ANYRESOCT], 0x1, 0x2b4, &(0x7f00000000c0)="$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") syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x141042, 0x80) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x810) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) creat(&(0x7f0000000340)='./file0\x00', 0x0) 28.452642156s ago: executing program 3 (id=281): syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x0, &(0x7f00000018c0)=ANY=[], 0xfd, 0x1501, &(0x7f00000002c0)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x1480, 0x0) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc01, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x887008, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000000f00)={0x2020}, 0x2020) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x20004800) 27.613104387s ago: executing program 5 (id=285): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x100004c, &(0x7f0000000100), 0x1, 0x553, &(0x7f0000001080)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x58) unshare(0x22020400) copy_file_range(r0, 0x0, r0, &(0x7f00000000c0)=0xae8, 0x863, 0x0) 27.008907976s ago: executing program 3 (id=287): unshare(0x64000600) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x0, &(0x7f0000000100), 0x1, 0x57e, &(0x7f00000005c0)="$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") sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[@ANYBLOB="3400000014000b032bbd7000fcdbdf250a281000", @ANYRES32=r1, @ANYBLOB="080008000604000014000100ff"], 0x34}}, 0x0) 26.409070102s ago: executing program 3 (id=290): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000040)={@local, r2}, 0x14) 24.193017237s ago: executing program 33 (id=290): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000040)={@local, r2}, 0x14) 24.06469987s ago: executing program 5 (id=294): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c16, &(0x7f0000000040)={[{@nobh}, {@usrjquota}]}, 0xff, 0x240, &(0x7f00000002c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x45) syz_open_dev$tty1(0xc, 0x4, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x2, 0x96) pwrite64(r1, &(0x7f0000000140)='2', 0x155c2, 0x8000c64) 23.736755773s ago: executing program 34 (id=294): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c16, &(0x7f0000000040)={[{@nobh}, {@usrjquota}]}, 0xff, 0x240, &(0x7f00000002c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x45) syz_open_dev$tty1(0xc, 0x4, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x2, 0x96) pwrite64(r1, &(0x7f0000000140)='2', 0x155c2, 0x8000c64) 8.10382653s ago: executing program 0 (id=330): symlink(&(0x7f0000000180)='./file1\x00', &(0x7f0000000240)='./file1\x00') creat(&(0x7f0000001b80)='./file1\x00', 0x188) 7.928925369s ago: executing program 1 (id=331): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) syz_clone(0x6100000, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000626000/0x5000)=nil, 0x5000) 7.516908377s ago: executing program 0 (id=333): prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file2\x00', 0xc0ed4040, &(0x7f00000000c0)={[{@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x100000}}, {@journal_dev={'journal_dev', 0x3d, 0x72d}}, {@grpid}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@dioread_nolock}, {@delalloc}, {@jqfmt_vfsv1}]}, 0xf5, 0x485, &(0x7f0000000f40)="$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") munlockall() madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 6.774675986s ago: executing program 4 (id=334): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$SW_SYNC_IOC_INC(0xffffffffffffffff, 0x40045701, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000800)={0x2c, &(0x7f0000000100)={0x40, 0x4, 0x7, {0x7, 0xd, "8ed11c260c"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 6.156937544s ago: executing program 1 (id=335): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c460000000000000000000000000300"], 0x69) execve(0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000001000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, 0x0}], 0x1, 0x4a, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f00001b0000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000000)="f00fc7484d36f08266060266b9800000c00f326635000400000f308bc1de780066b9aa0200000f322e0f01cf66b9ab0900000f32f2f031b3e759dc2c", 0x3c}], 0x1, 0x9f6a364b3fac2a63, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) 4.577241175s ago: executing program 1 (id=336): syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x47, 0xc11, &(0x7f0000000d00)="$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") utimes(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={{0x77359400}}) r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) fsync(r0) 4.034998842s ago: executing program 4 (id=337): syz_mount_image$erofs(&(0x7f0000000480), &(0x7f00000001c0)='./file2\x00', 0x2000000, &(0x7f00000000c0)=ANY=[], 0x7e, 0x1e2, &(0x7f00000016c0)="$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") chdir(&(0x7f0000000140)='./file2\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) 3.679611234s ago: executing program 0 (id=338): syz_mount_image$exfat(&(0x7f0000000180), &(0x7f0000000280)='./file1\x00', 0x80, &(0x7f0000000100)=ANY=[], 0x1, 0x1501, &(0x7f0000001580)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) truncate(&(0x7f0000000080)='./file1\x00', 0xf000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x145802, 0x0) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000200)='y', 0xf4240}], 0x1, 0x0, 0x0, 0x0) 3.437545307s ago: executing program 1 (id=339): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000, &(0x7f0000000300)={[{@nombcache}, {@nomblk_io_submit}, {@stripe={'stripe', 0x3d, 0x7}}, {@discard}, {@minixdf}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x84}}, {@max_batch_time}, {@test_dummy_encryption}]}, 0xd, 0x5f6, &(0x7f0000000c00)="$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") r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_clone3(&(0x7f0000000200)={0x4000000, 0x0, 0x0, 0x0, {0x33}, 0x0, 0x0, 0x0, 0x0}, 0x58) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) syz_kvm_setup_cpu$x86(r3, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x6c, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000008e04"]) 3.265059475s ago: executing program 4 (id=340): syz_mount_image$hfsplus(&(0x7f0000000180), &(0x7f0000002380)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='nls=ascii,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c706172743d3078303030303030303030303030303062622c6e6f626172726965722c6e6f626172726965722c63726561746f723d7fcfb5b72c706172743d3078303030303030303030303030303130312c6769643d", @ANYRESHEX=0x0, @ANYRES8=0x0, @ANYRESDEC, @ANYRESOCT=0x0, @ANYRESHEX=0x0, @ANYRES64, @ANYRESHEX=0x0, @ANYRESHEX=0x0], 0x5, 0x6fe, &(0x7f0000000b00)="$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") sync() 2.469228144s ago: executing program 0 (id=341): syz_mount_image$ext4(&(0x7f00000006c0)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x3800008, &(0x7f0000000700)={[{@discard}, {@user_xattr}, {@data_journal}, {@resgid}, {@grpjquota_path={'grpjquota', 0x3d, './file2'}}]}, 0x3f, 0x540, &(0x7f0000000100)="$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") syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x20081e, &(0x7f00000020c0), 0x1, 0x4fb, &(0x7f0000000500)="$eJzs3U1vW1kZAODXzpeTyUwywywAIaYMAwVVdRJ3JhrNAoYVQqgSokuQ2pC4URQ7jmKnNKGL9j8gUYkVLPkBrLviJyDYsYEFEh8RqKnE4qJ7bbduajduk9hp/DzS1b3nnmu/5yS559hvEp8ARtaliLgfEZMRcSsi5lrnc60tPm9u6XWPD+6tHh7cW81Fktz4Vy6rT89Fx2NSb7WesxARP/5+xM9yL8at7+1vrlQq5Z1mcXqhUd1eqO/tX92orqyX18tbpdLy0vLip9c+KZ1aXz+oTjYPxtIGfvsXabNmW3Wd/ThNza5PPI2TGo+IH55FsCEYa/VnctgN4bXkI+K9iPgwu//nYiz7bgIAF1mSzEUy11kGAC66fJYDy+WLrVzAbOTzxWIzh/d+zOQrtXrjyu3a7tZaM1c2HxP52xuV8mIrVzgfE7m0vJQdPyuXjpSvRcS7EfHLqemsXFytVdaG+cIHAEbYW0fm//9ONed/AOCCKwy7AQDAwJn/AWD0mP8BYPSY/wFg9Jj/AWD0mP8BYPSY/wFgpPzo+vV0Sw5bn3+9dmdvd7N25+paub5ZrO6uFldrO9vF9VptPfvMnupxz1ep1baXPo7du/Pf2a43Fup7+zertd2txs3sc71vlicG0isA4GXe/eDRn3MRcf+z6WyLjrUczNVwseWH3QBgaMaG3QBgaKz2BaPrBO/xpQfgguiyRO9zChExffTqJEmSs20WcIYuf0n+H0ZVR/7fXwHDiJH/h9HVb/7/uPwA8OZJkly/a/5HvxcCAOebHD/Q4/39e63971q/HPjp2tErHp5lqwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOB8a6//W2ytBT4b+XyxGPF2RMzHRO72RqW8GBHvRMSfpiam0vLSkNsMAJxU/u+51vpfl+c+mj1aO5l7MpXtI+Lnv77xq7srjcbOH9Pz/356vvGwdb40jPYDAMdpz9PZvuON/OODe6vtbZDt+cf3IqLQjH94MBmHT+OPx3i2L8RERMz8J9cqN+U6chcncf9BRHyxW/9zMZvlQJornx6Nn8Z+e6Dx88/Fz2d1zX36tfjCK0dO5k6h+fBGe5SOP593u//ycSnbd7//C9kIdXKt8S99qtXDbAx8Fr89/o31GP8u9Rvj4z/8oHk0/WLdg4gvj0e0Yx92jD/t+Lke8T/qM/5fvvLVD3vVJb+JuBzd43fGWmhUtxfqe/tXN6or6+X18laptLy0vPjptU9KC1mOeqH3bPDPz66806su7f9Mj/iFY/r/jT77/9v/3frJ114S/1tf7xY/H++/JH46J36zz/grM78v9KpL46917X9b7/5f6TP+X/+2/8Ky4QDA8NT39jdXKpXyziAP2i8kBhrUwQU4SH9qzkEzuh58d1CxJuOVHpUkrxWr14hxGlk34Dxo3utJeScingy7MQAAAAAAAAAAAAAAQFeD+I+lYfcRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAi+v/AQAA//+XC86k") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.numa_stat\x00', 0x275a, 0x0) read$FUSE(r0, &(0x7f0000000780)={0x2020}, 0x2020) fallocate(r0, 0x10, 0x17e, 0x1000f) lseek(r0, 0x1, 0x4) 1.980910908s ago: executing program 4 (id=342): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000880)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xd3eb}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xd935}, @TCA_RATE={0x6, 0x5, {0x9, 0x8}}]}, 0x48}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c000000040000000000000000000002830000000200560300000000000000000000000000006100"], 0x0, 0x38, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000003480)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000000c40)={0x1c, 0x0, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x40804) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000000040)) syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x0) 1.185703505s ago: executing program 4 (id=343): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=@dellinkprop={0x34, 0x6d, 0x1, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x48008, 0x10000}, [@IFLA_IFNAME={0x14, 0x3, 'team_slave_0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000004}, 0x0) 1.15751068s ago: executing program 0 (id=344): socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xce, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1022002, 0x0) r1 = dup(r0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x40542, 0x0) ftruncate(r2, 0xee72) sendfile(r1, r2, 0x0, 0x8000fffffffe) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x1b) 816.237374ms ago: executing program 1 (id=345): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x62, 0x51cfa, 0x0, 0x8000008, 0x3, 0xfffffffe, 0x1, 0x0, 0x7cce8c743ee810df}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x40505330, &(0x7f00000001c0)={0x800100, 0xfffffffd, 0x22, 0x6, 0x1101, 0x1}) close_range(r0, 0xffffffffffffffff, 0x0) 485.101731ms ago: executing program 4 (id=346): socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0xf) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'batadv_slave_1\x00', 0x0}) socket$inet_tcp(0x2, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r2, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0xfff3}}}, 0x24}}, 0x800) 102.515034ms ago: executing program 0 (id=347): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000080)='./file1\x00', 0x80, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'], 0x44, 0x6ff, &(0x7f0000000500)="$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") syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x802053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x40) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) rename(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') 0s ago: executing program 1 (id=348): r0 = msgget$private(0x0, 0x100) msgsnd(r0, &(0x7f0000000000)={0x1}, 0x8, 0x800) msgrcv(r0, 0x0, 0x0, 0x3, 0x2000) kernel console output (not intermixed with test programs): to HW filter on device batadv0 [ 233.530071][ T5809] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 233.542199][ T5805] veth0_vlan: entered promiscuous mode [ 233.572583][ T5804] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 233.653560][ T5805] veth1_vlan: entered promiscuous mode [ 233.941708][ T5805] veth0_macvtap: entered promiscuous mode [ 233.994383][ T5801] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 234.068707][ T5815] veth0_vlan: entered promiscuous mode [ 234.106195][ T5805] veth1_macvtap: entered promiscuous mode [ 234.201517][ T5809] veth0_vlan: entered promiscuous mode [ 234.223237][ T5815] veth1_vlan: entered promiscuous mode [ 234.312889][ T5809] veth1_vlan: entered promiscuous mode [ 234.470399][ T5805] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 234.595019][ T5815] veth0_macvtap: entered promiscuous mode [ 234.605296][ T5801] veth0_vlan: entered promiscuous mode [ 234.633175][ T5805] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 234.658791][ T5809] veth0_macvtap: entered promiscuous mode [ 234.708698][ T5815] veth1_macvtap: entered promiscuous mode [ 234.763193][ T5809] veth1_macvtap: entered promiscuous mode [ 234.800589][ T5805] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.811425][ T5805] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.820561][ T5805] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.829674][ T5805] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.870669][ T5801] veth1_vlan: entered promiscuous mode [ 234.935322][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 235.050764][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 235.076385][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 235.151635][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 235.192836][ T5815] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.202842][ T5815] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.212083][ T5815] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.221305][ T5815] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.249767][ T5801] veth0_macvtap: entered promiscuous mode [ 235.277404][ T5809] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.286828][ T5809] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.295797][ T5809] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.304855][ T5809] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.353155][ T5801] veth1_macvtap: entered promiscuous mode [ 235.581073][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 235.663347][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 235.754530][ T5801] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.765467][ T5801] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.775291][ T5801] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.784416][ T5801] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.454733][ T5804] veth0_vlan: entered promiscuous mode [ 236.585163][ T5804] veth1_vlan: entered promiscuous mode [ 236.952407][ T5804] veth0_macvtap: entered promiscuous mode [ 237.003941][ T5804] veth1_macvtap: entered promiscuous mode [ 237.218632][ T5804] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 237.338441][ T5804] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 237.431465][ T5804] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.440993][ T5804] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.450201][ T5804] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.459335][ T5804] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.169778][ T80] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.178483][ T80] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.402096][ T14] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.411346][ T14] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.549757][ T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.558476][ T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.739953][ T14] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.748735][ T14] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.792393][ T4116] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.800530][ T4116] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.059195][ T5805] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 242.079226][ T3597] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.090956][ T3597] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.182687][ T3597] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.194561][ T3597] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.318095][ T14] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.326129][ T14] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 243.059592][ T5989] mmap: syz.1.2 (5989) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 243.157166][ T5991] Zero length message leads to an empty skb [ 243.514987][ T5995] loop2: detected capacity change from 0 to 1024 [ 243.636699][ T5998] loop3: detected capacity change from 0 to 1024 [ 243.645961][ T5998] hfsplus: Bad value for 'session' [ 243.655591][ T5995] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 243.700546][ T6002] loop0: detected capacity change from 0 to 2048 [ 243.722098][ T5984] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 243.729948][ T5984] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 243.744481][ T5984] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 243.754864][ T5984] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 243.761728][ T5984] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 243.849438][ T6005] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 243.860417][ T5885] hid (null): unknown global tag 0xe [ 243.899870][ T5984] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 243.985724][ T5885] hid-generic 0005:15C2:0A0E.0001: unknown global tag 0xe [ 243.993277][ T5885] hid-generic 0005:15C2:0A0E.0001: item 0 2 1 14 parsing failed [ 244.020827][ T5984] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 244.028128][ T5984] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 244.088614][ T5984] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 244.169418][ T5885] hid-generic 0005:15C2:0A0E.0001: probe with driver hid-generic failed with error -22 [ 244.192697][ T5984] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 244.199426][ T5984] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 244.293057][ T5984] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 244.350662][ T5984] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 244.358343][ T5984] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 244.484052][ T5984] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 244.637552][ T5805] EXT4-fs error (device loop2): ext4_lookup:1793: inode #2: comm syz-executor: deleted inode referenced: 11 [ 244.697521][ T5805] EXT4-fs error (device loop2): ext4_lookup:1793: inode #2: comm syz-executor: deleted inode referenced: 11 [ 244.760295][ T3597] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.773475][ T3597] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.858263][ T5802] Bluetooth: hci0: command 0x0c1a tx timeout [ 244.881280][ T6016] loop3: detected capacity change from 0 to 128 [ 244.907577][ T6016] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 245.226507][ T80] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.227516][ T6016] syz.3.11: attempt to access beyond end of device [ 245.227516][ T6016] loop3: rw=2051, sector=104, nr_sectors = 937 limit=128 [ 245.234465][ T80] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.313903][ T5805] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.390921][ T3893] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.450505][ T6020] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12'. [ 245.643738][ T6024] loop1: detected capacity change from 0 to 724 [ 245.713801][ T3893] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.861726][ T5802] Bluetooth: hci1: command 0x0c1a tx timeout [ 246.141179][ T3893] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.292898][ T5802] Bluetooth: hci3: command 0x0c1a tx timeout [ 246.344712][ T6023] loop0: detected capacity change from 0 to 32768 [ 246.376838][ T5802] Bluetooth: hci4: command 0x0c1a tx timeout [ 246.502755][ T6023] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): Using encoding defined by superblock: utf8-12.1.0 [ 246.549820][ T3893] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.740208][ T6023] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names [ 246.740208][ T6023] allowing incompatible features above 0.0: (unknown version) [ 246.771389][ T6023] bcachefs (loop0): initializing new filesystem [ 246.782670][ T6023] bcachefs (loop0): going read-write [ 246.863492][ T6033] netlink: 20 bytes leftover after parsing attributes in process `syz.3.15'. [ 246.877987][ T6023] bcachefs (loop0): marking superblocks [ 246.939666][ T6023] bcachefs (loop0): initializing freespace [ 246.955140][ T6023] bcachefs (loop0): done initializing freespace [ 246.974007][ T6023] bcachefs (loop0): reading snapshots table [ 246.980539][ T6023] bcachefs (loop0): reading snapshots done [ 247.023164][ T5802] Bluetooth: hci0: command 0x0c1a tx timeout [ 247.072484][ T6033] netlink: 'syz.3.15': attribute type 13 has an invalid length. [ 247.161789][ T6023] bcachefs (loop0): done starting filesystem [ 247.652577][ T6033] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.662362][ T6033] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.686877][ T5885] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 247.888213][ T5808] Bluetooth: hci1: command 0x0c1a tx timeout [ 247.923329][ T5885] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 247.936131][ T5885] usb 2-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00 [ 247.940564][ T6033] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 247.945518][ T5885] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.990804][ T6033] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 248.390976][ T5885] usb 2-1: config 0 descriptor?? [ 248.465510][ T5802] Bluetooth: hci3: command 0x0c1a tx timeout [ 248.471939][ T5802] Bluetooth: hci4: command 0x0c1a tx timeout [ 248.763729][ T6033] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.774060][ T6033] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.785066][ T6033] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.794497][ T6033] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.809463][ T6023] syz.0.13 (6023) used greatest stack depth: 960 bytes left [ 248.877732][ T5885] hid (null): report_id 0 is invalid [ 248.895764][ T5885] megaworld 0003:07B5:0312.0002: report_id 0 is invalid [ 248.903144][ T5885] megaworld 0003:07B5:0312.0002: item 0 0 1 8 parsing failed [ 248.915354][ T5885] megaworld 0003:07B5:0312.0002: parse failed [ 248.922424][ T5885] megaworld 0003:07B5:0312.0002: probe with driver megaworld failed with error -22 [ 249.021367][ T5801] bcachefs (loop0): shutting down [ 249.027053][ T5801] bcachefs (loop0): going read-only [ 249.032503][ T5801] bcachefs (loop0): finished waiting for writes to stop [ 249.048134][ T5801] bcachefs (loop0): flushing journal and stopping allocators, journal seq 3 [ 249.088941][ T5808] Bluetooth: hci0: command 0x0c1a tx timeout [ 249.148957][ T3893] bridge_slave_1: left allmulticast mode [ 249.162018][ T3893] bridge_slave_1: left promiscuous mode [ 249.168822][ T3893] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.222524][ T3893] bridge_slave_0: left allmulticast mode [ 249.229060][ T3893] bridge_slave_0: left promiscuous mode [ 249.235546][ T3893] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.567949][ T5801] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 5 [ 249.620362][ T5801] bcachefs (loop0): clean shutdown complete, journal seq 6 [ 249.660997][ T5801] bcachefs (loop0): marking filesystem clean [ 249.932875][ T6051] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 249.968071][ T5802] Bluetooth: hci1: command 0x0c1a tx timeout [ 250.032869][ T5801] bcachefs (loop0): shutdown complete [ 250.131033][ T6053] FAULT_INJECTION: forcing a failure. [ 250.131033][ T6053] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 250.144676][ T6053] CPU: 1 UID: 0 PID: 6053 Comm: syz.3.19 Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(undef) [ 250.144804][ T6053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 250.144886][ T6053] Call Trace: [ 250.144937][ T6053] [ 250.144983][ T6053] __dump_stack+0x26/0x30 [ 250.145142][ T6053] dump_stack_lvl+0x1df/0x270 [ 250.145313][ T6053] dump_stack+0x1e/0x25 [ 250.145459][ T6053] should_fail_ex+0x7dc/0x8a0 [ 250.145628][ T6053] should_fail+0x2a/0x40 [ 250.145763][ T6053] should_fail_usercopy+0x2e/0x40 [ 250.145917][ T6053] _copy_from_user+0x33/0x100 [ 250.146062][ T6053] kstrtouint_from_user+0x75/0x140 [ 250.146242][ T6053] ? proc_fail_nth_write+0x43/0x300 [ 250.146374][ T6053] ? vfs_write+0x460/0x1560 [ 250.146538][ T6053] proc_fail_nth_write+0x61/0x300 [ 250.146671][ T6053] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 250.146863][ T6053] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 250.146999][ T6053] vfs_write+0x460/0x1560 [ 250.147150][ T6053] ? stack_depot_save_flags+0x35/0x7c0 [ 250.147294][ T6053] ? kmsan_get_metadata+0x105/0x1b0 [ 250.147473][ T6053] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 250.147670][ T6053] __x64_sys_write+0x1fb/0x4d0 [ 250.147852][ T6053] x64_sys_call+0x38c3/0x3db0 [ 250.148022][ T6053] do_syscall_64+0xd9/0x1b0 [ 250.148186][ T6053] ? irqentry_exit+0x16/0x60 [ 250.148331][ T6053] ? clear_bhb_loop+0x40/0x90 [ 250.148460][ T6053] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.148585][ T6053] RIP: 0033:0x7f7b1938d41f [ 250.148676][ T6053] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 250.148770][ T6053] RSP: 002b:00007f7b1a1af030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 250.148885][ T6053] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f7b1938d41f [ 250.148959][ T6053] RDX: 0000000000000001 RSI: 00007f7b1a1af0a0 RDI: 0000000000000005 [ 250.149027][ T6053] RBP: 00007f7b1a1af090 R08: 0000000000000000 R09: 0000000000000000 [ 250.149094][ T6053] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 250.149157][ T6053] R13: 0000000000000000 R14: 00007f7b195b6080 R15: 00007fffd737b878 [ 250.149254][ T6053] [ 250.369027][ C1] vkms_vblank_simulate: vblank timer overrun [ 250.563462][ T5802] Bluetooth: hci4: command 0x0c1a tx timeout [ 250.600186][ T5802] Bluetooth: hci3: command 0x0c1a tx timeout [ 250.659450][ T5885] usb 2-1: USB disconnect, device number 2 [ 250.717636][ T3893] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 250.762844][ T3893] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 250.815939][ T3893] bond0 (unregistering): Released all slaves [ 250.994116][ T5808] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 251.038973][ T5808] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 251.067920][ T5808] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 251.115704][ T5808] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 251.136306][ T5808] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 251.775158][ T6070] loop1: detected capacity change from 0 to 256 [ 251.825431][ T6070] exfat: Deprecated parameter 'utf8' [ 251.831965][ T6070] exfat: Deprecated parameter 'namecase' [ 251.839074][ T6070] exfat: Deprecated parameter 'namecase' [ 251.844976][ T6070] exfat: Deprecated parameter 'utf8' [ 251.965935][ T6070] exFAT-fs (loop1): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 252.143208][ T3893] hsr_slave_0: left promiscuous mode [ 252.197013][ T3893] hsr_slave_1: left promiscuous mode [ 252.204762][ T3893] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 252.214860][ T3893] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 252.271725][ T3893] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 252.279871][ T3893] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 252.436995][ T30] audit: type=1326 audit(1747424312.307:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6069 comm="syz.1.22" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa0f198e969 code=0x0 [ 252.438014][ T3893] veth1_macvtap: left promiscuous mode [ 252.464599][ T3893] veth0_macvtap: left promiscuous mode [ 252.470818][ T3893] veth1_vlan: left promiscuous mode [ 252.476370][ T3893] veth0_vlan: left promiscuous mode [ 253.308248][ T5808] Bluetooth: hci2: command tx timeout [ 253.471237][ T3893] team0 (unregistering): Port device team_slave_1 removed [ 253.506300][ T3893] team0 (unregistering): Port device team_slave_0 removed [ 254.029791][ T6070] vlan2: entered promiscuous mode [ 254.035054][ T6070] bridge0: entered promiscuous mode [ 254.041361][ T6070] vlan2: entered allmulticast mode [ 254.046960][ T6070] bridge0: entered allmulticast mode [ 254.097634][ T6086] vlan2: entered promiscuous mode [ 254.102917][ T6086] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 254.117485][ T6093] warning: `syz.3.26' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 254.751932][ T6101] netlink: 20 bytes leftover after parsing attributes in process `syz.3.27'. [ 254.761709][ T6062] chnl_net:caif_netlink_parms(): no params data found [ 254.868638][ T6101] netlink: 'syz.3.27': attribute type 13 has an invalid length. [ 255.328008][ T5808] Bluetooth: hci2: command tx timeout [ 255.422532][ T6108] nvme_fabrics: unknown parameter or missing value 'ó' in ctrl creation request [ 256.468207][ T6120] loop3: detected capacity change from 0 to 1024 [ 256.584711][ T6114] loop0: detected capacity change from 0 to 32768 [ 256.587680][ T6120] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 256.594432][ T6114] XFS: ikeep mount option is deprecated. [ 256.704106][ T6114] XFS (loop0): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 256.725599][ T6062] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.734643][ T6062] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.742361][ T6062] bridge_slave_0: entered allmulticast mode [ 256.753618][ T6062] bridge_slave_0: entered promiscuous mode [ 256.769826][ T6062] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.779614][ T6062] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.787403][ T6062] bridge_slave_1: entered allmulticast mode [ 256.796796][ T6062] bridge_slave_1: entered promiscuous mode [ 257.068172][ T6114] XFS (loop0): Ending clean mount [ 257.095657][ T6062] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 257.144722][ T6114] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 257.235948][ T6062] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 257.236366][ T5801] XFS (loop0): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 257.406988][ T5808] Bluetooth: hci2: command tx timeout [ 257.720077][ T5809] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.200050][ T6134] loop1: detected capacity change from 0 to 32768 [ 258.211306][ T6134] ======================================================= [ 258.211306][ T6134] WARNING: The mand mount option has been deprecated and [ 258.211306][ T6134] and is ignored by this kernel. Remove the mand [ 258.211306][ T6134] option from the mount to silence this warning. [ 258.211306][ T6134] ======================================================= [ 258.257223][ T6062] team0: Port device team_slave_0 added [ 258.279811][ T6062] team0: Port device team_slave_1 added [ 258.439698][ T6134] jfs_strtoUCS: char2uni returned -22. [ 258.445368][ T6134] charset = cp949, char = 0xd4 [ 258.722426][ T6062] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 258.730816][ T6062] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 258.758357][ T6062] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 258.895909][ T30] audit: type=1800 audit(1747424318.757:3): pid=6139 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.34" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 259.011101][ T6062] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 259.018802][ T6062] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 259.045263][ T6062] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 259.426247][ T6144] loop1: detected capacity change from 0 to 2048 [ 259.498372][ T5808] Bluetooth: hci2: command tx timeout [ 259.603918][ T6144] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 259.634710][ T6062] hsr_slave_0: entered promiscuous mode [ 259.644506][ T6062] hsr_slave_1: entered promiscuous mode [ 259.652995][ T6062] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 259.660931][ T6062] Cannot create hsr debugfs directory [ 259.809282][ T5860] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 259.820582][ T6150] netlink: 20 bytes leftover after parsing attributes in process `syz.4.38'. [ 259.926284][ T6150] netlink: 'syz.4.38': attribute type 13 has an invalid length. [ 260.049208][ T5860] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 260.059457][ T5860] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.068259][ T5860] usb 4-1: Product: syz [ 260.072655][ T5860] usb 4-1: Manufacturer: syz [ 260.077574][ T5860] usb 4-1: SerialNumber: syz [ 260.261581][ T5860] usb 4-1: config 0 descriptor?? [ 260.536047][ T6150] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.545620][ T6150] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.862828][ T6150] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 260.897643][ T6150] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 261.132366][ T6163] loop0: detected capacity change from 0 to 1024 [ 261.209065][ T6163] EXT4-fs: Ignoring removed i_version option [ 261.215444][ T6163] EXT4-fs: Ignoring removed mblk_io_submit option [ 261.222832][ T6163] EXT4-fs: Ignoring removed nobh option [ 261.228764][ T6163] EXT4-fs: Ignoring removed bh option [ 261.295581][ T6163] EXT4-fs: test_dummy_encryption requires encrypt feature [ 261.419531][ T5860] usb 4-1: Firmware version (0.0) predates our first public release. [ 261.428365][ T5860] usb 4-1: Please update to version 0.2 or newer [ 261.469474][ T6150] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.479035][ T6150] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.488477][ T6150] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.497741][ T6150] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.654838][ T6167] loop0: detected capacity change from 0 to 512 [ 261.837241][ T6167] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #13: comm syz.0.33: attempt to clear invalid blocks 1 len 1 [ 261.937070][ T6167] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.33: bg 0: block 343: padding at end of block bitmap is not set [ 262.013033][ T6167] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 262.125571][ T6167] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.33: invalid indirect mapped block 1819239214 (level 0) [ 262.179959][ T6167] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.33: invalid indirect mapped block 1819239214 (level 1) [ 262.307564][ T6167] EXT4-fs (loop0): 1 truncate cleaned up [ 262.315547][ T6167] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 262.403357][ T6176] macvlan0: entered promiscuous mode [ 262.410631][ T6176] macvlan0: entered allmulticast mode [ 262.416225][ T6176] veth1_vlan: entered allmulticast mode [ 262.589470][ T6161] EXT4-fs error (device loop0): ext4_iget_extra_inode:4693: inode #15: comm syz.0.33: corrupted in-inode xattr: e_value out of bounds [ 262.835691][ T24] usb 4-1: USB disconnect, device number 2 [ 262.988980][ T6179] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 263.089900][ T6062] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 263.115399][ T6184] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 263.201637][ T5801] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.272328][ T6062] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 263.275217][ T6185] loop3: detected capacity change from 0 to 64 [ 263.364519][ T6185] hfs: invalid btree extent records [ 263.371315][ T6185] hfs: unable to open extent tree [ 263.377253][ T6185] hfs: can't find a HFS filesystem on dev loop3 [ 263.438965][ T6062] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 263.530440][ T6062] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 263.929728][ T6190] syzkaller0: entered allmulticast mode [ 264.057436][ T6190] syzkaller0: entered promiscuous mode [ 264.084764][ T6185] sctp: [Deprecated]: syz.3.43 (pid 6185) Use of int in max_burst socket option deprecated. [ 264.084764][ T6185] Use struct sctp_assoc_value instead [ 264.200861][ T6192] syzkaller0 (unregistering): left promiscuous mode [ 264.212932][ T6192] syzkaller0 (unregistering): left allmulticast mode [ 264.547245][ T6191] loop1: detected capacity change from 0 to 32768 [ 264.726820][ T6191] jfs_strtoUCS: char2uni returned -22. [ 264.732494][ T6191] charset = cp949, char = 0xd4 [ 265.035456][ T6062] 8021q: adding VLAN 0 to HW filter on device bond0 [ 265.310595][ T6062] 8021q: adding VLAN 0 to HW filter on device team0 [ 265.385231][ T1127] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.392807][ T1127] bridge0: port 1(bridge_slave_0) entered forwarding state [ 265.535174][ T1127] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.542745][ T1127] bridge0: port 2(bridge_slave_1) entered forwarding state [ 265.839860][ T11] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 265.879604][ T6205] loop0: detected capacity change from 0 to 2048 [ 266.019224][ T6205] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 266.029439][ T6205] NILFS (loop0): mounting unchecked fs [ 266.111143][ T11] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 266.123653][ T11] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 266.134889][ T11] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 266.148697][ T11] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 266.160230][ T11] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.199487][ T6215] netlink: 20 bytes leftover after parsing attributes in process `syz.1.51'. [ 266.248898][ T11] usb 4-1: config 0 descriptor?? [ 266.264654][ T6205] NILFS (loop0): recovery complete [ 266.352876][ T6216] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 266.427856][ T6215] netlink: 'syz.1.51': attribute type 13 has an invalid length. [ 266.727596][ T11] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 266.845769][ T11] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 266.934165][ T6215] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.943537][ T6215] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.194462][ T6215] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 267.223148][ T6215] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 267.329863][ T6204] loop3: detected capacity change from 0 to 2048 [ 267.459034][ T6215] veth1_vlan: left allmulticast mode [ 267.574545][ T6204] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 267.717840][ T5808] Bluetooth: hci3: SCO packet for unknown connection handle 0 [ 267.767223][ T5808] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 267.876603][ T24] usb 4-1: USB disconnect, device number 3 [ 267.883887][ T6215] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.894473][ T6215] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.904075][ T6215] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.913421][ T6215] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.165536][ T6224] fido_id[6224]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 268.342775][ T6218] netlink: 136 bytes leftover after parsing attributes in process `syz.4.52'. [ 268.352128][ T6218] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 268.995765][ T6229] loop0: detected capacity change from 0 to 40427 [ 269.020693][ T6229] F2FS-fs (loop0): build fault injection attr: rate: 771, type: 0x3fffff [ 269.033143][ T6229] F2FS-fs (loop0): invalid crc value [ 269.332912][ T6229] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 269.877199][ T6237] loop1: detected capacity change from 0 to 256 [ 269.944480][ T6235] loop4: detected capacity change from 0 to 32768 [ 269.953988][ T6235] XFS: attr2 mount option is deprecated. [ 269.960114][ T6235] xfs: Unknown parameter 'subj_user' [ 270.119403][ T6239] loop3: detected capacity change from 0 to 1024 [ 270.174923][ T6239] EXT4-fs: Ignoring removed i_version option [ 270.181626][ T6239] EXT4-fs: Ignoring removed mblk_io_submit option [ 270.188997][ T6239] EXT4-fs: Ignoring removed nobh option [ 270.194789][ T6239] EXT4-fs: Ignoring removed bh option [ 271.594508][ T6239] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 272.144706][ T6239] 9pnet_fd: Insufficient options for proto=fd [ 272.367750][ T5885] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 272.652981][ T5885] usb 1-1: Using ep0 maxpacket: 16 [ 272.661242][ T24] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 272.796084][ T5885] usb 1-1: New USB device found, idVendor=0458, idProduct=704a, bcdDevice=3a.55 [ 272.803861][ T6062] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 272.805508][ T5885] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.821413][ T5885] usb 1-1: Product: syz [ 272.825788][ T5885] usb 1-1: Manufacturer: syz [ 272.831638][ T5885] usb 1-1: SerialNumber: syz [ 272.957874][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 273.000395][ T24] usb 5-1: config 7 has an invalid interface number: 247 but max is 0 [ 273.009752][ T24] usb 5-1: config 7 has no interface number 0 [ 273.016067][ T24] usb 5-1: config 7 interface 247 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 273.026825][ T24] usb 5-1: config 7 interface 247 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 273.037099][ T24] usb 5-1: config 7 interface 247 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 0 [ 273.062544][ T5885] usb 1-1: config 0 descriptor?? [ 273.122350][ T5885] gspca_main: gspca_sn9c20x-2.14.0 probing 0458:704a [ 273.163998][ T5809] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.283991][ T24] usb 5-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=6c.22 [ 273.294041][ T24] usb 5-1: New USB device strings: Mfr=1, Product=74, SerialNumber=147 [ 273.302804][ T24] usb 5-1: Product: syz [ 273.307419][ T24] usb 5-1: Manufacturer: syz [ 273.312543][ T24] usb 5-1: SerialNumber: syz [ 273.547385][ T6246] loop0: detected capacity change from 0 to 2048 [ 273.619337][ T24] ni6501 5-1:7.247: driver 'ni6501' failed to auto-configure device. [ 273.647556][ T6246] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=27485, location=27485 [ 273.647949][ T5885] gspca_sn9c20x: Write register 1000 failed -110 [ 273.664348][ T5885] gspca_sn9c20x: Device initialization failed [ 273.670985][ T5885] gspca_sn9c20x 1-1:0.0: probe with driver gspca_sn9c20x failed with error -110 [ 273.681385][ T5885] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 273.781095][ T6268] syz.3.59 (6268): /proc/6266/oom_adj is deprecated, please use /proc/6266/oom_score_adj instead. [ 273.848151][ T6268] futex_wake_op: syz.3.59 tries to shift op by -1; fix this program [ 273.869788][ T6246] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 274.017300][ T5885] usb 5-1: USB disconnect, device number 2 [ 274.478160][ T5885] usb 1-1: USB disconnect, device number 2 [ 274.726011][ T6279] libceph: resolve '4..' (ret=-3): failed [ 275.343609][ T6286] loop4: detected capacity change from 0 to 512 [ 275.461713][ T6290] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 276.418206][ T6062] veth0_vlan: entered promiscuous mode [ 276.686277][ T6062] veth1_vlan: entered promiscuous mode [ 276.798258][ T5860] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 276.982463][ T5860] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 276.993277][ T5860] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 277.088580][ T5860] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 277.099010][ T5860] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 277.108753][ T6062] veth0_macvtap: entered promiscuous mode [ 277.114995][ T5860] usb 2-1: SerialNumber: syz [ 277.151408][ T6312] loop4: detected capacity change from 0 to 1024 [ 277.164378][ T6062] veth1_macvtap: entered promiscuous mode [ 277.188100][ T6312] EXT4-fs: Ignoring removed i_version option [ 277.194494][ T6312] EXT4-fs: Ignoring removed mblk_io_submit option [ 277.202028][ T6312] EXT4-fs: Ignoring removed nobh option [ 277.207948][ T6312] EXT4-fs: Ignoring removed bh option [ 277.314786][ T6062] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 277.335883][ T6312] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 277.375509][ T6062] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 277.403173][ T6062] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.413801][ T6062] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.423097][ T6062] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.431368][ T6312] 9pnet_fd: Insufficient options for proto=fd [ 277.432078][ T6062] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.580825][ T6307] loop1: detected capacity change from 0 to 64 [ 277.680864][ T6307] hfs: Unknown parameter 'V' [ 277.816867][ T5860] usb 2-1: 0:2 : does not exist [ 277.822097][ T5860] usb 2-1: unit 5: unexpected type 0x03 [ 277.893749][ T5804] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.979518][ T6320] loop0: detected capacity change from 0 to 512 [ 278.073657][ T6320] journal_path: Lookup failure for './file0' [ 278.082119][ T6320] EXT4-fs: error: could not find journal device path [ 278.087148][ T5860] usb 2-1: USB disconnect, device number 3 [ 278.480079][ T6012] udevd[6012]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 278.732972][ T6325] loop4: detected capacity change from 0 to 2048 [ 278.875064][ T6327] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 279.423265][ T6320] loop0: detected capacity change from 0 to 8192 [ 280.517430][ T11] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 280.660148][ T5885] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 280.720800][ T11] usb 5-1: Using ep0 maxpacket: 16 [ 280.838188][ T11] usb 5-1: config 0 has an invalid interface number: 251 but max is 0 [ 280.851193][ T11] usb 5-1: config 0 has no interface number 0 [ 280.857669][ T11] usb 5-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 280.867939][ T11] usb 5-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 280.871248][ T5885] usb 4-1: Using ep0 maxpacket: 16 [ 280.923210][ T11] usb 5-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 280.932739][ T11] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.941427][ T11] usb 5-1: Product: syz [ 280.945827][ T11] usb 5-1: Manufacturer: syz [ 280.950938][ T11] usb 5-1: SerialNumber: syz [ 280.971604][ T5885] usb 4-1: New USB device found, idVendor=0458, idProduct=704a, bcdDevice=3a.55 [ 280.981795][ T5885] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.990348][ T5885] usb 4-1: Product: syz [ 280.994734][ T5885] usb 4-1: Manufacturer: syz [ 280.999638][ T5885] usb 4-1: SerialNumber: syz [ 281.036997][ T5885] usb 4-1: config 0 descriptor?? [ 281.058513][ T11] usb 5-1: config 0 descriptor?? [ 281.063858][ T5885] gspca_main: gspca_sn9c20x-2.14.0 probing 0458:704a [ 281.066887][ T6346] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 281.080352][ T6356] loop0: detected capacity change from 0 to 512 [ 281.157860][ T6346] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 281.445461][ T6346] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 281.518011][ T6346] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 281.597540][ T5885] gspca_sn9c20x: Write register 1000 failed -110 [ 281.604250][ T5885] gspca_sn9c20x: Device initialization failed [ 281.612579][ T5885] gspca_sn9c20x 4-1:0.0: probe with driver gspca_sn9c20x failed with error -110 [ 281.623394][ T5885] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 281.739806][ T6338] loop3: detected capacity change from 0 to 2048 [ 281.841200][ T6338] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=27485, location=27485 [ 281.969443][ T6338] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 282.274935][ T11] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 282.285779][ T11] asix 5-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 282.298760][ T11] asix 5-1:0.251: probe with driver asix failed with error -71 [ 282.458090][ T11] usb 5-1: USB disconnect, device number 3 [ 282.560426][ T5860] usb 4-1: USB disconnect, device number 4 [ 282.938660][ T6373] loop1: detected capacity change from 0 to 1024 [ 282.988996][ T6373] EXT4-fs: Ignoring removed i_version option [ 282.995377][ T6373] EXT4-fs: Ignoring removed mblk_io_submit option [ 283.002880][ T6373] EXT4-fs: Ignoring removed nobh option [ 283.009285][ T6373] EXT4-fs: Ignoring removed bh option [ 283.244187][ T6373] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 283.466267][ T6373] 9pnet_fd: Insufficient options for proto=fd [ 283.556904][ T11] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 283.770734][ T11] usb 5-1: no configurations [ 283.775567][ T11] usb 5-1: can't read configurations, error -22 [ 283.796848][ T5860] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 283.838949][ T5815] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.903654][ T6386] netlink: 8 bytes leftover after parsing attributes in process `syz.3.84'. [ 283.977141][ T11] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 284.028825][ T5860] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 284.039356][ T5860] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 284.102113][ T5860] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 284.111572][ T5860] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 284.120036][ T5860] usb 1-1: SerialNumber: syz [ 284.178678][ T11] usb 5-1: no configurations [ 284.183485][ T11] usb 5-1: can't read configurations, error -22 [ 284.237728][ T11] usb usb5-port1: attempt power cycle [ 284.530292][ T6382] loop0: detected capacity change from 0 to 64 [ 284.580930][ T6382] hfs: Unknown parameter 'V' [ 284.647129][ T11] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 284.754131][ T11] usb 5-1: no configurations [ 284.759250][ T11] usb 5-1: can't read configurations, error -22 [ 284.843432][ T5860] usb 1-1: 0:2 : does not exist [ 284.848771][ T5860] usb 1-1: unit 5: unexpected type 0x03 [ 284.946900][ T5885] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 284.987694][ T5863] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 285.007339][ T11] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 285.038952][ T5860] usb 1-1: USB disconnect, device number 3 [ 285.075163][ T11] usb 5-1: no configurations [ 285.080966][ T11] usb 5-1: can't read configurations, error -22 [ 285.115162][ T11] usb usb5-port1: unable to enumerate USB device [ 285.127149][ T5885] usb 2-1: Using ep0 maxpacket: 32 [ 285.187520][ T5885] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 285.199568][ T5885] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 285.210373][ T5885] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 285.220430][ T5885] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.239190][ T5993] udevd[5993]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 285.247210][ T5863] usb 4-1: Using ep0 maxpacket: 32 [ 285.314306][ T5863] usb 4-1: New USB device found, idVendor=08ca, idProduct=0111, bcdDevice=6d.c8 [ 285.324636][ T5863] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.364713][ T5885] usb 2-1: config 0 descriptor?? [ 285.392842][ T5863] usb 4-1: config 0 descriptor?? [ 285.435009][ T5885] hub 2-1:0.0: USB hub found [ 285.463129][ T5863] gspca_main: mr97310a-2.14.0 probing 08ca:0111 [ 285.469885][ T5863] gspca_mr97310a: reg write [21] error -22 [ 285.476329][ T5863] mr97310a 4-1:0.0: probe with driver mr97310a failed with error -22 [ 285.664926][ T6389] loop1: detected capacity change from 0 to 256 [ 285.753634][ T80] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 285.762413][ T80] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 285.771362][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 285.778269][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 286.059397][ T5885] hub 2-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 286.063007][ T3652] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 286.075842][ T3652] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 286.280524][ T6394] loop3: detected capacity change from 0 to 4096 [ 286.386180][ T6394] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 286.468107][ T6394] ntfs3(loop3): It is recommened to use chkdsk. [ 286.509180][ T5885] hid-generic 0003:046D:C31C.0004: item fetching failed at offset 0/1 [ 286.581703][ T5885] hid-generic 0003:046D:C31C.0004: probe with driver hid-generic failed with error -22 [ 286.658226][ T6394] ntfs3(loop3): ino=8, mi_enum_attr [ 286.663798][ T6394] ntfs3(loop3): Failed to load $BadClus (-22). [ 286.679850][ T6389] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 286.688675][ T6389] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 286.724112][ T5885] usb 4-1: USB disconnect, device number 5 [ 287.003259][ T5860] usb 2-1: USB disconnect, device number 4 [ 287.300008][ T6416] macvlan0: entered promiscuous mode [ 287.306948][ T6416] macvlan0: entered allmulticast mode [ 287.312544][ T6416] veth1_vlan: entered allmulticast mode [ 287.900289][ T6424] loop3: detected capacity change from 0 to 512 [ 288.026786][ T5860] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 288.220896][ T5860] usb 5-1: Using ep0 maxpacket: 16 [ 288.447944][ T6428] loop1: detected capacity change from 0 to 2048 [ 288.456611][ T5860] usb 5-1: config 0 has an invalid interface number: 251 but max is 0 [ 288.465034][ T5860] usb 5-1: config 0 has no interface number 0 [ 288.471611][ T5860] usb 5-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 288.485135][ T5860] usb 5-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 288.572066][ T6433] loop0: detected capacity change from 0 to 1024 [ 288.582627][ T6433] EXT4-fs: Ignoring removed i_version option [ 288.589249][ T6433] EXT4-fs: Ignoring removed mblk_io_submit option [ 288.597059][ T6433] EXT4-fs: Ignoring removed nobh option [ 288.602850][ T6433] EXT4-fs: Ignoring removed bh option [ 288.732338][ T5860] usb 5-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 288.741864][ T5860] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.750311][ T5860] usb 5-1: Product: syz [ 288.754678][ T5860] usb 5-1: Manufacturer: syz [ 288.759611][ T5860] usb 5-1: SerialNumber: syz [ 288.775407][ T6436] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 288.804289][ T6433] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 288.853189][ T5860] usb 5-1: config 0 descriptor?? [ 288.862028][ T6425] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 288.879101][ T6425] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 289.013841][ T6433] 9pnet_fd: Insufficient options for proto=fd [ 289.115651][ T6425] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 289.187117][ T6425] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 289.761517][ T5801] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.826912][ T6442] loop5: detected capacity change from 0 to 512 [ 289.882355][ T5860] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 289.892979][ T5860] asix 5-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 289.904885][ T5860] asix 5-1:0.251: probe with driver asix failed with error -71 [ 289.995183][ T6442] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 290.068502][ T5860] usb 5-1: USB disconnect, device number 8 [ 290.116932][ T5885] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 290.203328][ T6442] EXT4-fs (loop5): 1 orphan inode deleted [ 290.213323][ T6442] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 290.251836][ T3652] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 290.262305][ T3652] EXT4-fs error (device loop5): ext4_release_dquot:6971: comm kworker/u8:14: Failed to release dquot type 1 [ 290.308284][ T6442] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 290.345113][ T6447] netlink: 80 bytes leftover after parsing attributes in process `syz.0.97'. [ 290.357760][ T5885] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 290.368326][ T5885] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 290.451940][ T5885] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 290.461595][ T5885] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 290.470101][ T5885] usb 4-1: SerialNumber: syz [ 290.507206][ T30] audit: type=1800 audit(1747424350.387:4): pid=6442 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.95" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 290.840457][ T6443] loop3: detected capacity change from 0 to 64 [ 290.864925][ T6443] hfs: Unknown parameter 'V' [ 290.974219][ T6454] binder: 6451:6454 ioctl 40046205 0 returned -22 [ 291.002173][ T5885] usb 4-1: 0:2 : does not exist [ 291.007699][ T5885] usb 4-1: unit 5: unexpected type 0x03 [ 291.082293][ T6062] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.122304][ T5885] usb 4-1: USB disconnect, device number 6 [ 291.208101][ T5863] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 291.455600][ T5863] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 291.465236][ T5863] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.545989][ T5863] usb 1-1: config 0 descriptor?? [ 291.596073][ T5863] cp210x 1-1:0.0: cp210x converter detected [ 291.748730][ T6012] udevd[6012]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 292.590409][ T6461] loop5: detected capacity change from 0 to 32768 [ 292.602372][ T5863] cp210x 1-1:0.0: failed to get vendor val 0x370c size 13: -71 [ 292.610409][ T5863] cp210x 1-1:0.0: GPIO initialisation failed: -71 [ 292.630538][ T5863] usb 1-1: cp210x converter now attached to ttyUSB0 [ 292.717972][ T5863] usb 1-1: USB disconnect, device number 4 [ 292.850034][ T5863] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 292.860308][ T5863] cp210x 1-1:0.0: device disconnected [ 292.885381][ T6461] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): Using encoding defined by superblock: utf8-12.1.0 [ 292.951178][ T6461] bcachefs (loop5): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,background_compression=zstd,wide_macs,journal_flush_disabled,fsck,norecovery,nojournal_transaction_names [ 292.951178][ T6461] allowing incompatible features above 0.0: (unknown version) [ 292.981754][ T6461] bcachefs (loop5): recovering from clean shutdown, journal seq 10 [ 292.991290][ T6461] bcachefs (loop5): Version upgrade required: [ 292.991290][ T6461] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 292.991290][ T6461] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.25: extent_flags [ 292.991290][ T6461] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 293.157502][ T6461] bcachefs (loop5): bcachefs (loop5): error validating btree node on loop5 at btree dirents level 0/0 [ 293.157600][ T6461] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9aa2895aefce4bdf written 1027 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0 [ 293.157697][ T6461] node offset 24/1027: btree node data missing: expected 1027 sectors, found 24, fixing [ 293.194719][ T6461] bcachefs (loop5): btree_node_read_work: rewriting btree node at due to error [ 293.194719][ T6461] btree=dirents level=0 u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9aa2895aefce4bdf written 1027 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0 [ 293.264873][ T6461] bcachefs (loop5): bcachefs (loop5): error validating btree node at btree alloc level 0/0 [ 293.264967][ T6461] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0 [ 293.265071][ T6461] node offset 8/24 bset u64s 375 bset byte offset 184: keys out of order: u64s 11 type alloc_v4 0:32:0 len 0 ver 0 > u64s 11 type alloc_v4 0:2:0 len 0 ver 0, fixing [ 293.309445][ T6461] bcachefs (loop5): btree_node_read_work: rewriting btree node at due to error [ 293.309445][ T6461] btree=alloc level=0 u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0 [ 293.358333][ T6461] bcachefs (loop5): running explicit recovery pass check_topology (2), currently at recovery_pass_empty (0) [ 293.370270][ T6461] bcachefs (loop5): bcachefs (loop5): error validating btree node on loop5 at btree lru level 0/0 [ 293.370366][ T6461] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 28f61e078e70b95c written 16 min_key POS_MIN durability: 1 ptr: 0:28:0 gen 0 [ 293.370463][ T6461] node offset 0/16 bset u64s 0: incorrect max key U64_MAX:18374686480762142719:U32_MAX, btree topology error: [ 293.407465][ T6461] bcachefs (loop5): flagging btree lru lost data [ 293.416022][ T6461] bcachefs (loop5): error reading btree root btree=lru level=0: btree_node_read_error, fixing [ 293.499406][ T6461] bcachefs (loop5): check_topology... done [ 293.516110][ T6461] bcachefs (loop5): accounting_read... done [ 293.525685][ T6461] bcachefs (loop5): alloc_read... done [ 293.533733][ T6461] bcachefs (loop5): snapshots_read... done [ 293.540560][ T6461] bcachefs (loop5): Fixed errors, running fsck a second time to verify fs is clean [ 293.553682][ T6461] bcachefs (loop5): done starting filesystem [ 293.703519][ T6062] bcachefs (loop5): shutting down [ 293.837289][ T6482] loop0: detected capacity change from 0 to 1024 [ 293.930049][ T6482] hfsplus: Unknown parameter 'œÀŸ"0x0000000000000000' [ 294.009489][ T6484] loop3: detected capacity change from 0 to 512 [ 294.074634][ T6062] bcachefs (loop5): shutdown complete [ 294.096553][ T6487] loop1: detected capacity change from 0 to 1024 [ 294.105932][ T6487] EXT4-fs: Ignoring removed i_version option [ 294.113076][ T6487] EXT4-fs: Ignoring removed mblk_io_submit option [ 294.120387][ T6487] EXT4-fs: Ignoring removed nobh option [ 294.126180][ T6487] EXT4-fs: Ignoring removed bh option [ 294.469617][ T6487] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 294.680722][ T6487] 9pnet_fd: Insufficient options for proto=fd [ 295.298134][ T5815] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.506699][ T5860] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 295.728618][ T6504] loop1: detected capacity change from 0 to 256 [ 295.748548][ T5860] usb 4-1: Using ep0 maxpacket: 16 [ 295.760408][ T6504] vfat: Unknown parameter 'óhort' [ 295.787708][ T5860] usb 4-1: config 0 has an invalid interface number: 251 but max is 0 [ 295.796117][ T5860] usb 4-1: config 0 has no interface number 0 [ 295.802574][ T5860] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 295.812917][ T5860] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 295.917667][ T5860] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 295.927317][ T5860] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.935544][ T5860] usb 4-1: Product: syz [ 295.940073][ T5860] usb 4-1: Manufacturer: syz [ 295.944877][ T5860] usb 4-1: SerialNumber: syz [ 296.119572][ T5860] usb 4-1: config 0 descriptor?? [ 296.128010][ T6501] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 296.136983][ T6501] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 296.234396][ T6504] loop1: detected capacity change from 0 to 2048 [ 296.356764][ T6504] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 296.430536][ T6504] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 296.438646][ T6504] UDF-fs: Scanning with blocksize 512 failed [ 296.493101][ T6501] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 296.526136][ T6501] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 296.588057][ T6504] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 296.685407][ T30] audit: type=1800 audit(1747424356.557:5): pid=6504 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.110" name="file1" dev="loop1" ino=838 res=0 errno=0 [ 296.687708][ T6504] ------------[ cut here ]------------ [ 296.712195][ T6504] WARNING: CPU: 1 PID: 6504 at fs/udf/truncate.c:224 udf_truncate_extents+0x7a1/0x1d50 [ 296.722376][ T6504] Modules linked in: [ 296.726856][ T6504] CPU: 1 UID: 0 PID: 6504 Comm: syz.1.110 Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(undef) [ 296.739305][ T6504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 296.749774][ T6504] RIP: 0010:udf_truncate_extents+0x7a1/0x1d50 [ 296.756143][ T6504] Code: ff 44 89 ff 48 89 d3 e8 bd 1a 62 fe 89 03 e9 58 fd ff ff 44 89 e7 e8 ce 1e 62 fe 4d 85 ff 0f 84 38 fe ff ff e8 f0 63 c1 fd 90 <0f> 0b 90 e9 37 14 00 00 44 89 f7 e8 af 1e 62 fe 45 85 ff 0f 84 7e [ 296.776312][ T6504] RSP: 0018:ffff8880816b7790 EFLAGS: 00010287 [ 296.782800][ T6504] RAX: ffffffff8430c2f0 RBX: ffffffffffffffff RCX: 0000000000080000 [ 296.791143][ T6504] RDX: ffffc90008806000 RSI: 000000000000054a RDI: 000000000000054b [ 296.799493][ T6504] RBP: ffff8880816b78e8 R08: ffffea000000000f R09: 0000000000000002 [ 296.807819][ T6504] R10: 0000000000000001 R11: 0000000000000002 R12: 0000000000000000 [ 296.816022][ T6504] R13: 0000000000000000 R14: 0000000000000000 R15: 000000000000000a [ 296.824377][ T6504] FS: 00007fa0f272d6c0(0000) GS:ffff8881aabba000(0000) knlGS:0000000000000000 [ 296.833795][ T6504] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 296.840757][ T6504] CR2: 000000110c2a9379 CR3: 0000000053aec000 CR4: 00000000003526f0 [ 296.850500][ T6504] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 296.859807][ T6504] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 296.868435][ T6504] Call Trace: [ 296.871898][ T6504] [ 296.875014][ T6504] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 296.881830][ T6504] ? kmsan_get_metadata+0x105/0x1b0 [ 296.887755][ T6504] udf_write_failed+0x321/0x3d0 [ 296.892940][ T6504] udf_direct_IO+0x338/0x360 [ 296.897997][ T6504] ? __pfx_udf_direct_IO+0x10/0x10 [ 296.903434][ T6504] generic_file_direct_write+0x2bc/0x720 [ 296.909566][ T6504] __generic_file_write_iter+0x25b/0x460 [ 296.915533][ T6504] udf_file_write_iter+0x53f/0xdb0 [ 296.921253][ T6504] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 296.928069][ T6504] ? __pfx_udf_file_write_iter+0x10/0x10 [ 296.934014][ T6504] do_iter_readv_writev+0x93e/0xb90 [ 296.939677][ T6504] ? udf_ioctl+0x761/0x810 [ 296.944382][ T6504] ? __pfx_udf_file_write_iter+0x10/0x10 [ 296.950451][ T6504] vfs_writev+0x51c/0x1420 [ 296.955176][ T6504] ? kmsan_get_metadata+0x105/0x1b0 [ 296.960830][ T6504] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 296.967098][ T6504] __se_sys_pwritev2+0x22f/0x470 [ 296.972423][ T6504] __x64_sys_pwritev2+0xe4/0x150 [ 296.978381][ T6504] x64_sys_call+0x22b9/0x3db0 [ 296.983393][ T6504] do_syscall_64+0xd9/0x1b0 [ 296.988366][ T6504] ? irqentry_exit+0x16/0x60 [ 296.993283][ T6504] ? clear_bhb_loop+0x40/0x90 [ 296.998377][ T6504] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.004563][ T6504] RIP: 0033:0x7fa0f198e969 [ 297.009542][ T6504] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 297.029584][ T6504] RSP: 002b:00007fa0f272d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 297.038489][ T6504] RAX: ffffffffffffffda RBX: 00007fa0f1bb5fa0 RCX: 00007fa0f198e969 [ 297.046808][ T6504] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000006 [ 297.055003][ T6504] RBP: 00007fa0f1a10ab1 R08: 0000000000000000 R09: 0000000000000003 [ 297.063396][ T6504] R10: 0000000000002000 R11: 0000000000000246 R12: 0000000000000000 [ 297.071830][ T6504] R13: 0000000000000000 R14: 00007fa0f1bb5fa0 R15: 00007ffc59fff478 [ 297.080248][ T6504] [ 297.083452][ T6504] ---[ end trace 0000000000000000 ]--- [ 297.394563][ T6507] loop4: detected capacity change from 0 to 4096 [ 297.436853][ T6507] ntfs3(loop4): Different NTFS sector size (2048) and media sector size (512). [ 297.626983][ T5863] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 297.810798][ T5863] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 297.821648][ T5863] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 297.921260][ T5863] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 297.930947][ T5863] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 297.939469][ T5863] usb 1-1: SerialNumber: syz [ 298.005959][ T5860] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 298.016667][ T5860] asix 4-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 298.028413][ T5860] asix 4-1:0.251: probe with driver asix failed with error -71 [ 298.417749][ T5860] usb 4-1: USB disconnect, device number 7 [ 298.491568][ T6507] ntfs3(loop4): Failed to initialize $Extend/$ObjId. [ 298.524760][ T6504] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 298.602616][ T6511] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 298.611952][ T6513] loop0: detected capacity change from 0 to 64 [ 298.719060][ T6513] hfs: Unknown parameter 'V' [ 298.937568][ T5863] usb 1-1: 0:2 : does not exist [ 298.942707][ T5863] usb 1-1: unit 5: unexpected type 0x03 [ 299.136172][ T5863] usb 1-1: USB disconnect, device number 5 [ 299.580875][ T6517] loop3: detected capacity change from 0 to 2048 [ 299.825692][ T6012] udevd[6012]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 299.905704][ T6525] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 299.991903][ T6524] netlink: 20 bytes leftover after parsing attributes in process `syz.4.115'. [ 300.039864][ T6524] netlink: 16 bytes leftover after parsing attributes in process `syz.4.115'. [ 300.938977][ T6530] loop0: detected capacity change from 0 to 32768 [ 300.952627][ T6530] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.116 (6530) [ 301.003246][ T6530] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 301.013816][ T6530] BTRFS info (device loop0): using sha256 (sha256-generic) checksum algorithm [ 301.025526][ T6530] BTRFS info (device loop0): using free-space-tree [ 301.128586][ T6528] loop4: detected capacity change from 0 to 4096 [ 301.422588][ T6530] FAULT_INJECTION: forcing a failure. [ 301.422588][ T6530] name failslab, interval 1, probability 0, space 0, times 0 [ 301.435818][ T6530] CPU: 1 UID: 0 PID: 6530 Comm: syz.0.116 Tainted: G W 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(undef) [ 301.435986][ T6530] Tainted: [W]=WARN [ 301.436031][ T6530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 301.436115][ T6530] Call Trace: [ 301.436166][ T6530] [ 301.436212][ T6530] __dump_stack+0x26/0x30 [ 301.436370][ T6530] dump_stack_lvl+0x1df/0x270 [ 301.436535][ T6530] dump_stack+0x1e/0x25 [ 301.436680][ T6530] should_fail_ex+0x7dc/0x8a0 [ 301.436860][ T6530] should_failslab+0x15b/0x200 [ 301.437060][ T6530] kmem_cache_alloc_noprof+0xf0/0xec0 [ 301.437205][ T6530] ? btrfs_get_or_create_delayed_node+0x12e/0xc70 [ 301.437380][ T6530] ? _raw_spin_unlock+0x30/0x50 [ 301.437529][ T6530] ? btrfs_get_delayed_node+0x67a/0x870 [ 301.437686][ T6530] ? kmsan_get_metadata+0x105/0x1b0 [ 301.437882][ T6530] btrfs_get_or_create_delayed_node+0x12e/0xc70 [ 301.438075][ T6530] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 301.438273][ T6530] btrfs_delayed_update_inode+0x5f/0x1ee0 [ 301.438447][ T6530] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 301.438628][ T6530] ? _raw_spin_unlock+0x30/0x50 [ 301.438773][ T6530] ? btrfs_update_root_times+0xec/0x140 [ 301.438929][ T6530] btrfs_update_inode+0x234/0x420 [ 301.439106][ T6530] btrfs_dirty_inode+0x1b4/0x3c0 [ 301.439261][ T6530] btrfs_update_time+0x10a/0x180 [ 301.439400][ T6530] ? __pfx_btrfs_update_time+0x10/0x10 [ 301.439537][ T6530] file_modified_flags+0x869/0xb30 [ 301.439714][ T6530] file_modified+0x30/0x40 [ 301.439839][ T6530] btrfs_fallocate+0xb14/0x4e70 [ 301.440029][ T6530] ? kmsan_get_metadata+0x105/0x1b0 [ 301.440204][ T6530] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 301.440413][ T6530] ? kmsan_get_metadata+0x105/0x1b0 [ 301.440592][ T6530] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 301.440771][ T6530] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 301.440966][ T6530] ? __pfx_btrfs_fallocate+0x10/0x10 [ 301.441122][ T6530] vfs_fallocate+0xa1b/0xb00 [ 301.441313][ T6530] __x64_sys_fallocate+0x14f/0x290 [ 301.441505][ T6530] x64_sys_call+0x366b/0x3db0 [ 301.441675][ T6530] do_syscall_64+0xd9/0x1b0 [ 301.441849][ T6530] ? irqentry_exit+0x16/0x60 [ 301.442009][ T6530] ? clear_bhb_loop+0x40/0x90 [ 301.442146][ T6530] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.442290][ T6530] RIP: 0033:0x7f770078e969 [ 301.442382][ T6530] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 301.442482][ T6530] RSP: 002b:00007f7701665038 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 301.442603][ T6530] RAX: ffffffffffffffda RBX: 00007f77009b5fa0 RCX: 00007f770078e969 [ 301.442690][ T6530] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 301.442762][ T6530] RBP: 00007f7701665090 R08: 0000000000000000 R09: 0000000000000000 [ 301.442840][ T6530] R10: 00000000001001f0 R11: 0000000000000246 R12: 0000000000000001 [ 301.442920][ T6530] R13: 0000000000000000 R14: 00007f77009b5fa0 R15: 00007ffc132642a8 [ 301.443033][ T6530] [ 302.405884][ T5801] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 302.427687][ T6524] ntfs3(loop4): failed to convert "0080" to cp857 [ 302.722834][ T6558] loop1: detected capacity change from 0 to 512 [ 302.757122][ T5863] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 302.956845][ T5863] usb 5-1: device descriptor read/64, error -71 [ 302.979801][ T6561] loop5: detected capacity change from 0 to 1024 [ 303.067652][ T6561] EXT4-fs: Ignoring removed i_version option [ 303.074057][ T6561] EXT4-fs: Ignoring removed mblk_io_submit option [ 303.081416][ T6561] EXT4-fs: Ignoring removed nobh option [ 303.087421][ T6561] EXT4-fs: Ignoring removed bh option [ 303.342426][ T6561] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 303.347568][ T5863] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 303.536939][ T5863] usb 5-1: device descriptor read/64, error -71 [ 303.657284][ T5863] usb usb5-port1: attempt power cycle [ 303.684373][ T6561] 9pnet_fd: Insufficient options for proto=fd [ 303.866291][ T6573] netlink: 12 bytes leftover after parsing attributes in process `syz.3.121'. [ 304.157602][ T5860] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 304.164959][ T6573] bond1: entered promiscuous mode [ 304.171775][ T6573] 8021q: adding VLAN 0 to HW filter on device bond1 [ 304.241378][ T6062] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 304.446191][ T5860] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 304.458799][ T5860] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.468710][ T5860] usb 1-1: Product: syz [ 304.473097][ T5860] usb 1-1: Manufacturer: syz [ 304.478017][ T5860] usb 1-1: SerialNumber: syz [ 304.818882][ T6587] syz.5.124 uses obsolete (PF_INET,SOCK_PACKET) [ 304.923551][ T6587] netlink: 48 bytes leftover after parsing attributes in process `syz.5.124'. [ 305.016351][ T6588] loop3: detected capacity change from 0 to 512 [ 305.346901][ T5863] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 306.230785][ T6576] loop0: detected capacity change from 0 to 32768 [ 306.264976][ T5863] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 306.276314][ T5863] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 306.288778][ T5863] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 306.345089][ T5863] usb 6-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 306.354638][ T5863] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.362994][ T5863] usb 6-1: Product: syz [ 306.367458][ T5863] usb 6-1: Manufacturer: syz [ 306.372270][ T5863] usb 6-1: SerialNumber: syz [ 306.409145][ T5863] usb 6-1: config 0 descriptor?? [ 306.417205][ T6589] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 306.425057][ T6589] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 306.450469][ T5863] usb 6-1: ucan: probing device on interface #0 [ 306.497676][ T6576] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 306.727562][ T11] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 306.939276][ T11] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 306.950136][ T11] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 306.970851][ T5863] usb 6-1: ucan: device reported invalid tx-fifo size [ 306.978213][ T5863] usb 6-1: ucan: probe failed; try to update the device firmware [ 307.070767][ T11] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 307.072501][ T6576] XFS (loop0): Ending clean mount [ 307.081070][ T11] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 307.094026][ T11] usb 5-1: SerialNumber: syz [ 307.101400][ T6576] XFS (loop0): Quotacheck needed: Please wait. [ 307.224248][ T6576] XFS (loop0): Quotacheck: Done. [ 307.280335][ T5860] cdc_ncm 1-1:1.0: bind() failure [ 307.298714][ T5860] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 307.305824][ T5860] cdc_ncm 1-1:1.1: bind() failure [ 307.451839][ T5860] usb 1-1: USB disconnect, device number 6 [ 307.483924][ T5801] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 307.797601][ T6596] loop4: detected capacity change from 0 to 64 [ 307.878527][ T6596] hfs: Unknown parameter 'V' [ 308.056350][ T11] usb 5-1: 0:2 : does not exist [ 308.062488][ T11] usb 5-1: unit 5: unexpected type 0x03 [ 308.241193][ T11] usb 5-1: USB disconnect, device number 12 [ 308.600677][ T6012] udevd[6012]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 309.023629][ T11] usb 6-1: USB disconnect, device number 2 [ 310.115513][ T6625] loop5: detected capacity change from 0 to 32768 [ 310.297159][ T6628] loop3: detected capacity change from 0 to 1024 [ 310.348866][ T6628] EXT4-fs: Ignoring removed i_version option [ 310.355313][ T6628] EXT4-fs: Ignoring removed mblk_io_submit option [ 310.362778][ T6628] EXT4-fs: Ignoring removed nobh option [ 310.368774][ T6628] EXT4-fs: Ignoring removed bh option [ 310.527829][ T6628] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 310.883122][ T6628] 9pnet_fd: Insufficient options for proto=fd [ 311.198991][ T6636] loop1: detected capacity change from 0 to 32768 [ 311.885257][ T6640] loop0: detected capacity change from 0 to 32768 [ 312.037635][ T6643] loop4: detected capacity change from 0 to 32768 [ 312.305578][ T6636] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): Using encoding defined by superblock: utf8-12.1.0 [ 312.351122][ T6636] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names [ 312.351122][ T6636] allowing incompatible features above 0.0: (unknown version) [ 312.382067][ T6636] bcachefs (loop1): initializing new filesystem [ 312.393195][ T6636] bcachefs (loop1): going read-write [ 312.438907][ T6640] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): Using encoding defined by superblock: utf8-12.1.0 [ 312.439320][ T6640] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): filesystem UUID already open [ 312.439712][ T6640] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutdown complete [ 312.448482][ T6636] bcachefs (loop1): marking superblocks [ 312.498267][ T6636] bcachefs (loop1): initializing freespace [ 312.508339][ T6636] bcachefs (loop1): done initializing freespace [ 312.520653][ T6636] bcachefs (loop1): reading snapshots table [ 312.520980][ T6636] bcachefs (loop1): reading snapshots done [ 312.745493][ T6636] bcachefs (loop1): done starting filesystem [ 312.891539][ T5809] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 312.915144][ T6640] bcachefs: bch2_fs_get_tree() error: EINVAL [ 315.651077][ T6678] loop3: detected capacity change from 0 to 32768 [ 315.898923][ T5815] bcachefs (loop1): shutting down [ 315.904290][ T5815] bcachefs (loop1): going read-only [ 315.910735][ T5815] bcachefs (loop1): finished waiting for writes to stop [ 315.973881][ T6678] XFS (loop3): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 316.037552][ T5815] bcachefs (loop1): flushing journal and stopping allocators, journal seq 6 [ 316.441510][ T5815] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 6 [ 316.569147][ T5815] bcachefs (loop1): clean shutdown complete, journal seq 7 [ 316.669438][ T5815] bcachefs (loop1): marking filesystem clean [ 316.850298][ T6678] XFS (loop3): Ending clean mount [ 316.879915][ T6678] XFS (loop3): Quotacheck needed: Please wait. [ 317.171598][ T6678] XFS (loop3): Quotacheck: Done. [ 317.460756][ T5815] bcachefs (loop1): shutdown complete [ 317.480003][ T6706] loop0: detected capacity change from 0 to 2048 [ 317.738532][ T6711] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 318.247601][ T5809] XFS (loop3): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 318.653040][ T6716] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.893221][ T6715] loop4: detected capacity change from 0 to 32768 [ 318.904132][ T6715] btrfs: Deprecated parameter 'usebackuproot' [ 318.910581][ T6715] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 318.937406][ T6715] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.147 (6715) [ 318.977593][ T6715] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 318.993616][ T6715] BTRFS info (device loop4): using crc32c (crc32c-x86_64) checksum algorithm [ 319.019882][ T6716] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.293558][ T6716] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.357094][ T6715] BTRFS info (device loop4): rebuilding free space tree [ 319.403583][ T6715] BTRFS info (device loop4): disabling free space tree [ 319.412017][ T6715] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 319.422114][ T6715] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 319.561521][ T6716] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.999093][ T6716] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.032994][ T6716] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.062106][ T6716] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.089484][ T6716] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.110070][ T5804] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 320.955118][ T6746] loop5: detected capacity change from 0 to 512 [ 321.011218][ T6746] EXT4-fs: Ignoring removed nomblk_io_submit option [ 321.018411][ T6746] ext4: Unknown parameter 'fowner<00000000000000000000' [ 321.046226][ T6749] loop0: detected capacity change from 0 to 1024 [ 321.071195][ T6749] EXT4-fs: Ignoring removed i_version option [ 321.077866][ T6749] EXT4-fs: Ignoring removed mblk_io_submit option [ 321.085065][ T6749] EXT4-fs: Ignoring removed nobh option [ 321.091304][ T6749] EXT4-fs: Ignoring removed bh option [ 321.155179][ T6750] xfrm0 speed is unknown, defaulting to 1000 [ 321.162683][ T6750] xfrm0 speed is unknown, defaulting to 1000 [ 321.170401][ T6750] xfrm0 speed is unknown, defaulting to 1000 [ 321.189249][ T6750] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 321.231348][ T6750] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 321.379361][ T6749] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 321.383086][ T6750] xfrm0 speed is unknown, defaulting to 1000 [ 321.400930][ T6750] xfrm0 speed is unknown, defaulting to 1000 [ 321.410087][ T6750] xfrm0 speed is unknown, defaulting to 1000 [ 321.419055][ T6750] xfrm0 speed is unknown, defaulting to 1000 [ 321.428259][ T6750] xfrm0 speed is unknown, defaulting to 1000 [ 321.554925][ T6748] input: syz1 as /devices/virtual/input/input6 [ 321.639000][ T6749] 9pnet_fd: Insufficient options for proto=fd [ 322.204741][ T5801] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.667345][ T6768] binder: 6766:6768 ioctl c018620c 200000000000 returned -1 [ 322.695692][ T6769] FAULT_INJECTION: forcing a failure. [ 322.695692][ T6769] name failslab, interval 1, probability 0, space 0, times 0 [ 322.709899][ T6769] CPU: 1 UID: 0 PID: 6769 Comm: syz.5.156 Tainted: G W 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(undef) [ 322.710058][ T6769] Tainted: [W]=WARN [ 322.710103][ T6769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 322.710180][ T6769] Call Trace: [ 322.710226][ T6769] [ 322.710271][ T6769] __dump_stack+0x26/0x30 [ 322.710429][ T6769] dump_stack_lvl+0x1df/0x270 [ 322.710606][ T6769] dump_stack+0x1e/0x25 [ 322.710753][ T6769] should_fail_ex+0x7dc/0x8a0 [ 322.710921][ T6769] should_failslab+0x15b/0x200 [ 322.711115][ T6769] __kmalloc_noprof+0x182/0x1310 [ 322.711259][ T6769] ? iovec_from_user+0xee/0x580 [ 322.711399][ T6769] ? stack_depot_save+0x12/0x20 [ 322.711536][ T6769] ? kmsan_internal_chain_origin+0xb6/0xd0 [ 322.711708][ T6769] ? kmsan_internal_chain_origin+0x5d/0xd0 [ 322.711875][ T6769] ? __msan_chain_origin+0xc3/0x140 [ 322.712039][ T6769] ? ___sys_recvmsg+0x66e/0x850 [ 322.712209][ T6769] ? __x64_sys_recvmmsg+0x383/0x500 [ 322.712381][ T6769] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.712540][ T6769] iovec_from_user+0xee/0x580 [ 322.712681][ T6769] ? kmsan_get_metadata+0x105/0x1b0 [ 322.712863][ T6769] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 322.713062][ T6769] __import_iovec+0x2a6/0xfa0 [ 322.713209][ T6769] ? should_fail_ex+0x1c0/0x8a0 [ 322.713350][ T6769] ? stack_depot_save_flags+0x35/0x7c0 [ 322.713500][ T6769] ? kmsan_get_metadata+0x105/0x1b0 [ 322.713678][ T6769] ? kmsan_get_metadata+0x105/0x1b0 [ 322.713873][ T6769] import_iovec+0xb0/0xe0 [ 322.714024][ T6769] ___sys_recvmsg+0x796/0x850 [ 322.714237][ T6769] ? kmsan_get_metadata+0x105/0x1b0 [ 322.714422][ T6769] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 322.714624][ T6769] do_recvmmsg+0x40e/0xdf0 [ 322.714790][ T6769] ? filter_irq_stacks+0x49/0x190 [ 322.714965][ T6769] ? stack_depot_save_flags+0x35/0x7c0 [ 322.715119][ T6769] ? kmsan_get_metadata+0x105/0x1b0 [ 322.715335][ T6769] __x64_sys_recvmmsg+0x383/0x500 [ 322.715540][ T6769] x64_sys_call+0x220d/0x3db0 [ 322.715713][ T6769] do_syscall_64+0xd9/0x1b0 [ 322.715888][ T6769] ? irqentry_exit+0x16/0x60 [ 322.716046][ T6769] ? clear_bhb_loop+0x40/0x90 [ 322.716188][ T6769] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.716329][ T6769] RIP: 0033:0x7fced998e969 [ 322.716426][ T6769] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 322.716536][ T6769] RSP: 002b:00007fceda8b4038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 322.716656][ T6769] RAX: ffffffffffffffda RBX: 00007fced9bb5fa0 RCX: 00007fced998e969 [ 322.716744][ T6769] RDX: 0000000000000001 RSI: 00002000000057c0 RDI: 0000000000000003 [ 322.716819][ T6769] RBP: 00007fceda8b4090 R08: 0000000000000000 R09: 0000000000000000 [ 322.716895][ T6769] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 322.716968][ T6769] R13: 0000000000000000 R14: 00007fced9bb5fa0 R15: 00007ffd030f9528 [ 322.717078][ T6769] [ 323.011289][ C1] vkms_vblank_simulate: vblank timer overrun [ 323.114693][ T6765] loop3: detected capacity change from 0 to 32768 [ 323.478623][ T6765] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): Using encoding defined by superblock: utf8-12.1.0 [ 323.526770][ T6765] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names [ 323.526770][ T6765] allowing incompatible features above 0.0: (unknown version) [ 323.557375][ T6765] bcachefs (loop3): initializing new filesystem [ 323.568360][ T6765] bcachefs (loop3): going read-write [ 323.623485][ T6765] bcachefs (loop3): marking superblocks [ 323.678888][ T6765] bcachefs (loop3): initializing freespace [ 323.694145][ T6765] bcachefs (loop3): done initializing freespace [ 323.716063][ T5863] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 323.720521][ T6765] bcachefs (loop3): reading snapshots table [ 323.730167][ T6765] bcachefs (loop3): reading snapshots done [ 323.844765][ T6765] bcachefs (loop3): done starting filesystem [ 324.040732][ T5863] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 324.052675][ T5863] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 324.156036][ T5863] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 324.165681][ T5863] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 324.177079][ T5863] usb 2-1: SerialNumber: syz [ 324.674377][ T6777] loop1: detected capacity change from 0 to 64 [ 324.888490][ T5809] bcachefs (loop3): shutting down [ 324.893875][ T5809] bcachefs (loop3): going read-only [ 324.899750][ T5809] bcachefs (loop3): finished waiting for writes to stop [ 324.950046][ T6777] hfs: Unknown parameter 'V' [ 325.087925][ T5809] bcachefs (loop3): flushing journal and stopping allocators, journal seq 4 [ 325.166950][ T5863] usb 2-1: 0:2 : does not exist [ 325.172195][ T5863] usb 2-1: unit 5: unexpected type 0x03 [ 325.324574][ T44] kernel write not supported for file /input/mice (pid: 44 comm: kworker/1:1) [ 325.335672][ T5863] usb 2-1: USB disconnect, device number 5 [ 325.419127][ T5809] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 4 [ 325.505151][ T5809] bcachefs (loop3): clean shutdown complete, journal seq 5 [ 325.593795][ T5809] bcachefs (loop3): marking filesystem clean [ 325.621900][ T5993] udevd[5993]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 325.813047][ T5809] bcachefs (loop3): shutdown complete [ 325.937027][ T6801] loop4: detected capacity change from 0 to 512 [ 326.186924][ T6801] Quota error (device loop4): do_check_range: Getting dqdh_entries 1536 out of range 0-14 [ 326.198334][ T6801] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 326.208832][ T6801] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.162: Failed to acquire dquot type 1 [ 326.313757][ T6801] EXT4-fs (loop4): 1 truncate cleaned up [ 326.321935][ T6801] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 326.335143][ T6801] ext4 filesystem being mounted at /33/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 326.717114][ T6813] loop0: detected capacity change from 0 to 1024 [ 326.758650][ T6813] EXT4-fs: Ignoring removed i_version option [ 326.765016][ T6813] EXT4-fs: Ignoring removed mblk_io_submit option [ 326.768270][ T5804] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.775842][ T6813] EXT4-fs: Ignoring removed nobh option [ 326.787592][ T6813] EXT4-fs: Ignoring removed bh option [ 326.921424][ T6813] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 328.176796][ T6824] loop4: detected capacity change from 0 to 40427 [ 328.223631][ T6824] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504) [ 328.230947][ T6824] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 328.233244][ T5801] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 328.244270][ T6824] F2FS-fs (loop4): Unrecognized mount option "grpquota=fault_injection" or missing value [ 329.420823][ T6830] loop4: detected capacity change from 0 to 32768 [ 329.509064][ T6830] XFS (loop4): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 329.747364][ T6842] netlink: 20 bytes leftover after parsing attributes in process `syz.0.171'. [ 329.827292][ T6830] XFS (loop4): Ending clean mount [ 329.832812][ T6842] netlink: 'syz.0.171': attribute type 13 has an invalid length. [ 329.842488][ T6830] XFS (loop4): Quotacheck needed: Please wait. [ 329.941388][ T6830] XFS (loop4): Quotacheck: Done. [ 330.435834][ T6842] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.445338][ T6842] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.742929][ T6842] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 330.769894][ T6842] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 330.828995][ T5804] XFS (loop4): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 330.944051][ T6842] veth1_vlan: left allmulticast mode [ 331.305475][ T6842] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.315954][ T6842] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.328570][ T6842] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.337829][ T6842] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.892895][ T6861] syzkaller0: entered promiscuous mode [ 331.899711][ T6861] syzkaller0: entered allmulticast mode [ 335.171075][ T6917] syzkaller0: entered allmulticast mode [ 336.494210][ T6942] syzkaller0: entered allmulticast mode [ 338.541609][ T6978] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 338.592850][ T6981] netlink: 4 bytes leftover after parsing attributes in process `syz.3.219'. [ 338.684619][ T6981] team0: Port device team_slave_0 removed [ 340.143659][ T7003] wlan1: mtu less than device minimum [ 340.517743][ T6998] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 341.813919][ T5818] Bluetooth: hci0: command 0x0c1a tx timeout [ 342.673272][ T7023] loop4: detected capacity change from 0 to 2048 [ 342.931812][ T7017] loop0: detected capacity change from 0 to 8192 [ 343.079048][ T7017] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 343.087093][ T7017] UDF-fs: Scanning with blocksize 512 failed [ 343.210674][ T7017] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 343.218474][ T7017] UDF-fs: Scanning with blocksize 1024 failed [ 343.225738][ T7023] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 343.234607][ T7023] UDF-fs: Scanning with blocksize 512 failed [ 343.394973][ T7030] loop3: detected capacity change from 0 to 1024 [ 343.416984][ T7017] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 343.424864][ T7017] UDF-fs: Scanning with blocksize 2048 failed [ 343.515166][ T7032] loop5: detected capacity change from 0 to 128 [ 343.737812][ T7032] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 343.806333][ T7023] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 343.834198][ T7032] ext4 filesystem being mounted at /32/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 343.882114][ T7017] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 344.591641][ T6062] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 345.157628][ T7045] loop1: detected capacity change from 0 to 256 [ 345.228731][ T7045] exfat: Bad value for 'uid' [ 345.233701][ T7045] exfat: Bad value for 'uid' [ 345.275859][ T7044] loop3: detected capacity change from 0 to 512 [ 345.393861][ T7044] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 345.556224][ T7044] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 345.711094][ T7044] EXT4-fs (loop3): 1 truncate cleaned up [ 345.719098][ T7044] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 345.957097][ T30] audit: type=1800 audit(1747424405.807:6): pid=7044 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.240" name="file2" dev="loop3" ino=16 res=0 errno=0 [ 346.127059][ T7061] loop5: detected capacity change from 0 to 128 [ 346.353046][ T7061] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 346.482440][ T7061] ext4 filesystem being mounted at /34/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 346.590542][ T7061] syz.5.245 (pid 7061) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 346.629962][ T30] audit: type=1800 audit(1747424406.497:7): pid=7058 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.240" name="file2" dev="loop3" ino=16 res=0 errno=0 [ 347.439744][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 347.447920][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 349.884001][ T5809] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 349.898041][ T6062] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 350.105974][ T7087] loop4: detected capacity change from 0 to 512 [ 350.187767][ T7087] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 350.344164][ T7087] EXT4-fs (loop4): 1 truncate cleaned up [ 350.352192][ T7087] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 350.407522][ T7099] loop0: detected capacity change from 0 to 128 [ 350.503642][ T7099] FAT-fs (loop0): Directory bread(block 162) failed [ 350.512325][ T7099] FAT-fs (loop0): Directory bread(block 163) failed [ 350.519786][ T7099] FAT-fs (loop0): Directory bread(block 164) failed [ 350.526789][ T7099] FAT-fs (loop0): Directory bread(block 165) failed [ 350.533634][ T7099] FAT-fs (loop0): Directory bread(block 166) failed [ 350.540611][ T7099] FAT-fs (loop0): Directory bread(block 167) failed [ 350.547665][ T7099] FAT-fs (loop0): Directory bread(block 168) failed [ 350.554503][ T7099] FAT-fs (loop0): Directory bread(block 169) failed [ 350.587204][ T7087] EXT4-fs error (device loop4): ext4_generic_delete_entry:2670: inode #2: block 13: comm syz.4.252: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 350.667593][ T7087] EXT4-fs error (device loop4) in ext4_delete_entry:2741: Corrupt filesystem [ 350.710047][ T7087] EXT4-fs warning (device loop4): ext4_rename_delete:3728: inode #2: comm syz.4.252: Deleting old file: nlink 4, error=-117 [ 351.161848][ T7109] loop3: detected capacity change from 0 to 512 [ 351.200386][ T5804] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 351.224635][ T7109] EXT4-fs: Ignoring removed orlov option [ 351.288224][ T7109] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 351.364856][ T7111] loop1: detected capacity change from 0 to 512 [ 351.378130][ T7109] EXT4-fs (loop3): 1 truncate cleaned up [ 351.386041][ T7109] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 351.461183][ T7111] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 351.520997][ T7116] loop0: detected capacity change from 0 to 1024 [ 351.577320][ T7115] loop5: detected capacity change from 0 to 128 [ 351.909425][ T5815] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 351.968287][ T5809] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 352.187183][ T3652] hfsplus: b-tree write err: -5, ino 4 [ 352.605568][ T7131] loop0: detected capacity change from 0 to 128 [ 352.813301][ T7131] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 352.884880][ T7131] ext4 filesystem being mounted at /57/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 353.032202][ T7139] loop1: detected capacity change from 0 to 1024 [ 353.183549][ T7144] loop5: detected capacity change from 0 to 512 [ 353.264716][ T7139] hfsplus: xattr searching failed [ 353.277341][ T30] audit: type=1800 audit(1747424413.157:8): pid=7139 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.266" name="file1" dev="loop1" ino=2 res=0 errno=0 [ 353.315898][ T7139] hfsplus: xattr searching failed [ 353.331417][ T7144] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.268: bad orphan inode 15 [ 353.422845][ T7144] ext4_test_bit(bit=14, block=18) = 1 [ 353.429786][ T7144] is_bad_inode(inode)=0 [ 353.434138][ T7144] NEXT_ORPHAN(inode)=1023 [ 353.439055][ T7144] max_ino=32 [ 353.442426][ T7144] i_nlink=0 [ 353.489223][ T5801] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 353.489498][ T7144] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2962: inode #15: comm syz.5.268: corrupted xattr block 19: invalid header [ 353.565337][ T7144] EXT4-fs warning (device loop5): ext4_evict_inode:279: xattr delete (err -117) [ 353.577273][ T7144] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none. [ 353.651165][ T7144] ext4 filesystem being mounted at /38/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 354.198826][ T6062] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0009-000000000000. [ 354.682516][ T7165] loop5: detected capacity change from 0 to 512 [ 354.743399][ T7165] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 354.990430][ T7165] EXT4-fs (loop5): 1 truncate cleaned up [ 354.998409][ T7165] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 355.068594][ T11] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 355.094037][ T7165] EXT4-fs warning (device loop5): ext4_group_add:1736: No reserved GDT blocks, can't resize [ 355.264233][ T11] usb 5-1: Using ep0 maxpacket: 32 [ 355.328737][ T11] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 355.339417][ T11] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 355.350217][ T11] usb 5-1: config 0 has no interface number 0 [ 355.357200][ T11] usb 5-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice=59.84 [ 355.366618][ T11] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.457544][ T5863] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 355.464219][ T7180] loop3: detected capacity change from 0 to 512 [ 355.519148][ T11] usb 5-1: config 0 descriptor?? [ 355.521437][ T6062] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 355.572979][ T7180] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 355.601659][ T11] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 355.689813][ T5863] usb 1-1: config 8 has an invalid interface number: 104 but max is 0 [ 355.698458][ T5863] usb 1-1: config 8 has no interface number 0 [ 355.704762][ T5863] usb 1-1: config 8 interface 104 has no altsetting 0 [ 355.712056][ T5863] usb 1-1: New USB device found, idVendor=19d2, idProduct=a778, bcdDevice=96.b0 [ 355.721459][ T5863] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.793315][ T7180] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 355.797411][ T11] snd-usb-audio 5-1:0.1: probe with driver snd-usb-audio failed with error -2 [ 355.806801][ T7180] ext4 filesystem being mounted at /56/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 355.903999][ T11] usb 5-1: USB disconnect, device number 13 [ 355.983555][ T7187] loop5: detected capacity change from 0 to 256 [ 356.014409][ T7187] exfat: Deprecated parameter 'namecase' [ 356.077985][ T6012] udevd[6012]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 356.157262][ T5863] usb 1-1: string descriptor 0 read error: -71 [ 356.166301][ T5863] usb 1-1: bad CDC descriptors [ 356.192086][ T7187] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe3f33698, utbl_chksum : 0xe619d30d) [ 356.220465][ T5863] usb 1-1: USB disconnect, device number 7 [ 356.358904][ T5809] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 356.849270][ T7195] loop3: detected capacity change from 0 to 256 [ 356.865973][ T7197] loop4: detected capacity change from 0 to 256 [ 356.972256][ T7195] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 357.000290][ T7198] loop1: detected capacity change from 0 to 512 [ 357.062637][ T7198] EXT4-fs: Ignoring removed orlov option [ 357.100960][ T7198] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 357.190052][ T7195] exFAT-fs (loop3): start_clu is invalid cluster(0xffffffff) [ 357.212949][ T7198] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 357.318031][ T7198] EXT4-fs error (device loop1): ext4_iget_extra_inode:4693: inode #15: comm syz.1.282: corrupted in-inode xattr: e_value size too large [ 357.348854][ T6062] exFAT-fs (loop5): start_clu is invalid cluster(0x0) [ 357.414762][ T7198] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.282: couldn't read orphan inode 15 (err -117) [ 357.516378][ T7198] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 357.973885][ T7205] loop4: detected capacity change from 0 to 128 [ 358.155683][ T7205] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 358.231944][ T5815] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 358.247731][ T7205] ext4 filesystem being mounted at /55/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 358.677373][ T5804] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 359.177214][ T12] bridge_slave_1: left allmulticast mode [ 359.183090][ T12] bridge_slave_1: left promiscuous mode [ 359.189941][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.267424][ T12] bridge_slave_0: left allmulticast mode [ 359.273310][ T12] bridge_slave_0: left promiscuous mode [ 359.280283][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.874624][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 359.929561][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 359.979868][ T12] bond0 (unregistering): Released all slaves [ 360.001081][ T12] bond1 (unregistering): Released all slaves [ 360.486149][ T12] hsr_slave_0: left promiscuous mode [ 360.523603][ T12] hsr_slave_1: left promiscuous mode [ 360.532425][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 360.557752][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 360.880420][ T7227] loop1: detected capacity change from 0 to 256 [ 360.915233][ T7228] loop0: detected capacity change from 0 to 256 [ 360.968729][ T7228] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 360.981589][ T7228] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 361.017520][ T7227] exfat: Deprecated parameter 'namecase' [ 361.023509][ T7227] exfat: Deprecated parameter 'namecase' [ 361.139593][ T7228] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 361.162478][ T7227] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 361.198276][ T12] team0 (unregistering): Port device team_slave_1 removed [ 361.749586][ T5802] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 361.759893][ T5802] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 361.771023][ T5802] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 361.799710][ T5802] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 361.814119][ T5802] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 363.473690][ T7245] loop4: detected capacity change from 0 to 16 [ 363.517211][ T3652] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.585809][ T7245] erofs (device loop4): mounted with root inode @ nid 36. [ 363.825620][ T3652] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.871781][ T7245] erofs (device loop4): invalid de[0].nameoff 0 @ nid 89 [ 363.880229][ T5808] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 363.917217][ T5808] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 363.960939][ T5808] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 363.997574][ T5808] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 364.017460][ T5808] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 364.048272][ T5818] Bluetooth: hci2: command tx timeout [ 364.191532][ T3652] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.645836][ T3652] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.708165][ T7257] loop1: detected capacity change from 0 to 256 [ 364.742102][ T7255] loop4: detected capacity change from 0 to 512 [ 364.767499][ T7257] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 364.778548][ T7257] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 364.860168][ T7255] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 364.862701][ T7257] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 365.143709][ T7255] EXT4-fs (loop4): 1 truncate cleaned up [ 365.194671][ T7255] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 365.339060][ T3652] bridge_slave_1: left allmulticast mode [ 365.344932][ T3652] bridge_slave_1: left promiscuous mode [ 365.353945][ T3652] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.463847][ T3652] bridge_slave_0: left allmulticast mode [ 365.469836][ T3652] bridge_slave_0: left promiscuous mode [ 365.476555][ T3652] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.577863][ T30] audit: type=1800 audit(1747424425.447:9): pid=7255 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.300" name="file2" dev="loop4" ino=16 res=0 errno=0 [ 366.127632][ T5808] Bluetooth: hci3: command tx timeout [ 366.133282][ T5808] Bluetooth: hci2: command tx timeout [ 366.164805][ T5804] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 366.275396][ T9] usb 2-1: new low-speed USB device number 6 using dummy_hcd [ 366.391073][ T3652] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 366.449400][ T9] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 366.460928][ T9] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 366.472116][ T9] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 366.485275][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 366.492296][ T9] usb 2-1: New USB device found, idVendor=056a, idProduct=00bb, bcdDevice= 0.00 [ 366.503485][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.538955][ T3652] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 366.591689][ T7282] loop0: detected capacity change from 0 to 8 [ 366.607577][ T3652] bond0 (unregistering): Released all slaves [ 366.801243][ T9] usb 2-1: config 0 descriptor?? [ 366.810334][ T7275] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 366.844739][ T7233] chnl_net:caif_netlink_parms(): no params data found [ 367.517695][ T7292] loop0: detected capacity change from 0 to 512 [ 367.598009][ T7292] EXT4-fs: Ignoring removed nobh option [ 367.631177][ T44] usb 2-1: USB disconnect, device number 6 [ 367.680581][ T7246] chnl_net:caif_netlink_parms(): no params data found [ 367.752212][ T7292] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.308: invalid indirect mapped block 256 (level 2) [ 367.865369][ T3652] hsr_slave_0: left promiscuous mode [ 367.889357][ T7292] EXT4-fs (loop0): 2 truncates cleaned up [ 367.908196][ T3652] hsr_slave_1: left promiscuous mode [ 367.937721][ T7292] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 367.944929][ T7299] loop4: detected capacity change from 0 to 128 [ 367.954092][ T3652] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 367.965368][ T3652] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 367.970856][ T7299] EXT4-fs: Ignoring removed nomblk_io_submit option [ 367.993657][ T7299] EXT4-fs (loop4): Test dummy encryption mode enabled [ 368.020727][ T3652] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 368.029257][ T3652] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 368.050507][ T7299] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 368.088185][ T3652] veth1_macvtap: left promiscuous mode [ 368.093912][ T3652] veth0_macvtap: left promiscuous mode [ 368.101584][ T3652] veth1_vlan: left promiscuous mode [ 368.107254][ T3652] veth0_vlan: left promiscuous mode [ 368.128039][ T7299] ext4 filesystem being mounted at /61/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 368.172649][ T7301] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.308: bg 0: block 5: invalid block bitmap [ 368.273961][ T7301] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 76 with error 28 [ 368.286927][ T7301] EXT4-fs (loop0): This should not happen!! Data will be lost [ 368.286927][ T7301] [ 368.297535][ T7301] EXT4-fs (loop0): Total free blocks count 0 [ 368.303734][ T7301] EXT4-fs (loop0): Free/Dirty block details [ 368.310028][ T7301] EXT4-fs (loop0): free_blocks=0 [ 368.315202][ T7301] EXT4-fs (loop0): dirty_blocks=80 [ 368.320653][ T7301] EXT4-fs (loop0): Block reservation details [ 368.327051][ T7301] EXT4-fs (loop0): i_reserved_data_blocks=80 [ 368.333403][ T5808] Bluetooth: hci2: command tx timeout [ 368.339146][ T5808] Bluetooth: hci3: command tx timeout [ 368.875038][ T3652] team0 (unregistering): Port device team_slave_1 removed [ 368.895006][ T12] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 76 with max blocks 4 with error 28 [ 368.942484][ T3652] team0 (unregistering): Port device team_slave_0 removed [ 369.905362][ T7309] loop0: detected capacity change from 0 to 256 [ 370.034892][ T7309] exfat: Invalid uid '0x00000000ffffffff' [ 370.067309][ T5804] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 370.377721][ T5818] Bluetooth: hci3: command tx timeout [ 370.383347][ T5818] Bluetooth: hci2: command tx timeout [ 370.582540][ T7233] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.590163][ T7233] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.597945][ T7233] bridge_slave_0: entered allmulticast mode [ 370.607434][ T7233] bridge_slave_0: entered promiscuous mode [ 370.779315][ T7233] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.786949][ T7233] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.794503][ T7233] bridge_slave_1: entered allmulticast mode [ 370.803716][ T7233] bridge_slave_1: entered promiscuous mode [ 370.805100][ T7321] loop0: detected capacity change from 0 to 1024 [ 371.141418][ T12] hfsplus: b-tree write err: -5, ino 4 [ 371.160618][ T7233] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 371.254135][ T7233] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 371.378746][ T7327] loop4: detected capacity change from 0 to 2048 [ 371.474918][ T7327] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 371.817152][ T44] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 371.828888][ T7246] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.836650][ T7246] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.844408][ T7246] bridge_slave_0: entered allmulticast mode [ 371.853684][ T7246] bridge_slave_0: entered promiscuous mode [ 371.872747][ T7233] team0: Port device team_slave_0 added [ 371.936279][ T7246] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.948012][ T7246] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.955586][ T7246] bridge_slave_1: entered allmulticast mode [ 372.030580][ T7246] bridge_slave_1: entered promiscuous mode [ 372.042784][ T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 86, changing to 10 [ 372.047152][ T7233] team0: Port device team_slave_1 added [ 372.054583][ T44] usb 2-1: New USB device found, idVendor=056a, idProduct=0014, bcdDevice= 0.00 [ 372.069135][ T44] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.112241][ T5804] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 372.149024][ T44] usb 2-1: config 0 descriptor?? [ 372.257598][ T7340] loop0: detected capacity change from 0 to 128 [ 372.347557][ T7340] EXT4-fs (loop0): Test dummy encryption mode enabled [ 372.426167][ T7246] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 372.486281][ T5818] Bluetooth: hci3: command tx timeout [ 372.515916][ T7246] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 372.533347][ T7340] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 372.541760][ T7233] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 372.553462][ T7233] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 372.580913][ T7233] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 372.606048][ T7340] ext4 filesystem being mounted at /73/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 372.673299][ T44] wacom 0003:056A:0014.0006: unknown main item tag 0x0 [ 372.681833][ T44] wacom 0003:056A:0014.0006: unknown main item tag 0x0 [ 372.689414][ T44] wacom 0003:056A:0014.0006: unknown main item tag 0x0 [ 372.696814][ T44] wacom 0003:056A:0014.0006: unknown main item tag 0x0 [ 372.704037][ T44] wacom 0003:056A:0014.0006: unknown main item tag 0x0 [ 372.711376][ T44] wacom 0003:056A:0014.0006: unknown main item tag 0x0 [ 372.718724][ T44] wacom 0003:056A:0014.0006: unknown main item tag 0x0 [ 372.725947][ T44] wacom 0003:056A:0014.0006: unknown main item tag 0x0 [ 372.783843][ T7345] loop4: detected capacity change from 0 to 128 [ 372.812020][ T7233] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 372.819675][ T7233] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 372.846673][ T7233] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 372.987993][ T7246] team0: Port device team_slave_0 added [ 373.000751][ T7345] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 373.027389][ T7246] team0: Port device team_slave_1 added [ 373.035645][ T7340] fscrypt (loop0): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 373.041799][ T44] usb 2-1: USB disconnect, device number 7 [ 373.131602][ T7345] ext4 filesystem being mounted at /64/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 373.260909][ T7340] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 373.310729][ T7246] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 373.318595][ T7246] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 373.345200][ T7246] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 373.578142][ T7345] fscrypt: Error allocating hmac(sha512): -2 [ 373.643627][ T7246] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 373.653672][ T7246] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 373.680303][ T7246] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 373.780897][ T7233] hsr_slave_0: entered promiscuous mode [ 373.790564][ T7233] hsr_slave_1: entered promiscuous mode [ 373.799013][ T7233] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 373.806866][ T7233] Cannot create hsr debugfs directory [ 374.084298][ T5804] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 374.378709][ T7365] loop4: detected capacity change from 0 to 164 [ 374.417095][ T7365] rock: directory entry would overflow storage [ 374.423610][ T7365] rock: sig=0x4543, size=28, remaining=18 [ 374.450021][ T7246] hsr_slave_0: entered promiscuous mode [ 374.459667][ T7246] hsr_slave_1: entered promiscuous mode [ 374.468070][ T7246] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 374.475823][ T7246] Cannot create hsr debugfs directory [ 374.576584][ T7368] pimreg: entered allmulticast mode [ 374.649214][ T7368] pimreg: left allmulticast mode [ 375.212840][ T7373] loop4: detected capacity change from 0 to 256 [ 375.236643][ T7373] exfat: Deprecated parameter 'namecase' [ 375.242708][ T7373] exfat: Deprecated parameter 'namecase' [ 375.520555][ T7373] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 375.794220][ T7378] loop0: detected capacity change from 0 to 128 [ 375.845485][ T7233] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 375.900725][ T7378] udf: Unknown parameter 'mode00000000000360' [ 375.951341][ T7233] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 376.058037][ T7233] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 376.094643][ T7383] loop1: detected capacity change from 0 to 1024 [ 376.177937][ T7233] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 376.462855][ T14] hfsplus: b-tree write err: -5, ino 4 [ 376.611638][ T7246] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 376.672486][ T7246] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 376.768856][ T7246] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 376.845881][ T7246] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 377.204142][ T7395] loop4: detected capacity change from 0 to 512 [ 377.296152][ T7395] EXT4-fs: Ignoring removed nobh option [ 377.525894][ T7233] 8021q: adding VLAN 0 to HW filter on device bond0 [ 377.621608][ T7233] 8021q: adding VLAN 0 to HW filter on device team0 [ 377.638189][ T7395] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #16: comm syz.4.332: corrupted inode contents [ 377.696526][ T3597] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.704016][ T3597] bridge0: port 1(bridge_slave_0) entered forwarding state [ 377.746745][ T7395] EXT4-fs (loop4): Remounting filesystem read-only [ 377.787568][ T7395] EXT4-fs (loop4): 1 truncate cleaned up [ 377.795645][ T7395] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 377.809098][ T7395] ext4 filesystem being mounted at /68/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 377.840620][ T750] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 377.851627][ T750] Quota error (device loop4): write_blk: dquota write failed [ 377.859376][ T750] Quota error (device loop4): remove_free_dqentry: Can't write block (5) with free entries [ 377.869701][ T750] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 377.880647][ T750] Quota error (device loop4): write_blk: dquota write failed [ 377.888485][ T750] Quota error (device loop4): free_dqentry: Can't move quota data block (5) to free list [ 377.899678][ T750] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 377.910284][ T750] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 377.921155][ T750] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 377.925534][ T3597] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.938678][ T3597] bridge0: port 2(bridge_slave_1) entered forwarding state [ 378.063123][ T5804] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 378.384309][ T7246] 8021q: adding VLAN 0 to HW filter on device bond0 [ 378.635481][ T7246] 8021q: adding VLAN 0 to HW filter on device team0 [ 378.717049][ T5863] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 378.729167][ T3652] bridge0: port 1(bridge_slave_0) entered blocking state [ 378.736817][ T3652] bridge0: port 1(bridge_slave_0) entered forwarding state [ 378.881665][ T3652] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.889295][ T3652] bridge0: port 2(bridge_slave_1) entered forwarding state [ 378.946745][ T5863] usb 5-1: Using ep0 maxpacket: 32 [ 378.977226][ T5863] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 378.988668][ T5863] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 378.998994][ T5863] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 379.008588][ T5863] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.209279][ T5863] usb 5-1: config 0 descriptor?? [ 379.284502][ T5863] hub 5-1:0.0: USB hub found [ 379.480773][ T7422] kvm: emulating exchange as write [ 379.498935][ T5863] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 379.758022][ T5863] hid-generic 0003:046D:C31C.0007: item fetching failed at offset 0/1 [ 379.822183][ T5863] hid-generic 0003:046D:C31C.0007: probe with driver hid-generic failed with error -22 [ 380.092088][ T5863] usb 5-1: USB disconnect, device number 14 [ 380.231445][ T7233] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 380.681501][ T7431] loop1: detected capacity change from 0 to 2048 [ 380.792974][ T7431] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 380.887188][ T7246] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 380.981024][ T7439] loop4: detected capacity change from 0 to 16 [ 381.058257][ T7439] erofs (device loop4): mounted with root inode @ nid 36. [ 381.325411][ T7442] loop0: detected capacity change from 0 to 256 [ 381.494295][ T7442] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 381.753377][ T30] audit: type=1800 audit(1747424442.630:10): pid=7451 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.338" name="file1" dev="loop0" ino=1048639 res=0 errno=0 [ 381.915335][ T7449] loop1: detected capacity change from 0 to 1024 [ 381.995446][ T7449] EXT4-fs: Ignoring removed nomblk_io_submit option [ 382.058234][ T7453] loop4: detected capacity change from 0 to 1024 [ 382.455671][ T14] hfsplus: b-tree write err: -5, ino 4 [ 382.791649][ T7464] loop0: detected capacity change from 0 to 512 [ 382.857955][ T7449] EXT4-fs (loop1): Test dummy encryption mode enabled [ 382.858787][ T7464] EXT4-fs: quotafile must be on filesystem root [ 382.912444][ T7233] veth0_vlan: entered promiscuous mode [ 382.926745][ T7449] EXT4-fs (loop1): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 383.089402][ T7449] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 383.113658][ T7233] veth1_vlan: entered promiscuous mode [ 383.501054][ T7233] veth0_macvtap: entered promiscuous mode [ 383.641689][ T7233] veth1_macvtap: entered promiscuous mode [ 383.799639][ T7233] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 383.847311][ T7246] veth0_vlan: entered promiscuous mode [ 383.943661][ T7233] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 383.956205][ T5815] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 384.003960][ T7246] veth1_vlan: entered promiscuous mode [ 384.064690][ T7233] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.074744][ T7233] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.084509][ T7233] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.093674][ T7233] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.416176][ T7246] veth0_macvtap: entered promiscuous mode [ 384.512930][ T7246] veth1_macvtap: entered promiscuous mode [ 384.619273][ T7486] netlink: 4 bytes leftover after parsing attributes in process `syz.4.346'. [ 384.671435][ T7486] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 385.042268][ T7246] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 385.132185][ T7489] loop0: detected capacity change from 0 to 1024 [ 385.170725][ T7246] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 385.273455][ T7246] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.287528][ T7246] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.296697][ T7246] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.305659][ T7246] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.318306][ T7489] ===================================================== [ 385.325488][ T7489] BUG: KMSAN: uninit-value in hfsplus_delete_cat+0x1195/0x13d0 [ 385.333442][ T7489] hfsplus_delete_cat+0x1195/0x13d0 [ 385.339019][ T7489] hfsplus_rmdir+0x13c/0x310 [ 385.343790][ T7489] hfsplus_rename+0xf9/0x2f0 [ 385.348932][ T7489] vfs_rename+0x1e87/0x2460 [ 385.353636][ T7489] do_renameat2+0x175e/0x1d70 [ 385.358728][ T7489] __x64_sys_rename+0xd7/0x140 [ 385.363745][ T7489] x64_sys_call+0x3553/0x3db0 [ 385.368825][ T7489] do_syscall_64+0xd9/0x1b0 [ 385.373554][ T7489] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.379817][ T7489] [ 385.382245][ T7489] Uninit was stored to memory at: [ 385.387590][ T7489] hfsplus_create_cat+0x18fb/0x1910 [ 385.392969][ T7489] hfsplus_mknod+0x208/0x560 [ 385.397896][ T7489] hfsplus_mkdir+0x5a/0x80 [ 385.402490][ T7489] vfs_mkdir+0x4e7/0x850 [ 385.407155][ T7489] do_mkdirat+0x41a/0xf30 [ 385.411672][ T7489] __x64_sys_mkdirat+0xc1/0x140 [ 385.417792][ T7489] x64_sys_call+0x370b/0x3db0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 385.422678][ T7489] do_syscall_64+0xd9/0x1b0 [ 385.428371][ T7489] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.434447][ T7489] [ 385.437047][ T7489] Uninit was stored to memory at: [ 385.442302][ T7489] hfsplus_create_cat+0x18fb/0x1910 [ 385.447809][ T7489] hfsplus_fill_super+0x212e/0x2740 [ 385.453227][ T7489] get_tree_bdev_flags+0x6e3/0x920 [ 385.458671][ T7489] get_tree_bdev+0x38/0x50 [ 385.464089][ T7489] hfsplus_get_tree+0x35/0x40 [ 385.469115][ T7489] vfs_get_tree+0xb0/0x5c0 [ 385.473734][ T7489] do_new_mount+0x738/0x1610 [ 385.478648][ T7489] path_mount+0x6db/0x1e90 [ 385.483264][ T7489] __se_sys_mount+0x6eb/0x7d0 [ 385.488310][ T7489] __x64_sys_mount+0xe4/0x150 [ 385.493182][ T7489] x64_sys_call+0xfa7/0x3db0 [ 385.498179][ T7489] do_syscall_64+0xd9/0x1b0 [ 385.502890][ T7489] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.509086][ T7489] [ 385.511517][ T7489] Uninit was created at: [ 385.516017][ T7489] __alloc_frozen_pages_noprof+0x689/0xf00 [ 385.522213][ T7489] alloc_pages_mpol+0x328/0x860 [ 385.527390][ T7489] alloc_frozen_pages_noprof+0xf7/0x200 [ 385.533174][ T7489] allocate_slab+0x24d/0x1210 [ 385.538215][ T7489] ___slab_alloc+0xfec/0x3480 [ 385.543086][ T7489] kmem_cache_alloc_lru_noprof+0x922/0xed0 [ 385.549210][ T7489] hfsplus_alloc_inode+0x5a/0xd0 [ 385.554355][ T7489] alloc_inode+0x87/0x4a0 [ 385.559314][ T7489] iget_locked+0x239/0x12d0 [ 385.564028][ T7489] hfsplus_iget+0x5c/0xb80 [ 385.568821][ T7489] hfsplus_btree_open+0x132/0x1c90 [ 385.574126][ T7489] hfsplus_fill_super+0x1161/0x2740 [ 385.579683][ T7489] get_tree_bdev_flags+0x6e3/0x920 [ 385.585004][ T7489] get_tree_bdev+0x38/0x50 [ 385.589826][ T7489] hfsplus_get_tree+0x35/0x40 [ 385.594725][ T7489] vfs_get_tree+0xb0/0x5c0 [ 385.599444][ T7489] do_new_mount+0x738/0x1610 [ 385.604231][ T7489] path_mount+0x6db/0x1e90 [ 385.608969][ T7489] __se_sys_mount+0x6eb/0x7d0 [ 385.613857][ T7489] __x64_sys_mount+0xe4/0x150 [ 385.618866][ T7489] x64_sys_call+0xfa7/0x3db0 [ 385.623650][ T7489] do_syscall_64+0xd9/0x1b0 [ 385.628500][ T7489] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.634576][ T7489] [ 385.637187][ T7489] CPU: 1 UID: 0 PID: 7489 Comm: syz.0.347 Tainted: G W 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(undef) [ 385.651330][ T7489] Tainted: [W]=WARN [ 385.655248][ T7489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 385.665566][ T7489] ===================================================== [ 385.672745][ T7489] Disabling lock debugging due to kernel taint [ 385.679230][ T7489] Kernel panic - not syncing: kmsan.panic set ... [ 385.685778][ T7489] CPU: 1 UID: 0 PID: 7489 Comm: syz.0.347 Tainted: G B W 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(undef) [ 385.699520][ T7489] Tainted: [B]=BAD_PAGE, [W]=WARN [ 385.704634][ T7489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 385.714810][ T7489] Call Trace: [ 385.718187][ T7489] [ 385.721209][ T7489] __dump_stack+0x26/0x30 [ 385.725702][ T7489] dump_stack_lvl+0x53/0x270 [ 385.730457][ T7489] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 385.736469][ T7489] dump_stack+0x1e/0x25 [ 385.740800][ T7489] panic+0x4bd/0xd50 [ 385.744898][ T7489] kmsan_report+0x29d/0x2a0 [ 385.749599][ T7489] ? __msan_warning+0x96/0x120 [ 385.754530][ T7489] ? hfsplus_delete_cat+0x1195/0x13d0 [ 385.760058][ T7489] ? hfsplus_rmdir+0x13c/0x310 [ 385.764979][ T7489] ? hfsplus_rename+0xf9/0x2f0 [ 385.769891][ T7489] ? vfs_rename+0x1e87/0x2460 [ 385.774741][ T7489] ? do_renameat2+0x175e/0x1d70 [ 385.779768][ T7489] ? __x64_sys_rename+0xd7/0x140 [ 385.784883][ T7489] ? x64_sys_call+0x3553/0x3db0 [ 385.789912][ T7489] ? do_syscall_64+0xd9/0x1b0 [ 385.794796][ T7489] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.801015][ T7489] ? kmsan_get_metadata+0x105/0x1b0 [ 385.806416][ T7489] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 385.812424][ T7489] ? hfsplus_bnode_dump+0x50a/0x560 [ 385.817798][ T7489] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 385.823794][ T7489] ? kmsan_get_metadata+0x105/0x1b0 [ 385.829192][ T7489] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 385.835200][ T7489] ? hfsplus_brec_remove+0x92f/0xa60 [ 385.840676][ T7489] ? kmsan_get_metadata+0x105/0x1b0 [ 385.846090][ T7489] __msan_warning+0x96/0x120 [ 385.850888][ T7489] hfsplus_delete_cat+0x1195/0x13d0 [ 385.856257][ T7489] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 385.862275][ T7489] ? kmsan_get_metadata+0x105/0x1b0 [ 385.867698][ T7489] hfsplus_rmdir+0x13c/0x310 [ 385.872462][ T7489] hfsplus_rename+0xf9/0x2f0 [ 385.877217][ T7489] ? __pfx_hfsplus_rename+0x10/0x10 [ 385.882589][ T7489] vfs_rename+0x1e87/0x2460 [ 385.887340][ T7489] do_renameat2+0x175e/0x1d70 [ 385.892254][ T7489] __x64_sys_rename+0xd7/0x140 [ 385.897209][ T7489] x64_sys_call+0x3553/0x3db0 [ 385.902070][ T7489] do_syscall_64+0xd9/0x1b0 [ 385.906760][ T7489] ? irqentry_exit+0x16/0x60 [ 385.911514][ T7489] ? clear_bhb_loop+0x40/0x90 [ 385.916341][ T7489] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.922409][ T7489] RIP: 0033:0x7f770078e969 [ 385.926941][ T7489] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 385.946715][ T7489] RSP: 002b:00007f7701665038 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 385.955293][ T7489] RAX: ffffffffffffffda RBX: 00007f77009b5fa0 RCX: 00007f770078e969 [ 385.963410][ T7489] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000200000000300 [ 385.971507][ T7489] RBP: 00007f7700810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 385.979611][ T7489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 385.987711][ T7489] R13: 0000000000000000 R14: 00007f77009b5fa0 R15: 00007ffc132642a8 [ 385.995852][ T7489] [ 385.999296][ T7489] Kernel Offset: disabled [ 386.003721][ T7489] Rebooting in 86400 seconds..