last executing test programs: 4m9.699008703s ago: executing program 4 (id=46): syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000e80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000840)={[{@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'cp866'}}, {@fat=@errors_continue}, {@utf8no}, {@shortname_mixed}, {@shortname_win95}, {@numtail}, {@uni_xlate}, {@uni_xlateno}, {@shortname_mixed}, {@utf8}, {@uni_xlateno}, {@shortname_mixed}, {@fat=@codepage={'codepage', 0x3d, '857'}}, {@utf8}, {@utf8no}]}, 0x1, 0x2a8, &(0x7f0000000580)="$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") syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x80a053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) 4m9.405864333s ago: executing program 4 (id=49): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x55, 0x1e5, 0x0, 0x0, {0x7, r2}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x0, 0x4, {@ip4=@broadcast, 0x86dd}}}]}, 0x38}}, 0x0) 4m9.261716093s ago: executing program 4 (id=50): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f00000002c0)=ANY=[], 0x6a) 4m9.025713653s ago: executing program 4 (id=54): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x0, &(0x7f0000000480), 0xfd, 0x448, &(0x7f0000000d00)="$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") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0xe, &(0x7f0000000140)={[{@test_dummy_encryption}, {@test_dummy_encryption}, {@noauto_da_alloc}, {@minixdf}, {@errors_remount}, {@quota}]}, 0x3, 0x455, &(0x7f0000000f00)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount(0x0, &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x20, &(0x7f0000000140)='usrjquota=') 4m8.653450823s ago: executing program 4 (id=59): unshare(0x2a020400) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) pipe2(&(0x7f0000001100)={0xffffffffffffffff}, 0x0) splice(r0, 0x0, r1, &(0x7f0000000200), 0x7, 0x0) 4m8.157516473s ago: executing program 4 (id=61): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)=@newlink={0x58, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @remote}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x58}}, 0x0) 4m7.996246633s ago: executing program 32 (id=61): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)=@newlink={0x58, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @remote}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x58}}, 0x0) 3m55.395302289s ago: executing program 3 (id=196): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_GET(r0, &(0x7f0000000180)={0x0, 0xffffff53, &(0x7f0000000140)={&(0x7f0000000080)={0x14, r1, 0x1}, 0x14}}, 0x0) readv(r0, &(0x7f0000000100), 0xa) 3m55.172980709s ago: executing program 3 (id=200): mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xd) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') getdents64(r0, &(0x7f0000002f40)=""/4098, 0x1002) 3m55.035266249s ago: executing program 3 (id=203): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000280)={'veth1_to_bridge\x00', 0x400}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'veth0_to_hsr\x00', 0x200}) 3m54.574003039s ago: executing program 3 (id=209): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000440)={[{@grpid}, {@grpquota}]}, 0x8, 0x4eb, &(0x7f0000000540)="$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") mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) chdir(&(0x7f0000000380)='./file0\x00') rmdir(&(0x7f0000000040)='./bus\x00') 3m54.062056419s ago: executing program 3 (id=216): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x1f4, 0x2000000, 0x0, 0xb3550aa4ba878396}, 0x9c) 3m52.737676178s ago: executing program 3 (id=221): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback}], 0x2c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$inet(r0, &(0x7f0000000440)={&(0x7f0000000240)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000940)="18", 0xffe0}], 0x1}, 0x20008040) 3m52.503877098s ago: executing program 33 (id=221): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback}], 0x2c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$inet(r0, &(0x7f0000000440)={&(0x7f0000000240)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000940)="18", 0xffe0}], 0x1}, 0x20008040) 3m39.697432915s ago: executing program 2 (id=329): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0x1, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x197a, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000140)=0x4004, 0x4) 3m39.516871084s ago: executing program 2 (id=330): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000080)={0x3, 0x0, [{0x1}, {0xa, 0x0, 0x0, 0x5ec}, {0x7, 0x0, 0x7}]}) 3m39.341621125s ago: executing program 2 (id=334): r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000e0ff00000000000000bd0000000000000000000000e4ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f700001d0000000000000000000000000000000000000000000000000000000067ff0000000000000005"], 0x310) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) 3m39.217958974s ago: executing program 2 (id=337): syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f00000000c0)='./file0\x00', 0x2804802, &(0x7f0000000480)=ANY=[], 0x1, 0xf93, &(0x7f0000001e80)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) getdents64(r0, 0x0, 0xffffffffffffff2a) 3m38.390685964s ago: executing program 2 (id=346): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@bridge_dellink={0x34, 0x13, 0x5, 0x0, 0x0, {0x7, 0x0, 0x0, r2}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x5, 0x0, 0x1, {0xc, 0x7, 0x0, 0x1, [{0x8, 0x1}]}}]}]}, 0x34}}, 0x0) 3m32.045577162s ago: executing program 2 (id=403): mkdir(&(0x7f0000000240)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0xc) umount2(&(0x7f0000000140)='./file0\x00', 0x4) 3m31.857666842s ago: executing program 34 (id=403): mkdir(&(0x7f0000000240)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0xc) umount2(&(0x7f0000000140)='./file0\x00', 0x4) 3m20.979670969s ago: executing program 7 (id=491): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0x13) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) 3m20.747230239s ago: executing program 7 (id=492): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="000000000000000014001a80100005800c000880080001"], 0x34}}, 0x0) 3m20.697000279s ago: executing program 7 (id=493): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x22}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x18000000000002a0, 0x36, 0x0, &(0x7f0000000040)="26d63f074003008cb89e08f086dd5598ed5f851a3f263ec3c6525c940e2c56ea0f194b199db7d43d50ae9157253684b1a2875c4c4b6c", 0x0, 0x27, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 3m20.559320209s ago: executing program 7 (id=496): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000080)='./file1\x00', 0x481, &(0x7f0000000440)={[{}, {@gid}, {@type={'type', 0x3d, "69759d7b"}}, {@nodecompose}, {@part={'part', 0x3d, 0x5}}, {@nls={'nls', 0x3d, 'iso8859-9'}}]}, 0x1, 0x6f8, &(0x7f0000002440)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 3m20.193601289s ago: executing program 7 (id=499): r0 = socket$rxrpc(0x21, 0x2, 0xa) sendto$rxrpc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r1, &(0x7f00000000c0)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}}, 0x24) 3m19.641363969s ago: executing program 7 (id=501): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'dummy0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14415, 0x48041}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_VALIDATION={0x5}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}}, 0x0) 3m19.448852889s ago: executing program 35 (id=501): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'dummy0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14415, 0x48041}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_VALIDATION={0x5}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}}, 0x0) 11.633584074s ago: executing program 0 (id=2644): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2010410, &(0x7f0000000040)=ANY=[], 0x3, 0x657, &(0x7f0000000ac0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000040)=""/52, 0x34) getdents64(r0, 0xfffffffffffffffe, 0x29) 11.416904663s ago: executing program 0 (id=2645): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000580)={0x1, 0x0, [{0xa, 0x0, 0x7, 0x8, 0xfffffffa, 0xd5e6, 0x1}]}) 11.111416543s ago: executing program 0 (id=2647): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x421, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_FLAGS={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x44}}, 0x0) 10.955113023s ago: executing program 0 (id=2649): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000340)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x1a, &(0x7f0000000280)={r1, 0x0, 0x0, 0x0, 0x9dbc}, &(0x7f0000000080)=0x18) 10.818220653s ago: executing program 0 (id=2650): syz_mount_image$ext4(&(0x7f0000000440)='ext3\x00', &(0x7f0000000180)='./bus\x00', 0x0, &(0x7f0000000480), 0xfd, 0x448, &(0x7f0000000d00)="$eJzs3MtvG0UYAPBv10kLfZBQyqOlgKEgIh5Jk/LogQsIJDggIcGhSFxCklalboOaINEqgoBQe0SVuCNuIPEXcIILAk5IcATOqFKFcmngZLT2OnEd28ROUqf495O2numOPfN5d9azM3YC6FvF7J8kYk9E/BYRQ9Xs9QWK1YflpYWpv5cWppIol1//K6mUu7a0MFUrWnve7jwzkkaknyQNL1g1d/7C6clSaeZcnh+bP/Pu2Nz5C0+eOjN5cubkzNmJY8eeOjr+7DMTT29KnFlc1w5+MHvowMtvXn516vjlt3/8+tLeatzREEd7O9ZdZzGKzUKveGTdr3Jz2FuXTgZ62BA6UoiI7HANVvr/UBRi9eANxUsf97RxwJYql8vlna13L5aB/7Eket0CoDdqH/TZ/W9tu0FDj23h6vPVG6As7uV8q+4ZiDQvM9hwf7uZihFxfPGfz7MtOpqHAADozrfZ+OeJZuO/NO6qK3dbvoYyHBG3R8S+iLgjIvZHxJ0RlbJ3R8Q9HdZfbMivHf+kV7oKbJ2y8d9z+drW9eO/2ugvhgt5bm8l/sHkxKnSzJH8PRmJwZ1ZfrxNHd+9+MunrfbVj/+yLau/NhbM23FloGGCbnpyfnIjMde7+lHEwYFm8ScrKwFJRByIiINd1nHqsa8Otdr33/G3sQnrTOUvIh6tHv/FyOOvrvCtrtwl7dcnx26J0syRsdpZsdZPP198rVX9G4p/E2THf1fT838l/uGkfr12rvM6Lv5+qeU9Tbfn/47kjUq6thr7/uT8/LnxyuVp7f9PrD63ls/LV+IfOdy8/++L1Xfi3ojITuL7IuL+iHggb/uDEfFQRBxuE/8PLzz8Tvfxb60s/umOjn/nicLp779pVf86jv+vb+WpkfxxPde/SuWv5Jk2DezuXQMAAICbSxoReyJJR1fSaTo6Wv0O//7YlZZm5+YfPzH73tnp6nflh2Mwrc10DdXNh47nc8O1/ERD/mg+b/xZ4dZKfnRqtjTd6+Chz+1u0f8zfxZ63Tpgy/m9FvQv/R/6l/4P/Uv/h/6l/0P/atb/P+xBO4Abz+c/9C/9H/qX/g/9S/+HvrSR3/V3kFgul8tbXMW2SXyZ/63A7dKeLUpEui2aIbGhxB/5dWDtrl5elQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADbPvwEAAP//rdfgqg==") syz_mount_image$gfs2(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x8c9b, &(0x7f0000000400)=ANY=[@ANYBLOB="757067726164652c6c6f63636f6f6b69652c6c6f636b70726f746f3d6c6f636b5f6e6f6c6f636b2c71756f74615f7175616e74756d3d3078303030303030303030303030303030332c636f6d6d69743d3078303030303030303030303030303030352c6c6f63636f6f6b69652c6e6f626172726965722c737569646469722c61636c2c726772706c76622c646973636172642c636f6d6d69743d3078303030303030303030303030303030332c737569646469722c61636c2c71756f74613d6163636f756e742c00af6563849e43be2e4e93dfbe204b3094dfd0d780c66f53db44be8cf1e50e9cc588bf0ba698a56d49fa9af8375fae4c179cb5c980aeaebd497eb3ae745046e6893cb41a832a82f08821ca161c15c8d9767c0b9112f6479a79fee7d337d5d8fd7be7b81104bd68ddcb36a1ff908bb4704d212d9f61f0a6216516db096b6c9f9b8dfb8defe81886355999721d40791306581c269e6d9ba210e3f03d1c9a33b86c46b2daaa1d6ab9f4a3aa9fe05bfc26fcc2e2436f038a7c36852ef5254c9069f73316b1c67585493c83ad7ae552207d", @ANYRESOCT, @ANYRESHEX, @ANYRES8], 0x0, 0x12760, &(0x7f0000002bc0)="$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") lstat(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000001a80)=@loop={'/dev/loop', 0x0}, r0, &(0x7f0000000240)={0x5, 0x700, 0x0, 0x6, 0x3, 0x400000000400, 0x7, 0x8000000000000000, 0x1}) 8.796697123s ago: executing program 0 (id=2658): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0x3}]}, 0x44}}, 0x0) 3.486094341s ago: executing program 8 (id=2717): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x6c, 0x2, 0x6, 0x1, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x80ffffff}}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x2}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0xc40) 3.365999601s ago: executing program 8 (id=2720): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000180)={0x1, 0x1, 0x0, 0x0, 0x0, 0x0, "5debca561a5fbf61048955f6f876b2ff"}) r0 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r0, r0, r0}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha1-ssse3\x00'}}) 2.998992311s ago: executing program 1 (id=2725): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}, {0xf, 0xd}}, [@qdisc_kind_options=@q_blackhole={0xe}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x80000001}]}, 0x3c}}, 0x4000000) 2.856643391s ago: executing program 1 (id=2726): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0xd}, @TCA_FQ_CE_THRESHOLD={0x8}]}}]}, 0x40}}, 0x0) 2.786303851s ago: executing program 1 (id=2727): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10, &(0x7f0000000680), 0xfe, 0x244, &(0x7f0000000400)="$eJzs3T9oJFUcB/DvzO565m6RUxtB/AMiooFwdoJNbBQCEoKIoEJExEZJhJhgl1jZWGitksomiJ3RUtIEG0WwipoiNoIGC4OFFiu7k0hMVqNu3Dkynw9MZibz3vzesPN9u83sBmisq0mmk7SSTCbpJCmON7i7Wq4e7q5PbM8nvd4TPxWDdtV+5ajflSRrSR5KslUWeamdrGw+s/fLzmP3vbncuff9zacnxnqRh/b3dh8/eG/2jY9mHlz54qsfZotMp/un6zp/xZD/tYvklv+j2HWiaNc9Av6Judc+/Lqf+1uT3DPIfydlqhfvraUbtjp54N2/6vv2j1/ePs6xAuev1+v03wPXekDjlEm6KcqpJNV2WU5NVZ/hv2ldLl9eXHp18sXF5YUX6p6pgPPSTXYf/eTSx1dO5P/7VpV/4OLq5//JuY1v+9sHrbpHA4zFHdWqn//J51bvj/xD48g/NJf8Q3PJPzSX/ENzyT80l/zDBdb5+8PyD80l/9Bc8g/NdTz/AECz9C7V/QQyUJe65x8AAAAAAAAAAAAAAAAAAOC09Ynt+aNlXDU/eyfZfyRJe1j91uD3iJMbB38v/1z0m/2hqLqN5Nm7RjzBiD6o+enrm76rt/7nd9Zbf3UhWXs9ybV2+/T9Vxzef//dzWcc7zw/YoF/qTix//BT461/0m8b9daf2Uk+7c8/14bNP2VuG6yHzz/ds79i+Uyv/DriCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABib3wMAAP//+kBtTA==") mkdir(&(0x7f0000000080)='./file1\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="02000000010000000000f400040000000000000020"], 0x1c, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x0) 2.355782471s ago: executing program 8 (id=2728): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents(r0, &(0x7f0000000040)=""/44, 0x2c) getdents64(r0, &(0x7f0000002f40)=""/4098, 0x1002) 2.348516001s ago: executing program 1 (id=2729): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./file2\x00', 0x0, &(0x7f0000000100)={[{@nouser_xattr}, {@four_active_logs}, {@four_active_logs}, {@noquota}, {@fastboot}, {@fastboot}, {@prjjquota={'prjjquota', 0x3d, '-{'}}, {@jqfmt_vfsv1}, {@extent_cache}, {@fastboot}]}, 0x1, 0x54f9, &(0x7f000000ab40)="$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") creat(&(0x7f0000000000)='./bus\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x0, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, 0x0) 2.296884671s ago: executing program 8 (id=2731): syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000a80)='./file0\x00', 0x14, &(0x7f0000000040)=ANY=[], 0x5, 0xeba, &(0x7f0000002a80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) write$qrtrtun(r0, &(0x7f00000001c0)="bd92", 0x2) 1.58570131s ago: executing program 8 (id=2740): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) shutdown(r0, 0x1) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000040)="020000000d80ffff", 0x8) 1.338080071s ago: executing program 8 (id=2741): r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000022546940fa0ae803d0990102030109023600010000000009047500038cbb2a0009050a001000010000090588"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f00000005c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) connect$unix(0xffffffffffffffff, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) 731.36438ms ago: executing program 1 (id=2748): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x503, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14415, 0x48041}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}}, 0x0) 730.8183ms ago: executing program 5 (id=2749): r0 = socket(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="12000000630000000800000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1}, &(0x7f0000000140), &(0x7f0000000180)=r0}, 0x20) ppoll(&(0x7f0000000080)=[{r0}, {r1, 0x4}], 0x2, 0x0, 0x0, 0x0) 646.46662ms ago: executing program 6 (id=2750): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000080), 0x10) recvmmsg(r0, &(0x7f0000004080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x10002, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) 616.48142ms ago: executing program 5 (id=2751): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000002d00), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000031c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f00000032c0)={0x0, 0x0, &(0x7f0000003280)={&(0x7f0000003200)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x3c}}, 0x0) 578.87214ms ago: executing program 5 (id=2752): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd2c, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_OVERHEAD={0x8, 0x6, 0xea}]}}]}, 0x3c}}, 0x0) 542.157721ms ago: executing program 6 (id=2753): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413e850000000f00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xa, [@struct={0x2, 0x0, 0x0, 0x4, 0x0, 0xff}, @enum={0x8}]}, {0x0, [0x0, 0x5f, 0x30, 0x61, 0x30, 0x61, 0x61, 0x2e]}}, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) futex(&(0x7f0000000180), 0x5, 0x0, 0x0, &(0x7f0000000000), 0xaffffffa) 446.03486ms ago: executing program 5 (id=2754): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='cpuset.mem_hardwall\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f00000003c0)=0x1000, 0x12) 436.88943ms ago: executing program 6 (id=2755): syz_mount_image$tmpfs(0x0, &(0x7f0000000500)='./file0\x00', 0x10000, 0x0, 0x1, 0x0, &(0x7f0000000000)) mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) 331.39953ms ago: executing program 6 (id=2756): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000000c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000040)=[0x0]}) 299.73579ms ago: executing program 5 (id=2757): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0xfef2) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x9, &(0x7f0000000180), 0x4) 183.89659ms ago: executing program 6 (id=2758): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) sendmsg$inet6(r0, &(0x7f0000000100)={&(0x7f0000000000)={0xa, 0x4622, 0x1000000080000, @mcast2, 0x401}, 0x1c, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="24000000000000002900000002"], 0x28}, 0x0) 132.37195ms ago: executing program 5 (id=2759): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r1, r0, &(0x7f0000002080)=0x64, 0x23b) fstat(r1, &(0x7f0000001600)) 90.22676ms ago: executing program 6 (id=2760): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x24, @short={0x2, 0xffff, 0xffff}}, 0x14, &(0x7f0000000080)={0x0}}, 0x0) setsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, &(0x7f0000001780)=0x1, 0x4) recvmmsg(r0, &(0x7f0000001480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x62, 0x0) 0s ago: executing program 1 (id=2761): syz_mount_image$romfs(&(0x7f0000000140), &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="007a93b9d6cfc45636b907277d9dbc239676439a4b03adcc20dc27453a1a833c802e8650810eff9fdc8bb6e768076d890752db516f649dec5891435b1f58f186364bdaa1125ea94a5612d57018cabe3abbf321deff9ed2c8785be41507def3240220d808940ac2bb251873ea3f1bdb0d5ee04cf4ffd184dbadc5c6f95ad3a49841645535cd00151145a07f0000007792c93473b9878343b5f12ef5329eb2f14caa61dc0dd0aa6d91ebd9522a076cb40792e8541570a733ad433f6fc926cfa2890a6005fd74a822076e172f1f5ca254e5936e8c3eb5b4d966f1d6b8772fcc0f000f85bd3ed8c95c267f4cd1acd681b1"], 0x1, 0x12d, &(0x7f0000000200)="$eJzs2r9Kw1AUBvCjCEIfwamQgHXIf62DuyA4+QSG9t704o23JIK0U/EFFIfrI7i6iW4+QmafQN/AKZI2sTZ316Hfb7kfOZeTZDnTcTKVBjx3iPZm92cfm5lKu/3ocMADHtPCCRF1q1CU5YNLhvOfelHOXOOC9VqfvUSfvnAhWWj2AAAAAAAAAAAAAAAAAAAAAABYE9ZnHTojrR65kCz4Vc0n04tYSpblzROb6h0d4lodVfejlX69LyJ7vr8j9PFNVfdX6nbTaXek1Ub7fd5VOvbyydQRaZywhF2GYdT3933/IPTmvbx2R/uu/iYqyuexuU9kPy33id59c5+IOotja0fo2+t29+X/IyAgIDShPT9ouB1Zb9X8cAdKDv9wfhgTDeCffAcAAP//NHw5bA==") syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000480)='./file0/file0\x00', 0x19400d1, &(0x7f0000000240)=ANY=[], 0x1, 0x120a, &(0x7f0000002780)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r0, 0xfffffffffffffffe, 0x29) kernel console output (not intermixed with test programs): s leftover after parsing attributes in process `syz.0.1904'. [ 234.326802][T10408] loop0: detected capacity change from 0 to 64 [ 234.396619][ T6572] usb 9-1: USB disconnect, device number 11 [ 234.430229][ T6572] iowarrior 9-1:0.1: I/O-Warror #0 now disconnected [ 234.440556][ T26] audit: type=1326 audit(1732157452.176:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10410 comm="syz.1.1917" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faf31671819 code=0x0 [ 234.467737][T10411] tap0: tun_chr_ioctl cmd 1074025677 [ 234.473680][T10411] tap0: linktype set to 6 [ 234.499410][T10408] attempt to access beyond end of device [ 234.499410][T10408] loop0: rw=0, want=131604, limit=64 [ 234.526878][T10408] Buffer I/O error on dev loop0, logical block 65801, async page read [ 234.582464][T10416] Trying to free block not in datazone [ 234.636883][T10416] Trying to free block not in datazone [ 234.687607][T10394] loop6: detected capacity change from 0 to 40427 [ 234.766737][T10394] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 234.775635][T10394] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 234.831150][T10394] F2FS-fs (loop6): Found nat_bits in checkpoint [ 234.950946][T10394] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 234.968299][T10394] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 235.017446][T10428] loop8: detected capacity change from 0 to 128 [ 235.091120][T10394] F2FS-fs (loop6): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 235.130786][T10394] F2FS-fs (loop6): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 235.475453][T10436] netlink: 'syz.1.1915': attribute type 10 has an invalid length. [ 235.523183][T10436] bridge0: port 3(syz_tun) entered disabled state [ 235.558426][T10420] loop0: detected capacity change from 0 to 40427 [ 235.566801][T10436] bridge0: port 3(syz_tun) entered disabled state [ 235.587095][T10436] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 235.592887][ T9] bond0: (slave syz_tun): interface is now down [ 235.661465][ T9] bond0: now running without any active interface! [ 235.709005][T10420] F2FS-fs (loop0): invalid crc value [ 235.809204][T10420] F2FS-fs (loop0): Found nat_bits in checkpoint [ 235.904894][T10420] F2FS-fs (loop0): Cannot turn on quotas: -2 on 1 [ 235.936809][T10420] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 235.950910][T10430] loop5: detected capacity change from 0 to 32768 [ 236.063817][T10444] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 236.110141][ T4168] attempt to access beyond end of device [ 236.110141][ T4168] loop0: rw=2049, want=45104, limit=40427 [ 236.139970][T10444] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 236.240661][T10450] team0: Port device vlan3 added [ 236.319916][T10432] loop8: detected capacity change from 0 to 32768 [ 236.364518][T10452] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1922'. [ 236.383094][T10432] XFS: noikeep mount option is deprecated. [ 236.573766][T10432] XFS (loop8): Mounting V5 Filesystem [ 236.623747][T10465] loop1: detected capacity change from 0 to 2048 [ 236.682201][T10465] Alternate GPT is invalid, using primary GPT. [ 236.722337][T10465] loop1: p1 p2 p3 [ 236.879871][T10432] XFS (loop8): Ending clean mount [ 236.932872][T10432] XFS (loop8): Quotacheck needed: Please wait. [ 237.067177][ T4349] udevd[4349]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 237.097774][T10432] XFS (loop8): Quotacheck: Done. [ 237.109536][ T5174] udevd[5174]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 237.215600][ T4349] udevd[4349]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 237.235798][ T4326] udevd[4326]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 237.243450][T10482] sock: sock_timestamping_bind_phc: sock not bind to device [ 237.264136][ T5174] udevd[5174]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 237.302617][ T6089] XFS (loop8): Unmounting Filesystem [ 237.338144][ T5174] udevd[5174]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 237.351724][ T4349] udevd[4349]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 237.404373][ T4326] udevd[4326]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 237.837506][T10475] loop1: detected capacity change from 0 to 40427 [ 237.897804][T10475] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 237.910553][T10490] netlink: 108 bytes leftover after parsing attributes in process `syz.8.1934'. [ 237.911077][T10475] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 237.977900][T10475] F2FS-fs (loop1): Found nat_bits in checkpoint [ 238.195953][T10475] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 238.212283][T10475] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 238.230649][T10484] loop6: detected capacity change from 0 to 40427 [ 238.325204][T10507] loop8: detected capacity change from 0 to 64 [ 238.333154][T10475] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 238.348675][T10484] F2FS-fs (loop6): invalid crc value [ 238.365199][T10475] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 238.393988][T10484] F2FS-fs (loop6): Found nat_bits in checkpoint [ 238.465760][T10514] device gre1 entered promiscuous mode [ 238.483618][T10514] team0: Device gre1 is of different type [ 238.545787][T10484] F2FS-fs (loop6): Cannot turn on quotas: -2 on 1 [ 238.561658][T10484] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 238.783488][ T4936] attempt to access beyond end of device [ 238.783488][ T4936] loop6: rw=2049, want=45104, limit=40427 [ 239.165778][T10502] loop0: detected capacity change from 0 to 32768 [ 239.552531][T10530] loop1: detected capacity change from 0 to 64 [ 239.730587][ T4171] Trying to free block not in datazone [ 239.777681][T10521] loop8: detected capacity change from 0 to 32768 [ 239.838897][T10521] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop8 scanned by syz.8.1946 (10521) [ 239.875919][ T23] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 239.925865][T10544] loop5: detected capacity change from 0 to 512 [ 239.932245][T10521] BTRFS info (device loop8): using sha256 (sha256-avx2) checksum algorithm [ 239.932310][T10521] BTRFS info (device loop8): using free space tree [ 239.932329][T10521] BTRFS info (device loop8): has skinny extents [ 240.113380][T10544] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 240.144608][T10544] ext4 filesystem being mounted at /370/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 240.231163][T10544] EXT4-fs error (device loop5): ext4_validate_block_bitmap:429: comm syz.5.1958: bg 0: block 18: invalid block bitmap [ 240.295314][T10521] BTRFS info (device loop8): enabling ssd optimizations [ 240.312451][ T23] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 240.326784][T10544] Quota error (device loop5): write_blk: dquota write failed [ 240.332074][ T23] usb 7-1: config 0 has no interfaces? [ 240.339826][ T23] usb 7-1: New USB device found, idVendor=0458, idProduct=501b, bcdDevice= 0.00 [ 240.349232][ T23] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.359339][ T23] usb 7-1: config 0 descriptor?? [ 240.367486][T10544] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 240.422193][T10544] EXT4-fs error (device loop5): ext4_acquire_dquot:6197: comm syz.5.1958: Failed to acquire dquot type 1 [ 240.443908][T10540] loop0: detected capacity change from 0 to 32768 [ 240.522832][T10540] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.1956 (10540) [ 240.536609][T10579] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1962'. [ 240.592442][T10540] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 240.628685][T10540] BTRFS info (device loop0): setting nodatacow, compression disabled [ 240.640256][T10540] BTRFS info (device loop0): max_inline at 0 [ 240.705724][T10540] BTRFS info (device loop0): enabling disk space caching [ 240.736596][T10540] BTRFS info (device loop0): turning off barriers [ 240.760832][T10540] BTRFS info (device loop0): turning on flush-on-commit [ 240.789772][T10540] BTRFS info (device loop0): doing ref verification [ 240.810650][T10540] BTRFS info (device loop0): force clearing of disk cache [ 240.843061][T10540] BTRFS info (device loop0): enabling ssd optimizations [ 240.876102][T10540] BTRFS info (device loop0): max_inline at 4096 [ 240.885644][T10540] BTRFS info (device loop0): disk space caching is enabled [ 240.931791][T10540] BTRFS info (device loop0): has skinny extents [ 241.114554][ T23] usb 7-1: string descriptor 0 read error: -71 [ 241.151431][ T23] usb 7-1: USB disconnect, device number 12 [ 241.413868][T10540] BTRFS info (device loop0): clearing free space tree [ 241.420727][T10540] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 241.486478][T10540] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 241.761758][T10627] loop6: detected capacity change from 0 to 512 [ 241.921214][T10627] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 241.943464][T10627] ext4 filesystem being mounted at /323/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 242.018822][T10630] loop5: detected capacity change from 0 to 4096 [ 242.054750][T10627] EXT4-fs error (device loop6): ext4_validate_block_bitmap:429: comm syz.6.1974: bg 0: block 18: invalid block bitmap [ 242.133270][T10627] Quota error (device loop6): write_blk: dquota write failed [ 242.133857][T10630] ntfs3: loop5: Different NTFS' sector size (2048) and media sector size (512) [ 242.144046][T10627] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 242.189319][T10627] EXT4-fs error (device loop6): ext4_acquire_dquot:6197: comm syz.6.1974: Failed to acquire dquot type 1 [ 242.378984][T10630] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 242.405126][T10630] ntfs3: loop5: Failed to load $Extend. [ 242.580142][T10634] loop0: detected capacity change from 0 to 2048 [ 242.683476][T10644] loop1: detected capacity change from 0 to 256 [ 242.718764][T10634] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 242.822571][T10644] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 243.087897][ T4239] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 243.224704][T10642] loop6: detected capacity change from 0 to 32768 [ 243.324909][T10652] loop0: detected capacity change from 0 to 32768 [ 243.389362][ T4239] usb 9-1: Using ep0 maxpacket: 8 [ 243.427096][T10652] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.1986 (10652) [ 243.505724][T10652] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 243.535388][T10652] BTRFS info (device loop0): using free space tree [ 243.542264][ T4239] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 243.553284][T10652] BTRFS info (device loop0): has skinny extents [ 243.581831][T10663] loop6: detected capacity change from 0 to 512 [ 243.621636][T10652] BTRFS info (device loop0): enabling ssd optimizations [ 243.651343][T10663] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 243.663398][ T4239] usb 9-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 243.682048][ T4239] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 243.700665][ T4239] usb 9-1: SerialNumber: syz [ 243.711392][ T4239] usb 9-1: config 0 descriptor?? [ 243.721586][T10663] EXT4-fs (loop6): 1 truncate cleaned up [ 243.727604][T10663] EXT4-fs (loop6): mounted filesystem without journal. Opts: init_itable,journal_ioprio=0x0000000000000001,stripe=0x0000000000000000,,errors=continue. Quota mode: none. [ 243.758434][ T6580] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 244.019652][ T4239] usb 9-1: Found UVC 0.00 device (05ac:8501) [ 244.035121][ T4239] usb 9-1: No valid video chain found. [ 244.152162][ T6580] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 244.163414][ T6580] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 244.182126][ T6580] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 244.197206][ T6580] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.213817][ T6580] usb 2-1: config 0 descriptor?? [ 244.253591][ T4818] usb 9-1: USB disconnect, device number 12 [ 244.319759][T10693] loop0: detected capacity change from 0 to 1024 [ 244.349122][T10693] hfsplus: failed to load catalog file [ 244.469501][T10660] udc-core: couldn't find an available UDC or it's busy [ 244.492771][T10660] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 244.706950][T10703] loop0: detected capacity change from 0 to 164 [ 244.734888][ T6580] mcp2221 0003:04D8:00DD.000C: unknown main item tag 0x0 [ 244.746338][ T6580] mcp2221 0003:04D8:00DD.000C: unknown main item tag 0x0 [ 244.753961][ T6580] mcp2221 0003:04D8:00DD.000C: item fetching failed at offset 2/5 [ 244.765195][ T6580] mcp2221 0003:04D8:00DD.000C: can't parse reports [ 244.771847][ T6580] mcp2221: probe of 0003:04D8:00DD.000C failed with error -22 [ 244.975507][ T1323] usb 2-1: USB disconnect, device number 13 [ 245.092151][ T26] audit: type=1326 audit(1732157462.826:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10685 comm="syz.6.1993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd503084819 code=0x7fc00000 [ 245.292285][ T6580] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 245.359885][T10727] loop6: detected capacity change from 0 to 512 [ 245.509398][T10727] EXT4-fs error (device loop6): ext4_xattr_inode_iget:404: comm syz.6.2012: inode #1: comm syz.6.2012: iget: illegal inode # [ 245.543423][T10729] loop0: detected capacity change from 0 to 4096 [ 245.571462][T10727] EXT4-fs error (device loop6): ext4_xattr_inode_iget:409: comm syz.6.2012: error while reading EA inode 1 err=-117 [ 245.619705][T10727] EXT4-fs (loop6): 1 orphan inode deleted [ 245.640885][T10729] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 245.678478][T10727] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 245.693276][ T6580] usb 9-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 245.735316][ T6580] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.774403][ T6580] usb 9-1: config 0 descriptor?? [ 245.824347][ T6580] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 245.886032][ T4818] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 246.105531][T10725] loop5: detected capacity change from 0 to 40427 [ 246.193729][T10725] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 246.221942][T10725] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 246.252652][ T4818] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 246.272116][ T4818] usb 2-1: config 0 has no interfaces? [ 246.282900][ T4818] usb 2-1: New USB device found, idVendor=0458, idProduct=501b, bcdDevice= 0.00 [ 246.290579][T10725] F2FS-fs (loop5): Found nat_bits in checkpoint [ 246.302054][ T4818] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.332648][ T4818] usb 2-1: config 0 descriptor?? [ 246.399533][T10725] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 246.418667][T10725] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 246.510378][ T6580] gspca_cpia1: usb_control_msg 01, error -71 [ 246.522027][ T6580] cpia1 9-1:0.0: only firmware version 1 is supported (got: 0) [ 246.552311][ T6580] usb 9-1: USB disconnect, device number 13 [ 246.783023][T10735] loop0: detected capacity change from 0 to 32768 [ 246.833227][T10735] XFS: attr2 mount option is deprecated. [ 246.839246][T10735] XFS: ikeep mount option is deprecated. [ 246.845652][ T4818] usb 2-1: string descriptor 0 read error: -71 [ 246.859143][ T4818] usb 2-1: USB disconnect, device number 14 [ 246.865983][T10735] XFS: noikeep mount option is deprecated. [ 246.893111][ T13] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 247.032842][T10735] XFS (loop0): Mounting V5 Filesystem [ 247.201308][T10735] XFS (loop0): Ending clean mount [ 247.221771][T10735] XFS (loop0): Quotacheck needed: Please wait. [ 247.287795][T10735] XFS (loop0): Quotacheck: Done. [ 247.383576][T10735] XFS (loop0): User initiated shutdown received. [ 247.400304][T10735] XFS (loop0): Log I/O Error (0x6) detected at xfs_fs_goingdown+0xde/0x150 (fs/xfs/xfs_fsops.c:491). Shutting down filesystem. [ 247.422065][ T1323] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 247.424186][T10735] XFS (loop0): Please unmount the filesystem and rectify the problem(s) [ 247.432426][ T13] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 247.468584][ T13] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.484493][ T13] usb 7-1: Product: syz [ 247.488853][ T13] usb 7-1: Manufacturer: syz [ 247.498558][ T13] usb 7-1: SerialNumber: syz [ 247.517587][ T4168] XFS (loop0): Unmounting Filesystem [ 247.572717][ T13] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 247.682607][ T1323] usb 6-1: Using ep0 maxpacket: 32 [ 247.716450][T10765] loop8: detected capacity change from 0 to 256 [ 247.812278][ T1323] usb 6-1: config index 0 descriptor too short (expected 164, got 36) [ 247.833814][ T1323] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 247.848100][T10765] exFAT-fs (loop8): failed to load upcase table (idx : 0x00011a39, chksum : 0xa7648d78, utbl_chksum : 0xe619d30d) [ 247.867801][ T1323] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 247.878542][T10765] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 247.897281][ T1323] usb 6-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 247.906764][ T1323] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.951778][ T1323] usb 6-1: config 0 descriptor?? [ 247.973209][T10761] loop1: detected capacity change from 0 to 32768 [ 248.040636][T10768] bridge0: port 3(syz_tun) entered blocking state [ 248.047556][T10768] bridge0: port 3(syz_tun) entered disabled state [ 248.061368][T10761] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.2019 (10761) [ 248.132341][T10761] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 248.141078][T10761] BTRFS info (device loop1): using free space tree [ 248.157142][T10761] BTRFS info (device loop1): has skinny extents [ 248.212165][ T13] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 248.345014][T10761] BTRFS info (device loop1): enabling ssd optimizations [ 248.468055][ T1323] logitech 0003:046D:C29C.000D: hidraw0: USB HID v0.00 Device [HID 046d:c29c] on usb-dummy_hcd.5-1/input0 [ 248.502128][ T4808] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 248.828324][T10776] loop0: detected capacity change from 0 to 32768 [ 248.863316][ T4808] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 248.877792][ T4808] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 248.892882][ T1323] logitech 0003:046D:C29C.000D: no inputs found [ 248.905666][ T4808] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 248.934253][ T1323] usb 6-1: USB disconnect, device number 13 [ 248.941025][ T4808] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.000898][ T4818] usb 7-1: USB disconnect, device number 13 [ 249.016188][ T4808] usb 9-1: config 0 descriptor?? [ 249.021548][T10776] XFS (loop0): Mounting V5 Filesystem [ 249.068739][T10776] XFS (loop0): Ending clean mount [ 249.075720][T10776] XFS (loop0): Quotacheck needed: Please wait. [ 249.124161][T10776] XFS (loop0): Quotacheck: Done. [ 249.190177][ T4168] XFS (loop0): Unmounting Filesystem [ 249.258762][T10781] udc-core: couldn't find an available UDC or it's busy [ 249.272283][T10781] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 249.452242][ T13] usb 7-1: Service connection timeout for: 256 [ 249.459683][ T13] ath9k_htc 7-1:1.0: ath9k_htc: Unable to initialize HTC services [ 249.500767][ T13] ath9k_htc: Failed to initialize the device [ 249.510570][ T4808] mcp2221 0003:04D8:00DD.000E: unknown main item tag 0x0 [ 249.522526][ T4818] usb 7-1: ath9k_htc: USB layer deinitialized [ 249.534673][ T4808] mcp2221 0003:04D8:00DD.000E: unknown main item tag 0x0 [ 249.554707][ T4808] mcp2221 0003:04D8:00DD.000E: item fetching failed at offset 2/5 [ 249.572433][ T4808] mcp2221 0003:04D8:00DD.000E: can't parse reports [ 249.589683][ T4808] mcp2221: probe of 0003:04D8:00DD.000E failed with error -22 [ 249.730123][ T21] usb 9-1: USB disconnect, device number 14 [ 249.910515][T10810] loop5: detected capacity change from 0 to 32768 [ 249.953275][T10810] XFS: noikeep mount option is deprecated. [ 249.992208][ T4818] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 250.019428][T10810] XFS (loop5): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 250.028043][T10810] XFS (loop5): DAX unsupported by block device. Turning off DAX. [ 250.037097][T10810] XFS (loop5): Mounting V5 Filesystem [ 250.101443][T10810] XFS (loop5): Ending clean mount [ 250.229044][ T4394] XFS (loop5): Unmounting Filesystem [ 250.362229][ T4818] usb 7-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 250.380977][T10829] netlink: 'syz.8.2034': attribute type 10 has an invalid length. [ 250.392089][ T4818] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.404173][ T4818] usb 7-1: config 0 descriptor?? [ 250.445151][ T4818] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 250.458730][T10829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 250.470441][T10829] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 250.560556][T10836] loop1: detected capacity change from 0 to 128 [ 250.649347][T10840] loop8: detected capacity change from 0 to 512 [ 250.737432][T10836] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 250.757492][T10840] EXT4-fs (loop8): Ignoring removed oldalloc option [ 250.781688][T10836] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 250.809709][T10840] EXT4-fs error (device loop8): ext4_xattr_inode_iget:400: comm syz.8.2038: Parent and EA inode have the same ino 15 [ 250.930360][T10846] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2040'. [ 250.945458][T10840] EXT4-fs error (device loop8): ext4_xattr_inode_iget:400: comm syz.8.2038: Parent and EA inode have the same ino 15 [ 251.001490][T10848] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2051'. [ 251.015493][T10840] EXT4-fs (loop8): 1 orphan inode deleted [ 251.021261][T10840] EXT4-fs (loop8): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,bsdgroups,debug_want_extra_isize=0x000000000000005c,noauto_da_alloc,lazytime,oldalloc,resuid=0x000000000000ee01,,errors=continue. Quota mode: none. [ 251.047503][T10850] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 251.098073][ T4818] gspca_cpia1: usb_control_msg 01, error -71 [ 251.110634][ T4818] cpia1 7-1:0.0: only firmware version 1 is supported (got: 0) [ 251.121748][ T4818] usb 7-1: USB disconnect, device number 14 [ 251.462704][ T13] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 251.496037][T10859] loop0: detected capacity change from 0 to 4096 [ 251.578217][T10861] loop8: detected capacity change from 0 to 8192 [ 251.666662][T10861] REISERFS (device loop8): found reiserfs format "3.6" with non-standard journal [ 251.678208][T10861] REISERFS (device loop8): using ordered data mode [ 251.680622][T10859] ntfs3: loop0: failed to convert "0000" to cp949 [ 251.685011][T10861] reiserfs: using flush barriers [ 251.722663][T10861] REISERFS (device loop8): journal params: device loop8, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 251.747445][T10861] REISERFS (device loop8): checking transaction log (loop8) [ 251.756880][T10857] loop5: detected capacity change from 0 to 32768 [ 251.831670][T10866] loop6: detected capacity change from 0 to 1024 [ 251.838240][T10857] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 scanned by syz.5.2045 (10857) [ 251.872995][T10866] EXT4-fs (loop6): Ignoring removed mblk_io_submit option [ 251.962426][T10857] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 251.982307][ T13] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 252.001941][T10857] BTRFS info (device loop5): enabling auto defrag [ 252.009155][T10857] BTRFS info (device loop5): doing ref verification [ 252.026265][ T13] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.027945][T10866] EXT4-fs (loop6): mounted filesystem without journal. Opts: noblock_validity,barrier,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,noquota,nogrpid,noauto_da_alloc,mblk_io_submit,,errors=continue. Quota mode: none. [ 252.062069][T10857] BTRFS info (device loop5): use no compression [ 252.066841][ T13] usb 2-1: Product: syz [ 252.068343][T10857] BTRFS info (device loop5): force clearing of disk cache [ 252.074006][ T13] usb 2-1: Manufacturer: syz [ 252.084611][ T13] usb 2-1: SerialNumber: syz [ 252.124642][T10857] BTRFS info (device loop5): max_inline at 4096 [ 252.130946][T10857] BTRFS info (device loop5): disabling free space tree [ 252.133261][ T13] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 252.161680][T10857] BTRFS info (device loop5): has skinny extents [ 252.198404][T10876] loop0: detected capacity change from 0 to 64 [ 252.215561][T10861] REISERFS (device loop8): Using tea hash to sort names [ 252.235775][T10861] REISERFS (device loop8): Created .reiserfs_priv - reserved for xattr storage. [ 252.580419][T10857] BTRFS info (device loop5): enabling ssd optimizations [ 252.605975][T10857] BTRFS info (device loop5): clearing free space tree [ 252.644315][T10857] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 252.654794][T10857] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 252.732919][ T4808] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 252.792372][T10902] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2055'. [ 252.865582][ T21] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 253.152612][ T21] usb 1-1: Using ep0 maxpacket: 8 [ 253.309586][ T21] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 253.331137][ T21] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 253.378772][ T21] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 253.422176][ T21] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 253.446032][ T21] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 253.448149][ T5534] usb 2-1: USB disconnect, device number 15 [ 253.462287][T10913] loop6: detected capacity change from 0 to 256 [ 253.481561][ T21] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.611282][T10913] FAT-fs (loop6): Directory bread(block 64) failed [ 253.642631][T10913] FAT-fs (loop6): Directory bread(block 65) failed [ 253.649282][T10913] FAT-fs (loop6): Directory bread(block 66) failed [ 253.651020][T10915] loop5: detected capacity change from 0 to 512 [ 253.668974][T10913] FAT-fs (loop6): Directory bread(block 67) failed [ 253.676173][T10913] FAT-fs (loop6): Directory bread(block 68) failed [ 253.690454][T10913] FAT-fs (loop6): Directory bread(block 69) failed [ 253.697598][T10913] FAT-fs (loop6): Directory bread(block 70) failed [ 253.709831][T10915] EXT4-fs (loop5): Ignoring removed oldalloc option [ 253.717530][T10913] FAT-fs (loop6): Directory bread(block 71) failed [ 253.732452][T10915] EXT4-fs error (device loop5): ext4_xattr_inode_iget:400: comm syz.5.2058: Parent and EA inode have the same ino 15 [ 253.747961][T10913] FAT-fs (loop6): Directory bread(block 72) failed [ 253.755615][T10913] FAT-fs (loop6): Directory bread(block 73) failed [ 253.782310][T10915] EXT4-fs error (device loop5): ext4_xattr_inode_iget:400: comm syz.5.2058: Parent and EA inode have the same ino 15 [ 253.802841][ T21] usb 1-1: GET_CAPABILITIES returned 0 [ 253.809170][T10915] EXT4-fs (loop5): 1 orphan inode deleted [ 253.818708][ T21] usbtmc 1-1:16.0: can't read capabilities [ 253.854726][T10915] EXT4-fs (loop5): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,bsdgroups,debug_want_extra_isize=0x000000000000005c,noauto_da_alloc,lazytime,oldalloc,resuid=0x000000000000ee01,,errors=continue. Quota mode: none. [ 254.043532][T10921] nbd: socks must be embedded in a SOCK_ITEM attr [ 254.092119][ T4808] usb 2-1: Service connection timeout for: 256 [ 254.098859][T10898] usbtmc 1-1:16.0: usbtmc488_ioctl_trigger returned -71 [ 254.103137][ T21] usb 1-1: USB disconnect, device number 13 [ 254.126544][ T4808] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 254.158993][ T4808] ath9k_htc: Failed to initialize the device [ 254.183878][ T5534] usb 2-1: ath9k_htc: USB layer deinitialized [ 254.271404][T10927] loop1: detected capacity change from 0 to 2048 [ 254.368869][T10927] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 254.380293][T10933] netlink: 'syz.6.2068': attribute type 10 has an invalid length. [ 254.468099][T10933] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 254.500217][T10933] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 254.731053][T10946] loop8: detected capacity change from 0 to 128 [ 254.798925][T10945] loop1: detected capacity change from 0 to 2048 [ 254.876196][T10945] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 254.969407][T10955] loop0: detected capacity change from 0 to 512 [ 255.069191][T10955] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 255.165619][T10955] EXT4-fs (loop0): 1 truncate cleaned up [ 255.177806][T10955] EXT4-fs (loop0): mounted filesystem without journal. Opts: nogrpid,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,inode_readahead_blks=0x0000000000004000,grpquota,quota,,errors=continue. Quota mode: writeback. [ 255.209910][ T4205] attempt to access beyond end of device [ 255.209910][ T4205] loop8: rw=1, want=1041, limit=128 [ 255.267339][T10955] EXT4-fs error (device loop0): mb_free_blocks:1865: group 0, inode 15: block 33:freeing already freed block (bit 32); block bitmap corrupt. [ 255.439394][T10965] loop6: detected capacity change from 0 to 8192 [ 255.546295][ T1426] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.552837][ T1426] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.565889][T10965] REISERFS (device loop6): found reiserfs format "3.6" with non-standard journal [ 255.594126][T10965] REISERFS (device loop6): using ordered data mode [ 255.634192][T10965] reiserfs: using flush barriers [ 255.651493][T10976] netlink: 'syz.5.2087': attribute type 10 has an invalid length. [ 255.688109][T10965] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 255.690002][T10984] loop0: detected capacity change from 0 to 2048 [ 255.744015][T10976] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 255.751430][T10984] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 255.772718][T10610] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 255.798307][T10976] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 255.823023][T10965] REISERFS (device loop6): checking transaction log (loop6) [ 255.997145][T10988] loop0: detected capacity change from 0 to 2048 [ 256.022494][T10610] usb 2-1: Using ep0 maxpacket: 8 [ 256.073092][T10965] REISERFS (device loop6): Using tea hash to sort names [ 256.080479][T10965] REISERFS (device loop6): Created .reiserfs_priv - reserved for xattr storage. [ 256.109962][T10988] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 256.158105][T10610] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 256.178659][T10610] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 256.216565][T10610] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 256.269696][T10610] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 256.338997][T10610] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 256.365968][T10610] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.702779][T10610] usb 2-1: GET_CAPABILITIES returned 0 [ 256.715019][T10610] usbtmc 2-1:16.0: can't read capabilities [ 256.942693][T10971] usbtmc 2-1:16.0: usbtmc488_ioctl_trigger returned -71 [ 256.957674][ T4808] usb 2-1: USB disconnect, device number 16 [ 257.033518][T11016] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2107'. [ 257.100261][T10610] hid-generic 0005:0C45:FFF9.000F: item fetching failed at offset 0/1 [ 257.156958][T10610] hid-generic: probe of 0005:0C45:FFF9.000F failed with error -22 [ 257.173505][T11019] __sock_release: fasync list not empty! [ 257.197483][T11021] loop8: detected capacity change from 0 to 256 [ 257.386657][T11010] loop5: detected capacity change from 0 to 32768 [ 257.478770][T11030] loop8: detected capacity change from 0 to 64 [ 257.492504][T11002] loop0: detected capacity change from 0 to 40427 [ 257.508769][T11031] damon: kdamond (11031) starts [ 257.515062][T11010] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 257.569736][T11002] F2FS-fs (loop0): Invalid Fs Meta Ino: node(1) meta(0) root(3) [ 257.645364][ T26] audit: type=1804 audit(1732157475.386:73): pid=11010 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.2104" name="/newroot/402/file1/file1" dev="loop5" ino=17058 res=1 errno=0 [ 257.651764][T11002] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 257.741637][T11036] loop1: detected capacity change from 0 to 2048 [ 257.749849][T11002] F2FS-fs (loop0): invalid crc value [ 257.801841][T11002] F2FS-fs (loop0): Found nat_bits in checkpoint [ 257.839178][ T4394] ocfs2: Unmounting device (7,5) on (node local) [ 257.880521][T11036] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 258.095282][T11002] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 258.112755][T11002] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 258.373456][T11050] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2120'. [ 258.742376][T11064] loop0: detected capacity change from 0 to 512 [ 258.833986][T11064] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 258.853379][T11040] loop8: detected capacity change from 0 to 32768 [ 258.898639][T11064] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 258.934378][T11064] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.2119: invalid indirect mapped block 2683928664 (level 1) [ 259.025759][T11040] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode. [ 259.039596][T11064] EXT4-fs (loop0): Remounting filesystem read-only [ 259.090019][T11064] EXT4-fs (loop0): 1 truncate cleaned up [ 259.116785][T11064] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,dioread_nolock,errors=remount-ro,minixdf,jqfmt=vfsv0,usrjquota=.,. Quota mode: writeback. [ 259.168216][T11064] EXT4-fs (loop0): shut down requested (2) [ 259.184268][T11064] EXT4-fs (loop0): re-mounted. Opts: (null). Quota mode: writeback. [ 259.223784][T11055] loop6: detected capacity change from 0 to 32768 [ 259.358535][T11055] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 259.392188][ T6089] ocfs2: Unmounting device (7,8) on (node local) [ 259.406763][T11055] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 259.459842][T11088] loop5: detected capacity change from 0 to 128 [ 259.531138][T11088] VFS: Found a Xenix FS (block size = 512) on device loop5 [ 259.603478][T11088] sysv_count_free_blocks: free block count was -2041545935, correcting to 3 [ 259.620524][ T4936] ocfs2: Unmounting device (7,6) on (node local) [ 259.657315][T11088] sysv_count_free_inodes: unable to read inode table [ 259.711060][ T4394] sysv_free_block: trying to free block not in datazone [ 259.751010][ T4394] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 259.869146][T11098] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2138'. [ 260.010782][T11105] loop8: detected capacity change from 0 to 128 [ 260.399482][T11125] loop1: detected capacity change from 0 to 512 [ 260.417168][T11127] tap0: tun_chr_ioctl cmd 1074025677 [ 260.434576][T11127] tap0: linktype set to 825 [ 260.497717][T11133] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 260.524780][T11133] Dead loop on virtual device ip6_vti0, fix it urgently! [ 260.558037][T11125] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 260.588665][T11125] EXT4-fs (loop1): 1 truncate cleaned up [ 260.602637][T11125] EXT4-fs (loop1): mounted filesystem without journal. Opts: quota,inode_readahead_blks=0x0000000000000080,barrier=0x0000000000000003,stripe=0x0000000000000004,block_validity,debug_want_extra_isize=0x000000000000002e,,errors=continue. Quota mode: writeback. [ 260.673602][T11125] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2219: inode #15: comm syz.1.2151: corrupted in-inode xattr [ 260.698925][T11125] EXT4-fs warning (device loop1): ext4_xattr_set_entry:1751: inode #15: comm syz.1.2151: unable to update i_inline_off [ 260.736900][T11125] EXT4-fs error (device loop1): ext4_xattr_ibody_get:603: inode #15: comm syz.1.2151: corrupted in-inode xattr [ 260.755661][T11137] loop0: detected capacity change from 0 to 4096 [ 261.089024][ T4168] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22. [ 261.106404][ T4168] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 261.120160][T11162] loop6: detected capacity change from 0 to 512 [ 261.240450][T11162] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpquota,errors=continue,quota,,errors=continue. Quota mode: writeback. [ 261.317578][T11162] ext4 filesystem being mounted at /365/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 261.359522][T11177] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2175'. [ 261.792144][ T5299] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 261.852611][ T21] usb 7-1: new full-speed USB device number 15 using dummy_hcd [ 262.023341][T11205] loop8: detected capacity change from 0 to 4096 [ 262.062189][ T5299] usb 6-1: Using ep0 maxpacket: 8 [ 262.121269][T11205] ntfs: volume version 3.1. [ 262.217527][T11215] loop1: detected capacity change from 0 to 512 [ 262.229543][ T5299] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 262.240797][ T5299] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 262.262503][ T21] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 262.281250][ T5299] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 262.300560][ T21] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 262.307860][T11215] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 262.322567][ T5299] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 262.342026][ T21] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 262.358832][T11219] input: syz0 as /devices/virtual/input/input24 [ 262.360963][T11215] EXT4-fs (loop1): 1 truncate cleaned up [ 262.377487][ T5299] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 262.387496][ T21] usb 7-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 262.394937][T11215] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,errors=remount-ro,inode_readahead_blks=0x0000000000000080,stripe=0x0000000000000001,errors=remount-ro,max_batch_time=0x0000000000000004,. Quota mode: none. [ 262.432050][ T5299] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.465097][ T21] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.473612][T11215] Process accounting resumed [ 262.489624][T11215] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2219: inode #15: comm syz.1.2193: corrupted in-inode xattr [ 262.516747][ T21] usb 7-1: config 0 descriptor?? [ 262.522050][T11215] EXT4-fs (loop1): Remounting filesystem read-only [ 262.528669][T11215] EXT4-fs warning (device loop1): ext4_xattr_set_entry:1751: inode #15: comm syz.1.2193: unable to update i_inline_off [ 262.562929][T11215] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2219: inode #15: comm syz.1.2193: corrupted in-inode xattr [ 262.610008][T11215] EXT4-fs (loop1): Remounting filesystem read-only [ 262.763919][ T5299] usb 6-1: GET_CAPABILITIES returned 0 [ 262.774018][ T5299] usbtmc 6-1:16.0: can't read capabilities [ 262.972170][ T13] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 262.982919][T11182] usb 6-1: usbtmc_ioctl_clear_in_halt returned -32 [ 262.993023][ T4808] usb 6-1: USB disconnect, device number 14 [ 263.019674][ T21] ntrig 0003:1B96:000A.0010: unknown main item tag 0x0 [ 263.034502][T11234] netlink: 'syz.8.2201': attribute type 7 has an invalid length. [ 263.047421][ T21] ntrig 0003:1B96:000A.0010: unknown main item tag 0x0 [ 263.062241][ T21] ntrig 0003:1B96:000A.0010: unknown main item tag 0x0 [ 263.079546][ T21] ntrig 0003:1B96:000A.0010: unknown main item tag 0x0 [ 263.098513][ T21] ntrig 0003:1B96:000A.0010: unknown main item tag 0x0 [ 263.107154][ T21] ntrig 0003:1B96:000A.0010: hidraw0: USB HID v0.00 Device [HID 1b96:000a] on usb-dummy_hcd.6-1/input0 [ 263.232113][ T13] usb 1-1: Using ep0 maxpacket: 32 [ 263.247439][ T21] ntrig 0003:1B96:000A.0010: Firmware version: 7.15.22.15.1 (3e5f f1c1) [ 263.390864][T11249] netlink: 'syz.1.2207': attribute type 1 has an invalid length. [ 263.397536][T11251] xt_CONNSECMARK: invalid mode: 0 [ 263.399134][ T13] usb 1-1: unable to get BOS descriptor or descriptor too short [ 263.423363][T11249] netlink: 'syz.1.2207': attribute type 2 has an invalid length. [ 263.453452][ T21] usb 7-1: USB disconnect, device number 15 [ 263.467089][T11253] loop1: detected capacity change from 0 to 512 [ 263.502229][ T13] usb 1-1: config 8 has an invalid interface number: 10 but max is 0 [ 263.539671][ T13] usb 1-1: config 8 has no interface number 0 [ 263.562820][ T13] usb 1-1: config 8 interface 10 altsetting 250 bulk endpoint 0xA has invalid maxpacket 1024 [ 263.576042][T11253] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,bsddf,. Quota mode: writeback. [ 263.622187][T11253] ext4 filesystem being mounted at /496/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 263.635937][ T13] usb 1-1: config 8 interface 10 has no altsetting 0 [ 263.704561][T11253] EXT4-fs error (device loop1): ext4_get_first_dir_block:3608: inode #12: comm syz.1.2210: directory missing '.' [ 263.725364][T11253] EXT4-fs (loop1): Remounting filesystem read-only [ 263.882351][ T6578] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 263.888963][ T13] usb 1-1: string descriptor 0 read error: -22 [ 263.902227][ T13] usb 1-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=d0.01 [ 263.911279][ T13] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.962473][T11226] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 263.970089][T11255] loop8: detected capacity change from 0 to 32768 [ 264.069433][T11255] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode. [ 264.102972][T11268] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 264.102972][T11268] The task syz.6.2214 (11268) triggered the difference, watch for misbehavior. [ 264.161359][T11255] (syz.8.2209,11255,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is smaller than minimal - offset=16, inode=65, rec_len=12, name_len=0 [ 264.203043][ T13] usb 1-1: USB disconnect, device number 14 [ 264.238845][ T6089] ocfs2: Unmounting device (7,8) on (node local) [ 264.298092][ T6578] usb 6-1: config index 0 descriptor too short (expected 4114, got 18) [ 264.388440][T11263] loop1: detected capacity change from 0 to 32768 [ 264.479102][T11263] XFS (loop1): Mounting V5 Filesystem [ 264.500129][ T6578] usb 6-1: New USB device found, idVendor=066b, idProduct=20f9, bcdDevice=ff.94 [ 264.509360][ T6578] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.519527][ T6578] usb 6-1: Product: syz [ 264.524289][ T6578] usb 6-1: Manufacturer: syz [ 264.528975][ T6578] usb 6-1: SerialNumber: syz [ 264.536843][ T6578] usb 6-1: config 0 descriptor?? [ 264.577530][T11263] XFS (loop1): Ending clean mount [ 264.693861][ T4171] XFS (loop1): Unmounting Filesystem [ 265.136267][T11304] sch_fq: defrate 0 ignored. [ 265.252798][ T6578] asix 6-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 265.434293][T11318] loop0: detected capacity change from 0 to 1024 [ 265.467731][T11322] loop8: detected capacity change from 0 to 512 [ 265.482590][ T6578] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 265.513146][ T6578] asix 6-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 265.542595][ T6578] asix: probe of 6-1:0.0 failed with error -71 [ 265.579145][T11318] hfsplus: xattr searching failed [ 265.632510][ T6578] usb 6-1: USB disconnect, device number 15 [ 265.672646][T11322] EXT4-fs error (device loop8): ext4_xattr_inode_iget:404: comm syz.8.2235: inode #1: comm syz.8.2235: iget: illegal inode # [ 265.686535][T11322] EXT4-fs (loop8): Remounting filesystem read-only [ 265.693976][T11322] EXT4-fs error (device loop8): ext4_xattr_inode_iget:409: comm syz.8.2235: error while reading EA inode 1 err=-117 [ 265.707910][T11322] EXT4-fs (loop8): Remounting filesystem read-only [ 265.715552][T11322] EXT4-fs (loop8): 1 orphan inode deleted [ 265.721388][T11322] EXT4-fs (loop8): mounted filesystem without journal. Opts: barrier,block_validity,debug_want_extra_isize=0x0000000000000006,grpid,resgid=0x0000000000000000,dioread_lock,usrjquota=,errors=remount-ro,. Quota mode: none. [ 265.751620][T11322] EXT4-fs error (device loop8): __ext4_expand_extra_isize:5826: inode #15: comm syz.8.2235: bad extra_isize 6 (inode size 256) [ 265.805202][T11318] hfsplus: b-tree write err: -5, ino 3 [ 265.818433][T11322] EXT4-fs (loop8): Remounting filesystem read-only [ 266.040971][ T26] audit: type=1326 audit(1732157739.780:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11338 comm="syz.1.2243" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faf31671819 code=0x0 [ 266.392314][T11355] loop0: detected capacity change from 0 to 256 [ 266.490518][T11355] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 267.056999][T11380] loop5: detected capacity change from 0 to 256 [ 267.131381][T11384] netlink: 'syz.6.2262': attribute type 21 has an invalid length. [ 267.156835][T11341] loop8: detected capacity change from 0 to 40427 [ 267.160244][T11384] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2262'. [ 267.209120][T11380] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 267.264687][T11387] loop1: detected capacity change from 0 to 128 [ 267.302186][T11389] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 267.326702][T11341] F2FS-fs (loop8): invalid crc value [ 267.336028][T11341] F2FS-fs (loop8): Found nat_bits in checkpoint [ 267.473894][T11341] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 267.621902][ T4353] attempt to access beyond end of device [ 267.621902][ T4353] loop1: rw=1, want=1041, limit=128 [ 267.735312][ T6089] attempt to access beyond end of device [ 267.735312][ T6089] loop8: rw=2049, want=45104, limit=40427 [ 267.903223][T11408] loop6: detected capacity change from 0 to 1024 [ 267.910871][T11412] netlink: 'syz.0.2274': attribute type 3 has an invalid length. [ 268.018729][T11408] EXT4-fs (loop6): mounted filesystem without journal. Opts: errors=remount-ro,min_batch_time=0x0000000000000001,usrjquota=,. Quota mode: none. [ 268.109042][T11408] EXT4-fs error (device loop6): ext4_generic_delete_entry:2729: inode #12: block 7: comm syz.6.2273: bad entry in directory: inode out of bounds - offset=0, inode=150994957, rec_len=16, size=56 fake=0 [ 268.152070][ T13] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 268.209354][T11408] EXT4-fs (loop6): Remounting filesystem read-only [ 268.230148][T11408] EXT4-fs error (device loop6) in ext4_delete_inline_entry:1782: Corrupt filesystem [ 268.255497][T11408] EXT4-fs (loop6): Remounting filesystem read-only [ 268.280775][T11406] loop1: detected capacity change from 0 to 32768 [ 268.324155][T11418] use of bytesused == 0 is deprecated and will be removed in the future, [ 268.352662][T11418] use the actual size instead. [ 268.375205][T11422] loop0: detected capacity change from 0 to 512 [ 268.397973][T11424] netlink: 'syz.8.2278': attribute type 2 has an invalid length. [ 268.412179][ T13] usb 6-1: Using ep0 maxpacket: 16 [ 268.417645][T11424] netlink: 'syz.8.2278': attribute type 1 has an invalid length. [ 268.428324][T11424] bridge0: port 1(bridge_slave_0) entered forwarding state [ 268.478051][T11422] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.2277: inode #1: comm syz.0.2277: iget: illegal inode # [ 268.508631][T11422] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.2277: error while reading EA inode 1 err=-117 [ 268.537355][T11422] EXT4-fs (loop0): 1 orphan inode deleted [ 268.546491][T11430] ubi0: attaching mtd0 [ 268.550604][T11430] ubi0 error: ubi_attach_mtd_dev: bad VID header (655368) or data offsets (655432) [ 268.558267][T11422] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 268.577452][T11406] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 268.622873][ T26] audit: type=1804 audit(1732157742.370:75): pid=11406 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2269" name="/newroot/506/file1/file1" dev="loop1" ino=17058 res=1 errno=0 [ 268.659838][ T4171] ocfs2: Unmounting device (7,1) on (node local) [ 268.702292][ T13] usb 6-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 268.711517][ T13] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.759723][ T13] usb 6-1: Product: syz [ 268.766361][T11433] loop0: detected capacity change from 0 to 128 [ 268.770006][ T13] usb 6-1: Manufacturer: syz [ 268.778285][ T13] usb 6-1: SerialNumber: syz [ 268.779655][ T5299] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 268.820844][ T13] usb 6-1: config 0 descriptor?? [ 268.864454][ T13] visor 6-1:0.0: Sony Clie 3.5 converter detected [ 268.955556][ T4205] attempt to access beyond end of device [ 268.955556][ T4205] loop0: rw=1, want=1041, limit=128 [ 269.060322][ T26] audit: type=1326 audit(1732157742.800:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11439 comm="syz.0.2282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5272196819 code=0x7ffc0000 [ 269.102117][ T5299] usb 7-1: Using ep0 maxpacket: 32 [ 269.102248][ T13] usb 6-1: clie_3_5_startup: get config number bad return length: 0 [ 269.127678][ T13] visor: probe of 6-1:0.0 failed with error -5 [ 269.166703][ T26] audit: type=1326 audit(1732157742.800:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11439 comm="syz.0.2282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5272196819 code=0x7ffc0000 [ 269.199548][ T26] audit: type=1326 audit(1732157742.830:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11439 comm="syz.0.2282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5272196819 code=0x7ffc0000 [ 269.252353][ T5299] usb 7-1: config index 0 descriptor too short (expected 156, got 27) [ 269.252670][ T26] audit: type=1326 audit(1732157742.830:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11439 comm="syz.0.2282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5272196819 code=0x7ffc0000 [ 269.275141][ T5299] usb 7-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 269.288249][ T26] audit: type=1326 audit(1732157742.830:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11439 comm="syz.0.2282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5272196819 code=0x7ffc0000 [ 269.347814][ T5299] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 269.367297][ T4808] usb 6-1: USB disconnect, device number 16 [ 269.384049][ T5299] usb 7-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 269.420070][ T26] audit: type=1326 audit(1732157742.830:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11439 comm="syz.0.2282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=151 compat=0 ip=0x7f5272196819 code=0x7ffc0000 [ 269.432005][ T5299] usb 7-1: config 0 interface 0 has no altsetting 0 [ 269.473752][ T21] hid-generic 0005:15C2:1011.0011: item fetching failed at offset 0/1 [ 269.490059][ T21] hid-generic: probe of 0005:15C2:1011.0011 failed with error -22 [ 269.497247][ T26] audit: type=1326 audit(1732157742.860:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11439 comm="syz.0.2282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5272196819 code=0x7ffc0000 [ 269.638907][T11455] loop8: detected capacity change from 0 to 2048 [ 269.662668][ T5299] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 269.672404][ T5299] usb 7-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 269.680855][ T5299] usb 7-1: Product: syz [ 269.686491][ T5299] usb 7-1: Manufacturer: syz [ 269.691118][ T5299] usb 7-1: SerialNumber: syz [ 269.716904][ T5299] usb 7-1: config 0 descriptor?? [ 269.725990][T11455] UDF-fs: error (device loop8): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 269.745747][T11455] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 269.749817][T11438] loop1: detected capacity change from 0 to 40427 [ 269.783661][ T5299] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 269.800670][ T5299] ldusb 7-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 269.827853][T11438] F2FS-fs (loop1): Invalid Fs Meta Ino: node(1) meta(0) root(3) [ 269.837351][T11438] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 269.848535][T11438] F2FS-fs (loop1): invalid crc value [ 269.864660][T11438] F2FS-fs (loop1): Found nat_bits in checkpoint [ 270.049166][T11438] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 270.058950][ T5534] usb 7-1: USB disconnect, device number 16 [ 270.071708][T11438] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 270.072069][ C0] ldusb 7-1:0.0: usb_submit_urb failed (-19) [ 270.088845][ T5534] ldusb 7-1:0.0: LD USB Device #0 now disconnected [ 270.199000][T11469] loop5: detected capacity change from 0 to 128 [ 270.276213][T11428] ldusb: No device or device unplugged -19 [ 270.284165][T11471] loop0: detected capacity change from 0 to 512 [ 270.394692][T11468] loop8: detected capacity change from 0 to 4096 [ 270.419065][T11471] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,min_batch_time=0x0000000000000029,minixdf,,errors=continue. Quota mode: writeback. [ 270.451837][T11471] ext4 filesystem being mounted at /497/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 270.465553][T11476] loop1: detected capacity change from 0 to 256 [ 270.495689][ T4600] attempt to access beyond end of device [ 270.495689][ T4600] loop5: rw=1, want=1041, limit=128 [ 270.696136][T11480] loop1: detected capacity change from 0 to 256 [ 270.742521][T11480] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 270.769046][T11480] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 270.819763][ T6089] ntfs3: loop8: ntfs_evict_inode r=5 failed, -22. [ 270.841247][ T6089] ntfs3: loop8: Mark volume as dirty due to NTFS errors [ 270.851094][T11480] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 271.252127][ T4818] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 271.398610][T11501] loop1: detected capacity change from 0 to 512 [ 271.536428][T11501] EXT4-fs (loop1): Ignoring removed oldalloc option [ 271.568442][T11501] EXT4-fs error (device loop1): ext4_xattr_inode_iget:400: comm syz.1.2308: Parent and EA inode have the same ino 15 [ 271.588804][T11490] loop5: detected capacity change from 0 to 40427 [ 271.593272][T11501] EXT4-fs error (device loop1): ext4_xattr_inode_iget:400: comm syz.1.2308: Parent and EA inode have the same ino 15 [ 271.617082][T11501] EXT4-fs (loop1): 1 orphan inode deleted [ 271.625793][T11501] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,bsdgroups,debug_want_extra_isize=0x000000000000005c,noauto_da_alloc,lazytime,oldalloc,resuid=0x000000000000ee01,,errors=continue. Quota mode: none. [ 271.652502][T11490] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 271.664502][T11490] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 271.686485][T11490] F2FS-fs (loop5): invalid crc value [ 271.743333][T11490] F2FS-fs (loop5): Found nat_bits in checkpoint [ 271.792817][ T4818] usb 7-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 271.801899][ T4818] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.815809][ T4818] usb 7-1: Product: syz [ 271.820016][ T4818] usb 7-1: Manufacturer: syz [ 271.826833][ T4818] usb 7-1: SerialNumber: syz [ 271.841236][T11490] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 271.851506][ T4818] usb 7-1: config 0 descriptor?? [ 271.868026][T11490] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 272.037130][ T26] audit: type=1804 audit(1732157745.780:83): pid=11490 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.2305" name="/newroot/437/file0/file0" dev="loop5" ino=10 res=1 errno=0 [ 272.124298][ T6578] usb 7-1: USB disconnect, device number 17 [ 272.715085][T11517] loop5: detected capacity change from 0 to 1024 [ 272.721752][T11524] loop6: detected capacity change from 0 to 128 [ 272.869951][T11517] hfsplus: xattr searching failed [ 272.911779][T11517] hfsplus: b-tree write err: -5, ino 3 [ 272.942057][ T4818] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 273.096610][ T4600] attempt to access beyond end of device [ 273.096610][ T4600] loop6: rw=1, want=1041, limit=128 [ 273.168978][T11535] loop5: detected capacity change from 0 to 2048 [ 273.182047][ T4818] usb 9-1: Using ep0 maxpacket: 32 [ 273.221705][T11535] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 273.288001][T11541] loop6: detected capacity change from 0 to 512 [ 273.302368][ T4818] usb 9-1: config index 0 descriptor too short (expected 156, got 27) [ 273.320947][ T4818] usb 9-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 273.363464][ T4818] usb 9-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 273.388297][T11541] EXT4-fs (loop6): Ignoring removed oldalloc option [ 273.408561][ T4818] usb 9-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 273.448600][T11541] EXT4-fs error (device loop6): ext4_xattr_inode_iget:400: comm syz.6.2323: Parent and EA inode have the same ino 15 [ 273.478889][T11543] loop1: detected capacity change from 0 to 4096 [ 273.492237][ T4818] usb 9-1: config 0 interface 0 has no altsetting 0 [ 273.493112][T11541] EXT4-fs error (device loop6): ext4_xattr_inode_iget:400: comm syz.6.2323: Parent and EA inode have the same ino 15 [ 273.542885][T11541] EXT4-fs (loop6): 1 orphan inode deleted [ 273.573926][T11541] EXT4-fs (loop6): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,bsdgroups,debug_want_extra_isize=0x000000000000005c,noauto_da_alloc,lazytime,oldalloc,resuid=0x000000000000ee01,,errors=continue. Quota mode: none. [ 273.652369][ T4818] usb 9-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 273.670512][ T4818] usb 9-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 273.702260][ T4818] usb 9-1: Product: syz [ 273.706465][ T4818] usb 9-1: Manufacturer: syz [ 273.727081][ T4818] usb 9-1: SerialNumber: syz [ 273.735557][T11526] loop0: detected capacity change from 0 to 32768 [ 273.754109][ T4818] usb 9-1: config 0 descriptor?? [ 273.787301][T11548] loop5: detected capacity change from 0 to 2048 [ 273.803591][ T4818] ldusb 9-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 273.848869][ T4818] ldusb 9-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 273.889452][T11548] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 273.899867][T11555] loop1: detected capacity change from 0 to 512 [ 273.920486][T11526] XFS (loop0): Mounting V5 Filesystem [ 273.923290][ T26] audit: type=1800 audit(1732157747.670:84): pid=11548 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2329" name="bus" dev="loop5" ino=1367 res=0 errno=0 [ 274.071757][ T13] usb 9-1: USB disconnect, device number 15 [ 274.075122][T11555] EXT4-fs (loop1): 1 orphan inode deleted [ 274.083220][ T13] ldusb 9-1:0.0: LD USB Device #0 now disconnected [ 274.097934][T11555] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota,. Quota mode: writeback. [ 274.104698][T11526] XFS (loop0): Ending clean mount [ 274.136901][T11555] ext4 filesystem being mounted at /520/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 274.310064][T11526] XFS (loop0): Quotacheck needed: Please wait. [ 274.415426][T11526] XFS (loop0): Quotacheck: Done. [ 274.460069][T11572] loop1: detected capacity change from 0 to 1024 [ 274.467539][ T26] audit: type=1800 audit(1732157748.210:85): pid=11526 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2315" name="file1" dev="loop0" ino=9286 res=0 errno=0 [ 274.501738][T11572] hfsplus: xattr searching failed [ 274.562523][T11574] netlink: 'syz.6.2335': attribute type 3 has an invalid length. [ 274.582406][T11572] hfsplus: b-tree write err: -5, ino 3 [ 274.588091][T11574] netlink: 'syz.6.2335': attribute type 1 has an invalid length. [ 274.603371][T11574] netlink: 181400 bytes leftover after parsing attributes in process `syz.6.2335'. [ 274.652478][ T4168] XFS (loop0): Unmounting Filesystem [ 275.168751][T11592] IPVS: fo: SCTP 127.0.0.1:0 - no destination available [ 275.333777][ T26] audit: type=1326 audit(1732157749.080:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11598 comm="syz.8.2349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f606e6e2819 code=0x7ffc0000 [ 275.403343][ T26] audit: type=1326 audit(1732157749.130:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11598 comm="syz.8.2349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f606e6e2819 code=0x7ffc0000 [ 275.442845][ T26] audit: type=1326 audit(1732157749.130:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11598 comm="syz.8.2349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=152 compat=0 ip=0x7f606e6e2819 code=0x7ffc0000 [ 275.488052][ T26] audit: type=1326 audit(1732157749.130:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11598 comm="syz.8.2349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f606e6e2819 code=0x7ffc0000 [ 275.528529][ T26] audit: type=1326 audit(1732157749.130:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11598 comm="syz.8.2349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f606e6e2819 code=0x7ffc0000 [ 275.554363][T11610] loop1: detected capacity change from 0 to 256 [ 275.564489][T11604] loop5: detected capacity change from 0 to 4096 [ 275.589030][ T26] audit: type=1326 audit(1732157749.330:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11607 comm="syz.8.2352" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f606e6e2819 code=0x0 [ 275.656432][T11604] NILFS (loop5): invalid segment: Checksum error in segment payload [ 275.661671][T11610] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 275.674675][T11604] NILFS (loop5): trying rollback from an earlier position [ 275.717680][T11604] NILFS (loop5): recovery complete [ 275.736889][T11614] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 275.895419][T11588] loop6: detected capacity change from 0 to 40427 [ 275.903288][ T5299] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 276.028370][T11588] F2FS-fs (loop6): Found nat_bits in checkpoint [ 276.174501][T11588] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 276.298170][ T5299] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 276.322482][ T5299] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 276.342300][ T5299] usb 9-1: config 1 has no interface number 0 [ 276.348719][ T5299] usb 9-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 276.366924][ T5299] usb 9-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 276.384390][ T4936] attempt to access beyond end of device [ 276.384390][ T4936] loop6: rw=2049, want=45104, limit=40427 [ 276.536458][T11632] netlink: 'syz.0.2358': attribute type 9 has an invalid length. [ 276.572185][ T5299] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 276.581257][ T5299] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.642637][ T5299] usb 9-1: Product: syz [ 276.646854][ T5299] usb 9-1: Manufacturer: syz [ 276.651461][ T5299] usb 9-1: SerialNumber: syz [ 276.748352][T11636] loop0: detected capacity change from 0 to 128 [ 276.882709][ T13] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 277.010238][ T4353] attempt to access beyond end of device [ 277.010238][ T4353] loop0: rw=1, want=1041, limit=128 [ 277.132142][ T13] usb 2-1: Using ep0 maxpacket: 16 [ 277.252513][ T13] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 277.292140][ T13] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 277.325431][T11659] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 277.331252][ T13] usb 2-1: config 0 has no interface number 0 [ 277.498845][T11661] loop0: detected capacity change from 0 to 4096 [ 277.532351][ T13] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 277.541429][ T13] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.557973][T11644] loop6: detected capacity change from 0 to 40427 [ 277.564515][ T13] usb 2-1: Product: syz [ 277.568671][ T13] usb 2-1: Manufacturer: syz [ 277.573713][ T13] usb 2-1: SerialNumber: syz [ 277.579692][ T13] usb 2-1: config 0 descriptor?? [ 277.607803][T11661] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512) [ 277.626200][ T13] usb 2-1: Found UVC 0.00 device syz (046d:08f3) [ 277.633173][T11644] F2FS-fs (loop6): Insane cp_payload (553648128 >= 504) [ 277.640140][T11644] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 277.642300][ T5299] cdc_ncm 9-1:1.1: failed GET_NTB_PARAMETERS [ 277.656255][ T13] usb 2-1: No valid video chain found. [ 277.661655][ T5299] cdc_ncm 9-1:1.1: bind() failure [ 277.689269][T11661] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 277.710919][ T5299] usb 9-1: USB disconnect, device number 16 [ 277.720657][T11644] F2FS-fs (loop6): invalid crc value [ 277.729481][T11644] F2FS-fs (loop6): Found nat_bits in checkpoint [ 277.809231][T11644] F2FS-fs (loop6): Start checkpoint disabled! [ 277.810096][T11661] ntfs3: loop0: ino=21, "blkio.bfq.io_wait_time" mmap(write) compressed not supported [ 277.835825][ T5534] usb 2-1: USB disconnect, device number 17 [ 277.847296][T11644] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 277.857233][T11644] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 277.907742][ T4227] ntfs3: loop0: ntfs3_write_inode r=5 failed, -22. [ 277.924494][ T4168] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22. [ 277.971490][ T4600] attempt to access beyond end of device [ 277.971490][ T4600] loop6: rw=2049, want=41000, limit=40427 [ 278.247001][ T26] audit: type=1326 audit(1732157751.990:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11673 comm="syz.8.2378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f606e6e2819 code=0x7ffc0000 [ 278.332551][ T26] audit: type=1326 audit(1732157751.990:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11673 comm="syz.8.2378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f606e6e2819 code=0x7ffc0000 [ 278.438529][ T26] audit: type=1326 audit(1732157752.010:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11673 comm="syz.8.2378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f606e6e2819 code=0x7ffc0000 [ 278.529645][T11691] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2385'. [ 278.548077][ T26] audit: type=1326 audit(1732157752.020:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11673 comm="syz.8.2378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f606e6e2819 code=0x7ffc0000 [ 278.575242][T11691] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2385'. [ 278.617122][T11694] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2386'. [ 278.647965][ T26] audit: type=1326 audit(1732157752.020:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11673 comm="syz.8.2378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f606e6e2819 code=0x7ffc0000 [ 278.705114][T11701] loop6: detected capacity change from 0 to 1024 [ 278.767233][ T26] audit: type=1326 audit(1732157752.020:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11673 comm="syz.8.2378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=120 compat=0 ip=0x7f606e6e2819 code=0x7ffc0000 [ 278.865694][ T26] audit: type=1326 audit(1732157752.020:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11673 comm="syz.8.2378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f606e6e2819 code=0x7ffc0000 [ 278.871764][T11701] EXT4-fs error (device loop6): __ext4_get_inode_loc:4320: comm syz.6.2386: Invalid inode table block 0 in block_group 0 [ 278.897248][ T26] audit: type=1326 audit(1732157752.020:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11673 comm="syz.8.2378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f606e6e2819 code=0x7ffc0000 [ 279.028200][T11719] loop5: detected capacity change from 0 to 4096 [ 279.043313][T11701] EXT4-fs (loop6): get root inode failed [ 279.049086][T11701] EXT4-fs (loop6): mount failed [ 279.108930][T11719] ntfs: (device loop5): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 279.135412][T11719] ntfs: (device loop5): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 279.181540][T11719] ntfs: volume version 3.1. [ 279.208056][T11725] loop8: detected capacity change from 0 to 512 [ 279.485814][T11725] EXT4-fs (loop8): mounted filesystem without journal. Opts: grpquota,min_batch_time=0x0000000000000029,minixdf,,errors=continue. Quota mode: writeback. [ 279.531498][T11736] tap0: tun_chr_ioctl cmd 1074025677 [ 279.556424][T11725] ext4 filesystem being mounted at /327/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 279.576632][T11736] tap0: linktype set to 65534 [ 280.172215][T11739] loop1: detected capacity change from 0 to 32768 [ 280.321339][T11737] loop6: detected capacity change from 0 to 32768 [ 280.366992][T11739] XFS (loop1): Mounting V5 Filesystem [ 280.378756][T11737] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 scanned by syz.6.2403 (11737) [ 280.392631][T11767] loop8: detected capacity change from 0 to 2048 [ 280.449427][T11767] loop8: p1 < > p3 < > p4 < > [ 280.457319][T11737] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm [ 280.472582][T11767] loop8: partition table partially beyond EOD, truncated [ 280.482335][T11737] BTRFS info (device loop6): using free space tree [ 280.488905][T11737] BTRFS info (device loop6): has skinny extents [ 280.533904][T11767] loop8: p3 start 4284289 is beyond EOD, truncated [ 280.597845][T11739] XFS (loop1): Ending clean mount [ 280.621536][T11739] XFS (loop1): Quotacheck needed: Please wait. [ 280.769468][T11737] BTRFS info (device loop6): enabling ssd optimizations [ 280.894572][T11739] XFS (loop1): Quotacheck: Done. [ 280.975110][T11776] loop5: detected capacity change from 0 to 40427 [ 281.009691][T11805] loop0: detected capacity change from 0 to 1024 [ 281.024664][ T4350] udevd[4350]: inotify_add_watch(7, /dev/loop8p4, 10) failed: No such file or directory [ 281.088594][T11805] EXT4-fs (loop0): Test dummy encryption mode enabled [ 281.090409][ T4349] udevd[4349]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 281.102321][T11805] EXT4-fs (loop0): Ignoring removed orlov option [ 281.122646][T11776] F2FS-fs (loop5): Found nat_bits in checkpoint [ 281.175989][T11805] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback. [ 281.350583][T11776] F2FS-fs (loop5): Cannot turn on quotas: -2 on 2 [ 281.359408][T11776] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 281.587490][T11805] EXT4-fs (loop0): shut down requested (2) [ 281.737178][ T4171] XFS (loop1): Unmounting Filesystem [ 281.747844][ T4394] attempt to access beyond end of device [ 281.747844][ T4394] loop5: rw=2049, want=45104, limit=40427 [ 281.923101][T11819] loop6: detected capacity change from 0 to 128 [ 281.986620][T11819] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 282.073001][T11819] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 282.120196][T11811] loop8: detected capacity change from 0 to 40427 [ 282.322943][T11811] F2FS-fs (loop8): Found nat_bits in checkpoint [ 282.472904][T11811] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 282.926186][T11847] loop1: detected capacity change from 0 to 4096 [ 283.028918][T11849] loop5: detected capacity change from 0 to 4096 [ 283.074020][T11847] NILFS (loop1): invalid segment: Checksum error in segment payload [ 283.089640][T11849] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 283.115047][T11847] NILFS (loop1): trying rollback from an earlier position [ 283.167558][T11847] NILFS (loop1): recovery complete [ 283.184581][T11831] loop0: detected capacity change from 0 to 32768 [ 283.216245][T11849] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 283.267770][T11850] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 283.322142][T11831] XFS (loop0): Mounting V5 Filesystem [ 283.492572][T11831] XFS (loop0): Ending clean mount [ 283.528046][T11831] XFS (loop0): Quotacheck needed: Please wait. [ 283.715726][T11831] XFS (loop0): Quotacheck: Done. [ 283.898062][T11888] loop1: detected capacity change from 0 to 256 [ 283.912099][ T4168] XFS (loop0): Unmounting Filesystem [ 283.980399][T11884] loop5: detected capacity change from 0 to 4096 [ 284.194746][T11884] ntfs3: loop5: failed to convert "0000" to cp949 [ 284.210696][T11894] loop6: detected capacity change from 0 to 128 [ 284.307851][T11894] VFS: Found a Xenix FS (block size = 512) on device loop6 [ 284.329067][T11894] sysv_count_free_blocks: free block count was -2041545935, correcting to 3 [ 284.466697][T11894] sysv_count_free_inodes: unable to read inode table [ 284.571336][ T4936] sysv_free_block: trying to free block not in datazone [ 284.597131][ T4936] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 284.698564][T11902] loop0: detected capacity change from 0 to 2048 [ 284.742431][ T6578] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 284.748133][T11876] loop8: detected capacity change from 0 to 32768 [ 284.771370][T11904] loop6: detected capacity change from 0 to 4096 [ 284.820448][T11876] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop8 scanned by syz.8.2441 (11876) [ 284.821806][T11902] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 284.863108][T11904] NILFS (loop6): invalid segment: Checksum error in segment payload [ 284.871134][T11904] NILFS (loop6): trying rollback from an earlier position [ 284.916092][T11876] BTRFS info (device loop8): using crc32c (crc32c-intel) checksum algorithm [ 284.932872][T11904] NILFS (loop6): recovery complete [ 284.950812][T11876] BTRFS info (device loop8): setting nodatacow, compression disabled [ 284.980079][T11905] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 285.000757][T11876] BTRFS info (device loop8): max_inline at 0 [ 285.007433][T11876] BTRFS info (device loop8): enabling disk space caching [ 285.024720][T11876] BTRFS info (device loop8): setting datasum, datacow enabled [ 285.037213][T11876] BTRFS info (device loop8): turning on flush-on-commit [ 285.045097][T11876] BTRFS info (device loop8): doing ref verification [ 285.051729][T11876] BTRFS info (device loop8): force clearing of disk cache [ 285.065314][T11876] BTRFS info (device loop8): enabling ssd optimizations [ 285.077152][T11876] BTRFS info (device loop8): turning off barriers [ 285.089315][T11876] BTRFS info (device loop8): max_inline at 4096 [ 285.098292][T11876] BTRFS info (device loop8): disk space caching is enabled [ 285.110490][T11876] BTRFS info (device loop8): has skinny extents [ 285.142509][ T6578] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 285.175069][ T6578] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 285.233727][ T6578] usb 6-1: config 1 has no interface number 0 [ 285.255024][ T6578] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 285.287623][T11923] loop6: detected capacity change from 0 to 512 [ 285.294965][ T6578] usb 6-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 285.322691][T11923] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 285.368536][T11923] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -13 [ 285.379987][T11923] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.2455: invalid indirect mapped block 2683928664 (level 1) [ 285.382868][T11876] BTRFS info (device loop8): clearing free space tree [ 285.402596][T11923] EXT4-fs (loop6): Remounting filesystem read-only [ 285.406764][T11876] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 285.419955][T11876] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 285.436899][T11923] EXT4-fs (loop6): 1 truncate cleaned up [ 285.444655][T11923] EXT4-fs (loop6): mounted filesystem without journal. Opts: noblock_validity,dioread_nolock,errors=remount-ro,minixdf,jqfmt=vfsv0,usrjquota=.,. Quota mode: writeback. [ 285.502174][ T4805] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 285.517355][T11923] EXT4-fs (loop6): shut down requested (2) [ 285.542679][ T6578] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 285.561261][ T6578] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.571494][T11923] EXT4-fs (loop6): re-mounted. Opts: (null). Quota mode: writeback. [ 285.607174][ T6578] usb 6-1: Product: syz [ 285.611382][ T6578] usb 6-1: Manufacturer: syz [ 285.627492][ T6578] usb 6-1: SerialNumber: syz [ 285.752061][ T4805] usb 1-1: Using ep0 maxpacket: 8 [ 285.883725][ T4805] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 286.062273][ T4805] usb 1-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 286.081677][ T4805] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.120702][ T4805] usb 1-1: Product: syz [ 286.129379][ T4805] usb 1-1: Manufacturer: syz [ 286.147918][ T4805] usb 1-1: SerialNumber: syz [ 286.171774][ T4805] usb 1-1: config 0 descriptor?? [ 286.230613][ T4805] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 286.247130][ T4805] usb 1-1: selecting invalid altsetting 1 [ 286.314505][T11944] bridge0: port 3(syz_tun) entered disabled state [ 286.321320][T11944] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.328826][T11944] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.344084][T11939] loop1: detected capacity change from 0 to 32768 [ 286.385431][T11939] XFS: ikeep mount option is deprecated. [ 286.414758][T11939] XFS (loop1): Mounting V5 Filesystem [ 286.452160][ T4805] gspca_stk014: init reg: 0x00 [ 286.457884][ T4805] stk014: probe of 1-1:0.0 failed with error -5 [ 286.596130][T11939] XFS (loop1): Ending clean mount [ 286.610599][T11939] XFS (loop1): Quotacheck needed: Please wait. [ 286.621118][ T6578] cdc_ncm 6-1:1.1: failed GET_NTB_PARAMETERS [ 286.639303][ T6578] cdc_ncm 6-1:1.1: bind() failure [ 286.699135][ T6578] usb 6-1: USB disconnect, device number 17 [ 286.710680][T11939] XFS (loop1): Quotacheck: Done. [ 286.757293][ T5299] usb 1-1: USB disconnect, device number 15 [ 286.871113][T11939] attempt to access beyond end of device [ 286.871113][T11939] loop1: rw=4096, want=13377332172092899328, limit=32768 [ 286.910534][T11965] netdevsim netdevsim6 netdevsim1: Unsupported IPsec algorithm [ 286.929282][T11965] netdevsim netdevsim6 netdevsim1: Failed to get key data for SA table [ 286.939803][ T4171] XFS (loop1): Unmounting Filesystem [ 287.303296][T11963] loop8: detected capacity change from 0 to 40427 [ 287.426747][T11983] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2477'. [ 287.464422][T11963] F2FS-fs (loop8): invalid crc value [ 287.486113][T11963] F2FS-fs (loop8): Found nat_bits in checkpoint [ 287.527335][T11985] 8021q: adding VLAN 0 to HW filter on device bond1 [ 287.537818][T11985] bond0: (slave bond1): Enslaving as an active interface with an up link [ 287.701762][T11993] loop1: detected capacity change from 0 to 1024 [ 287.709366][T11963] F2FS-fs (loop8): Start checkpoint disabled! [ 287.743733][T11989] loop5: detected capacity change from 0 to 4096 [ 287.750355][T11963] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6 [ 287.780802][T11993] EXT4-fs (loop1): Test dummy encryption mode enabled [ 287.813859][T11993] EXT4-fs (loop1): Ignoring removed orlov option [ 287.921805][T11993] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback. [ 288.017684][ T4227] attempt to access beyond end of device [ 288.017684][ T4227] loop8: rw=2049, want=40984, limit=40427 [ 288.073704][T11993] EXT4-fs (loop1): shut down requested (2) [ 288.573762][T11978] loop0: detected capacity change from 0 to 40427 [ 288.642945][ T4805] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 288.655786][T11978] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 288.667174][T11978] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 288.704818][T11978] F2FS-fs (loop0): invalid crc value [ 288.753338][T12020] loop5: detected capacity change from 0 to 2048 [ 288.763713][T11978] F2FS-fs (loop0): Found nat_bits in checkpoint [ 288.784510][T12020] UDF-fs: bad mount option "0xffffffffffffffff" or missing value [ 288.940343][T11978] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 288.956506][T11978] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 288.980082][T12030] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2494'. [ 289.022270][ T4805] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 289.050073][ T4805] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 289.081207][ T4805] usb 2-1: config 1 has no interface number 0 [ 289.091634][ T4805] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 289.150346][ T26] kauditd_printk_skb: 13 callbacks suppressed [ 289.150362][ T26] audit: type=1804 audit(1732157762.890:101): pid=11978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2472" name="/newroot/533/file0/file0" dev="loop0" ino=10 res=1 errno=0 [ 289.172114][ T4805] usb 2-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 289.290042][T12042] loop5: detected capacity change from 0 to 256 [ 289.344380][T12042] exFAT-fs (loop5): failed to load upcase table (idx : 0x00011bf5, chksum : 0xcea91b8a, utbl_chksum : 0xe619d30d) [ 289.384869][T12042] exFAT-fs (loop5): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 289.413482][ T4805] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 289.443454][ T4805] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.456139][T12042] attempt to access beyond end of device [ 289.456139][T12042] loop5: rw=524288, want=408, limit=256 [ 289.465197][ T4805] usb 2-1: Product: syz [ 289.496325][ T4805] usb 2-1: Manufacturer: syz [ 289.500977][ T4805] usb 2-1: SerialNumber: syz [ 289.504908][T12042] attempt to access beyond end of device [ 289.504908][T12042] loop5: rw=524288, want=664, limit=256 [ 289.583539][ T26] audit: type=1800 audit(1732157763.330:102): pid=12042 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2499" name="file1" dev="loop5" ino=1048666 res=0 errno=0 [ 289.653989][T12048] loop6: detected capacity change from 0 to 4096 [ 289.693788][T12048] ntfs3: loop6: Different NTFS' sector size (4096) and media sector size (512) [ 289.750898][T12048] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 290.283536][T12051] loop5: detected capacity change from 0 to 32768 [ 290.391926][T12051] XFS (loop5): Mounting V5 Filesystem [ 290.433983][ T4805] cdc_ncm 2-1:1.1: failed GET_NTB_PARAMETERS [ 290.440866][ T4805] cdc_ncm 2-1:1.1: bind() failure [ 290.464536][ T4805] usb 2-1: USB disconnect, device number 18 [ 290.555406][T12046] loop8: detected capacity change from 0 to 65536 [ 290.559761][T12051] XFS (loop5): Ending clean mount [ 290.571844][T12051] XFS (loop5): Quotacheck needed: Please wait. [ 290.613700][T12051] XFS (loop5): Quotacheck: Done. [ 290.701919][T12046] XFS (loop8): Mounting V5 Filesystem [ 290.724289][ T4394] XFS (loop5): Unmounting Filesystem [ 290.919026][T12077] netlink: 'syz.0.2509': attribute type 1 has an invalid length. [ 290.930007][T12077] netlink: 'syz.0.2509': attribute type 2 has an invalid length. [ 291.102752][T12046] XFS (loop8): Ending clean mount [ 291.122193][T12046] XFS (loop8): Quotacheck needed: Please wait. [ 291.322667][T12046] XFS (loop8): Quotacheck: Done. [ 291.479642][ T6089] XFS (loop8): Unmounting Filesystem [ 291.836273][T12072] loop6: detected capacity change from 0 to 40427 [ 291.938238][T12072] F2FS-fs (loop6): Wrong NAT boundary, start(2560) end(462336) blocks(1024) [ 291.983609][T12072] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 292.056203][T12072] F2FS-fs (loop6): Found nat_bits in checkpoint [ 292.222994][T12079] loop1: detected capacity change from 0 to 40427 [ 292.235258][T12072] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 292.254811][T12072] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 292.307908][T12085] loop5: detected capacity change from 0 to 32768 [ 292.377153][T12079] F2FS-fs (loop1): Found nat_bits in checkpoint [ 292.390529][T12072] attempt to access beyond end of device [ 292.390529][T12072] loop6: rw=10241, want=45104, limit=40427 [ 292.429447][T12085] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.2505 (12085) [ 292.482831][T12085] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 292.530728][T12085] BTRFS info (device loop5): setting nodatacow, compression disabled [ 292.558582][T12085] BTRFS info (device loop5): max_inline at 0 [ 292.571152][ T4936] attempt to access beyond end of device [ 292.571152][ T4936] loop6: rw=2049, want=45112, limit=40427 [ 292.592548][T12085] BTRFS info (device loop5): enabling disk space caching [ 292.599634][T12085] BTRFS info (device loop5): setting datasum, datacow enabled [ 292.622432][T12085] BTRFS info (device loop5): turning on flush-on-commit [ 292.629504][T12085] BTRFS info (device loop5): doing ref verification [ 292.636278][T12079] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 292.664677][T12085] BTRFS info (device loop5): force clearing of disk cache [ 292.687406][T12095] loop8: detected capacity change from 0 to 8192 [ 292.702069][T12085] BTRFS info (device loop5): enabling ssd optimizations [ 292.712516][T12085] BTRFS info (device loop5): turning off barriers [ 292.718995][T12085] BTRFS info (device loop5): max_inline at 4096 [ 292.742365][T12085] BTRFS info (device loop5): disk space caching is enabled [ 292.749614][T12085] BTRFS info (device loop5): has skinny extents [ 292.791882][T12095] REISERFS (device loop8): found reiserfs format "3.5" with non-standard journal [ 292.857887][T12095] REISERFS (device loop8): using ordered data mode [ 292.910049][T12085] BTRFS info (device loop5): clearing free space tree [ 292.932257][T12095] reiserfs: using flush barriers [ 292.937373][T12085] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 292.952363][T12095] REISERFS (device loop8): journal params: device loop8, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 292.970300][T12085] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 292.987046][T12095] REISERFS (device loop8): checking transaction log (loop8) [ 292.999898][T12095] REISERFS (device loop8): Using tea hash to sort names [ 293.022389][T12095] REISERFS (device loop8): Created .reiserfs_priv - reserved for xattr storage. [ 293.541263][T12126] loop1: detected capacity change from 0 to 512 [ 293.557671][T12127] syz.6.2515 (12127): /proc/12125/oom_adj is deprecated, please use /proc/12125/oom_score_adj instead. [ 293.638784][T12126] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 293.736678][T12126] EXT4-fs (loop1): invalid journal inode [ 293.743388][T12126] EXT4-fs (loop1): can't get journal size [ 293.783973][T12126] EXT4-fs (loop1): 1 truncate cleaned up [ 293.789668][T12126] EXT4-fs (loop1): mounted filesystem without journal. Opts: norecovery,,errors=continue. Quota mode: none. [ 294.050788][T12144] IPVS: ovf: FWM 4 0x00000004 - no destination available [ 294.072022][ T6581] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 294.522284][ T6581] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 294.540801][ T6581] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.561711][T12168] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2536'. [ 294.569912][ T6581] usb 1-1: config 0 descriptor?? [ 294.623335][ T6581] cp210x 1-1:0.0: cp210x converter detected [ 294.625398][T12168] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2536'. [ 294.795548][T12176] loop6: detected capacity change from 0 to 64 [ 294.895318][T12178] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2541'. [ 295.062509][ T6581] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 295.127657][T12147] loop5: detected capacity change from 0 to 32768 [ 295.145759][ T6581] usb 1-1: cp210x converter now attached to ttyUSB0 [ 295.234006][T12147] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop5 scanned by syz.5.2519 (12147) [ 295.306068][T12147] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 295.347053][ T6581] usb 1-1: USB disconnect, device number 16 [ 295.350792][T12147] BTRFS info (device loop5): force clearing of disk cache [ 295.362393][T12147] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 295.388610][ T6581] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 295.412088][T12147] BTRFS info (device loop5): use zstd compression, level 3 [ 295.441444][T12147] BTRFS info (device loop5): using free space tree [ 295.443974][ T6581] cp210x 1-1:0.0: device disconnected [ 295.461750][T12147] BTRFS info (device loop5): has skinny extents [ 295.748037][T12147] BTRFS info (device loop5): enabling ssd optimizations [ 295.763690][T12147] BTRFS info (device loop5): clearing free space tree [ 295.772418][T12147] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 295.796448][T12180] loop1: detected capacity change from 0 to 32768 [ 295.803417][T12147] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 295.832363][T12147] BTRFS info (device loop5): creating free space tree [ 295.847033][T12147] BTRFS info (device loop5): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 295.848330][T12170] loop8: detected capacity change from 0 to 40427 [ 295.875069][T12147] BTRFS info (device loop5): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 295.961643][T12189] loop6: detected capacity change from 0 to 32768 [ 295.974318][T12170] F2FS-fs (loop8): Insane cp_payload (553648128 >= 504) [ 295.992245][T12170] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 296.034234][T12170] F2FS-fs (loop8): invalid crc value [ 296.039648][T12189] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 scanned by syz.6.2546 (12189) [ 296.088210][T12170] F2FS-fs (loop8): Found nat_bits in checkpoint [ 296.146391][T12189] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm [ 296.207996][T12189] BTRFS info (device loop6): using free space tree [ 296.260802][T12189] BTRFS info (device loop6): has skinny extents [ 296.279666][T12170] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 296.302650][T12170] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 296.504950][T12231] loop1: detected capacity change from 0 to 256 [ 296.620999][T12231] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 296.694097][T12189] BTRFS info (device loop6): enabling ssd optimizations [ 296.941195][ T6089] attempt to access beyond end of device [ 296.941195][ T6089] loop8: rw=2049, want=45104, limit=40427 [ 297.299672][T12267] netlink: 'syz.1.2555': attribute type 21 has an invalid length. [ 297.341820][T12267] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2555'. [ 297.581908][T12262] loop5: detected capacity change from 0 to 8192 [ 297.662595][T12262] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal [ 297.671862][T12262] REISERFS (device loop5): using ordered data mode [ 297.698399][T12262] reiserfs: using flush barriers [ 297.741753][T12262] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 297.758754][T12262] REISERFS (device loop5): checking transaction log (loop5) [ 297.777231][T12280] loop1: detected capacity change from 0 to 1024 [ 297.792485][T12262] REISERFS (device loop5): Using r5 hash to sort names [ 297.799548][T12262] REISERFS (device loop5): using 3.5.x disk format [ 297.813356][T12262] REISERFS warning (device loop5): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 297.839422][T12262] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 297.936563][T12280] hfsplus: catalog searching failed [ 297.961117][ T26] audit: type=1326 audit(1732157771.700:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12284 comm="syz.8.2559" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f606e6e2819 code=0x0 [ 298.143580][ T4227] hfsplus: b-tree write err: -5, ino 4 [ 298.411128][T12303] loop1: detected capacity change from 0 to 8 [ 298.606366][T12303] SQUASHFS error: zlib decompression failed, data probably corrupt [ 298.632053][T12303] SQUASHFS error: Failed to read block 0x4de: -5 [ 298.678728][T12303] SQUASHFS error: Failed to read block 0x4e2: -5 [ 298.726159][T12303] SQUASHFS error: Failed to read block 0x9ca: -5 [ 298.778895][T12303] SQUASHFS error: Failed to read block 0x2cf2: -5 [ 298.831108][T12303] SQUASHFS error: Failed to read block 0x35f2: -5 [ 298.876356][ T26] audit: type=1800 audit(1732157772.620:104): pid=12303 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2564" name="file1" dev="loop1" ino=5 res=0 errno=0 [ 298.999501][T12317] loop8: detected capacity change from 0 to 256 [ 299.100203][T12319] loop0: detected capacity change from 0 to 2048 [ 299.179692][T12319] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 299.249017][T12319] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 299.909126][T12312] loop5: detected capacity change from 0 to 40427 [ 299.966428][T12348] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 300.056010][T12312] F2FS-fs (loop5): Found nat_bits in checkpoint [ 300.151196][T12361] loop6: detected capacity change from 0 to 512 [ 300.171307][T12312] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 300.229047][T12361] EXT4-fs (loop6): Ignoring removed mblk_io_submit option [ 300.260235][T12361] EXT4-fs (loop6): mounted filesystem without journal. Opts: stripe=0x0000000000000010,stripe=0x0000000000000004,dioread_nolock,mblk_io_submit,discard,nogrpid,,errors=continue. Quota mode: none. [ 300.290189][ T26] audit: type=1800 audit(1732157774.030:105): pid=12361 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2591" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 300.879724][T12379] loop6: detected capacity change from 0 to 512 [ 300.990731][T12379] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2 [ 301.045789][T12379] EXT4-fs (loop6): 1 truncate cleaned up [ 301.069356][T12379] EXT4-fs (loop6): mounted filesystem without journal. Opts: journal_dev=0x0000000000000009,noblock_validity,usrquota,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000008,jqfmt=vfsold,usrjquota=min_batch_time=0x0000000000000a9f,nodiscard,,errors=continue. Quota mode: writeback. [ 301.419090][T12394] loop1: detected capacity change from 0 to 512 [ 301.590194][T12394] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue. Quota mode: writeback. [ 301.620692][T12394] ext4 filesystem being mounted at /575/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 301.645993][T12405] loop0: detected capacity change from 0 to 64 [ 301.734300][T12406] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2608'. [ 301.868246][T12405] BFS-fs: bfs_fill_super(): loop0 is unclean, continuing [ 302.112705][ T4805] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 302.249276][T12424] loop5: detected capacity change from 0 to 256 [ 302.323365][T12424] exfat: Deprecated parameter 'utf8' [ 302.333129][T12424] exfat: Deprecated parameter 'namecase' [ 302.349131][T12424] exfat: Deprecated parameter 'utf8' [ 302.358130][T12390] loop8: detected capacity change from 0 to 40427 [ 302.399284][T12424] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 302.448520][T12390] F2FS-fs (loop8): Insane cp_payload (553648128 >= 504) [ 302.476282][T12390] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 302.492370][ T4805] usb 2-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=90.0a [ 302.511695][ T4805] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.514995][T12390] F2FS-fs (loop8): invalid crc value [ 302.538942][ T4805] usb 2-1: config 0 descriptor?? [ 302.594928][ T4805] gspca_main: sn9c2028-2.14.0 probing 0c45:8001 [ 302.600059][T12390] F2FS-fs (loop8): Found nat_bits in checkpoint [ 302.773335][T12390] F2FS-fs (loop8): Start checkpoint disabled! [ 302.794908][T12390] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 302.802809][ T4805] gspca_sn9c2028: read1 error -32 [ 302.808236][T12390] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6 [ 302.842097][ T4805] gspca_sn9c2028: read1 error -32 [ 302.870076][T12434] netlink: 'syz.5.2620': attribute type 1 has an invalid length. [ 302.911882][T12422] loop6: detected capacity change from 0 to 32768 [ 303.027128][T12417] loop0: detected capacity change from 0 to 40427 [ 303.103328][ T4173] usb 2-1: USB disconnect, device number 19 [ 303.110590][T12422] read_mapping_page failed! [ 303.135905][T12417] F2FS-fs (loop0): invalid crc value [ 303.159643][ T4353] attempt to access beyond end of device [ 303.159643][ T4353] loop8: rw=2049, want=41000, limit=40427 [ 303.163097][T12417] F2FS-fs (loop0): Found nat_bits in checkpoint [ 303.174525][T12422] ERROR: (device loop6): txCommit: [ 303.174525][T12422] [ 303.187408][ T26] audit: type=1107 audit(1732157776.920:106): pid=12438 uid=0 auid=0 ses=1 subj=unconfined msg='' [ 303.205411][T12422] ERROR: (device loop6): remounting filesystem as read-only [ 303.299435][T12439] jfs: Unrecognized mount option " Z* m.Dc8'@C9G9?9S{1Jլ5 æԌqqY糔" or missing value [ 303.361390][T12417] F2FS-fs (loop0): Start checkpoint disabled! [ 303.398984][T12422] ERROR: (device loop6): diFree: numfree > numinos [ 303.398984][T12422] [ 303.408495][T12417] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 303.666526][ T5177] attempt to access beyond end of device [ 303.666526][ T5177] loop0: rw=2049, want=40984, limit=40427 [ 303.691614][T12450] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2628'. [ 303.730567][T12450] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2628'. [ 303.759501][T12452] loop8: detected capacity change from 0 to 2048 [ 303.844562][T12455] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 304.979508][T12488] loop0: detected capacity change from 0 to 1024 [ 305.085508][T12461] loop1: detected capacity change from 0 to 32768 [ 305.121362][T12454] loop6: detected capacity change from 0 to 40427 [ 305.181500][T12454] F2FS-fs (loop6): Invalid log blocks per segment (4278190089) [ 305.201755][T12454] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 305.254620][T12454] F2FS-fs (loop6): invalid crc value [ 305.308262][T12493] ERROR: (device loop1): xtSearch: XT_GETPAGE: xtree page corrupt [ 305.308262][T12493] [ 305.324512][T12454] F2FS-fs (loop6): Found nat_bits in checkpoint [ 305.348796][T12493] ERROR: (device loop1): remounting filesystem as read-only [ 305.372232][T12493] xtLookup: xtSearch returned -5 [ 305.389469][T12493] free_index: error reading directory table [ 305.447763][T12454] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 305.468466][T12454] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 305.814996][T12470] loop5: detected capacity change from 0 to 40427 [ 305.844406][T12503] loop0: detected capacity change from 0 to 512 [ 305.872651][T12470] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 305.880422][T12470] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 305.924492][T12470] F2FS-fs (loop5): invalid crc value [ 305.935682][T12503] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 305.984396][T12470] F2FS-fs (loop5): Found nat_bits in checkpoint [ 306.040587][T12486] loop8: detected capacity change from 0 to 40427 [ 306.092260][ T4805] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 306.136147][T12470] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 306.143429][T12470] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 306.168521][ T26] audit: type=1326 audit(1732157779.910:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12509 comm="syz.6.2648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd503084819 code=0x7ffc0000 [ 306.224197][T12486] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12 [ 306.252688][T12486] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 306.269005][ T26] audit: type=1326 audit(1732157779.940:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12509 comm="syz.6.2648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=152 compat=0 ip=0x7fd503084819 code=0x7ffc0000 [ 306.323522][T12512] loop6: detected capacity change from 0 to 128 [ 306.340227][ T26] audit: type=1326 audit(1732157779.940:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12509 comm="syz.6.2648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd503084819 code=0x7ffc0000 [ 306.381927][T12486] F2FS-fs (loop8): Found nat_bits in checkpoint [ 306.466569][ T4600] F2FS-fs (loop5): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 306.482561][ T4805] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 306.492069][ T4805] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.493270][T12512] EXT4-fs (loop6): mounted filesystem without journal. Opts: journal_dev=0x0000000000000000,nouid32,,errors=continue. Quota mode: none. [ 306.502442][ T4805] usb 2-1: config 0 descriptor?? [ 306.519553][ T4600] F2FS-fs (loop5): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 306.537133][T12512] ext4 filesystem being mounted at /461/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 306.554132][ T4805] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 306.583682][T12486] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 306.590759][T12486] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 306.674342][T12512] overlayfs: upper fs needs to support d_type. [ 306.949561][T12503] loop0: detected capacity change from 0 to 32768 [ 306.992441][ T4805] gspca_cpia1: usb_control_msg 03, error -32 [ 307.042184][ T4805] gspca_cpia1: usb_control_msg 03, error -71 [ 307.063998][ T4805] gspca_cpia1: usb_control_msg 01, error -71 [ 307.080238][ T4805] cpia1 2-1:0.0: only firmware version 1 is supported (got: 0) [ 307.094088][T12503] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 307.102581][ T4805] usb 2-1: USB disconnect, device number 20 [ 307.124557][T12503] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 307.234286][T12503] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 307.269424][ T5299] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 307.289608][ T5299] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 307.408185][ T5299] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 118ms [ 307.436083][ T5299] gfs2: fsid=syz:syz.0: jid=0: Done [ 307.464859][T12503] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 307.709713][T12533] netlink: 'syz.1.2657': attribute type 15 has an invalid length. [ 307.888822][T12535] loop1: detected capacity change from 0 to 64 [ 307.952834][T12525] loop5: detected capacity change from 0 to 40427 [ 308.017235][T12525] F2FS-fs (loop5): invalid crc value [ 308.047044][T12525] F2FS-fs (loop5): Found nat_bits in checkpoint [ 308.158769][T12525] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 308.260517][T12523] loop6: detected capacity change from 0 to 40427 [ 308.273599][T12543] loop1: detected capacity change from 0 to 1764 [ 308.383053][T12523] F2FS-fs (loop6): invalid crc value [ 308.439024][T12523] F2FS-fs (loop6): Found nat_bits in checkpoint [ 308.644304][T12554] loop5: detected capacity change from 0 to 256 [ 308.655976][T12523] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 308.781451][T12554] FAT-fs (loop5): Directory bread(block 64) failed [ 308.796824][T12554] FAT-fs (loop5): Directory bread(block 65) failed [ 308.813092][T12554] FAT-fs (loop5): Directory bread(block 66) failed [ 308.819664][T12554] FAT-fs (loop5): Directory bread(block 67) failed [ 308.861141][T12554] FAT-fs (loop5): Directory bread(block 68) failed [ 308.888771][T12554] FAT-fs (loop5): Directory bread(block 69) failed [ 308.896148][T12554] FAT-fs (loop5): Directory bread(block 70) failed [ 308.912034][T12554] FAT-fs (loop5): Directory bread(block 71) failed [ 308.918758][T12554] FAT-fs (loop5): Directory bread(block 72) failed [ 308.965680][T12561] loop1: detected capacity change from 0 to 8192 [ 308.972114][T12554] FAT-fs (loop5): Directory bread(block 73) failed [ 309.020631][T12565] loop6: detected capacity change from 0 to 4096 [ 309.067495][T12561] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 309.122613][T12561] REISERFS (device loop1): using ordered data mode [ 309.139558][T12561] reiserfs: using flush barriers [ 309.149822][T12561] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 309.153939][T12565] ntfs: (device loop6): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 309.191701][T12565] ntfs: (device loop6): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 309.229299][T12573] attempt to access beyond end of device [ 309.229299][T12573] loop5: rw=524288, want=1196, limit=256 [ 309.260119][T12565] ntfs: (device loop6): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 309.282389][T12565] ntfs: (device loop6): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 309.307009][T12565] ntfs: (device loop6): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 309.319783][T12565] ntfs: (device loop6): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 309.338967][T12561] REISERFS (device loop1): checking transaction log (loop1) [ 309.363184][T12565] ntfs: (device loop6): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 309.370931][T12573] attempt to access beyond end of device [ 309.370931][T12573] loop5: rw=0, want=1196, limit=256 [ 309.402612][T12577] loop8: detected capacity change from 0 to 128 [ 309.411103][T12565] ntfs: volume version 3.1. [ 309.421102][ T26] audit: type=1800 audit(1732157783.160:110): pid=12573 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2662" name="cpu.stat" dev="loop5" ino=1048674 res=0 errno=0 [ 309.477085][T12565] ntfs: (device loop6): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 309.502293][T12565] ntfs: (device loop6): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 309.608073][T12561] REISERFS (device loop1): Using tea hash to sort names [ 309.652957][T12561] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2) [ 309.696075][T12561] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 309.868166][T12587] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave [ 309.892485][T12587] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 309.960012][T12561] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 5) not found (pos 2) [ 310.612322][ T5295] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 310.688236][T12598] loop6: detected capacity change from 0 to 32768 [ 310.760937][T12598] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop6 scanned by syz.6.2683 (12598) [ 310.802172][T12598] BTRFS info (device loop6): using crc32c (crc32c-intel) checksum algorithm [ 310.810921][T12598] BTRFS info (device loop6): disabling tree log [ 310.845196][T12598] BTRFS info (device loop6): metadata ratio 65537 [ 310.851694][T12598] BTRFS info (device loop6): metadata ratio 64 [ 310.862478][ T5299] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 310.872331][T12598] BTRFS info (device loop6): using free space tree [ 310.878869][T12598] BTRFS info (device loop6): has skinny extents [ 310.906445][T12608] loop8: detected capacity change from 0 to 40427 [ 310.951654][T12608] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12 [ 310.970052][T12608] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 310.990981][T12608] F2FS-fs (loop8): invalid crc value [ 311.000892][T12608] F2FS-fs (loop8): Found nat_bits in checkpoint [ 311.012100][ T5295] usb 6-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 311.021168][ T5295] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.025423][T12598] BTRFS info (device loop6): enabling ssd optimizations [ 311.040771][ T5295] usb 6-1: config 0 descriptor?? [ 311.104315][ T5295] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 311.126113][T12608] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 311.152104][T12608] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 311.154736][ T5299] usb 2-1: Using ep0 maxpacket: 16 [ 311.241018][ T9] F2FS-fs (loop8): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 311.263608][ T9] F2FS-fs (loop8): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 311.296585][ T5299] usb 2-1: config 6 has an invalid interface number: 193 but max is 0 [ 311.305338][ T5299] usb 2-1: config 6 has no interface number 0 [ 311.313606][ T5299] usb 2-1: config 6 interface 193 altsetting 179 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 311.330345][ T5299] usb 2-1: config 6 interface 193 altsetting 179 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 311.342846][ T5299] usb 2-1: config 6 interface 193 has no altsetting 0 [ 311.532467][ T5299] usb 2-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=81.6b [ 311.548587][ T5299] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.561596][ T5299] usb 2-1: Product: syz [ 311.565898][ T5299] usb 2-1: Manufacturer: syz [ 311.570646][ T5299] usb 2-1: SerialNumber: syz [ 311.924707][ T5299] hdpvr 2-1:6.193: Could not find bulk-in endpoint [ 311.942626][ T5299] hdpvr: probe of 2-1:6.193 failed with error -12 [ 311.972460][ T5295] gspca_cpia1: usb_control_msg 02, error -71 [ 311.996976][ T5299] usb 2-1: USB disconnect, device number 21 [ 312.004781][ T5295] gspca_cpia1: usb_control_msg 05, error -71 [ 312.022279][ T5295] gspca_cpia1: usb_control_msg 04, error -71 [ 312.036566][ T5295] cpia1: probe of 6-1:0.0 failed with error -71 [ 312.070025][ T5295] usb 6-1: USB disconnect, device number 18 [ 312.136763][T12652] loop8: detected capacity change from 0 to 8192 [ 312.205737][T12658] program syz.6.2701 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 312.443291][T12664] loop8: detected capacity change from 0 to 2048 [ 312.579325][T12664] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 312.651285][T12676] loop5: detected capacity change from 0 to 512 [ 312.694347][T12672] loop6: detected capacity change from 0 to 4096 [ 312.695810][T12678] loop1: detected capacity change from 0 to 64 [ 312.726182][T12676] EXT4-fs (loop5): Ignoring removed mblk_io_submit option [ 312.763160][T12672] ntfs3: Unknown parameter '0x0000000000000000' [ 312.792668][T12676] EXT4-fs (loop5): mounted filesystem without journal. Opts: stripe=0x0000000000000010,stripe=0x0000000000000004,dioread_nolock,mblk_io_submit,discard,nogrpid,,errors=continue. Quota mode: none. [ 313.023649][T12690] sctp: [Deprecated]: syz.5.2715 (pid 12690) Use of int in max_burst socket option. [ 313.023649][T12690] Use struct sctp_assoc_value instead [ 313.313239][T12701] netlink: 'syz.5.2721': attribute type 10 has an invalid length. [ 313.359711][T12697] loop6: detected capacity change from 0 to 4096 [ 313.453272][T12697] ntfs: volume version 3.1. [ 313.706623][T12709] loop6: detected capacity change from 0 to 256 [ 313.763308][T12709] exfat: Deprecated parameter 'utf8' [ 313.770602][T12709] exfat: Deprecated parameter 'namecase' [ 313.802468][T12709] exfat: Deprecated parameter 'utf8' [ 313.830094][T12714] loop1: detected capacity change from 0 to 128 [ 313.857416][T12709] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 313.903002][T12709] exFAT-fs (loop6): error, tried to truncate zeroed cluster. [ 313.925439][T12709] exFAT-fs (loop6): error, invalid access to exfat cache (entry 0x00000000) [ 313.943102][T12714] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 313.960328][T12709] exFAT-fs (loop6): error, failed to bmap (inode : ffff88805f6f8160 iblock : 25, err : -5) [ 313.981433][T12714] ext4 filesystem being mounted at /599/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 314.024685][T12709] exFAT-fs (loop6): error, tried to truncate zeroed cluster. [ 314.060723][T12709] exFAT-fs (loop6): error, tried to truncate zeroed cluster. [ 314.091246][T12716] exFAT-fs (loop6): error, invalid access to exfat cache (entry 0x00000000) [ 314.131715][T12716] exFAT-fs (loop6): error, failed to bmap (inode : ffff88805f6f8160 iblock : 0, err : -5) [ 314.135541][T12705] loop5: detected capacity change from 0 to 32768 [ 314.471289][T12727] siw: device registration error -23 [ 314.565674][T12720] loop8: detected capacity change from 0 to 4096 [ 314.721689][T12734] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 314.747880][ T26] kauditd_printk_skb: 24 callbacks suppressed [ 314.747897][ T26] audit: type=1800 audit(1732157788.490:112): pid=12720 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2731" name="file1" dev="loop8" ino=15 res=0 errno=0 [ 314.753240][T12720] NILFS error (device loop8): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 314.843951][T12720] Remounting filesystem read-only [ 314.879414][T12739] NILFS (loop8): discard dirty page: offset=0, ino=15 [ 314.901279][T12739] NILFS (loop8): discard dirty block: blocknr=18, size=4096 [ 314.960156][T12743] loop6: detected capacity change from 0 to 128 [ 314.976613][ T6089] NILFS (loop8): discard dirty page: offset=8192, ino=6 [ 314.989018][ T6089] NILFS (loop8): discard dirty block: blocknr=25, size=4096 [ 315.013846][T12743] VFS: Found a Xenix FS (block size = 512) on device loop6 [ 315.014664][ T6089] NILFS (loop8): disposed unprocessed dirty file(s) when detaching log writer [ 315.045513][T12743] attempt to access beyond end of device [ 315.045513][T12743] loop6: rw=0, want=8767745, limit=128 [ 315.064059][T12743] Buffer I/O error on dev loop6, logical block 8767744, async page read [ 315.077570][T12743] attempt to access beyond end of device [ 315.077570][T12743] loop6: rw=0, want=13269810, limit=128 [ 315.092498][T12743] Buffer I/O error on dev loop6, logical block 13269809, async page read [ 315.101410][T12743] attempt to access beyond end of device [ 315.101410][T12743] loop6: rw=0, want=1158, limit=128 [ 315.119707][T12743] Buffer I/O error on dev loop6, logical block 1157, async page read [ 315.129175][T12743] attempt to access beyond end of device [ 315.129175][T12743] loop6: rw=0, want=3211265, limit=128 [ 315.183528][T12743] Buffer I/O error on dev loop6, logical block 3211264, async page read [ 315.217092][T12743] attempt to access beyond end of device [ 315.217092][T12743] loop6: rw=0, want=8768636, limit=128 [ 315.296258][T12743] Buffer I/O error on dev loop6, logical block 8768635, async page read [ 315.324290][T12743] attempt to access beyond end of device [ 315.324290][T12743] loop6: rw=0, want=13466418, limit=128 [ 315.364019][T12743] Buffer I/O error on dev loop6, logical block 13466417, async page read [ 315.399626][T12743] attempt to access beyond end of device [ 315.399626][T12743] loop6: rw=0, want=209286, limit=128 [ 315.400298][T12724] loop1: detected capacity change from 0 to 40427 [ 315.411350][T12743] Buffer I/O error on dev loop6, logical block 209285, async page read [ 315.437398][T12743] attempt to access beyond end of device [ 315.437398][T12743] loop6: rw=0, want=8767745, limit=128 [ 315.458762][T12743] Buffer I/O error on dev loop6, logical block 8767744, async page read [ 315.469998][T12743] attempt to access beyond end of device [ 315.469998][T12743] loop6: rw=0, want=13269810, limit=128 [ 315.484669][T12743] Buffer I/O error on dev loop6, logical block 13269809, async page read [ 315.498299][T12743] attempt to access beyond end of device [ 315.498299][T12743] loop6: rw=0, want=1158, limit=128 [ 315.513208][T12743] Buffer I/O error on dev loop6, logical block 1157, async page read [ 315.541106][ T26] audit: type=1800 audit(1732157789.280:113): pid=12743 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2739" name="/" dev="loop6" ino=2 res=0 errno=0 [ 315.561117][ T13] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 315.603673][T12724] F2FS-fs (loop1): Found nat_bits in checkpoint [ 315.657931][ T4936] sysv_free_block: trying to free block not in datazone [ 315.666312][ T4936] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 315.695010][T12724] F2FS-fs (loop1): Cannot turn on quotas: -2 on 2 [ 315.740389][T12724] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 315.811441][T12764] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2746'. [ 315.821159][ T26] audit: type=1804 audit(1732157789.560:114): pid=12724 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2729" name="/newroot/600/file2/bus" dev="loop1" ino=10 res=1 errno=0 [ 315.932225][ T13] usb 9-1: config 0 has an invalid interface number: 117 but max is 0 [ 315.940441][ T13] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 316.012146][ T13] usb 9-1: config 0 has no interface number 0 [ 316.018378][ T13] usb 9-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 316.068015][ T13] usb 9-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 316.097823][T12775] futex_wake_op: syz.6.2753 tries to shift op by -1; fix this program [ 316.252291][ T13] usb 9-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 316.302334][ T13] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.310366][ T13] usb 9-1: Product: syz [ 316.342183][ T13] usb 9-1: Manufacturer: syz [ 316.346825][ T13] usb 9-1: SerialNumber: syz [ 316.371407][ T13] usb 9-1: config 0 descriptor?? [ 316.476687][T12787] device wlan1 entered promiscuous mode [ 316.598033][T12791] ================================================================== [ 316.607043][T12791] BUG: KASAN: use-after-free in gfs2_qd_shrink_scan+0x63d/0x860 [ 316.614721][T12791] Write of size 4 at addr ffff8880199f0a70 by task syz.5.2759/12791 [ 316.622725][T12791] [ 316.625069][T12791] CPU: 0 PID: 12791 Comm: syz.5.2759 Not tainted 5.15.173-syzkaller #0 [ 316.633536][T12791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 316.643783][T12791] Call Trace: [ 316.647073][T12791] [ 316.650040][T12791] dump_stack_lvl+0x1e3/0x2d0 [ 316.654733][T12791] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 316.660387][T12791] ? _printk+0xd1/0x120 [ 316.664564][T12791] ? __wake_up_klogd+0xcc/0x100 [ 316.669430][T12791] ? panic+0x860/0x860 [ 316.673509][T12791] ? _raw_spin_lock_irqsave+0xdd/0x120 [ 316.678994][T12791] print_address_description+0x63/0x3b0 [ 316.684570][T12791] ? gfs2_qd_shrink_scan+0x63d/0x860 [ 316.689880][T12791] kasan_report+0x16b/0x1c0 [ 316.694401][T12791] ? gfs2_qd_shrink_scan+0x63d/0x860 [ 316.699701][T12791] kasan_check_range+0x27e/0x290 [ 316.704644][T12791] gfs2_qd_shrink_scan+0x63d/0x860 [ 316.709769][T12791] ? gfs2_qd_shrink_count+0x100/0x100 [ 316.715154][T12791] do_shrink_slab+0x542/0xda0 [ 316.719844][T12791] shrink_slab+0x233/0x960 [ 316.724274][T12791] ? __lock_acquire+0x1ff0/0x1ff0 [ 316.729296][T12791] ? drop_slab_node+0x180/0x180 [ 316.734158][T12791] ? mem_cgroup_iter+0x3b4/0x520 [ 316.739100][T12791] drop_slab_node+0xed/0x180 [ 316.743699][T12791] drop_slab+0x8b/0x120 [ 316.747878][T12791] drop_caches_sysctl_handler+0xb3/0x160 [ 316.753536][T12791] ? cn_vprintf+0x450/0x450 [ 316.758066][T12791] proc_sys_call_handler+0x541/0x8a0 [ 316.763366][T12791] ? proc_sys_open+0x270/0x270 [ 316.768132][T12791] ? do_splice_direct+0x285/0x3d0 [ 316.773170][T12791] ? aa_path_link+0xea0/0xea0 [ 316.777849][T12791] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 316.783930][T12791] do_iter_readv_writev+0x594/0x7a0 [ 316.789140][T12791] ? generic_file_rw_checks+0x260/0x260 [ 316.794697][T12791] ? common_file_perm+0x17d/0x1d0 [ 316.799727][T12791] ? fsnotify_perm+0x64/0x590 [ 316.804408][T12791] ? security_file_permission+0x75/0xa0 [ 316.809959][T12791] do_iter_write+0x1e6/0x760 [ 316.814569][T12791] ? vfs_iter_write+0x69/0xa0 [ 316.819261][T12791] iter_file_splice_write+0x806/0xfa0 [ 316.824682][T12791] ? splice_from_pipe+0x230/0x230 [ 316.829705][T12791] ? generic_file_splice_read+0x54a/0x790 [ 316.835430][T12791] ? splice_shrink_spd+0xb0/0xb0 [ 316.840381][T12791] ? common_file_perm+0x17d/0x1d0 [ 316.845408][T12791] ? splice_from_pipe+0x230/0x230 [ 316.850437][T12791] direct_splice_actor+0xe3/0x1c0 [ 316.855573][T12791] splice_direct_to_actor+0x500/0xc10 [ 316.860972][T12791] ? do_splice_direct+0x3d0/0x3d0 [ 316.866024][T12791] ? pipe_to_sendpage+0x350/0x350 [ 316.871066][T12791] ? fsnotify_perm+0x64/0x590 [ 316.875757][T12791] ? security_file_permission+0x75/0xa0 [ 316.881311][T12791] do_splice_direct+0x285/0x3d0 [ 316.886176][T12791] ? splice_direct_to_actor+0xc10/0xc10 [ 316.891725][T12791] ? rcu_read_lock_any_held+0xb3/0x160 [ 316.897199][T12791] do_sendfile+0x622/0x1000 [ 316.901733][T12791] ? do_pwritev+0x360/0x360 [ 316.906241][T12791] ? __might_fault+0xb4/0x110 [ 316.910925][T12791] __se_sys_sendfile64+0xfc/0x1e0 [ 316.915954][T12791] ? __x64_sys_sendfile64+0xa0/0xa0 [ 316.921159][T12791] ? syscall_enter_from_user_mode+0x2e/0x240 [ 316.927168][T12791] ? lockdep_hardirqs_on+0x94/0x130 [ 316.932370][T12791] ? syscall_enter_from_user_mode+0x2e/0x240 [ 316.938361][T12791] do_syscall_64+0x3b/0xb0 [ 316.942779][T12791] ? clear_bhb_loop+0x15/0x70 [ 316.947453][T12791] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 316.953363][T12791] RIP: 0033:0x7faf64645819 [ 316.957783][T12791] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 316.977388][T12791] RSP: 002b:00007faf624bd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 316.985804][T12791] RAX: ffffffffffffffda RBX: 00007faf647fcfa0 RCX: 00007faf64645819 [ 316.993777][T12791] RDX: 0000000020002080 RSI: 0000000000000003 RDI: 0000000000000004 [ 317.001744][T12791] RBP: 00007faf646b875e R08: 0000000000000000 R09: 0000000000000000 [ 317.009827][T12791] R10: 000000000000023b R11: 0000000000000246 R12: 0000000000000000 [ 317.018009][T12791] R13: 0000000000000000 R14: 00007faf647fcfa0 R15: 00007ffcd32797c8 [ 317.025999][T12791] [ 317.029018][T12791] [ 317.031338][T12791] Allocated by task 12503: [ 317.035744][T12791] ____kasan_kmalloc+0xba/0xf0 [ 317.040508][T12791] kmem_cache_alloc_trace+0x143/0x290 [ 317.045877][T12791] gfs2_fill_super+0x15a/0x2750 [ 317.050727][T12791] get_tree_bdev+0x3fe/0x620 [ 317.055311][T12791] gfs2_get_tree+0x50/0x210 [ 317.059813][T12791] vfs_get_tree+0x88/0x270 [ 317.064237][T12791] do_new_mount+0x2ba/0xb40 [ 317.068734][T12791] __se_sys_mount+0x2d5/0x3c0 [ 317.073493][T12791] do_syscall_64+0x3b/0xb0 [ 317.077906][T12791] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 317.083813][T12791] [ 317.086131][T12791] Freed by task 4168: [ 317.090112][T12791] kasan_set_track+0x4b/0x80 [ 317.094713][T12791] kasan_set_free_info+0x1f/0x40 [ 317.099667][T12791] ____kasan_slab_free+0xd8/0x120 [ 317.104787][T12791] slab_free_freelist_hook+0xdd/0x160 [ 317.110163][T12791] kfree+0xf1/0x270 [ 317.113966][T12791] generic_shutdown_super+0x130/0x310 [ 317.119332][T12791] kill_block_super+0x7a/0xe0 [ 317.124020][T12791] deactivate_locked_super+0xa0/0x110 [ 317.129391][T12791] cleanup_mnt+0x44e/0x500 [ 317.133945][T12791] task_work_run+0x129/0x1a0 [ 317.138555][T12791] exit_to_user_mode_loop+0x106/0x130 [ 317.143936][T12791] exit_to_user_mode_prepare+0xb1/0x140 [ 317.149483][T12791] syscall_exit_to_user_mode+0x5d/0x240 [ 317.155045][T12791] do_syscall_64+0x47/0xb0 [ 317.159456][T12791] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 317.165351][T12791] [ 317.167671][T12791] The buggy address belongs to the object at ffff8880199f0000 [ 317.167671][T12791] which belongs to the cache kmalloc-8k of size 8192 [ 317.181718][T12791] The buggy address is located 2672 bytes inside of [ 317.181718][T12791] 8192-byte region [ffff8880199f0000, ffff8880199f2000) [ 317.195252][T12791] The buggy address belongs to the page: [ 317.200879][T12791] page:ffffea0000667c00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x199f0 [ 317.211153][T12791] head:ffffea0000667c00 order:3 compound_mapcount:0 compound_pincount:0 [ 317.219502][T12791] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 317.227502][T12791] raw: 00fff00000010200 0000000000000000 0000000100000001 ffff888017042280 [ 317.236353][T12791] raw: 0000000000000000 0000000000020002 00000001ffffffff 0000000000000000 [ 317.245394][T12791] page dumped because: kasan: bad access detected [ 317.251847][T12791] page_owner tracks the page as allocated [ 317.257557][T12791] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 4205, ts 64565206872, free_ts 63904401126 [ 317.278057][T12791] get_page_from_freelist+0x3b78/0x3d40 [ 317.283707][T12791] __alloc_pages+0x272/0x700 [ 317.288301][T12791] new_slab+0xbb/0x4b0 [ 317.292371][T12791] ___slab_alloc+0x6f6/0xe10 [ 317.296956][T12791] __kmalloc+0x1c9/0x300 [ 317.301281][T12791] sta_info_alloc+0x88/0x1bb0 [ 317.305955][T12791] ieee80211_ibss_add_sta+0x563/0x810 [ 317.311324][T12791] ieee80211_ibss_rx_queued_mgmt+0x13dd/0x2af0 [ 317.317477][T12791] ieee80211_iface_work+0x78f/0xcc0 [ 317.322669][T12791] process_one_work+0x8a1/0x10c0 [ 317.327603][T12791] worker_thread+0xaca/0x1280 [ 317.332276][T12791] kthread+0x3f6/0x4f0 [ 317.336341][T12791] ret_from_fork+0x1f/0x30 [ 317.340756][T12791] page last free stack trace: [ 317.345417][T12791] free_unref_page_prepare+0xc34/0xcf0 [ 317.350877][T12791] free_unref_page+0x95/0x2d0 [ 317.355547][T12791] ___cache_free+0xe3/0x100 [ 317.360045][T12791] qlist_free_all+0x36/0x90 [ 317.364639][T12791] kasan_quarantine_reduce+0x162/0x180 [ 317.370095][T12791] __kasan_slab_alloc+0x2f/0xc0 [ 317.374942][T12791] slab_post_alloc_hook+0x53/0x380 [ 317.380051][T12791] kmem_cache_alloc_trace+0xfb/0x290 [ 317.385337][T12791] nsim_fib_event_work+0x19be/0x4120 [ 317.390618][T12791] process_one_work+0x8a1/0x10c0 [ 317.395552][T12791] worker_thread+0xaca/0x1280 [ 317.400228][T12791] kthread+0x3f6/0x4f0 [ 317.404297][T12791] ret_from_fork+0x1f/0x30 [ 317.408715][T12791] [ 317.411034][T12791] Memory state around the buggy address: [ 317.416656][T12791] ffff8880199f0900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 317.424709][T12791] ffff8880199f0980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 317.432770][T12791] >ffff8880199f0a00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 317.440833][T12791] ^ [ 317.448559][T12791] ffff8880199f0a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 317.456618][T12791] ffff8880199f0b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 317.464673][T12791] ================================================================== [ 317.472728][T12791] Disabling lock debugging due to kernel taint [ 317.483624][ T1426] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.489993][ T1426] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.522373][T12791] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 317.529693][T12791] CPU: 1 PID: 12791 Comm: syz.5.2759 Tainted: G B 5.15.173-syzkaller #0 [ 317.539344][T12791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 317.549416][T12791] Call Trace: [ 317.552720][T12791] [ 317.555663][T12791] dump_stack_lvl+0x1e3/0x2d0 [ 317.560367][T12791] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 317.566025][T12791] ? panic+0x860/0x860 [ 317.570120][T12791] ? preempt_schedule_common+0xa6/0xd0 [ 317.575219][T12797] loop1: detected capacity change from 0 to 22 [ 317.575605][T12791] ? preempt_schedule+0xd9/0xe0 [ 317.586586][T12791] panic+0x318/0x860 [ 317.590516][T12791] ? check_panic_on_warn+0x1d/0xa0 [ 317.595641][T12791] ? fb_is_primary_device+0xd0/0xd0 [ 317.600890][T12791] ? _raw_spin_unlock_irqrestore+0x128/0x130 [ 317.606036][T12797] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 317.606888][T12791] ? _raw_spin_unlock+0x40/0x40 [ 317.618305][T12791] ? print_memory_metadata+0xe2/0x140 [ 317.623698][T12791] check_panic_on_warn+0x7e/0xa0 [ 317.628647][T12791] ? gfs2_qd_shrink_scan+0x63d/0x860 [ 317.633946][T12791] end_report+0x6d/0xf0 [ 317.638111][T12791] kasan_report+0x18e/0x1c0 [ 317.642624][T12791] ? gfs2_qd_shrink_scan+0x63d/0x860 [ 317.647930][T12791] kasan_check_range+0x27e/0x290 [ 317.652892][T12791] gfs2_qd_shrink_scan+0x63d/0x860 [ 317.658117][T12791] ? gfs2_qd_shrink_count+0x100/0x100 [ 317.663512][T12791] do_shrink_slab+0x542/0xda0 [ 317.668222][T12791] shrink_slab+0x233/0x960 [ 317.672663][T12791] ? __lock_acquire+0x1ff0/0x1ff0 [ 317.677730][T12791] ? drop_slab_node+0x180/0x180 [ 317.682609][T12791] ? mem_cgroup_iter+0x3b4/0x520 [ 317.687570][T12791] drop_slab_node+0xed/0x180 [ 317.692188][T12791] drop_slab+0x8b/0x120 [ 317.696373][T12791] drop_caches_sysctl_handler+0xb3/0x160 [ 317.702037][T12791] ? cn_vprintf+0x450/0x450 [ 317.706724][T12791] proc_sys_call_handler+0x541/0x8a0 [ 317.712126][T12791] ? proc_sys_open+0x270/0x270 [ 317.716913][T12791] ? do_splice_direct+0x285/0x3d0 [ 317.722041][T12791] ? aa_path_link+0xea0/0xea0 [ 317.726741][T12791] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 317.732827][T12791] do_iter_readv_writev+0x594/0x7a0 [ 317.738048][T12791] ? generic_file_rw_checks+0x260/0x260 [ 317.743620][T12791] ? common_file_perm+0x17d/0x1d0 [ 317.748658][T12791] ? fsnotify_perm+0x64/0x590 [ 317.753348][T12791] ? security_file_permission+0x75/0xa0 [ 317.758907][T12791] do_iter_write+0x1e6/0x760 [ 317.763601][T12791] ? vfs_iter_write+0x69/0xa0 [ 317.768288][T12791] iter_file_splice_write+0x806/0xfa0 [ 317.773684][T12791] ? splice_from_pipe+0x230/0x230 [ 317.778719][T12791] ? generic_file_splice_read+0x54a/0x790 [ 317.784457][T12791] ? splice_shrink_spd+0xb0/0xb0 [ 317.789419][T12791] ? common_file_perm+0x17d/0x1d0 [ 317.794462][T12791] ? splice_from_pipe+0x230/0x230 [ 317.799504][T12791] direct_splice_actor+0xe3/0x1c0 [ 317.804545][T12791] splice_direct_to_actor+0x500/0xc10 [ 317.809937][T12791] ? do_splice_direct+0x3d0/0x3d0 [ 317.814975][T12791] ? pipe_to_sendpage+0x350/0x350 [ 317.820017][T12791] ? fsnotify_perm+0x64/0x590 [ 317.824706][T12791] ? security_file_permission+0x75/0xa0 [ 317.830265][T12791] do_splice_direct+0x285/0x3d0 [ 317.835130][T12791] ? splice_direct_to_actor+0xc10/0xc10 [ 317.840686][T12791] ? rcu_read_lock_any_held+0xb3/0x160 [ 317.846167][T12791] do_sendfile+0x622/0x1000 [ 317.850692][T12791] ? do_pwritev+0x360/0x360 [ 317.855206][T12791] ? __might_fault+0xb4/0x110 [ 317.859901][T12791] __se_sys_sendfile64+0xfc/0x1e0 [ 317.864950][T12791] ? __x64_sys_sendfile64+0xa0/0xa0 [ 317.870154][T12791] ? syscall_enter_from_user_mode+0x2e/0x240 [ 317.876146][T12791] ? lockdep_hardirqs_on+0x94/0x130 [ 317.881360][T12791] ? syscall_enter_from_user_mode+0x2e/0x240 [ 317.887353][T12791] do_syscall_64+0x3b/0xb0 [ 317.891778][T12791] ? clear_bhb_loop+0x15/0x70 [ 317.896463][T12791] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 317.902373][T12791] RIP: 0033:0x7faf64645819 [ 317.906800][T12791] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 317.926408][T12791] RSP: 002b:00007faf624bd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 317.934825][T12791] RAX: ffffffffffffffda RBX: 00007faf647fcfa0 RCX: 00007faf64645819 [ 317.942793][T12791] RDX: 0000000020002080 RSI: 0000000000000003 RDI: 0000000000000004 [ 317.950759][T12791] RBP: 00007faf646b875e R08: 0000000000000000 R09: 0000000000000000 [ 317.958720][T12791] R10: 000000000000023b R11: 0000000000000246 R12: 0000000000000000 [ 317.966691][T12791] R13: 0000000000000000 R14: 00007faf647fcfa0 R15: 00007ffcd32797c8 [ 317.974681][T12791] [ 317.977976][T12791] Kernel Offset: disabled [ 317.982306][T12791] Rebooting in 86400 seconds..