last executing test programs: 7.064385406s ago: executing program 0 (id=1021): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000003580)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0x8502}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x2}, @IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x7, 0x3}]}}}]}, 0x44}}, 0x8000084) 6.85522955s ago: executing program 0 (id=1023): syz_mount_image$jfs(&(0x7f0000000400), &(0x7f00000000c0)='./file0\x00', 0x3200092, &(0x7f0000000000)=ANY=[], 0x1, 0x6184, &(0x7f00000065c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x2) getdents64(r0, &(0x7f0000000140)=""/46, 0x2e) 5.479565673s ago: executing program 0 (id=1036): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)={0x34, r1, 0x1a7e38d805c40a79, 0x70bd2d, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x4}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004011}, 0x20000000) 4.638792712s ago: executing program 0 (id=1046): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) syz_clone3(&(0x7f0000002400)={0x2000, 0x0, 0x0, 0x0, {0xd}, &(0x7f0000000200)=""/121, 0x79, 0x0, 0x0}, 0x58) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) 4.035250406s ago: executing program 0 (id=1056): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000340)='./file0\x00', 0x0, &(0x7f0000000000)={[{@space_cache_v1}, {@clear_cache}, {@compress_algo={'compress', 0x3d, 'zstd'}}]}, 0xff, 0x50d4, &(0x7f00000051c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r0, 0x1, 0x100efc, 0x890003) 3.443585299s ago: executing program 2 (id=1075): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) mprotect(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0) 3.295469653s ago: executing program 2 (id=1067): r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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") unshare(0x8040480) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0406618, 0x0) 2.803876274s ago: executing program 2 (id=1072): r0 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @random="a538ae464632", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102}, {0x16, 0x90, 0x0, @multicast1}}}}}, 0x0) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) 2.577205239s ago: executing program 2 (id=1076): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000000)={0xf}, 0x1) 2.341944805s ago: executing program 2 (id=1079): syz_mount_image$xfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x4000000, &(0x7f00000000c0)={[{@bsdgroups}, {@nodiscard}, {@nolargeio}, {@grpid}, {@nogrpid}, {@noalign}, {@inode64}, {@attr2}]}, 0x1, 0x987d, &(0x7f0000009780)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000009740)='./file0\x00', 0x0, 0x0) ioctl$XFS_IOC_SCRUB_METADATA(r0, 0xc040583c, &(0x7f0000000140)={0x9, 0xc4, 0x9, 0x7, 0x10000002}) 2.11682503s ago: executing program 3 (id=1083): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x181a82, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$KDADDIO(r0, 0x40087101, 0x7ffffffffffffffe) 2.015635992s ago: executing program 4 (id=1084): capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) r0 = io_uring_setup(0x5541, &(0x7f0000000040)={0x0, 0x716e, 0x40, 0x0, 0x16}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 1.951903844s ago: executing program 1 (id=1085): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000180)={0x18, r1, 0x1, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x1}, 0x0) 1.907033205s ago: executing program 3 (id=1086): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="02c9"], 0x5) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02c910"], 0x15) 1.421520106s ago: executing program 4 (id=1087): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x18) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f0000000000)) 1.419139086s ago: executing program 1 (id=1097): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.177487722s ago: executing program 1 (id=1088): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000400)={0x2c, r1, 0x1, 0x3, 0x0, {0x1e}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}]}]}, 0x2c}}, 0x0) 1.139722413s ago: executing program 3 (id=1089): mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1, 0x0) mount$9p_unix(&(0x7f0000000240)='./cgroup.cpu/cpuset.cpus\x00', &(0x7f0000000b40)='./file0\x00', 0x0, 0x12c9498, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x110021, 0x0) 1.010615956s ago: executing program 4 (id=1090): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)={0x14, r1, 0xf002135a49ffa319, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x40800) 916.712098ms ago: executing program 4 (id=1091): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7fd}, 0xe) sendmmsg$inet(r0, &(0x7f0000001bc0)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000240)="79544e49f96cdc67b7d7d3a0a74fd99ea414ad8f593d77d523d0c7b1798ee8bfda3dc9c9d952d5d0a6a3bc078292d66e7c0ecd3ea583589ebbe0c262dcfad3141bebfabdb84d8509ed33bca1b34974efd170a246b472b15885a39aa31b7abe6c14054e14864656ef518439f90db787c3f732f47d2f334b0afa3d34ca32f882a8b265fa6b277a4a65364dfff6cdfec5ff88371baceaadc32be7f6c19c15e65a0137b7f1760f03aef4d71c161c541d678f89c6edda5b65e96bc27876f2a8653cd2d24d33f5cbb9b4417ba13bcea26a77361d6b5f67b9852a2145dcd2cbb78094da90b4167840dc70354580319dc5dbf7c089353e089020447bbc08984f7d26", 0xfe}, {&(0x7f0000000340)="fe1af0e449bef6a861bb989d584d90a4a5885fbd481b817fcb3f0065db7f8fff532cf8ccb1960b1092658108bd9854fcc30238ed78c288a491dd751ff83b6a2d2c286e4782deba74760f48611c9b2dd82e5e579118dc05ba2bdd11ced761539a01203a1b1e899f473f7cd84b42dbbb4671b7ddaa095080d1f00b1cb3e2e2b90320b2b0daf0c27c93540a0a34555aeeafc02487d5907e2e90e50de58043f20319b4f50b417ed4f8ce11", 0xa9}, {&(0x7f0000000880)="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", 0x1aa}, {&(0x7f0000000780)="a97eddd45b9a6c614c87c02ef433c373bbfaaa7df2d75a9b68b429b9b0a8b316d6b146ee18446c3b4830eede6e788c66a41b2485b4d25b02dc8c92574a4f6ff44d4d9c4085bcf088de122fc5b855776095b044e2e89b21808df1b396569864f934cbf4b8a3f86e879148889c1198e039e8789867675e8f109a8f65b0cf16fbc49d58f324dbc2ddecc83229cf7d3a45cb305bbc6d0254e06378d84be7900041546926739581c0", 0xa6}, {&(0x7f0000000600)="e0", 0x1}], 0x5}}], 0x1, 0x4000000) 909.576128ms ago: executing program 1 (id=1092): mlockall(0x7) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f0000003200)=""/4096, 0x1000}], 0x1, 0x2c2, 0x100000ca) 719.287843ms ago: executing program 3 (id=1093): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x18, r1, 0x1, 0x70bd2b, 0x0, {0x1b}, [@HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000010}, 0x20000000) 718.656173ms ago: executing program 2 (id=1104): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000340)='N', 0x1) setsockopt$inet6_tcp_int(r0, 0x6, 0x3, &(0x7f0000000000)=0x804, 0x4) 650.859454ms ago: executing program 4 (id=1094): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_buf(r0, 0x0, 0x4, &(0x7f0000000040)="610910bc996c301c8107070408", 0xd) getsockopt$inet_opts(r0, 0x0, 0x4, 0x0, &(0x7f0000000240)) 571.181006ms ago: executing program 0 (id=1095): r0 = syz_io_uring_setup(0x5026, &(0x7f0000000600)={0x0, 0x73ec, 0x0, 0x0, 0x10c}, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000700), 0x5a) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000100), 0x0) 479.413538ms ago: executing program 3 (id=1096): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x28, r1, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}]}]}, 0x28}}, 0x0) 477.171628ms ago: executing program 1 (id=1098): syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000180)=ANY=[], 0x1, 0x2a0, &(0x7f0000000600)="$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") syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x380407b, 0x0, 0x1, 0x0, &(0x7f0000000140)) rename(&(0x7f0000000b40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000000)='./bus\x00') 352.688061ms ago: executing program 4 (id=1099): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x2810000, &(0x7f00000001c0)={[{@user_xattr}, {@nogrpid}, {@noinit_itable}, {@nogrpid}, {@block_validity}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@nojournal_checksum}, {@errors_remount}, {@init_itable_val={'init_itable', 0x3d, 0x1000}}, {@jqfmt_vfsv0}, {@data_err_ignore}]}, 0x1, 0x57a, &(0x7f0000000300)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') read$FUSE(r0, &(0x7f0000003480)={0x2020}, 0x2020) 228.211364ms ago: executing program 3 (id=1100): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x4000, &(0x7f0000000040)={[{@nombcache}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x6}}]}, 0x21, 0x4bd, &(0x7f0000000b80)="$eJzs3c9vVFsdAPDvvf1JKbQoCzUqiCgawkw7QENY4UZjCImRuHIBtR2apjOdpjNFWlmU/8FEElf6J7gwcWHCyr073bnBhQkq0Udf8hbzcu9MS1+Zgb7QN0M6n09ycu+5p8z3nLm55wxf6JwABtb5iNiOiNGIuB8RU+3rSbvErVbJfu7Vy8cLOy8fLyTRbN79T5K3Z9di35/JnGy/5nhE/PRHEb9I3oxb39xama9UyuvterFRXSvWN7euLFfnl8pL5dVSaW52bubG1eulIxvrueofXvxw+fbP/vynbzz/6/b3f5V1a7Ldtn8cR6k19JG9OJnhiLj9RQTrg6H2eEYPXO9wy/kApRHxpYi4kD//UzGU300A4DhrNqeiObW/DgAcd2meA0vSQjsXMBlpWii0cnhnYyKt1OqNyw9qG6uLrVzZdIykD5Yr5Zl2rnA6RpKsPpufv66XDtSvRsSZiPj12Im8XlioVRb7+cEHAAbYyQPr///HWus/AHDMjfe7AwBAz1n/AWDwWP8BYPBY/wFg8Fj/AWDwWP8BYPBY/wFgoPzkzp2sNHfa33+9+HBzY6X28Mpiub5SqG4sFBZq62uFpVptKf/Onuq7Xq9Sq63NXouNR8VGud4o1je37lVrG6uNe/n3et8rj/RkVADA25w59+zvSURs3zyRl9i3l4O1Go63tN8dAPpmqN8dAPrGbl8wuPwdH3jXfq1d/4vQ06PvC9Abl74q/w+DSv4fBpf8Pwwu+X8YXM1mYs9/ABgwcvyAf/8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAz28yL0laaO8FPhlpWihEnIqI6RhJHixXyjMRcToi/jY2MpbVZ/vdaQDgPaX/SuKj9jaAFycPto4mH4/lx4j45W/v/ubRfKOxPptd/+/e9cbT9vVSzzsPABzC7jq9u47vevXy8cJu6WV/XvygtbloFnenXVotwzGcH8cj+3Ay8b+kXW9JImLoCOJvP4mIr3Qaf5LnRqbbO58ejJ/FPtXT+Oln4qd5W+uYvRdfPoK+wKB5ls0/tzo9f2mcz4+dn//xfIZ6f7vz384b81+6N/8NdZn/zh82xrW//Hi0W9uTiK8Nd4qf7MVPusS/eMj4//j6Ny90a2v+LuJSdI6/P1axUV0r1je3rixX55fKS+XVUmludm7mxtXrpWKeoy7uZqrf9O+bl093i5+Nf6JL/PzO35nsOv7vHHL8v//k/s+/9Zb43/t25/t/Nj92fv+zNfG7h4w/P/HHrtt3Z/EXu4z/Xff/8iHjP//n1uIhfxQA6IH65tbKfKVSXnfiZO9k95Peh9Kf7ifNqVZPP5T+HJ+Tfs5KQC+8fuj73RMAAAAAAAAAAAAAAKCbXvw6Ub/HCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwPH1aQAAAP//sHnUnw==") syz_mount_image$fuse(0x0, &(0x7f0000000040)='./bus\x00', 0x870499, 0x0, 0xf, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x804008, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}]}) 0s ago: executing program 1 (id=1101): unshare(0x2c020400) r0 = fanotify_init(0x200, 0x0) fanotify_mark(r0, 0x180, 0x0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): mounting fs with errors [ 90.977679][ T4611] loop0: detected capacity change from 0 to 4096 [ 91.085480][ T4616] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 91.151636][ T4611] NILFS (loop0): nilfs_sufile_do_free: segment 5 is already clean [ 91.444594][ T4534] tipc: Node number set to 4269801491 [ 91.602846][ T4534] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 91.794827][ T4534] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 91.829001][ T4534] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 91.888538][ T4534] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 91.920190][ T4534] usb 5-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 91.948822][ T4534] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.959029][ T4608] loop3: detected capacity change from 0 to 32768 [ 91.986369][ T4534] usb 5-1: config 0 descriptor?? [ 92.009720][ T4623] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 92.095483][ T4608] XFS (loop3): DAX unsupported by block device. Turning off DAX. [ 92.123875][ T4608] XFS (loop3): Mounting V5 Filesystem [ 92.304055][ T4608] XFS (loop3): Ending clean mount [ 92.322097][ T4608] XFS (loop3): Quotacheck needed: Please wait. [ 92.390324][ T4608] XFS (loop3): Quotacheck: Done. [ 92.401905][ T4627] loop1: detected capacity change from 0 to 40427 [ 92.430468][ T4627] F2FS-fs (loop1): invalid crc value [ 92.440819][ T4627] F2FS-fs (loop1): Found nat_bits in checkpoint [ 92.476121][ T4534] gt683r_led 0003:1770:FF00.0002: hidraw0: USB HID v0.00 Device [HID 1770:ff00] on usb-dummy_hcd.4-1/input0 [ 92.609099][ T4627] F2FS-fs (loop1): Start checkpoint disabled! [ 92.622216][ T4277] XFS (loop3): Unmounting Filesystem [ 92.672366][ T4627] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 92.727132][ T4533] usb 5-1: USB disconnect, device number 2 [ 92.770201][ T4534] gt683r_led 0003:1770:FF00.0002: failed to send set report request: -19 [ 92.857339][ T4645] fido_id[4645]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 93.097322][ T9] kworker/u4:0: attempt to access beyond end of device [ 93.097322][ T9] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 93.162629][ T4650] capability: warning: `syz.2.91' uses deprecated v2 capabilities in a way that may be insecure [ 93.363987][ T4652] loop0: detected capacity change from 0 to 4096 [ 93.421035][ T4652] NILFS error (device loop0): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 93.432299][ T4655] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 93.447167][ T4652] NILFS (loop0): mounting fs with errors [ 94.436948][ T4686] loop4: detected capacity change from 0 to 512 [ 94.512992][ T4686] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 94.568821][ T4686] EXT4-fs error (device loop4): ext4_orphan_get:1435: comm syz.4.106: bad orphan inode 15 [ 94.633216][ T4686] ext4_test_bit(bit=14, block=18) = 1 [ 94.669614][ T4686] is_bad_inode(inode)=0 [ 94.680445][ T4686] NEXT_ORPHAN(inode)=1023 [ 94.701605][ T4686] max_ino=32 [ 94.705313][ T4534] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 94.725558][ T4669] loop2: detected capacity change from 0 to 32768 [ 94.737507][ T4686] i_nlink=0 [ 94.764107][ T4686] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #15: comm syz.4.106: corrupted inode contents [ 94.785169][ T4669] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.97 (4669) [ 94.808052][ T4686] EXT4-fs error (device loop4): ext4_dirty_inode:6166: inode #15: comm syz.4.106: mark_inode_dirty error [ 94.832505][ T4669] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 94.851606][ T4686] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #15: comm syz.4.106: corrupted inode contents [ 94.864732][ T4669] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 94.874473][ T4669] BTRFS info (device loop2): force clearing of disk cache [ 94.881752][ T4686] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2950: inode #15: comm syz.4.106: mark_inode_dirty error [ 94.894452][ T4669] BTRFS info (device loop2): metadata ratio 0 [ 94.900666][ T4669] BTRFS info (device loop2): using free space tree [ 94.908478][ T4686] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2953: inode #15: comm syz.4.106: mark inode dirty (error -117) [ 94.921911][ T4686] EXT4-fs warning (device loop4): ext4_evict_inode:301: xattr delete (err -117) [ 94.935152][ T4534] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.948258][ T4534] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.960135][ T4686] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 94.969046][ T4686] ext2 filesystem being mounted at /15/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 95.000867][ T4534] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 95.014622][ T4534] usb 4-1: config 0 interface 0 has no altsetting 0 [ 95.021318][ T4534] usb 4-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 95.068451][ T4534] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.101818][ T4717] netlink: 32 bytes leftover after parsing attributes in process `syz.0.114'. [ 95.113490][ T4534] usb 4-1: config 0 descriptor?? [ 95.132497][ T4276] EXT4-fs (loop4): unmounting filesystem. [ 95.163289][ T4669] BTRFS info (device loop2): enabling ssd optimizations [ 95.181543][ T4669] BTRFS info (device loop2): rebuilding free space tree [ 95.310906][ T4724] loop0: detected capacity change from 0 to 1024 [ 95.388437][ T4724] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 95.536981][ T4534] hkems 0003:2006:0118.0003: unbalanced collection at end of report description [ 95.562052][ T4534] hkems 0003:2006:0118.0003: parse failed [ 95.600183][ T4534] hkems: probe of 0003:2006:0118.0003 failed with error -22 [ 95.616790][ T4278] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 95.656502][ T4282] EXT4-fs (loop0): unmounting filesystem. [ 95.670353][ T4699] loop1: detected capacity change from 0 to 32768 [ 95.716503][ T4699] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.112 (4699) [ 95.776524][ T4534] usb 4-1: USB disconnect, device number 2 [ 95.964232][ T4699] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 95.983488][ T4699] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 95.992413][ T4699] BTRFS info (device loop1): using free space tree [ 96.003066][ T4644] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 11 /dev/loop2 scanned by udevd (4644) [ 96.280145][ T4699] BTRFS info (device loop1): enabling ssd optimizations [ 96.470451][ T26] audit: type=1800 audit(1791202523.010:2): pid=4699 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.112" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 96.647294][ T4271] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 96.663075][ T125] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 96.834367][ T4779] netlink: 16 bytes leftover after parsing attributes in process `syz.0.129'. [ 96.897444][ T125] usb 3-1: unable to get BOS descriptor or descriptor too short [ 96.938103][ T125] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 96.979216][ T125] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 97.027118][ T125] usb 3-1: string descriptor 0 read error: -22 [ 97.053143][ T125] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 97.082838][ T125] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.122057][ T125] usb 3-1: selecting invalid altsetting 1 [ 97.155352][ T125] usb 3-1: unit 3 not found! [ 97.159350][ T4790] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4276] was attempted by ""[4790] [ 97.323478][ T125] usb 3-1: cannot request logical cluster ID: 0 (err: -5) [ 97.331071][ T125] usb 3-1: invalid MIXER UNIT descriptor 6 [ 97.361792][ T4792] loop0: detected capacity change from 0 to 512 [ 97.418029][ T4792] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 97.420564][ T125] snd-usb-audio: probe of 3-1:1.0 failed with error -5 [ 97.491420][ T4792] EXT4-fs (loop0): 1 truncate cleaned up [ 97.503766][ T4792] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 97.550653][ T125] usb 3-1: USB disconnect, device number 3 [ 97.687603][ T4796] loop4: detected capacity change from 0 to 4096 [ 97.740325][ T4796] ntfs3: Unknown parameter 'case' [ 97.740992][ T4282] EXT4-fs (loop0): unmounting filesystem. [ 97.839758][ T4644] udevd[4644]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 97.907622][ T4777] loop3: detected capacity change from 0 to 32768 [ 98.018500][ T4777] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 98.282461][ T4277] ocfs2: Unmounting device (7,3) on (node local) [ 98.302136][ T4801] loop1: detected capacity change from 0 to 32768 [ 98.463897][ T4809] loop2: detected capacity change from 0 to 512 [ 98.533302][ T4801] XFS (loop1): Mounting V5 Filesystem [ 98.652468][ T4801] XFS (loop1): Ending clean mount [ 98.758145][ T4271] XFS (loop1): Unmounting Filesystem [ 98.903409][ T4803] loop0: detected capacity change from 0 to 32768 [ 99.032834][ T4780] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 99.046258][ T4803] find_entry called with index >= next_index [ 99.067738][ T4830] capability: warning: `syz.2.148' uses 32-bit capabilities (legacy support in use) [ 99.068211][ T4803] find_entry called with index >= next_index [ 99.128482][ T4803] find_entry called with index >= next_index [ 99.145813][ T4803] find_entry called with index >= next_index [ 99.152163][ T4803] find_entry called with index >= next_index [ 99.207606][ T4803] add_index: next_index = 0. Resetting! [ 99.217300][ T4803] find_entry called with index >= next_index [ 99.225800][ T4780] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.254367][ T4803] find_entry called with index >= next_index [ 99.261821][ T4803] find_entry called with index >= next_index [ 99.268134][ T4780] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 99.293834][ T4803] find_entry called with index >= next_index [ 99.303065][ T4780] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 99.333050][ T4803] find_entry called with index >= next_index [ 99.350828][ T4780] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 99.360956][ T4803] find_entry called with index >= next_index [ 99.371633][ T4780] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.380933][ T4803] find_entry called with index >= next_index [ 99.417528][ T4780] usb 5-1: config 0 descriptor?? [ 99.483585][ T4835] netlink: 72 bytes leftover after parsing attributes in process `syz.2.150'. [ 99.492531][ T4835] netlink: 24 bytes leftover after parsing attributes in process `syz.2.150'. [ 99.539338][ T4835] netlink: 4 bytes leftover after parsing attributes in process `syz.2.150'. [ 99.888101][ T4780] plantronics 0003:047F:FFFF.0004: unbalanced delimiter at end of report description [ 99.914630][ T4780] plantronics 0003:047F:FFFF.0004: parse failed [ 99.921029][ T4780] plantronics: probe of 0003:047F:FFFF.0004 failed with error -22 [ 99.924636][ T4849] Bluetooth: MGMT ver 1.22 [ 100.013372][ T4738] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 100.026511][ T125] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 100.107429][ T4533] usb 5-1: USB disconnect, device number 3 [ 100.215725][ T4738] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.239799][ T125] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 100.242820][ T4738] usb 1-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 100.258619][ T125] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.270920][ T4738] usb 1-1: config 0 interface 0 has no altsetting 0 [ 100.270959][ T4738] usb 1-1: New USB device found, idVendor=056a, idProduct=0325, bcdDevice= 0.00 [ 100.270984][ T4738] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.282434][ T4738] usb 1-1: config 0 descriptor?? [ 100.319142][ T125] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 100.338116][ T125] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 100.357397][ T125] usb 4-1: Manufacturer: syz [ 100.369651][ T125] usb 4-1: config 0 descriptor?? [ 100.583039][ T125] rc_core: IR keymap rc-hauppauge not found [ 100.593502][ T125] Registered IR keymap rc-empty [ 100.600356][ T125] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 100.634649][ T125] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input5 [ 100.760266][ T4738] wacom 0003:056A:0325.0005: hidraw0: USB HID v36.2b Joystick [HID 056a:0325] on usb-dummy_hcd.0-1/input0 [ 100.887374][ C0] igorplugusb 4-1:0.0: receive overflow invalid: 52 [ 101.048395][ T4738] usb 1-1: USB disconnect, device number 3 [ 101.064070][ T4861] loop2: detected capacity change from 0 to 32768 [ 101.103886][ T125] usb 4-1: USB disconnect, device number 3 [ 101.114667][ T4866] fido_id[4866]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 101.243921][ T4859] loop1: detected capacity change from 0 to 40427 [ 101.272871][ T4859] F2FS-fs (loop1): Corrupted extension count (64 + 1 > 64) [ 101.283458][ T4859] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 101.305190][ T4859] F2FS-fs (loop1): invalid crc value [ 101.327626][ T4859] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 101.487712][ T4859] F2FS-fs (loop1): Start checkpoint disabled! [ 101.511744][ T4859] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 101.521812][ T4859] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 101.693589][ T1065] kworker/u4:4: attempt to access beyond end of device [ 101.693589][ T1065] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 101.780323][ T4873] loop3: detected capacity change from 0 to 128 [ 101.830993][ T4873] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 101.874987][ T4873] hpfs: filesystem error: improperly stopped [ 101.893155][ T4873] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 101.932855][ T4873] hpfs: You really don't want any checks? You are crazy... [ 101.940248][ T4873] hpfs: Code page index out of array [ 101.954249][ T4873] hpfs: code page support is disabled [ 101.961517][ T4873] hpfs: hpfs_map_4sectors(): unaligned read [ 101.969781][ T4873] hpfs: hpfs_map_4sectors(): unaligned read [ 101.977355][ T4873] hpfs: filesystem error: unable to find root dir [ 102.242451][ T4881] IPv6: ADDRCONF(NETDEV_CHANGE): eql: link becomes ready [ 102.268102][ T4881] IPv6: ADDRCONF(NETDEV_CHANGE): wpan0: link becomes ready [ 102.297270][ T4881] IPv6: ADDRCONF(NETDEV_CHANGE): wpan1: link becomes ready [ 102.315479][ T4883] netlink: 8 bytes leftover after parsing attributes in process `syz.0.173'. [ 102.342491][ T4881] IPv6: ADDRCONF(NETDEV_CHANGE): nr0: link becomes ready [ 102.358520][ T4881] IPv6: ADDRCONF(NETDEV_CHANGE): nr1: link becomes ready [ 102.383426][ T4881] IPv6: ADDRCONF(NETDEV_CHANGE): nr2: link becomes ready [ 102.409023][ T4889] loop1: detected capacity change from 0 to 128 [ 102.413371][ T4881] IPv6: ADDRCONF(NETDEV_CHANGE): nr3: link becomes ready [ 102.445462][ T4881] IPv6: ADDRCONF(NETDEV_CHANGE): nr4: link becomes ready [ 102.469770][ T4889] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 102.499426][ T4889] hpfs: filesystem error: improperly stopped [ 102.512829][ T4889] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 102.514323][ T4881] IPv6: ADDRCONF(NETDEV_CHANGE): lapb0: link becomes ready [ 102.521058][ T4889] hpfs: You really don't want any checks? You are crazy... [ 102.521107][ T4889] hpfs: Code page index out of array [ 102.521115][ T4889] hpfs: code page support is disabled [ 102.521315][ T4889] hpfs: hpfs_map_4sectors(): unaligned read [ 102.521393][ T4889] hpfs: hpfs_map_4sectors(): unaligned read [ 102.583073][ T4881] IPv6: ADDRCONF(NETDEV_CHANGE): lapb1: link becomes ready [ 102.612919][ T4889] hpfs: filesystem error: unable to find root dir [ 102.623518][ T4881] IPv6: ADDRCONF(NETDEV_CHANGE): lapb2: link becomes ready [ 102.652100][ T4881] IPv6: ADDRCONF(NETDEV_CHANGE): lapb3: link becomes ready [ 102.654508][ T4889] hpfs: bad mount options. [ 102.667918][ T4881] IPv6: ADDRCONF(NETDEV_CHANGE): lapb4: link becomes ready [ 102.691414][ T4881] IPv6: ADDRCONF(NETDEV_CHANGE): lapb5: link becomes ready [ 102.768648][ T4897] loop4: detected capacity change from 0 to 1024 [ 102.831247][ T4899] loop0: detected capacity change from 0 to 256 [ 102.845776][ T4899] exfat: Deprecated parameter 'namecase' [ 102.896905][ T4899] exfat: Deprecated parameter 'utf8' [ 103.027518][ T4899] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001ff53, chksum : 0xd72bb7d8, utbl_chksum : 0xe619d30d) [ 103.692172][ T4894] loop3: detected capacity change from 0 to 40427 [ 103.747038][ T4894] F2FS-fs (loop3): Small segment_count (9 < 1 * 24) [ 103.774862][ T4894] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 103.871491][ T4894] F2FS-fs (loop3): Found nat_bits in checkpoint [ 104.009199][ T4901] loop2: detected capacity change from 0 to 32768 [ 104.073073][ T4894] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 104.080392][ T4894] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 104.186441][ T4912] f2fs_ckpt-7:3: attempt to access beyond end of device [ 104.186441][ T4912] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 104.552154][ T4934] netlink: 8 bytes leftover after parsing attributes in process `syz.0.195'. [ 104.811576][ T4936] loop1: detected capacity change from 0 to 2048 [ 104.923480][ T4936] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 104.989942][ T4936] EXT4-fs error (device loop1): ext4_find_extent:900: inode #2: comm syz.1.196: inode has invalid extent depth: 8 [ 105.076187][ T4936] EXT4-fs (loop1): Remounting filesystem read-only [ 105.230306][ T4949] netlink: 'syz.2.201': attribute type 10 has an invalid length. [ 105.250905][ T4271] EXT4-fs (loop1): unmounting filesystem. [ 105.789796][ T4958] ecryptfs_verify_version: Minor version number mismatch. Expected [4]; got [0] [ 105.811247][ T4968] loop4: detected capacity change from 0 to 1024 [ 105.818086][ T4958] Data structure version mismatch. Userspace tools must match eCryptfs kernel module with major version [0] and minor version [4] [ 105.854563][ T4968] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 105.867775][ T4958] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 105.889427][ T4958] One or more global auth toks could not properly register; rc = [-22] [ 105.943918][ T4958] Error parsing options; rc = [-22] [ 106.150353][ T4314] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 106.352851][ T4314] usb 2-1: Using ep0 maxpacket: 16 [ 106.353378][ T4989] loop0: detected capacity change from 0 to 512 [ 106.370030][ T4314] usb 2-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 106.402176][ T4314] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.421617][ T4314] usb 2-1: Product: syz [ 106.426215][ T4314] usb 2-1: Manufacturer: syz [ 106.430859][ T4314] usb 2-1: SerialNumber: syz [ 106.431595][ T4989] EXT4-fs: test_dummy_encryption requires encrypt feature [ 106.468887][ T4314] usb 2-1: config 0 descriptor?? [ 106.474164][ T4992] netlink: 292 bytes leftover after parsing attributes in process `syz.3.219'. [ 106.501629][ T4314] ums-onetouch 2-1:0.0: USB Mass Storage device detected [ 106.728936][ T5002] loop2: detected capacity change from 0 to 512 [ 106.729637][ T4314] usb 2-1: USB disconnect, device number 2 [ 106.836925][ T5002] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 106.895095][ T5002] ext4 filesystem being mounted at /45/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 106.973781][ T4278] EXT4-fs (loop2): unmounting filesystem. [ 106.981271][ T5011] loop4: detected capacity change from 0 to 1024 [ 107.451037][ T5028] 0x000000000000-0x000000020000 : "" [ 107.526757][ T5028] ftl_cs: FTL header not found. [ 107.864643][ T5041] Bluetooth: MGMT ver 1.22 [ 107.869221][ T5041] Bluetooth: hci0: unsupported parameter 5135 [ 107.901742][ T5041] Bluetooth: hci0: unsupported parameter 8192 [ 107.921956][ T5041] Bluetooth: hci0: unsupported parameter 5135 [ 107.952967][ T5041] Bluetooth: hci0: unsupported parameter 8192 [ 108.077037][ T5048] loop4: detected capacity change from 0 to 2048 [ 108.129613][ T5048] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 108.341515][ T5052] loop1: detected capacity change from 0 to 4096 [ 108.342641][ T5056] netlink: 12 bytes leftover after parsing attributes in process `syz.2.247'. [ 108.411361][ T5052] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 108.461879][ T5056] device hsr0 entered promiscuous mode [ 108.492217][ T5056] device macvtap1 entered promiscuous mode [ 108.514853][ T5030] loop0: detected capacity change from 0 to 32768 [ 108.526860][ T5052] ntfs3: loop1: failed to convert "076c" to cp932 [ 108.619577][ T5030] JBD2: Ignoring recovery information on journal [ 108.776462][ T5064] loop1: detected capacity change from 0 to 1024 [ 108.851933][ T5030] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 109.076815][ T4282] ocfs2: Unmounting device (7,0) on (node local) [ 109.975654][ T5107] input: syz0 as /devices/virtual/input/input9 [ 110.386508][ T5122] netlink: 'syz.4.278': attribute type 2 has an invalid length. [ 110.654374][ T5131] loop4: detected capacity change from 0 to 4096 [ 110.762173][ T5131] ntfs3: loop4: Failed to load $Extend. [ 110.886067][ T5139] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 111.333047][ T4534] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 111.532807][ T4534] usb 4-1: Using ep0 maxpacket: 8 [ 111.544208][ T4534] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 111.569339][ T5125] loop2: detected capacity change from 0 to 40427 [ 111.576322][ T4534] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.593005][ T4534] usb 4-1: Product: syz [ 111.597372][ T4534] usb 4-1: Manufacturer: syz [ 111.602018][ T4534] usb 4-1: SerialNumber: syz [ 111.624263][ T5125] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 111.630680][ T5125] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 111.663561][ T4534] usb 4-1: config 0 descriptor?? [ 111.671741][ T5125] F2FS-fs (loop2): invalid crc value [ 111.693872][ T4534] gspca_main: se401-2.14.0 probing 047d:5003 [ 111.728912][ T5165] loop1: detected capacity change from 0 to 512 [ 111.740914][ T5125] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 111.924543][ T5165] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 111.944834][ T5165] ext4 filesystem being mounted at /57/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.967618][ T5125] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 112.003042][ T5125] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 112.015066][ T4271] EXT4-fs (loop1): unmounting filesystem. [ 112.080123][ T4278] syz-executor: attempt to access beyond end of device [ 112.080123][ T4278] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 112.096648][ T4534] gspca_se401: Wrong descriptor type [ 112.309689][ T4534] usb 4-1: USB disconnect, device number 4 [ 112.426509][ T5179] loop0: detected capacity change from 0 to 8 [ 112.491009][ T5179] squashfs image failed sanity check [ 112.662978][ T5185] Illegal XDP return value 4294967274 on prog (id 15) dev N/A, expect packet loss! [ 112.681234][ T5187] loop1: detected capacity change from 0 to 256 [ 112.720557][ T5161] loop4: detected capacity change from 0 to 32768 [ 112.797386][ T5187] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 112.988662][ T5192] loop2: detected capacity change from 0 to 256 [ 113.123940][ T5192] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011a39, chksum : 0xd4e5c97b, utbl_chksum : 0xe619d30d) [ 113.453609][ T26] audit: type=1326 audit(1791202539.990:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5204 comm="syz.0.312" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1eadf9e199 code=0x50000 [ 113.479987][ T5208] loop1: detected capacity change from 0 to 512 [ 113.543029][ T5208] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e826c018, mo2=0002] [ 113.551455][ T5208] System zones: 1-12 [ 113.601276][ T26] audit: type=1326 audit(1791202540.000:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5204 comm="syz.0.312" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1eadf9e199 code=0x50000 [ 113.625752][ T26] audit: type=1326 audit(1791202540.000:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5204 comm="syz.0.312" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1eadf9e199 code=0x50000 [ 113.649560][ T26] audit: type=1326 audit(1791202540.000:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5204 comm="syz.0.312" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1eadf9e199 code=0x50000 [ 113.673819][ T26] audit: type=1326 audit(1791202540.000:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5204 comm="syz.0.312" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1eadf9e199 code=0x50000 [ 113.711643][ T5213] netlink: 32 bytes leftover after parsing attributes in process `syz.2.315'. [ 113.714002][ T5208] EXT4-fs error (device loop1): ext4_do_update_inode:5279: inode #15: comm syz.1.313: corrupted inode contents [ 113.721494][ T26] audit: type=1326 audit(1791202540.000:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5204 comm="syz.0.312" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1eadf9e199 code=0x50000 [ 113.780237][ T5208] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 113.808901][ T5208] EXT4-fs error (device loop1): ext4_do_update_inode:5279: inode #15: comm syz.1.313: corrupted inode contents [ 113.832843][ T26] audit: type=1326 audit(1791202540.000:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5204 comm="syz.0.312" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1eadf9e199 code=0x50000 [ 113.856900][ C0] vkms_vblank_simulate: vblank timer overrun [ 113.873207][ T5208] EXT4-fs error (device loop1): ext4_evict_inode:329: inode #15: comm syz.1.313: mark_inode_dirty error [ 113.880434][ T26] audit: type=1326 audit(1791202540.000:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5204 comm="syz.0.312" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1eadf9e199 code=0x50000 [ 113.923499][ T5208] EXT4-fs (loop1): 1 orphan inode deleted [ 113.929414][ T5208] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 113.983464][ T26] audit: type=1326 audit(1791202540.000:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5204 comm="syz.0.312" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1eadf9e199 code=0x50000 [ 114.007590][ C0] vkms_vblank_simulate: vblank timer overrun [ 114.051856][ T26] audit: type=1326 audit(1791202540.000:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5204 comm="syz.0.312" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1eadf9e199 code=0x50000 [ 114.152016][ T4271] EXT4-fs (loop1): unmounting filesystem. [ 114.301311][ T5205] loop3: detected capacity change from 0 to 32768 [ 114.302917][ T4780] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 114.348660][ T5205] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 11 [ 114.432847][ T5228] binder: 5227:5228 ioctl c018620c 2000000000c0 returned -22 [ 114.504797][ T4780] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.522496][ T4533] logitech-hidpp-device 0005:046D:B012.0006: unknown main item tag 0x1 [ 114.551189][ T4780] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 114.564598][ T4533] logitech-hidpp-device 0005:046D:B012.0006: unknown main item tag 0x0 [ 114.584356][ T4533] logitech-hidpp-device 0005:046D:B012.0006: unknown main item tag 0x0 [ 114.593486][ T4780] usb 5-1: config 0 interface 0 has no altsetting 0 [ 114.617695][ T4780] usb 5-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 114.642508][ T4533] logitech-hidpp-device 0005:046D:B012.0006: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 114.648409][ T4780] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.688845][ T4644] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 11 [ 114.722668][ T4780] usb 5-1: config 0 descriptor?? [ 114.911346][ T5241] loop2: detected capacity change from 0 to 1024 [ 114.941052][ T5238] fido_id[5238]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 114.977737][ T5243] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 115.147109][ T4780] hid-multitouch 0003:0EEF:72C4.0007: ignoring exceeding usage max [ 115.162425][ T4780] hid-multitouch 0003:0EEF:72C4.0007: item 0 1 0 11 parsing failed [ 115.172584][ T4780] hid-multitouch: probe of 0003:0EEF:72C4.0007 failed with error -22 [ 115.359500][ T4780] usb 5-1: USB disconnect, device number 4 [ 115.503760][ T5257] loop3: detected capacity change from 0 to 512 [ 115.607799][ T5260] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 115.660597][ T5260] EXT4-fs (loop2): 1 truncate cleaned up [ 115.682979][ T5260] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 115.924355][ T4278] EXT4-fs (loop2): unmounting filesystem. [ 116.100194][ T5258] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 11 [ 116.325997][ T5254] mmap: syz.1.333 (5254) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 116.360112][ T5274] SQUASHFS error: Unable to read directory block [629:26] [ 116.460582][ T4644] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 11 [ 116.609767][ T5284] set_capacity_and_notify: 3 callbacks suppressed [ 116.609783][ T5284] loop0: detected capacity change from 0 to 16 [ 116.759747][ T5290] loop3: detected capacity change from 0 to 512 [ 116.767341][ T5284] erofs: (device loop0): mounted with root inode @ nid 36. [ 116.824420][ T5290] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 116.867997][ T5284] syz.0.346: attempt to access beyond end of device [ 116.867997][ T5284] loop0: rw=0, sector=48, nr_sectors = 16 limit=16 [ 116.912007][ T5290] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3861: comm syz.3.349: Allocating blocks 41-42 which overlap fs metadata [ 116.930202][ T5298] syz.0.346: attempt to access beyond end of device [ 116.930202][ T5298] loop0: rw=0, sector=48, nr_sectors = 16 limit=16 [ 116.992277][ T5290] EXT4-fs (loop3): Remounting filesystem read-only [ 117.003550][ T5290] EXT4-fs error (device loop3): ext4_acquire_dquot:6841: comm syz.3.349: Failed to acquire dquot type 1 [ 117.015518][ T5290] EXT4-fs (loop3): Remounting filesystem read-only [ 117.023265][ T5290] EXT4-fs error (device loop3): mb_free_blocks:1839: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 117.070337][ T5290] EXT4-fs (loop3): Remounting filesystem read-only [ 117.077606][ T5290] EXT4-fs error (device loop3): ext4_do_update_inode:5279: inode #12: comm syz.3.349: corrupted inode contents [ 117.113026][ T5290] EXT4-fs (loop3): Remounting filesystem read-only [ 117.120050][ T5290] EXT4-fs error (device loop3): ext4_dirty_inode:6166: inode #12: comm syz.3.349: mark_inode_dirty error [ 117.192814][ T5290] EXT4-fs (loop3): Remounting filesystem read-only [ 117.220164][ T5290] EXT4-fs error (device loop3): ext4_do_update_inode:5279: inode #12: comm syz.3.349: corrupted inode contents [ 117.281636][ T5290] EXT4-fs (loop3): Remounting filesystem read-only [ 117.299197][ T5290] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #12: comm syz.3.349: mark_inode_dirty error [ 117.360586][ T5290] EXT4-fs (loop3): Remounting filesystem read-only [ 117.380112][ T5290] EXT4-fs error (device loop3): ext4_do_update_inode:5279: inode #12: comm syz.3.349: corrupted inode contents [ 117.446215][ T5290] EXT4-fs (loop3): Remounting filesystem read-only [ 117.460358][ T5311] loop4: detected capacity change from 0 to 4096 [ 117.472800][ T5290] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 117.492949][ T5290] EXT4-fs (loop3): Remounting filesystem read-only [ 117.499577][ T5290] EXT4-fs error (device loop3): ext4_do_update_inode:5279: inode #12: comm syz.3.349: corrupted inode contents [ 117.523545][ T5311] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 117.557458][ T5290] EXT4-fs (loop3): Remounting filesystem read-only [ 117.592628][ T5290] EXT4-fs error (device loop3): ext4_truncate:4325: inode #12: comm syz.3.349: mark_inode_dirty error [ 117.622578][ T5311] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 117.640241][ T5290] EXT4-fs (loop3): Remounting filesystem read-only [ 117.671915][ T5290] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 117.716025][ T5290] EXT4-fs (loop3): Remounting filesystem read-only [ 117.753620][ T5290] EXT4-fs (loop3): 1 truncate cleaned up [ 117.759390][ T5290] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 117.957679][ T5325] loop4: detected capacity change from 0 to 512 [ 117.981893][ T5323] loop1: detected capacity change from 0 to 2048 [ 118.029486][ T5323] overlayfs: unrecognized mount option "\Ûw"âþÄÎûï‹ò»½Çk�îh?9Gúè¯Î~¸_Ž?»�?éöø»Œ?[ïNØ£ÎãßãüG:ŒW{Ìñõ§¯T:æ¿ñêÀnù“íüI‡üo÷˜ÿîÚ÷:ík}qf׿?ɹº¼bbf®èúú�ž}Ø­þ�ò'Ýë_ê±þw×›ï4–”ùÏžêþùï–¿¼'>ÜìG÷6×e{mGŽS ßÓ­þéˆÖó|þŸõXÿ�_ÞìñP" or missing value [ 118.056859][ T4277] EXT4-fs (loop3): unmounting filesystem. [ 118.091072][ T5325] EXT4-fs error (device loop4): ext4_orphan_get:1414: comm syz.4.363: couldn't read orphan inode 26 (err -116) [ 118.183416][ T5325] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 118.253083][ T5325] ext4 filesystem being mounted at /73/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.348731][ T5325] EXT4-fs (loop4): re-mounted. Quota mode: writeback. [ 118.483907][ T5321] loop2: detected capacity change from 0 to 32768 [ 118.555969][ T4276] EXT4-fs (loop4): unmounting filesystem. [ 118.750139][ T5314] loop0: detected capacity change from 0 to 32768 [ 118.757240][ T5336] loop4: detected capacity change from 0 to 256 [ 118.802370][ T5338] smc: net device wlan0 applied user defined pnetid SYZ1 [ 118.948872][ T5314] XFS (loop0): Mounting V5 Filesystem [ 119.116610][ T5314] XFS (loop0): Ending clean mount [ 119.254795][ T4282] XFS (loop0): Unmounting Filesystem [ 119.637742][ T5366] loop3: detected capacity change from 0 to 256 [ 119.685209][ T5366] exfat: Deprecated parameter 'utf8' [ 119.690645][ T5366] exfat: Deprecated parameter 'namecase' [ 119.718206][ T5366] exfat: Deprecated parameter 'utf8' [ 119.771202][ T5366] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 119.945804][ T5374] loop0: detected capacity change from 0 to 256 [ 120.534742][ T5362] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop4 scanned by syz.4.377 (5362) [ 120.627120][ T5362] BTRFS info (device loop4): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 120.654278][ T5362] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 120.679767][ T5362] BTRFS info (device loop4): enabling disk space caching [ 120.719032][ T5362] BTRFS info (device loop4): force clearing of disk cache [ 120.749617][ T5362] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 120.796671][ T5362] BTRFS info (device loop4): use zstd compression, level 3 [ 120.828149][ T5362] BTRFS info (device loop4): disk space caching is enabled [ 120.952269][ T5407] netlink: 8 bytes leftover after parsing attributes in process `syz.3.395'. [ 121.123897][ T5362] BTRFS info (device loop4): enabling ssd optimizations [ 121.153017][ T5362] BTRFS info (device loop4): rebuilding free space tree [ 121.289704][ T5362] BTRFS info (device loop4): disabling free space tree [ 121.302960][ T5382] XFS (loop1): Mounting V5 Filesystem [ 121.379451][ T5362] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 121.417433][ T5362] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 121.530921][ T5382] XFS (loop1): Ending clean mount [ 121.568158][ T5436] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 121.823430][ T4271] XFS (loop1): Unmounting Filesystem [ 121.901121][ T4276] BTRFS info (device loop4): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 122.828866][ T5458] set_capacity_and_notify: 3 callbacks suppressed [ 122.828883][ T5458] loop1: detected capacity change from 0 to 128 [ 122.950027][ T5458] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 122.990874][ T5439] loop3: detected capacity change from 0 to 32768 [ 123.057879][ T5458] ext4 filesystem being mounted at /79/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 123.263890][ T4271] EXT4-fs (loop1): unmounting filesystem. [ 123.337750][ T5473] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 123.363120][ T5472] IPVS: stopping master sync thread 5473 ... [ 124.212275][ T4287] Bluetooth: hci4: link tx timeout [ 124.218526][ T4287] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 124.455710][ T5515] option changes via remount are deprecated (pid=5514 comm=syz.1.434) [ 124.592511][ T5521] loop3: detected capacity change from 0 to 1024 [ 124.661852][ T5521] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 124.685170][ T4287] Bluetooth: Fragment is too long (len 14, expected 2) [ 125.427044][ T5519] loop4: detected capacity change from 0 to 32768 [ 125.473796][ T5519] XFS: attr2 mount option is deprecated. [ 125.597324][ T5519] XFS (loop4): Mounting V5 Filesystem [ 125.664394][ T5519] XFS (loop4): Ending clean mount [ 125.844272][ T4276] XFS (loop4): Unmounting Filesystem [ 126.293392][ T4287] Bluetooth: hci4: command 0x0406 tx timeout [ 126.298443][ T5570] loop3: detected capacity change from 0 to 8192 [ 126.320451][ T5576] netlink: 56 bytes leftover after parsing attributes in process `syz.0.460'. [ 126.415941][ T5576] netlink: 8 bytes leftover after parsing attributes in process `syz.0.460'. [ 127.089918][ T5597] loop4: detected capacity change from 0 to 2048 [ 127.140212][ T5601] loop1: detected capacity change from 0 to 256 [ 127.170928][ T5604] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 127.182885][ T4313] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 127.251136][ T5601] FAT-fs (loop1): Directory bread(block 64) failed [ 127.272216][ T5601] FAT-fs (loop1): Directory bread(block 65) failed [ 127.301492][ T5601] FAT-fs (loop1): Directory bread(block 66) failed [ 127.333506][ T5601] FAT-fs (loop1): Directory bread(block 67) failed [ 127.361096][ T5601] FAT-fs (loop1): Directory bread(block 68) failed [ 127.372785][ T4313] usb 1-1: Using ep0 maxpacket: 32 [ 127.378486][ T5601] FAT-fs (loop1): Directory bread(block 69) failed [ 127.382112][ T4313] usb 1-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 127.396617][ T5601] FAT-fs (loop1): Directory bread(block 70) failed [ 127.422979][ T5601] FAT-fs (loop1): Directory bread(block 71) failed [ 127.442848][ T4313] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.460823][ T5608] loop4: detected capacity change from 0 to 22 [ 127.467210][ T4313] usb 1-1: Product: syz [ 127.467242][ T4313] usb 1-1: Manufacturer: syz [ 127.467255][ T4313] usb 1-1: SerialNumber: syz [ 127.469137][ T4313] usb 1-1: config 0 descriptor?? [ 127.475850][ T5601] FAT-fs (loop1): Directory bread(block 72) failed [ 127.489539][ T4313] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 127.493568][ T4317] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 127.521652][ T4313] dvb-usb: bulk message failed: -22 (4/0) [ 127.523820][ T5608] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 127.551673][ T4313] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 127.573421][ T5608] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 127.580182][ T4313] dvb-usb: bulk message failed: -22 (5/0) [ 127.587288][ T5601] FAT-fs (loop1): Directory bread(block 73) failed [ 127.626751][ T4313] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 127.694031][ T5594] dvb-usb: bulk message failed: -22 (7/0) [ 127.700156][ T5594] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 127.701052][ T4313] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 127.732922][ T4317] usb 3-1: Using ep0 maxpacket: 16 [ 127.743204][ T5594] ttusb2: i2c transfer failed. [ 127.743999][ T4317] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.780117][ T4313] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 127.807764][ T4313] usb 1-1: media controller created [ 127.821113][ T4317] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.842338][ T4317] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 127.871953][ T4313] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 127.872814][ T4317] usb 3-1: New USB device found, idVendor=04f2, idProduct=0618, bcdDevice= 0.00 [ 127.930585][ T4317] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.949439][ T4313] usb 1-1: selecting invalid altsetting 3 [ 127.962897][ T4313] ttusb2: set interface to alts=3 failed [ 127.972666][ T4317] usb 3-1: config 0 descriptor?? [ 128.188551][ T4313] DVB: Unable to find symbol tda10086_attach() [ 128.206225][ T4313] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 128.238905][ T5620] netlink: 36 bytes leftover after parsing attributes in process `syz.1.479'. [ 128.245861][ T5616] loop4: detected capacity change from 0 to 4096 [ 128.254603][ T4313] dvb-usb: bulk message failed: -22 (4/0) [ 128.269154][ T4313] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 128.297703][ T4313] dvb-usb: bulk message failed: -22 (5/0) [ 128.329315][ T4313] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 128.351064][ T4313] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 128.384538][ T5616] ntfs3: loop4: Failed to load $Extend. [ 128.403605][ T4317] input: HID 04f2:0618 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:04F2:0618.0008/input/input10 [ 128.424309][ T4313] usb 1-1: USB disconnect, device number 4 [ 128.489766][ T5623] loop3: detected capacity change from 0 to 64 [ 128.511555][ T4313] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 128.552202][ T4317] topseed 0003:04F2:0618.0008: input,hidraw0: USB HID v0.05 Joystick [HID 04f2:0618] on usb-dummy_hcd.2-1/input0 [ 128.696173][ T4780] usb 3-1: USB disconnect, device number 4 [ 128.905298][ T5631] netlink: 'syz.4.483': attribute type 1 has an invalid length. [ 128.990003][ T5626] fido_id[5626]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 129.694353][ T5647] loop1: detected capacity change from 0 to 64 [ 129.737142][ T5647] hfs: unable to locate alternate MDB [ 129.765288][ T5647] hfs: continuing without an alternate MDB [ 130.127337][ T5663] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 130.417688][ T5673] loop2: detected capacity change from 0 to 512 [ 130.510646][ T5679] netlink: 'syz.3.505': attribute type 29 has an invalid length. [ 130.545170][ T5679] netlink: 'syz.3.505': attribute type 29 has an invalid length. [ 130.575730][ T5681] netlink: 'syz.3.505': attribute type 29 has an invalid length. [ 130.842878][ T5689] loop4: detected capacity change from 0 to 256 [ 131.297907][ T5704] loop3: detected capacity change from 0 to 256 [ 131.330381][ T5704] exfat: Deprecated parameter 'namecase' [ 131.352000][ T5704] exfat: Deprecated parameter 'utf8' [ 131.398998][ T5704] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xea424414, utbl_chksum : 0xe619d30d) [ 131.608411][ T5714] loop1: detected capacity change from 0 to 8 [ 131.876997][ T5722] netlink: 27 bytes leftover after parsing attributes in process `syz.4.524'. [ 132.010955][ T5721] loop0: detected capacity change from 0 to 4096 [ 132.036820][ T5728] loop2: detected capacity change from 0 to 1024 [ 132.053893][ T5721] EXT4-fs: Ignoring removed oldalloc option [ 132.060142][ T5721] EXT4-fs: inline encryption not supported [ 132.431337][ T5738] netlink: 67 bytes leftover after parsing attributes in process `syz.3.531'. [ 132.466981][ T5738] IPv6: NLM_F_REPLACE set, but no existing node found! [ 132.556599][ T5742] netlink: 40 bytes leftover after parsing attributes in process `syz.4.534'. [ 132.596553][ T5742] netlink: 56 bytes leftover after parsing attributes in process `syz.4.534'. [ 132.609924][ T5721] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 132.625633][ T5721] EXT4-fs (loop0): Test dummy encryption mode enabled [ 132.649313][ T5746] loop2: detected capacity change from 0 to 512 [ 132.660239][ T5721] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 132.681711][ T5721] System zones: 0-5 [ 132.764614][ T5746] EXT4-fs warning (device loop2): read_mmp_block:115: Error -117 while reading MMP block 12 [ 132.782099][ T5721] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 132.871804][ T5725] XFS (loop1): Mounting V5 Filesystem [ 132.937496][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.944011][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.952378][ T4282] EXT4-fs (loop0): unmounting filesystem. [ 133.043467][ T5725] XFS (loop1): Ending clean mount [ 133.076610][ T5725] XFS (loop1): Quotacheck needed: Please wait. [ 133.279307][ T5725] XFS (loop1): Quotacheck: Done. [ 133.362442][ T5766] set_capacity_and_notify: 1 callbacks suppressed [ 133.362459][ T5766] loop2: detected capacity change from 0 to 4096 [ 133.441137][ T5766] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512) [ 133.488930][ T4271] XFS (loop1): Unmounting Filesystem [ 134.009031][ T5779] loop0: detected capacity change from 0 to 256 [ 134.064862][ T5761] loop4: detected capacity change from 0 to 32768 [ 134.089009][ T5761] XFS: ikeep mount option is deprecated. [ 134.172955][ T4314] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 134.190870][ T5761] XFS (loop4): Mounting V5 Filesystem [ 134.360375][ T5761] XFS (loop4): Ending clean mount [ 134.362833][ T4314] usb 3-1: Using ep0 maxpacket: 8 [ 134.391809][ T4314] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 134.422940][ T4314] usb 3-1: config 179 has no interface number 0 [ 134.429307][ T4314] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 134.485002][ T4314] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 134.507494][ T4314] usb 3-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 134.552856][ T4314] usb 3-1: config 179 interface 65 has no altsetting 0 [ 134.608967][ T4314] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 134.648907][ T4314] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.693633][ T4276] XFS (loop4): Unmounting Filesystem [ 134.743563][ T4314] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input11 [ 134.931909][ T4780] usb 3-1: USB disconnect, device number 5 [ 134.938116][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 134.988601][ T4780] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 135.683493][ T5839] netlink: 'syz.3.571': attribute type 298 has an invalid length. [ 135.790960][ T5838] loop0: detected capacity change from 0 to 4096 [ 135.912645][ T5838] ntfs3: loop0: Failed to load $Extend. [ 136.111812][ T4282] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22. [ 136.120051][ T5845] loop3: detected capacity change from 0 to 8192 [ 136.151084][ T4282] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 136.176019][ T5845] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 136.350872][ T5845] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 136.369341][ T5841] loop2: detected capacity change from 0 to 32768 [ 136.383659][ T5845] REISERFS (device loop3): using ordered data mode [ 136.400745][ T5845] reiserfs: using flush barriers [ 136.439942][ T5845] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 136.519090][ T5845] REISERFS (device loop3): checking transaction log (loop3) [ 136.582408][ T5845] REISERFS (device loop3): Using r5 hash to sort names [ 136.650168][ T5845] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 136.891672][ T5837] loop1: detected capacity change from 0 to 32768 [ 136.929736][ T5843] loop4: detected capacity change from 0 to 32768 [ 136.974483][ T5837] ea_get: invalid extended attribute [ 136.980565][ T5837] ffff888054d64d30: 04 00 00 00 .... [ 136.992980][ T5843] JBD2: Ignoring recovery information on journal [ 137.101940][ T5843] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 137.448387][ T4276] ocfs2: Unmounting device (7,4) on (node local) [ 137.912069][ T5848] loop0: detected capacity change from 0 to 40427 [ 137.966068][ T5848] F2FS-fs (loop0): invalid crc value [ 138.024502][ T5848] F2FS-fs (loop0): Found nat_bits in checkpoint [ 138.152421][ T5848] F2FS-fs (loop0): Cannot turn on quotas: -2 on 1 [ 138.201124][ T5848] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 138.370691][ T4282] syz-executor: attempt to access beyond end of device [ 138.370691][ T4282] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 138.466112][ T5852] loop1: detected capacity change from 0 to 32768 [ 138.718487][ T5856] loop2: detected capacity change from 0 to 40427 [ 138.819304][ T5856] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 138.832558][ T5856] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 138.893790][ T5856] F2FS-fs (loop2): invalid crc value [ 138.923182][ T5879] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 138.965561][ T5856] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 138.970028][ T5882] tipc: Started in network mode [ 139.020207][ T5882] tipc: Node identity 4e12c66a3c81, cluster identity 4711 [ 139.043368][ T5882] tipc: Enabled bearer , priority 10 [ 139.338932][ T5856] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 139.370017][ T5856] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 139.615691][ T4780] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 139.832907][ T4780] usb 1-1: Using ep0 maxpacket: 32 [ 139.840370][ T4780] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 139.872823][ T4780] usb 1-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 139.882060][ T4780] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.917055][ T4780] usb 1-1: config 0 descriptor?? [ 140.173156][ T4317] tipc: Node number set to 1922287210 [ 140.212574][ T5919] loop2: detected capacity change from 0 to 256 [ 140.233918][ T5919] exfat: Deprecated parameter 'namecase' [ 140.254569][ T5919] exfat: Deprecated parameter 'utf8' [ 140.290021][ T5919] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb94bd070, utbl_chksum : 0xe619d30d) [ 140.361470][ T4780] input: HID 5543:0042 Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:5543:0042.0009/input/input12 [ 140.487933][ T4780] input: HID 5543:0042 Mouse as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:5543:0042.0009/input/input13 [ 140.567713][ T4780] uclogic 0003:5543:0042.0009: input,hiddev0,hidraw0: USB HID v7f.fd Mouse [HID 5543:0042] on usb-dummy_hcd.0-1/input0 [ 140.641472][ T4780] usb 1-1: USB disconnect, device number 5 [ 140.933493][ T5933] fido_id[5933]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 141.129640][ T5942] loop3: detected capacity change from 0 to 1024 [ 141.319362][ T5950] netlink: 292 bytes leftover after parsing attributes in process `syz.4.619'. [ 141.382598][ T5952] netlink: 12 bytes leftover after parsing attributes in process `syz.2.622'. [ 141.430042][ T5952] netlink: 580 bytes leftover after parsing attributes in process `syz.2.622'. [ 142.111718][ T5986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.168931][ T5986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.208510][ T5986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.241464][ T5986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.267631][ T5986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.282069][ T5986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.298407][ T5986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.311650][ T5986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.322453][ T5986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.343384][ T5986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.356886][ T5986] device batadv_slave_1 entered promiscuous mode [ 142.384066][ T5986] device macsec1 entered promiscuous mode [ 142.410138][ T5986] device batadv_slave_1 left promiscuous mode [ 142.577506][ T6001] bridge0: port 3(syz_tun) entered blocking state [ 142.622167][ T6001] bridge0: port 3(syz_tun) entered disabled state [ 142.658845][ T6001] device syz_tun entered promiscuous mode [ 142.677339][ T6001] bridge0: port 3(syz_tun) entered blocking state [ 142.686048][ T6001] bridge0: port 3(syz_tun) entered forwarding state [ 142.885814][ T6010] loop4: detected capacity change from 0 to 1024 [ 143.022809][ T4780] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 143.161329][ T6017] loop4: detected capacity change from 0 to 128 [ 143.195062][ T6017] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 143.214928][ T4780] usb 3-1: New USB device found, idVendor=0925, idProduct=8888, bcdDevice= 0.00 [ 143.239334][ T4780] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.292505][ T4780] usb 3-1: config 0 descriptor?? [ 143.331207][ T26] kauditd_printk_skb: 83 callbacks suppressed [ 143.331222][ T26] audit: type=1800 audit(1791202569.870:93): pid=6017 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.650" name="file2" dev="loop4" ino=95 res=0 errno=0 [ 143.653289][ T6034] netlink: 'syz.1.658': attribute type 153 has an invalid length. [ 143.727538][ T4780] smartjoyplus 0003:0925:8888.000A: unknown main item tag 0x0 [ 143.753304][ T4780] smartjoyplus 0003:0925:8888.000A: unknown main item tag 0x0 [ 143.775214][ T4780] smartjoyplus 0003:0925:8888.000A: unknown main item tag 0x0 [ 143.797138][ T4780] smartjoyplus 0003:0925:8888.000A: unknown main item tag 0x0 [ 143.835837][ T4780] smartjoyplus 0003:0925:8888.000A: unknown main item tag 0x0 [ 143.863459][ T4780] smartjoyplus 0003:0925:8888.000A: unknown main item tag 0x0 [ 143.889711][ T4780] smartjoyplus 0003:0925:8888.000A: unknown main item tag 0x0 [ 143.902479][ T6042] Bluetooth: ISO socket layer initialized [ 143.924031][ T4780] smartjoyplus 0003:0925:8888.000A: unknown main item tag 0x0 [ 143.947634][ T4780] smartjoyplus 0003:0925:8888.000A: hidraw0: USB HID vef.fd Device [HID 0925:8888] on usb-dummy_hcd.2-1/input0 [ 143.973136][ T4780] smartjoyplus 0003:0925:8888.000A: no output reports found [ 144.011358][ T26] audit: type=1326 audit(1791202570.550:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6045 comm="" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4c919e199 code=0x7ffc0000 [ 144.073887][ T4780] usb 3-1: USB disconnect, device number 6 [ 144.129874][ T26] audit: type=1326 audit(1791202570.550:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6045 comm="" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4c919e199 code=0x7ffc0000 [ 144.222804][ T26] audit: type=1326 audit(1791202570.550:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6045 comm="" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=136 compat=0 ip=0x7ff4c919e199 code=0x7ffc0000 [ 144.292811][ T26] audit: type=1326 audit(1791202570.550:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6045 comm="" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4c919e199 code=0x7ffc0000 [ 144.331865][ T6047] fido_id[6047]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 144.373641][ T26] audit: type=1326 audit(1791202570.550:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6045 comm="" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4c919e199 code=0x7ffc0000 [ 144.904121][ T6075] netlink: 4 bytes leftover after parsing attributes in process `syz.0.677'. [ 144.934259][ T6075] netlink: 4 bytes leftover after parsing attributes in process `syz.0.677'. [ 144.946625][ T6051] loop1: detected capacity change from 0 to 32768 [ 145.016398][ T6051] JBD2: Ignoring recovery information on journal [ 145.082402][ T6051] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 145.095323][ T4780] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 145.276777][ T4271] ocfs2: Unmounting device (7,1) on (node local) [ 145.292804][ T4780] usb 3-1: Using ep0 maxpacket: 16 [ 145.300408][ T4780] usb 3-1: config 64 has an invalid interface number: 238 but max is 0 [ 145.333357][ T4780] usb 3-1: config 64 has an invalid descriptor of length 0, skipping remainder of the config [ 145.382395][ T4780] usb 3-1: config 64 has no interface number 0 [ 145.416198][ T4780] usb 3-1: config 64 interface 238 has no altsetting 0 [ 145.445695][ T4780] usb 3-1: New USB device found, idVendor=046d, idProduct=087c, bcdDevice=b0.7a [ 145.477310][ T4780] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.522941][ T4780] usb 3-1: Product: syz [ 145.549907][ T4780] usb 3-1: Manufacturer: syz [ 145.555797][ T4780] usb 3-1: SerialNumber: syz [ 145.815527][ T4780] uvcvideo 3-1:64.238: Found Unit with invalid ID 0 [ 145.822562][ T4780] usb 3-1: Found UVC 0.00 device syz (046d:087c) [ 145.850739][ T4780] usb 3-1: No valid video chain found. [ 145.890314][ T4780] usb 3-1: USB disconnect, device number 7 [ 146.232288][ T6114] ip_tables: iptables: counters copy to user failed while replacing table [ 146.728114][ T6131] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 146.959269][ T6140] loop1: detected capacity change from 0 to 512 [ 147.029883][ T6140] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 147.068694][ T6140] EXT4-fs error (device loop1): ext4_orphan_get:1435: comm syz.1.708: bad orphan inode 15 [ 147.090559][ T6140] ext4_test_bit(bit=14, block=18) = 1 [ 147.102169][ T6140] is_bad_inode(inode)=0 [ 147.115957][ T6140] NEXT_ORPHAN(inode)=1023 [ 147.122186][ T6140] max_ino=32 [ 147.134670][ T6140] i_nlink=0 [ 147.141133][ T6140] EXT4-fs error (device loop1): ext4_do_update_inode:5279: inode #15: comm syz.1.708: corrupted inode contents [ 147.164550][ T6140] EXT4-fs error (device loop1): ext4_dirty_inode:6166: inode #15: comm syz.1.708: mark_inode_dirty error [ 147.185972][ T6140] EXT4-fs error (device loop1): ext4_do_update_inode:5279: inode #15: comm syz.1.708: corrupted inode contents [ 147.208758][ T6140] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2950: inode #15: comm syz.1.708: mark_inode_dirty error [ 147.228129][ T6140] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2953: inode #15: comm syz.1.708: mark inode dirty (error -117) [ 147.246763][ T6140] EXT4-fs warning (device loop1): ext4_evict_inode:301: xattr delete (err -117) [ 147.258272][ T6140] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 147.272186][ T6140] ext2 filesystem being mounted at /142/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 147.455536][ T4271] EXT4-fs (loop1): unmounting filesystem. [ 147.858056][ T6134] loop3: detected capacity change from 0 to 32768 [ 147.909758][ T6134] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.705 (6134) [ 147.987611][ T6134] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 148.023585][ T6134] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 148.041245][ T6159] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4282] was attempted by ""[6159] [ 148.062465][ T6134] BTRFS info (device loop3): using free space tree [ 148.118795][ T6165] loop2: detected capacity change from 0 to 8 [ 148.139631][ T6165] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 148.239234][ T4264] udevd[4264]: incorrect cramfs checksum on /dev/loop2 [ 148.310212][ T6165] cramfs: Error -3 while decompressing! [ 148.330927][ T6134] BTRFS info (device loop3): enabling ssd optimizations [ 148.383056][ T6165] cramfs: ffffffff96dc71f8(16)->ffff88804d2c3000(4096) [ 148.390467][ T6165] cramfs: Error -3 while decompressing! [ 148.419173][ T6165] cramfs: ffffffff96dc71f8(16)->ffff88804d2c3000(4096) [ 148.437239][ T26] audit: type=1800 audit(1791202574.980:99): pid=6165 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.719" name="file0" dev="loop2" ino=244 res=0 errno=0 [ 148.475475][ T6186] loop1: detected capacity change from 0 to 512 [ 148.525960][ T26] audit: type=1800 audit(1791202575.070:100): pid=6134 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.705" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 148.805212][ T4277] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 148.819087][ T6193] loop2: detected capacity change from 0 to 256 [ 149.297227][ T6197] netlink: 8 bytes leftover after parsing attributes in process `syz.4.727'. [ 149.546658][ T6204] netlink: 16 bytes leftover after parsing attributes in process `syz.2.725'. [ 150.162826][ T4319] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 150.217156][ T6195] loop1: detected capacity change from 0 to 32768 [ 150.290826][ T6195] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 150.373039][ T4271] ocfs2: Unmounting device (7,1) on (node local) [ 150.385156][ T4319] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.433725][ T4319] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 150.468263][ T4319] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 150.528204][ T4319] usb 3-1: config 0 interface 0 has no altsetting 0 [ 150.553205][ T4319] usb 3-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 150.578927][ T4319] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.631449][ T4319] usb 3-1: config 0 descriptor?? [ 151.021301][ T6210] loop3: detected capacity change from 0 to 40427 [ 151.076495][ T4319] hkems 0003:2006:0118.000B: unbalanced collection at end of report description [ 151.109662][ T4319] hkems 0003:2006:0118.000B: parse failed [ 151.122884][ T4319] hkems: probe of 0003:2006:0118.000B failed with error -22 [ 151.130895][ T6210] F2FS-fs (loop3): invalid crc value [ 151.191649][ T6210] F2FS-fs (loop3): Found nat_bits in checkpoint [ 151.280784][ T6231] netlink: 72 bytes leftover after parsing attributes in process `syz.1.740'. [ 151.321401][ T6210] F2FS-fs (loop3): Start checkpoint disabled! [ 151.326377][ T4319] usb 3-1: USB disconnect, device number 8 [ 151.349350][ T6231] netlink: 24 bytes leftover after parsing attributes in process `syz.1.740'. [ 151.385596][ T6216] loop4: detected capacity change from 0 to 40427 [ 151.408128][ T6210] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 151.418433][ T6231] netlink: 4 bytes leftover after parsing attributes in process `syz.1.740'. [ 151.482170][ T6216] F2FS-fs (loop4): Found nat_bits in checkpoint [ 151.734398][ T6216] F2FS-fs (loop4): Start checkpoint disabled! [ 151.746656][ T11] kworker/u4:1: attempt to access beyond end of device [ 151.746656][ T11] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 151.889147][ T6216] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 152.102193][ T6244] loop2: detected capacity change from 0 to 512 [ 152.198037][ T6244] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 152.324201][ T6244] EXT4-fs (loop2): 1 truncate cleaned up [ 152.350173][ T6244] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 152.358306][ T6252] netlink: 20 bytes leftover after parsing attributes in process `syz.0.747'. [ 152.416836][ T4533] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 152.625424][ T4533] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 152.682859][ T4533] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 152.716654][ T4533] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 152.762878][ T4533] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 152.790402][ T4533] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.829827][ T4278] EXT4-fs (loop2): unmounting filesystem. [ 152.851123][ T4533] usb 2-1: config 0 descriptor?? [ 153.133218][ T6261] loop0: detected capacity change from 0 to 256 [ 153.161750][ T6262] loop4: detected capacity change from 0 to 164 [ 153.171719][ T6261] exfat: Deprecated parameter 'utf8' [ 153.213001][ T6261] exfat: Deprecated parameter 'utf8' [ 153.246131][ T6262] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 153.269878][ T6261] exfat: Deprecated parameter 'namecase' [ 153.297832][ T4533] plantronics 0003:047F:FFFF.000C: unbalanced delimiter at end of report description [ 153.338863][ T4533] plantronics 0003:047F:FFFF.000C: parse failed [ 153.360301][ T6261] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0x0ab4ecf1, utbl_chksum : 0xe619d30d) [ 153.368170][ T4533] plantronics: probe of 0003:047F:FFFF.000C failed with error -22 [ 153.429689][ T6248] loop3: detected capacity change from 0 to 32768 [ 153.472012][ T6248] (syz.3.742,6248,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 153.594325][ T4533] usb 2-1: USB disconnect, device number 3 [ 153.625602][ T6248] (syz.3.742,6248,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 153.704616][ T6267] tipc: Started in network mode [ 153.710540][ T6267] tipc: Node identity fe800000000000000000000000000013, cluster identity 4711 [ 153.743772][ T6248] JBD2: Ignoring recovery information on journal [ 153.815131][ T6267] tipc: Enabled bearer , priority 10 [ 153.826912][ T6248] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 153.901542][ T6248] ocfs2: Unmounting device (7,3) on (node local) [ 154.023957][ T4282] bridge0: port 3(syz_tun) entered disabled state [ 154.086428][ T4282] device syz_tun left promiscuous mode [ 154.092540][ T4282] bridge0: port 3(syz_tun) entered disabled state [ 154.222998][ T4317] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 154.451437][ T4317] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 154.478954][ T46] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.492761][ T4317] usb 5-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 154.533226][ T4317] usb 5-1: config 0 interface 0 has no altsetting 0 [ 154.560969][ T4317] usb 5-1: New USB device found, idVendor=056a, idProduct=0325, bcdDevice= 0.00 [ 154.598852][ T4317] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.682448][ T4317] usb 5-1: config 0 descriptor?? [ 154.735459][ T46] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.785044][ T4533] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 154.817404][ T4535] tipc: Node number set to 4269801491 [ 154.939009][ T46] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.006479][ T4533] usb 2-1: unable to get BOS descriptor or descriptor too short [ 155.034016][ T4533] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 155.069331][ T4533] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 155.097212][ T4533] usb 2-1: string descriptor 0 read error: -22 [ 155.112950][ T4533] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 155.138122][ T4317] wacom 0003:056A:0325.000D: hidraw0: USB HID v36.2b Joystick [HID 056a:0325] on usb-dummy_hcd.4-1/input0 [ 155.148516][ T46] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.172839][ T4533] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.240179][ T4533] usb 2-1: selecting invalid altsetting 1 [ 155.272171][ T4533] usb 2-1: unit 3 not found! [ 155.399960][ T4313] usb 5-1: USB disconnect, device number 5 [ 155.406535][ T6275] loop3: detected capacity change from 0 to 32768 [ 155.448860][ T4533] usb 2-1: cannot request logical cluster ID: 0 (err: -5) [ 155.474143][ T4533] usb 2-1: invalid MIXER UNIT descriptor 6 [ 155.571286][ T6281] fido_id[6281]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 155.647363][ T6279] loop2: detected capacity change from 0 to 40427 [ 155.691825][ T6279] F2FS-fs (loop2): Corrupted extension count (64 + 1 > 64) [ 155.704156][ T4533] snd-usb-audio: probe of 2-1:1.0 failed with error -5 [ 155.720396][ T6279] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 155.735441][ T46] tipc: Disabling bearer [ 155.756399][ T46] tipc: Left network mode [ 155.771692][ T6279] F2FS-fs (loop2): invalid crc value [ 155.786841][ T6279] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 155.803799][ T4533] usb 2-1: USB disconnect, device number 4 [ 155.813597][ T6275] XFS (loop3): Mounting V5 Filesystem [ 155.949014][ T6279] F2FS-fs (loop2): Start checkpoint disabled! [ 155.958733][ T6275] XFS (loop3): Ending clean mount [ 156.013747][ T6279] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 156.033880][ T4644] udevd[4644]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 156.035532][ T6279] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 156.310872][ T4277] XFS (loop3): Unmounting Filesystem [ 156.527952][ T9] kworker/u4:0: attempt to access beyond end of device [ 156.527952][ T9] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 156.674447][ T6298] netlink: 8 bytes leftover after parsing attributes in process `syz.1.773'. [ 157.434001][ T6301] loop3: detected capacity change from 0 to 4096 [ 157.437251][ T49] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 157.465251][ T49] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 157.475281][ T6301] ntfs3: Unknown parameter 'case' [ 157.488737][ T4283] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 157.513201][ T4283] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 157.528212][ T4283] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 157.540167][ T4283] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 157.587534][ T4644] I/O error, dev loop3, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 158.076018][ T6321] netlink: 1 bytes leftover after parsing attributes in process `syz.4.767'. [ 158.268559][ T6327] loop2: detected capacity change from 0 to 256 [ 158.314264][ T6326] tipc: Started in network mode [ 158.321930][ T6326] tipc: Node identity fe800000000000000000000000000013, cluster identity 4711 [ 158.372156][ T6326] tipc: Enabled bearer , priority 10 [ 158.402062][ T6327] exfat: Bad value for 'uid' [ 158.800887][ T6337] loop2: detected capacity change from 0 to 128 [ 158.821724][ T6337] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 158.943327][ T6337] hpfs: filesystem error: improperly stopped [ 158.964193][ T6337] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 159.002412][ T6337] hpfs: You really don't want any checks? You are crazy... [ 159.053664][ T6337] hpfs: Code page index out of array [ 159.059878][ T6337] hpfs: code page support is disabled [ 159.172257][ T6337] hpfs: hpfs_map_4sectors(): unaligned read [ 159.213154][ T6337] hpfs: hpfs_map_4sectors(): unaligned read [ 159.269192][ T6337] hpfs: filesystem error: unable to find root dir [ 159.536210][ T4740] tipc: Node number set to 4269801491 [ 159.573014][ T4287] Bluetooth: hci3: command 0x0409 tx timeout [ 159.633129][ T6350] Bluetooth: MGMT ver 1.22 [ 159.816180][ T6352] IPv6: ADDRCONF(NETDEV_CHANGE): eql: link becomes ready [ 159.846027][ T6352] IPv6: ADDRCONF(NETDEV_CHANGE): wpan0: link becomes ready [ 159.865972][ T6352] IPv6: ADDRCONF(NETDEV_CHANGE): wpan1: link becomes ready [ 159.875257][ T6352] IPv6: ADDRCONF(NETDEV_CHANGE): nr0: link becomes ready [ 159.885066][ T6352] IPv6: ADDRCONF(NETDEV_CHANGE): nr1: link becomes ready [ 159.903532][ T6352] IPv6: ADDRCONF(NETDEV_CHANGE): nr2: link becomes ready [ 159.932405][ T6352] IPv6: ADDRCONF(NETDEV_CHANGE): nr3: link becomes ready [ 159.950430][ T6355] loop2: detected capacity change from 0 to 1024 [ 159.962468][ T6352] IPv6: ADDRCONF(NETDEV_CHANGE): nr4: link becomes ready [ 159.981547][ T6352] IPv6: ADDRCONF(NETDEV_CHANGE): lapb0: link becomes ready [ 160.001608][ T6352] IPv6: ADDRCONF(NETDEV_CHANGE): lapb1: link becomes ready [ 160.041353][ T6352] IPv6: ADDRCONF(NETDEV_CHANGE): lapb2: link becomes ready [ 160.065750][ T6339] loop3: detected capacity change from 0 to 32768 [ 160.094221][ T6352] IPv6: ADDRCONF(NETDEV_CHANGE): lapb3: link becomes ready [ 160.172404][ T6352] IPv6: ADDRCONF(NETDEV_CHANGE): lapb4: link becomes ready [ 160.217394][ T6352] IPv6: ADDRCONF(NETDEV_CHANGE): lapb5: link becomes ready [ 160.249553][ T6308] chnl_net:caif_netlink_parms(): no params data found [ 160.361742][ T6346] loop4: detected capacity change from 0 to 32768 [ 160.397663][ T46] device hsr_slave_0 left promiscuous mode [ 160.464774][ T46] device hsr_slave_1 left promiscuous mode [ 160.504787][ T6360] netlink: 8 bytes leftover after parsing attributes in process `syz.2.784'. [ 160.516596][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 160.533289][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 160.575984][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 160.604891][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 160.651273][ T46] device bridge_slave_1 left promiscuous mode [ 160.670282][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.761475][ T46] device bridge_slave_0 left promiscuous mode [ 160.793059][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.842789][ T4533] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 160.925633][ T46] device veth1_macvtap left promiscuous mode [ 160.953584][ T46] device veth0_macvtap left promiscuous mode [ 160.973143][ T46] device veth1_vlan left promiscuous mode [ 160.979719][ T46] device veth0_vlan left promiscuous mode [ 161.045986][ T4533] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 161.095135][ T4533] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 161.139551][ T4533] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 161.179999][ T4533] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 161.222252][ T4533] usb 2-1: Manufacturer: syz [ 161.267097][ T4533] usb 2-1: config 0 descriptor?? [ 161.447100][ T6383] loop3: detected capacity change from 0 to 2048 [ 161.553183][ T6383] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 161.584457][ T4533] rc_core: IR keymap rc-hauppauge not found [ 161.593055][ T4533] Registered IR keymap rc-empty [ 161.599935][ T4533] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 161.617362][ T4533] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input17 [ 161.652830][ T4287] Bluetooth: hci3: command 0x041b tx timeout [ 161.662620][ T6383] EXT4-fs error (device loop3): ext4_find_extent:900: inode #2: comm syz.3.791: inode has invalid extent depth: 8 [ 161.769626][ T6383] EXT4-fs (loop3): Remounting filesystem read-only [ 161.890804][ C0] igorplugusb 2-1:0.0: receive overflow invalid: 52 [ 161.920585][ T4277] EXT4-fs (loop3): unmounting filesystem. [ 162.104941][ T4535] usb 2-1: USB disconnect, device number 5 [ 162.845029][ T46] team0 (unregistering): Port device team_slave_1 removed [ 162.903193][ T46] team0 (unregistering): Port device team_slave_0 removed [ 162.961245][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 163.020513][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 163.439388][ T46] bond0 (unregistering): Released all slaves [ 163.546254][ T6397] netlink: 'syz.4.795': attribute type 10 has an invalid length. [ 163.733326][ T4283] Bluetooth: hci3: command 0x040f tx timeout [ 163.794933][ T6308] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.827934][ T6308] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.855497][ T6308] device bridge_slave_0 entered promiscuous mode [ 163.895466][ T6308] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.913059][ T6308] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.941783][ T6308] device bridge_slave_1 entered promiscuous mode [ 163.963007][ T4375] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 164.044158][ T6308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 164.088910][ T6308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 164.172868][ T4375] usb 2-1: Using ep0 maxpacket: 8 [ 164.216437][ T4375] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 164.251693][ T6308] team0: Port device team_slave_0 added [ 164.266903][ T4375] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.286389][ T6308] team0: Port device team_slave_1 added [ 164.298546][ T4375] usb 2-1: Product: syz [ 164.318278][ T4375] usb 2-1: Manufacturer: syz [ 164.338227][ T4375] usb 2-1: SerialNumber: syz [ 164.379536][ T4375] usb 2-1: config 0 descriptor?? [ 164.400085][ T6308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 164.406387][ T4375] gspca_main: se401-2.14.0 probing 047d:5003 [ 164.428128][ T6308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.506862][ T6308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 164.534202][ T6308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 164.557410][ T6308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.594107][ T6308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 164.727495][ T6308] device hsr_slave_0 entered promiscuous mode [ 164.747370][ T6308] device hsr_slave_1 entered promiscuous mode [ 164.769048][ T6308] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 164.787466][ T6308] Cannot create hsr debugfs directory [ 164.816565][ T4375] gspca_se401: Bayer format not supported! [ 164.967970][ T6426] loop3: detected capacity change from 0 to 40427 [ 164.990634][ T6426] F2FS-fs (loop3): Corrupted extension count (64 + 1 > 64) [ 165.005936][ T6426] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 165.039309][ T4740] usb 2-1: USB disconnect, device number 6 [ 165.070468][ T6426] F2FS-fs (loop3): invalid crc value [ 165.084556][ T6426] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 165.205226][ T6426] F2FS-fs (loop3): Start checkpoint disabled! [ 165.242469][ T6426] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 165.259297][ T6426] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 165.439589][ T6313] kworker/u4:7: attempt to access beyond end of device [ 165.439589][ T6313] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 165.813008][ T4283] Bluetooth: hci3: command 0x0419 tx timeout [ 165.865103][ T6449] loop2: detected capacity change from 0 to 512 [ 166.009661][ T6449] FAT-fs (loop2): error, invalid access to FAT (entry 0x0fffff00) [ 166.052886][ T6449] FAT-fs (loop2): Filesystem has been set read-only [ 166.055424][ T6308] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 166.125991][ T6308] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 166.168156][ T6308] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 166.195902][ T6308] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 166.372023][ T6308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.395730][ T6386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 166.407894][ T6386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 166.425119][ T6308] 8021q: adding VLAN 0 to HW filter on device team0 [ 166.440591][ T6386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 166.453338][ T6386] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 166.465113][ T6386] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.472631][ T6386] bridge0: port 1(bridge_slave_0) entered forwarding state [ 166.491932][ T6386] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 166.501329][ T6386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 166.511174][ T6386] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 166.523573][ T6386] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.531362][ T6386] bridge0: port 2(bridge_slave_1) entered forwarding state [ 166.540919][ T6386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 166.563873][ T6386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 166.575545][ T6386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 166.603259][ T6386] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 166.643597][ T6386] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 166.662556][ T6386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 166.684561][ T6386] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 166.728948][ T6386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 166.761155][ T6386] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 166.796550][ T6466] tipc: Started in network mode [ 166.801847][ T6466] tipc: Node identity fe800000000000000000000000000013, cluster identity 4711 [ 166.854052][ T6466] tipc: Enabled bearer , priority 10 [ 166.863957][ T6308] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 166.900763][ T6308] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 166.920535][ T6386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 166.933920][ T6386] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 167.057570][ T4535] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 167.263096][ T4535] usb 3-1: Using ep0 maxpacket: 16 [ 167.276981][ T4535] usb 3-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 167.318696][ T4535] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.355485][ T4535] usb 3-1: Product: syz [ 167.370219][ T4535] usb 3-1: Manufacturer: syz [ 167.386261][ T4535] usb 3-1: SerialNumber: syz [ 167.439775][ T4535] usb 3-1: config 0 descriptor?? [ 167.463542][ T4535] ums-onetouch 3-1:0.0: USB Mass Storage device detected [ 167.618646][ T6501] loop4: detected capacity change from 0 to 128 [ 167.681482][ T6501] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 167.696219][ T4535] usb 3-1: USB disconnect, device number 9 [ 167.722072][ T6501] hpfs: filesystem error: improperly stopped [ 167.771812][ T6501] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 167.817855][ T6501] hpfs: You really don't want any checks? You are crazy... [ 167.829695][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 167.840214][ T6501] hpfs: Code page index out of array [ 167.851538][ T6501] hpfs: code page support is disabled [ 167.857775][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 167.862956][ T6501] hpfs: hpfs_map_4sectors(): unaligned read [ 167.883083][ T6501] hpfs: hpfs_map_4sectors(): unaligned read [ 167.897759][ T6504] netlink: 292 bytes leftover after parsing attributes in process `syz.1.825'. [ 167.907613][ T6501] hpfs: filesystem error: unable to find root dir [ 167.932412][ T6308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 167.972959][ T4740] tipc: Node number set to 4269801491 [ 167.980810][ T6501] hpfs: bad mount options. [ 168.030932][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 168.051535][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 168.113677][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 168.124523][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 168.156020][ T6308] device veth0_vlan entered promiscuous mode [ 168.162080][ T6508] ecryptfs_verify_version: Minor version number mismatch. Expected [4]; got [0] [ 168.183113][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 168.202985][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 168.210900][ T6508] Data structure version mismatch. Userspace tools must match eCryptfs kernel module with major version [0] and minor version [4] [ 168.262903][ T6308] device veth1_vlan entered promiscuous mode [ 168.269612][ T6508] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 168.290540][ T6508] One or more global auth toks could not properly register; rc = [-22] [ 168.335105][ T6508] Error parsing options; rc = [-22] [ 168.365839][ T6313] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 168.395947][ T6313] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 168.423991][ T6486] loop3: detected capacity change from 0 to 40427 [ 168.434159][ T6313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 168.467082][ T6313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 168.481483][ T6486] F2FS-fs (loop3): invalid crc value [ 168.499707][ T6516] loop2: detected capacity change from 0 to 512 [ 168.503971][ T6308] device veth0_macvtap entered promiscuous mode [ 168.521347][ T6486] F2FS-fs (loop3): Found nat_bits in checkpoint [ 168.575433][ T6308] device veth1_macvtap entered promiscuous mode [ 168.654831][ T6516] EXT4-fs: test_dummy_encryption requires encrypt feature [ 168.692654][ T6308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.748273][ T6308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.781678][ T6486] F2FS-fs (loop3): Start checkpoint disabled! [ 168.811201][ T6308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.863257][ T6486] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 168.882769][ T6308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.928848][ T6308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.972849][ T6308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.002760][ T6308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.042774][ T6308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.064613][ T6308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 169.088934][ T6308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.168065][ T6308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.198729][ T6308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.231219][ T6308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.262771][ T6308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.282733][ T6308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.296639][ T6308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.308166][ T6308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.325263][ T6308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 169.367316][ T6386] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 169.387886][ T6386] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 169.439820][ T6386] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 169.449279][ T6540] loop4: detected capacity change from 0 to 512 [ 169.463743][ T6386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 169.486266][ T40] kworker/u4:2: attempt to access beyond end of device [ 169.486266][ T40] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 169.513813][ T6386] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 169.530094][ T6386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 169.576926][ T6308] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.610041][ T6540] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 169.626157][ T6308] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.655783][ T6540] ext4 filesystem being mounted at /177/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 169.695624][ T6308] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.728911][ T6308] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.012000][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.034448][ T4276] EXT4-fs (loop4): unmounting filesystem. [ 170.069959][ T6386] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.071715][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.102163][ T6386] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.124052][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 170.170012][ T6386] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 170.352800][ T4535] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 170.544783][ T4535] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 170.566333][ T4535] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 170.598379][ T4535] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 170.617495][ T6567] loop0: detected capacity change from 0 to 1024 [ 170.655791][ T6567] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 170.667646][ T4535] usb 2-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 170.688953][ T4535] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.760959][ T4535] usb 2-1: config 0 descriptor?? [ 170.777004][ T6553] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 171.218806][ T4535] gt683r_led 0003:1770:FF00.000E: hidraw0: USB HID v0.00 Device [HID 1770:ff00] on usb-dummy_hcd.1-1/input0 [ 171.429616][ T4319] usb 2-1: USB disconnect, device number 7 [ 171.450113][ T6578] fido_id[6578]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 171.466939][ T4535] gt683r_led 0003:1770:FF00.000E: failed to send set report request: -19 [ 171.775744][ T6575] loop0: detected capacity change from 0 to 40427 [ 171.802955][ T6575] F2FS-fs (loop0): Corrupted extension count (64 + 1 > 64) [ 171.818236][ T6575] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 171.840692][ T6575] F2FS-fs (loop0): invalid crc value [ 171.859710][ T6575] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 171.997827][ T6575] F2FS-fs (loop0): Start checkpoint disabled! [ 172.097137][ T6575] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 172.104037][ T6596] netlink: 12 bytes leftover after parsing attributes in process `syz.3.858'. [ 172.131200][ T6575] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 172.148614][ T6596] device hsr0 entered promiscuous mode [ 172.171550][ T6596] device macvtap1 entered promiscuous mode [ 172.456061][ T6602] binder: 6601:6602 ioctl c018620c 2000000000c0 returned -22 [ 172.473229][ T6313] kworker/u4:7: attempt to access beyond end of device [ 172.473229][ T6313] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 172.683007][ T6611] loop2: detected capacity change from 0 to 128 [ 172.850878][ T6611] FAT-fs (loop2): error, clusters badly computed (4 != 3) [ 172.892876][ T6611] FAT-fs (loop2): Filesystem has been set read-only [ 172.924155][ T6611] FAT-fs (loop2): error, clusters badly computed (5 != 4) [ 172.941321][ T6611] FAT-fs (loop2): error, clusters badly computed (6 != 5) [ 173.201436][ T6626] Bluetooth: hci0: unsupported parameter 5135 [ 173.221424][ T6626] Bluetooth: hci0: unsupported parameter 8192 [ 173.254673][ T6626] Bluetooth: hci0: unsupported parameter 5135 [ 173.282197][ T6626] Bluetooth: hci0: unsupported parameter 8192 [ 173.370397][ T6633] loop4: detected capacity change from 0 to 1024 [ 173.429470][ T6637] loop0: detected capacity change from 0 to 128 [ 173.528584][ T6637] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 173.575595][ T6637] hpfs: filesystem error: improperly stopped [ 173.612978][ T6637] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 173.621009][ T6637] hpfs: You really don't want any checks? You are crazy... [ 173.643084][ T6637] hpfs: Code page index out of array [ 173.648711][ T6637] hpfs: code page support is disabled [ 173.683069][ T6637] hpfs: hpfs_map_4sectors(): unaligned read [ 173.700562][ T6637] hpfs: hpfs_map_4sectors(): unaligned read [ 173.710604][ T6637] hpfs: filesystem error: unable to find root dir [ 173.856793][ T6645] loop4: detected capacity change from 0 to 4096 [ 173.884985][ T6645] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 173.967158][ T6645] ntfs3: loop4: failed to convert "076c" to cp932 [ 174.108987][ T6648] netlink: 'syz.0.884': attribute type 2 has an invalid length. [ 174.140466][ T6649] loop2: detected capacity change from 0 to 1024 [ 174.384047][ T6658] binder: 6657:6658 ioctl c018620c 2000000000c0 returned -22 [ 174.662017][ T6670] 0x000000000000-0x000000020000 : "" [ 174.689424][ T6670] ftl_cs: FTL header not found. [ 175.331997][ T6656] loop4: detected capacity change from 0 to 40427 [ 175.375773][ T6656] F2FS-fs (loop4): Corrupted extension count (64 + 1 > 64) [ 175.392993][ T6656] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 175.422632][ T6656] F2FS-fs (loop4): invalid crc value [ 175.436361][ T6656] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 175.710258][ T6656] F2FS-fs (loop4): Start checkpoint disabled! [ 175.773111][ T6708] ip_tables: iptables: counters copy to user failed while replacing table [ 175.791754][ T6656] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 175.806197][ T6656] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 176.024437][ T6313] kworker/u4:7: attempt to access beyond end of device [ 176.024437][ T6313] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 176.080413][ T6718] loop1: detected capacity change from 0 to 256 [ 176.957814][ T6751] loop0: detected capacity change from 0 to 512 [ 176.992469][ T6751] EXT4-fs (loop0): Test dummy encryption mode enabled [ 177.049343][ T6751] EXT4-fs error (device loop0): ext4_orphan_get:1409: inode #15: comm syz.0.920: inode has both inline data and extents flags [ 177.064255][ T6751] EXT4-fs error (device loop0): ext4_orphan_get:1414: comm syz.0.920: couldn't read orphan inode 15 (err -117) [ 177.080168][ T6751] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 177.223902][ T6751] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 177.237711][ T6751] EXT4-fs: Can't set or change test_dummy_encryption on remount [ 177.322255][ T6308] EXT4-fs (loop0): unmounting filesystem. [ 177.356552][ T6760] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 177.647944][ T6770] loop4: detected capacity change from 0 to 256 [ 177.738736][ T6770] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011a39, chksum : 0xd4e5c97b, utbl_chksum : 0xe619d30d) [ 177.859882][ T6743] loop1: detected capacity change from 0 to 40427 [ 177.903898][ T6743] F2FS-fs (loop1): Corrupted extension count (64 + 1 > 64) [ 177.939542][ T6743] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 178.003072][ T6743] F2FS-fs (loop1): invalid crc value [ 178.037697][ T6743] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 178.190441][ T6779] loop4: detected capacity change from 0 to 512 [ 178.240037][ T6779] EXT4-fs (loop4): Test dummy encryption mode enabled [ 178.291901][ T6779] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e024e0ad, mo2=0002] [ 178.304005][ T6743] F2FS-fs (loop1): Start checkpoint disabled! [ 178.327907][ T6779] System zones: 1-12 [ 178.386192][ T6779] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 178.406461][ T6743] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 178.432969][ T6743] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 178.674668][ T6386] kworker/u4:8: attempt to access beyond end of device [ 178.674668][ T6386] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 178.827444][ T6772] loop3: detected capacity change from 0 to 32768 [ 178.974459][ T6779] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 179.040898][ T6779] EXT4-fs error (device loop4): ext4_add_entry:2488: inode #2: comm syz.4.929: Directory hole found for htree leaf block 0 [ 179.141498][ T6779] EXT4-fs (loop4): Remounting filesystem read-only [ 179.191308][ T6786] EXT4-fs error (device loop4): ext4_empty_dir:3141: inode #2: comm syz.4.929: Directory hole found for htree leaf block 0 [ 179.207534][ T6804] netlink: 32 bytes leftover after parsing attributes in process `syz.3.939'. [ 179.220049][ T6786] EXT4-fs (loop4): Remounting filesystem read-only [ 179.344811][ T4276] EXT4-fs (loop4): unmounting filesystem. [ 179.362900][ T4319] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 179.503267][ T6813] netlink: 8 bytes leftover after parsing attributes in process `syz.2.945'. [ 179.517044][ T6813] netlink: 4 bytes leftover after parsing attributes in process `syz.2.945'. [ 179.548572][ T6813] netlink: 'syz.2.945': attribute type 13 has an invalid length. [ 179.566941][ T4319] usb 1-1: unable to get BOS descriptor or descriptor too short [ 179.592144][ T4319] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 179.602924][ T6813] netlink: 'syz.2.945': attribute type 12 has an invalid length. [ 179.618573][ T4319] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 179.631496][ T4319] usb 1-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 179.650546][ T4319] usb 1-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 179.681996][ T4319] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 179.704449][ T4319] usb 1-1: config 1 interface 1 has no altsetting 0 [ 179.733362][ T4319] usb 1-1: string descriptor 0 read error: -22 [ 179.756113][ T4319] usb 1-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 179.772807][ T4319] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.958464][ T6828] loop3: detected capacity change from 0 to 512 [ 180.018784][ T6828] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e826c018, mo2=0002] [ 180.027272][ T6828] System zones: 1-12 [ 180.027763][ T6831] loop2: detected capacity change from 0 to 256 [ 180.047853][ T6828] EXT4-fs error (device loop3): ext4_do_update_inode:5279: inode #15: comm syz.3.953: corrupted inode contents [ 180.064971][ T6828] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 180.115298][ T6828] EXT4-fs error (device loop3): ext4_do_update_inode:5279: inode #15: comm syz.3.953: corrupted inode contents [ 180.130874][ T6831] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 180.156473][ T6828] EXT4-fs error (device loop3): ext4_evict_inode:329: inode #15: comm syz.3.953: mark_inode_dirty error [ 180.176170][ T6828] EXT4-fs (loop3): 1 orphan inode deleted [ 180.176212][ T6828] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 180.395738][ T4277] EXT4-fs (loop3): unmounting filesystem. [ 180.410160][ T4319] usb 1-1: 2:0: cannot get min/max values for control 2 (id 2) [ 180.485886][ T4319] usb 1-1: USB disconnect, device number 6 [ 180.582378][ T6839] loop3: detected capacity change from 0 to 1024 [ 180.704419][ T6839] jffs2: notice: (6839) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 180.897330][ T4277] hfsplus: walked past end of dir [ 180.951961][ T4277] hfsplus: walked past end of dir [ 181.075025][ T6846] loop3: detected capacity change from 0 to 16 [ 181.106423][ T6846] erofs: (device loop3): mounted with root inode @ nid 36. [ 181.121397][ T6848] loop0: detected capacity change from 0 to 512 [ 181.146616][ T6846] erofs: (device loop3): z_erofs_readahead: readahead error at page 87 @ nid 36 [ 181.170718][ T6846] erofs: (device loop3): z_erofs_readahead: readahead error at page 86 @ nid 36 [ 181.180242][ T6848] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 181.198818][ T6846] syz.3.959: attempt to access beyond end of device [ 181.198818][ T6846] loop3: rw=524288, sector=8, nr_sectors = 24 limit=16 [ 181.201003][ T6848] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 181.214255][ T6846] syz.3.959: attempt to access beyond end of device [ 181.214255][ T6846] loop3: rw=524288, sector=14425508768, nr_sectors = 8 limit=16 [ 181.262802][ T4313] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 181.311169][ T6835] loop4: detected capacity change from 0 to 40427 [ 181.313846][ T6848] EXT4-fs (loop0): orphan cleanup on readonly fs [ 181.363605][ T6835] F2FS-fs (loop4): invalid crc value [ 181.411796][ T6848] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3861: comm syz.0.961: Allocating blocks 41-42 which overlap fs metadata [ 181.437953][ T6835] F2FS-fs (loop4): Found nat_bits in checkpoint [ 181.457732][ T4313] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 181.490029][ T4313] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.502582][ T6848] EXT4-fs (loop0): Remounting filesystem read-only [ 181.518179][ T6848] Quota error (device loop0): write_blk: dquota write failed [ 181.538632][ T4313] usb 2-1: Product: syz [ 181.542463][ T6848] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 181.557648][ T4313] usb 2-1: Manufacturer: syz [ 181.562344][ T4313] usb 2-1: SerialNumber: syz [ 181.574842][ T6835] F2FS-fs (loop4): Start checkpoint disabled! [ 181.587966][ T6848] EXT4-fs error (device loop0): ext4_acquire_dquot:6841: comm syz.0.961: Failed to acquire dquot type 0 [ 181.635089][ T6835] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 181.635163][ T6848] EXT4-fs (loop0): Remounting filesystem read-only [ 181.680816][ T6838] loop2: detected capacity change from 0 to 40427 [ 181.693185][ T6848] EXT4-fs error (device loop0): mb_free_blocks:1839: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 181.720272][ T6838] F2FS-fs (loop2): Corrupted extension count (64 + 1 > 64) [ 181.760066][ T6838] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 181.774076][ T6848] EXT4-fs (loop0): Remounting filesystem read-only [ 181.806452][ T6848] EXT4-fs error (device loop0): ext4_do_update_inode:5279: inode #12: comm syz.0.961: corrupted inode contents [ 181.821734][ T4313] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 181.861397][ T6838] F2FS-fs (loop2): invalid crc value [ 181.888932][ T6838] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 181.933408][ T6848] EXT4-fs (loop0): Remounting filesystem read-only [ 181.940211][ T6848] EXT4-fs error (device loop0): ext4_dirty_inode:6166: inode #12: comm syz.0.961: mark_inode_dirty error [ 181.969482][ T6848] EXT4-fs (loop0): Remounting filesystem read-only [ 181.980517][ T6848] EXT4-fs error (device loop0): ext4_do_update_inode:5279: inode #12: comm syz.0.961: corrupted inode contents [ 182.002572][ T6848] EXT4-fs (loop0): Remounting filesystem read-only [ 182.010225][ T6848] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #12: comm syz.0.961: mark_inode_dirty error [ 182.023529][ T46] kworker/u4:3: attempt to access beyond end of device [ 182.023529][ T46] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 182.060456][ T6858] can0: slcan on ttyS3. [ 182.085273][ T6848] EXT4-fs (loop0): Remounting filesystem read-only [ 182.101245][ T6848] EXT4-fs error (device loop0): ext4_do_update_inode:5279: inode #12: comm syz.0.961: corrupted inode contents [ 182.141941][ T6848] EXT4-fs (loop0): Remounting filesystem read-only [ 182.149115][ T6848] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 182.163920][ T6838] F2FS-fs (loop2): Start checkpoint disabled! [ 182.168233][ T6848] EXT4-fs (loop0): Remounting filesystem read-only [ 182.182019][ T6848] EXT4-fs error (device loop0): ext4_do_update_inode:5279: inode #12: comm syz.0.961: corrupted inode contents [ 182.229130][ T6838] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 182.254112][ T6848] EXT4-fs (loop0): Remounting filesystem read-only [ 182.263956][ T6848] EXT4-fs error (device loop0): ext4_truncate:4325: inode #12: comm syz.0.961: mark_inode_dirty error [ 182.284078][ T4535] usb 2-1: USB disconnect, device number 8 [ 182.286495][ T6856] can0 (unregistered): slcan off ttyS3. [ 182.294896][ T6838] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 182.325727][ T6848] EXT4-fs (loop0): Remounting filesystem read-only [ 182.383085][ T6848] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 182.409977][ T6848] EXT4-fs (loop0): Remounting filesystem read-only [ 182.429664][ T6848] EXT4-fs (loop0): 1 truncate cleaned up [ 182.449929][ T6848] EXT4-fs (loop0): pa ffff8880743d6e00: logic 1, phys. 41, len 23 [ 182.458760][ T6848] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:4894: group 0, free 22, pa_free 23 [ 182.510577][ T6848] EXT4-fs (loop0): Remounting filesystem read-only [ 182.532200][ T6848] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 182.593942][ T6386] kworker/u4:8: attempt to access beyond end of device [ 182.593942][ T6386] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 182.743266][ T6308] EXT4-fs (loop0): unmounting filesystem. [ 182.784058][ T6863] ntfs3: loop3: Failed to load $Extend. [ 183.083137][ T6872] netlink: 32 bytes leftover after parsing attributes in process `syz.1.970'. [ 183.095130][ T4313] usb 2-1: Service connection timeout for: 256 [ 183.101975][ T4313] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 183.163766][ T4313] ath9k_htc: Failed to initialize the device [ 183.186861][ T4535] usb 2-1: ath9k_htc: USB layer deinitialized [ 183.567716][ T4313] logitech-hidpp-device 0005:046D:B012.000F: unknown main item tag 0x1 [ 183.589452][ T4313] logitech-hidpp-device 0005:046D:B012.000F: unknown main item tag 0x0 [ 183.602932][ T4317] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 183.620687][ T4313] logitech-hidpp-device 0005:046D:B012.000F: unknown main item tag 0x0 [ 183.669748][ T4313] logitech-hidpp-device 0005:046D:B012.000F: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 183.698535][ T6894] set_capacity_and_notify: 1 callbacks suppressed [ 183.698552][ T6894] loop4: detected capacity change from 0 to 24 [ 183.753953][ T6894] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 183.792925][ T4317] usb 1-1: Using ep0 maxpacket: 8 [ 183.803887][ T4317] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 183.843003][ T6894] romfs: bad initial checksum on dev loop4. [ 183.857537][ T4317] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.884692][ T4264] udevd[4264]: incorrect romfs checksum on /dev/loop4 [ 183.896477][ T4317] usb 1-1: Product: syz [ 183.935894][ T4317] usb 1-1: Manufacturer: syz [ 183.942633][ T4317] usb 1-1: SerialNumber: syz [ 183.980460][ T4317] usb 1-1: config 0 descriptor?? [ 183.993876][ T6893] fido_id[6893]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 184.030826][ T4317] gspca_main: se401-2.14.0 probing 047d:5003 [ 184.441495][ T4317] gspca_se401: Wrong descriptor type [ 184.665291][ T4317] usb 1-1: USB disconnect, device number 7 [ 184.765462][ T26] audit: type=1326 audit(1791202611.310:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6920 comm="syz.4.986" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4c919e199 code=0x50000 [ 184.879561][ T26] audit: type=1326 audit(1791202611.350:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6920 comm="syz.4.986" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4c919e199 code=0x50000 [ 184.957236][ T26] audit: type=1326 audit(1791202611.350:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6920 comm="syz.4.986" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4c919e199 code=0x50000 [ 185.034683][ T26] audit: type=1326 audit(1791202611.350:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6920 comm="syz.4.986" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4c919e199 code=0x50000 [ 185.098462][ T26] audit: type=1326 audit(1791202611.350:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6920 comm="syz.4.986" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4c919e199 code=0x50000 [ 185.165099][ T26] audit: type=1326 audit(1791202611.350:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6920 comm="syz.4.986" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4c919e199 code=0x50000 [ 185.279969][ T26] audit: type=1326 audit(1791202611.350:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6920 comm="syz.4.986" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4c919e199 code=0x50000 [ 185.305960][ C0] vkms_vblank_simulate: vblank timer overrun [ 185.392289][ T26] audit: type=1326 audit(1791202611.350:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6920 comm="syz.4.986" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4c919e199 code=0x50000 [ 185.418242][ C0] vkms_vblank_simulate: vblank timer overrun [ 186.086154][ T6974] loop2: detected capacity change from 0 to 64 [ 186.192049][ T6978] loop4: detected capacity change from 0 to 8 [ 186.341468][ T6982] loop0: detected capacity change from 0 to 1024 [ 186.696180][ T6991] loop3: detected capacity change from 0 to 8 [ 186.826840][ T6991] SQUASHFS error: Unable to read directory block [629:26] [ 187.001902][ T6997] loop4: detected capacity change from 0 to 512 [ 187.052523][ T6997] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 187.082022][ T4740] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 187.139356][ T6997] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3861: comm syz.4.1017: Allocating blocks 41-42 which overlap fs metadata [ 187.163244][ T6997] EXT4-fs (loop4): Remounting filesystem read-only [ 187.183758][ T6997] __quota_error: 60 callbacks suppressed [ 187.183777][ T6997] Quota error (device loop4): write_blk: dquota write failed [ 187.284604][ T6997] Quota error (device loop4): find_free_dqentry: Can't write quota data block 5 [ 187.296223][ T6997] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3861: comm syz.4.1017: Allocating blocks 41-42 which overlap fs metadata [ 187.313694][ T6997] EXT4-fs (loop4): Remounting filesystem read-only [ 187.321104][ T6997] Quota error (device loop4): write_blk: dquota write failed [ 187.329879][ T6997] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 187.341420][ T6997] EXT4-fs error (device loop4): ext4_acquire_dquot:6841: comm syz.4.1017: Failed to acquire dquot type 1 [ 187.354141][ T6997] EXT4-fs (loop4): Remounting filesystem read-only [ 187.361158][ T6997] EXT4-fs error (device loop4): mb_free_blocks:1839: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 187.399946][ T6997] EXT4-fs (loop4): Remounting filesystem read-only [ 187.426387][ T6997] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #12: comm syz.4.1017: corrupted inode contents [ 187.452076][ T7009] loop0: detected capacity change from 0 to 2048 [ 187.461954][ T6997] EXT4-fs (loop4): Remounting filesystem read-only [ 187.475182][ T6997] EXT4-fs error (device loop4): ext4_dirty_inode:6166: inode #12: comm syz.4.1017: mark_inode_dirty error [ 187.496260][ T7009] overlayfs: unrecognized mount option "\Ûw"âþÄÎûï‹ò»½Çk�îh?9Gúè¯Î~¸_Ž?»�?éöø»Œ?[ïNØ£ÎãßãüG:ŒW{Ìñõ§¯T:æ¿ñêÀnù“íüI‡üo÷˜ÿîÚ÷:ík}qf׿?ɹº¼bbf®èúú�ž}Ø­þ�ò'Ýë_ê±þw×›ï4–”ùÏžêþùï–¿¼'>ÜìG÷6×e{mGŽS ßÓ­þéˆÖó|þŸõXÿ�_ÞìñP" or missing value [ 187.538739][ T6997] EXT4-fs (loop4): Remounting filesystem read-only [ 187.568716][ T6997] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #12: comm syz.4.1017: corrupted inode contents [ 187.619508][ T6997] EXT4-fs (loop4): Remounting filesystem read-only [ 187.652980][ T6997] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #12: comm syz.4.1017: mark_inode_dirty error [ 187.708463][ T6997] EXT4-fs (loop4): Remounting filesystem read-only [ 187.734258][ T6997] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #12: comm syz.4.1017: corrupted inode contents [ 187.774241][ T6997] EXT4-fs (loop4): Remounting filesystem read-only [ 187.803007][ T6997] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 187.827666][ T6997] EXT4-fs (loop4): Remounting filesystem read-only [ 187.852865][ T6997] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #12: comm syz.4.1017: corrupted inode contents [ 187.878685][ T6997] EXT4-fs (loop4): Remounting filesystem read-only [ 187.896910][ T6997] EXT4-fs error (device loop4): ext4_truncate:4325: inode #12: comm syz.4.1017: mark_inode_dirty error [ 187.926263][ T6997] EXT4-fs (loop4): Remounting filesystem read-only [ 187.938655][ T6997] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 187.950699][ T6997] EXT4-fs (loop4): Remounting filesystem read-only [ 187.961057][ T6997] EXT4-fs (loop4): 1 truncate cleaned up [ 187.970625][ T6997] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 188.038431][ T6994] loop1: detected capacity change from 0 to 40427 [ 188.069074][ T4276] EXT4-fs (loop4): unmounting filesystem. [ 188.109885][ T6994] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 188.123842][ T6994] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 188.140503][ T7019] loop3: detected capacity change from 0 to 16 [ 188.173988][ T6994] F2FS-fs (loop1): invalid crc value [ 188.210293][ T7019] erofs: (device loop3): mounted with root inode @ nid 36. [ 188.220412][ T6994] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 188.239703][ T7019] syz.3.1025: attempt to access beyond end of device [ 188.239703][ T7019] loop3: rw=0, sector=48, nr_sectors = 16 limit=16 [ 188.279467][ T7019] syz.3.1025: attempt to access beyond end of device [ 188.279467][ T7019] loop3: rw=0, sector=48, nr_sectors = 16 limit=16 [ 188.459845][ T6994] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 188.487615][ T6994] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 188.653971][ T7031] loop2: detected capacity change from 0 to 256 [ 188.779706][ T4271] syz-executor: attempt to access beyond end of device [ 188.779706][ T4271] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 188.990469][ T7017] loop0: detected capacity change from 0 to 32768 [ 189.440647][ T7049] loop4: detected capacity change from 0 to 256 [ 189.493768][ T7049] exfat: Deprecated parameter 'utf8' [ 189.513477][ T7049] exfat: Deprecated parameter 'namecase' [ 189.531403][ T7051] loop2: detected capacity change from 0 to 256 [ 189.542411][ T7049] exfat: Deprecated parameter 'utf8' [ 189.607574][ T7049] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 190.546859][ T7083] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1052'. [ 190.644270][ T7087] loop1: detected capacity change from 0 to 2048 [ 190.727259][ T7089] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 191.252859][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 191.525096][ T7117] loop2: detected capacity change from 0 to 128 [ 191.609241][ T7117] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 191.676818][ T7117] ext4 filesystem being mounted at /204/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 191.896529][ T4278] EXT4-fs (loop2): unmounting filesystem. [ 192.043246][ T7115] loop1: detected capacity change from 0 to 32768 [ 192.241563][ T7135] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1074'. [ 192.272933][ T7135] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1074'. [ 192.842561][ T7095] loop0: detected capacity change from 0 to 32768 [ 192.896281][ T7095] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz.0.1056 (7095) [ 192.947829][ T4287] Bluetooth: Fragment is too long (len 14, expected 2) [ 193.017810][ T7095] BTRFS info (device loop0): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 193.073793][ T7095] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 193.138871][ T7095] BTRFS info (device loop0): enabling disk space caching [ 193.199774][ T7095] BTRFS info (device loop0): force clearing of disk cache [ 193.238088][ T7095] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 193.324577][ T7095] BTRFS info (device loop0): use zstd compression, level 3 [ 193.362835][ T7095] BTRFS info (device loop0): disk space caching is enabled [ 193.440372][ T7139] loop2: detected capacity change from 0 to 32768 [ 193.454134][ T7139] XFS: attr2 mount option is deprecated. [ 193.527091][ T7095] BTRFS info (device loop0): enabling ssd optimizations [ 193.588908][ T7139] XFS (loop2): Mounting V5 Filesystem [ 193.603612][ T7095] BTRFS info (device loop0): rebuilding free space tree [ 193.653798][ T7095] BTRFS info (device loop0): disabling free space tree [ 193.727067][ T7187] option changes via remount are deprecated (pid=7185 comm=syz.3.1089) [ 193.744188][ T7139] XFS (loop2): Ending clean mount [ 193.752925][ T7095] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 193.794706][ T7095] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 193.968245][ T4278] XFS (loop2): Unmounting Filesystem [ 194.158367][ T6308] BTRFS info (device loop0): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 194.351061][ T7201] loop1: detected capacity change from 0 to 512 [ 194.376723][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.387016][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.614988][ T7204] loop4: detected capacity change from 0 to 1024 [ 194.637756][ T7206] loop3: detected capacity change from 0 to 512 [ 194.755398][ T7206] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 194.788126][ T7206] ext4 filesystem being mounted at /237/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 194.789487][ T7204] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 194.869274][ T7206] [ 194.871686][ T7206] ====================================================== [ 194.878915][ T7206] WARNING: possible circular locking dependency detected [ 194.885960][ T7206] syzkaller #0 Not tainted [ 194.890410][ T7206] ------------------------------------------------------ [ 194.897472][ T7206] syz.3.1100/7206 is trying to acquire lock: [ 194.903479][ T7206] ffff888054ea05e8 (&dquot->dq_lock){+.+.}-{3:3}, at: dquot_commit+0x5a/0x410 [ 194.912510][ T7206] [ 194.912510][ T7206] but task is already holding lock: [ 194.920879][ T7206] ffff88804fcf8c90 (&ei->i_data_sem/2){++++}-{3:3}, at: ext4_map_blocks+0x914/0x1a90 [ 194.930435][ T7206] [ 194.930435][ T7206] which lock already depends on the new lock. [ 194.930435][ T7206] [ 194.940867][ T7206] [ 194.940867][ T7206] the existing dependency chain (in reverse order) is: [ 194.950108][ T7206] [ 194.950108][ T7206] -> #2 (&ei->i_data_sem/2){++++}-{3:3}: [ 194.958081][ T7206] down_read+0x42/0x2d0 [ 194.962823][ T7206] ext4_map_blocks+0x338/0x1a90 [ 194.968244][ T7206] ext4_getblk+0x1c5/0x720 [ 194.973227][ T7206] ext4_bread+0x26/0x170 [ 194.978141][ T7206] ext4_quota_read+0x17f/0x380 [ 194.983671][ T7206] find_tree_dqentry+0x1cc/0xf40 [ 194.989205][ T7206] find_tree_dqentry+0x6ac/0xf40 [ 194.995033][ T7206] qtree_read_dquot+0x59a/0x880 [ 195.000810][ T7206] v2_read_dquot+0xc0/0x110 [ 195.006066][ T7206] dquot_acquire+0x152/0x520 [ 195.011234][ T7206] ext4_acquire_dquot+0x2e3/0x4a0 [ 195.016836][ T7206] dqget+0x713/0xbb0 [ 195.021302][ T7206] __dquot_initialize+0x324/0xd00 [ 195.027331][ T7206] ext4_process_orphan+0x4c/0x2e0 [ 195.033005][ T7206] ext4_orphan_cleanup+0xdfe/0x1650 [ 195.038853][ T7206] ext4_fill_super+0x6f0c/0x78f0 [ 195.044619][ T7206] get_tree_bdev+0x3e6/0x610 [ 195.049861][ T7206] vfs_get_tree+0x88/0x270 [ 195.054847][ T7206] do_new_mount+0x247/0xa40 [ 195.060009][ T7206] __se_sys_mount+0x2e3/0x3d0 [ 195.065251][ T7206] do_syscall_64+0x4c/0xa0 [ 195.070323][ T7206] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 195.076869][ T7206] [ 195.076869][ T7206] -> #1 (&s->s_dquot.dqio_sem){++++}-{3:3}: [ 195.085376][ T7206] down_read+0x42/0x2d0 [ 195.090196][ T7206] v2_read_dquot+0x4a/0x110 [ 195.095271][ T7206] dquot_acquire+0x152/0x520 [ 195.100433][ T7206] ext4_acquire_dquot+0x2e3/0x4a0 [ 195.106216][ T7206] dqget+0x713/0xbb0 [ 195.110675][ T7206] dquot_set_dqblk+0x27/0xfb0 [ 195.115921][ T7206] quota_setquota+0x4d6/0x590 [ 195.121163][ T7206] __se_sys_quotactl+0x28b/0x6f0 [ 195.126665][ T7206] do_syscall_64+0x4c/0xa0 [ 195.131732][ T7206] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 195.138190][ T7206] [ 195.138190][ T7206] -> #0 (&dquot->dq_lock){+.+.}-{3:3}: [ 195.145917][ T7206] __lock_acquire+0x3a03/0x7ea0 [ 195.151514][ T7206] lock_acquire+0x1bc/0x4a0 [ 195.156595][ T7206] __mutex_lock+0x12d/0xae0 [ 195.161678][ T7206] dquot_commit+0x5a/0x410 [ 195.166656][ T7206] ext4_write_dquot+0x1f0/0x360 [ 195.172081][ T7206] mark_all_dquot_dirty+0xf9/0x400 [ 195.177860][ T7206] __dquot_alloc_space+0x5f6/0xe50 [ 195.183550][ T7206] ext4_mb_new_blocks+0xf55/0x44d0 [ 195.189259][ T7206] ext4_ext_map_blocks+0x18d1/0x6640 [ 195.195145][ T7206] ext4_map_blocks+0x9d7/0x1a90 [ 195.200650][ T7206] ext4_getblk+0x1c5/0x720 [ 195.206325][ T7206] ext4_bread+0x26/0x170 [ 195.211486][ T7206] ext4_append+0x2bb/0x560 [ 195.216475][ T7206] ext4_init_new_dir+0x2b8/0x550 [ 195.221972][ T7206] ext4_mkdir+0x4c3/0xc90 [ 195.226870][ T7206] vfs_mkdir+0x386/0x570 [ 195.231709][ T7206] ovl_mkdir_real+0xc2/0x2a0 [ 195.237038][ T7206] ovl_workdir_create+0x374/0x820 [ 195.242669][ T7206] ovl_get_workdir+0x3cc/0x1630 [ 195.248172][ T7206] ovl_fill_super+0x1cd8/0x42f0 [ 195.253633][ T7206] mount_nodev+0x52/0xe0 [ 195.258447][ T7206] legacy_get_tree+0xe6/0x180 [ 195.263701][ T7206] vfs_get_tree+0x88/0x270 [ 195.268772][ T7206] do_new_mount+0x247/0xa40 [ 195.274119][ T7206] __se_sys_mount+0x2e3/0x3d0 [ 195.279720][ T7206] do_syscall_64+0x4c/0xa0 [ 195.284703][ T7206] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 195.291333][ T7206] [ 195.291333][ T7206] other info that might help us debug this: [ 195.291333][ T7206] [ 195.301681][ T7206] Chain exists of: [ 195.301681][ T7206] &dquot->dq_lock --> &s->s_dquot.dqio_sem --> &ei->i_data_sem/2 [ 195.301681][ T7206] [ 195.315655][ T7206] Possible unsafe locking scenario: [ 195.315655][ T7206] [ 195.323326][ T7206] CPU0 CPU1 [ 195.328848][ T7206] ---- ---- [ 195.334250][ T7206] lock(&ei->i_data_sem/2); [ 195.339245][ T7206] lock(&s->s_dquot.dqio_sem); [ 195.346748][ T7206] lock(&ei->i_data_sem/2); [ 195.353909][ T7206] lock(&dquot->dq_lock); [ 195.358366][ T7206] [ 195.358366][ T7206] *** DEADLOCK *** [ 195.358366][ T7206] [ 195.366538][ T7206] 5 locks held by syz.3.1100/7206: [ 195.372563][ T7206] #0: ffff8880284a20e0 (&type->s_umount_key#78/1){+.+.}-{3:3}, at: alloc_super+0x1fb/0x930 [ 195.382921][ T7206] #1: ffff8880290aa460 (sb_writers#4){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 195.392740][ T7206] #2: ffff88804fcfe850 (&type->i_mutex_dir_key#3/1){+.+.}-{3:3}, at: ovl_workdir_create+0x15a/0x820 [ 195.404412][ T7206] #3: ffff88804fcf8c90 (&ei->i_data_sem/2){++++}-{3:3}, at: ext4_map_blocks+0x914/0x1a90 [ 195.414573][ T7206] #4: ffffffff8cc752c8 (dquot_srcu){....}-{0:0}, at: __dquot_alloc_space+0x16e/0xe50 [ 195.424360][ T7206] [ 195.424360][ T7206] stack backtrace: [ 195.430471][ T7206] CPU: 0 PID: 7206 Comm: syz.3.1100 Not tainted syzkaller #0 [ 195.438262][ T7206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 195.448899][ T7206] Call Trace: [ 195.452477][ T7206] [ 195.455608][ T7206] dump_stack_lvl+0x188/0x24e [ 195.460362][ T7206] ? load_image+0x410/0x410 [ 195.464937][ T7206] ? show_regs_print_info+0x12/0x12 [ 195.470220][ T7206] ? print_circular_bug+0x12b/0x1a0 [ 195.476120][ T7206] check_noncircular+0x2f8/0x400 [ 195.481562][ T7206] ? __bfs+0x27a/0x560 [ 195.485737][ T7206] ? print_deadlock_bug+0x5d0/0x5d0 [ 195.491084][ T7206] ? lockdep_lock+0xf1/0x1f0 [ 195.495914][ T7206] ? _find_first_zero_bit+0xd2/0x100 [ 195.501780][ T7206] __lock_acquire+0x3a03/0x7ea0 [ 195.506868][ T7206] ? __bfs+0x27a/0x560 [ 195.511001][ T7206] ? __bfs+0x27a/0x560 [ 195.515125][ T7206] ? lockdep_unlock+0x142/0x2e0 [ 195.520137][ T7206] ? verify_lock_unused+0x140/0x140 [ 195.525475][ T7206] ? mark_lock+0x94/0x320 [ 195.529936][ T7206] ? __lock_acquire+0x142d/0x7ea0 [ 195.535097][ T7206] ? lockdep_lock+0x1f0/0x1f0 [ 195.539995][ T7206] lock_acquire+0x1bc/0x4a0 [ 195.544627][ T7206] ? dquot_commit+0x5a/0x410 [ 195.549465][ T7206] ? __might_sleep+0xd0/0xd0 [ 195.554189][ T7206] ? read_lock_is_recursive+0x10/0x10 [ 195.559621][ T7206] __mutex_lock+0x12d/0xae0 [ 195.564173][ T7206] ? dquot_commit+0x5a/0x410 [ 195.568818][ T7206] ? __might_sleep+0xd0/0xd0 [ 195.573453][ T7206] ? dquot_commit+0x5a/0x410 [ 195.578099][ T7206] ? mutex_lock_nested+0x10/0x10 [ 195.583355][ T7206] ? ext4_journal_check_start+0x17d/0x240 [ 195.589126][ T7206] dquot_commit+0x5a/0x410 [ 195.593673][ T7206] ext4_write_dquot+0x1f0/0x360 [ 195.598939][ T7206] mark_all_dquot_dirty+0xf9/0x400 [ 195.604196][ T7206] __dquot_alloc_space+0x5f6/0xe50 [ 195.609382][ T7206] ? __dquot_alloc_space+0x16e/0xe50 [ 195.614710][ T7206] ext4_mb_new_blocks+0xf55/0x44d0 [ 195.619896][ T7206] ? ext4_find_extent+0x372/0xde0 [ 195.624999][ T7206] ? rcu_is_watching+0x11/0xa0 [ 195.630102][ T7206] ? memset+0x1e/0x40 [ 195.634234][ T7206] ? ext4_mb_pa_callback+0xd0/0xd0 [ 195.639505][ T7206] ? ext4_inode_to_goal_block+0x313/0x450 [ 195.645277][ T7206] ext4_ext_map_blocks+0x18d1/0x6640 [ 195.650621][ T7206] ? ext4_ext_release+0x10/0x10 [ 195.655596][ T7206] ? rwsem_write_trylock+0x135/0x1c0 [ 195.660914][ T7206] ? ext4_es_lookup_extent+0x638/0xb00 [ 195.666498][ T7206] ext4_map_blocks+0x9d7/0x1a90 [ 195.671385][ T7206] ? ext4_issue_zeroout+0x250/0x250 [ 195.676712][ T7206] ext4_getblk+0x1c5/0x720 [ 195.681168][ T7206] ? ext4_get_block_unwritten+0x100/0x100 [ 195.687032][ T7206] ? __ext4_new_inode+0x3240/0x3b40 [ 195.692433][ T7206] ext4_bread+0x26/0x170 [ 195.696737][ T7206] ext4_append+0x2bb/0x560 [ 195.701232][ T7206] ? ext4_init_new_dir+0x550/0x550 [ 195.706734][ T7206] ? dquot_initialize+0x20/0x20 [ 195.711883][ T7206] ext4_init_new_dir+0x2b8/0x550 [ 195.716947][ T7206] ext4_mkdir+0x4c3/0xc90 [ 195.721438][ T7206] ? ext4_symlink+0x940/0x940 [ 195.726245][ T7206] ? inode_permission+0xef/0x480 [ 195.731311][ T7206] ? bpf_lsm_inode_mkdir+0x5/0x10 [ 195.736472][ T7206] ? security_inode_mkdir+0xb3/0x100 [ 195.742492][ T7206] vfs_mkdir+0x386/0x570 [ 195.746772][ T7206] ovl_mkdir_real+0xc2/0x2a0 [ 195.751504][ T7206] ovl_workdir_create+0x374/0x820 [ 195.756951][ T7206] ? ovl_mount_dir_noesc+0x1a0/0x1a0 [ 195.762478][ T7206] ? rcu_read_lock_any_held+0xb0/0x130 [ 195.768349][ T7206] ? __mnt_want_write+0x21f/0x2a0 [ 195.773516][ T7206] ovl_get_workdir+0x3cc/0x1630 [ 195.778500][ T7206] ? __rwlock_init+0x140/0x140 [ 195.783345][ T7206] ? do_raw_spin_unlock+0x11d/0x230 [ 195.789300][ T7206] ? ovl_get_upper+0x600/0x600 [ 195.794557][ T7206] ? _raw_spin_unlock+0x24/0x40 [ 195.799618][ T7206] ? ovl_inuse_trylock+0xb9/0xd0 [ 195.804769][ T7206] ? ovl_get_upper+0x456/0x600 [ 195.809854][ T7206] ? ovl_fill_super+0x42f0/0x42f0 [ 195.815112][ T7206] ? ovl_fill_super+0x131b/0x42f0 [ 195.820277][ T7206] ? rcu_is_watching+0x11/0xa0 [ 195.825258][ T7206] ? ovl_fill_super+0x131b/0x42f0 [ 195.830404][ T7206] ? __kmalloc+0xe4/0x240 [ 195.834763][ T7206] ovl_fill_super+0x1cd8/0x42f0 [ 195.839634][ T7206] ? ovl_mount+0x30/0x30 [ 195.844069][ T7206] ? __lock_acquire+0x7ea0/0x7ea0 [ 195.849205][ T7206] ? rwsem_write_trylock+0x135/0x1c0 [ 195.854767][ T7206] ? clear_nonspinnable+0x60/0x60 [ 195.859808][ T7206] ? __lock_acquire+0x7ea0/0x7ea0 [ 195.864835][ T7206] ? __rwlock_init+0x140/0x140 [ 195.869921][ T7206] ? free_anon_bdev+0x20/0x20 [ 195.874838][ T7206] ? ovl_mount+0x30/0x30 [ 195.879718][ T7206] mount_nodev+0x52/0xe0 [ 195.884347][ T7206] legacy_get_tree+0xe6/0x180 [ 195.889065][ T7206] ? virtio_fs_zero_page_range+0x130/0x130 [ 195.894993][ T7206] vfs_get_tree+0x88/0x270 [ 195.899527][ T7206] do_new_mount+0x247/0xa40 [ 195.904054][ T7206] __se_sys_mount+0x2e3/0x3d0 [ 195.908868][ T7206] ? __x64_sys_mount+0xc0/0xc0 [ 195.913849][ T7206] ? lockdep_hardirqs_on+0x94/0x140 [ 195.919348][ T7206] ? __x64_sys_mount+0x1c/0xc0 [ 195.924362][ T7206] do_syscall_64+0x4c/0xa0 [ 195.929079][ T7206] ? clear_bhb_loop+0x60/0xb0 [ 195.933872][ T7206] ? clear_bhb_loop+0x60/0xb0 [ 195.939184][ T7206] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 195.945115][ T7206] RIP: 0033:0x7f881e79e199 [ 195.949546][ T7206] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 195.969261][ T7206] RSP: 002b:00007f881f5c8028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 195.977703][ T7206] RAX: ffffffffffffffda RBX: 00007f881ea25fa0 RCX: 00007f881e79e199 [ 195.986474][ T7206] RDX: 0000200000000b80 RSI: 0000200000000100 RDI: 0000000000000000 [ 195.994890][ T7206] RBP: 00007f881e8350b8 R08: 0000200000000240 R09: 0000000000000000 [ 196.002908][ T7206] R10: 0000000000804008 R11: 0000000000000246 R12: 0000000000000000 [ 196.011074][ T7206] R13: 00007f881ea26038 R14: 00007f881ea25fa0 R15: 00007fffa468be88 [ 196.019861][ T7206] [ 196.032078][ T4276] EXT4-fs (loop4): unmounting filesystem. [ 196.104328][ T4277] EXT4-fs (loop3): unmounting filesystem. [ 196.452964][ T4283] Bluetooth: hci0: command 0x0406 tx timeout [ 196.452977][ T4287] Bluetooth: hci1: command 0x0406 tx timeout [ 196.453000][ T4287] Bluetooth: hci2: command 0x0406 tx timeout [ 199.495236][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!