last executing test programs: 13m20.130287299s ago: executing program 32 (id=108): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000007c0)={'xfrm0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=@ipv4_newnexthop={0x20, 0x68, 0x109, 0x0, 0x25dfdbfb, {}, [@NHA_OIF={0x8, 0x10, r2}]}, 0x20}}, 0x40040) 12m25.210631052s ago: executing program 33 (id=297): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) 8m35.150339011s ago: executing program 3 (id=1411): r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e24, @rand_addr=0x6}, 0x10, &(0x7f00000002c0)=[{&(0x7f00000003c0)='G', 0xe0}], 0x1}, 0x40) sendmsg$inet(r0, &(0x7f0000002700)={&(0x7f0000000040)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000080)="9a", 0x1}], 0x1}, 0x8040) sendmsg$inet(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000000280)=[{&(0x7f00000001c0)="e9", 0x34000}], 0x1}, 0x8054) 8m34.32705648s ago: executing program 3 (id=1414): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000440)={0x1, 0x5, 0x18, 0x1f, 0x10c, &(0x7f0000000040)}) 8m33.716593039s ago: executing program 3 (id=1417): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000040)=0x8002, 0x4) connect$inet6(r0, &(0x7f0000000400)={0xa, 0x4e23, 0x1b4bebdb, @loopback, 0x9}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x30, @mcast1}, 0x1c) 8m33.167686401s ago: executing program 3 (id=1422): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x40e, &(0x7f00000005c0)={[{@barrier_val={'barrier', 0x3d, 0x101}}, {@errors_remount}]}, 0x1, 0x445, &(0x7f0000000b00)="$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") mkdirat(0xffffffffffffff9c, 0x0, 0x61) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 8m31.799846878s ago: executing program 3 (id=1426): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x14, 0x0, 0x4, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4044020}, 0x4000000) recvmmsg(r0, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000200)=""/42, 0x2a}, {&(0x7f0000004180)=""/4108, 0x100c}, {&(0x7f0000000600)=""/185, 0xb7}], 0x3}, 0xf8000000}], 0x1f, 0x40030002, 0x0) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) 8m31.09706814s ago: executing program 3 (id=1430): openat$kvm(0xffffffffffffff9c, 0x0, 0xe0a80, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x4}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x3, 0x8, 0x2, {0x1, @sliced={0xffff, [0x5, 0xc, 0x2800, 0x4, 0xd3a6, 0x800, 0x3, 0x1, 0x7, 0x1, 0x5, 0x7ff, 0x4, 0x1, 0x6, 0x70b, 0x2, 0x3, 0x5, 0x6, 0xf, 0xc, 0x5, 0x1, 0x4, 0x10, 0x93d, 0x3, 0x5, 0x9, 0x9, 0x0, 0x3, 0x2f24, 0x6, 0x8, 0x3, 0x7b, 0x3, 0xe1e, 0x2, 0x6, 0x7b, 0xd, 0xa, 0xe0, 0x20, 0xc], 0x7}}, 0x3ff}) 8m29.369795269s ago: executing program 34 (id=1430): openat$kvm(0xffffffffffffff9c, 0x0, 0xe0a80, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x4}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x3, 0x8, 0x2, {0x1, @sliced={0xffff, [0x5, 0xc, 0x2800, 0x4, 0xd3a6, 0x800, 0x3, 0x1, 0x7, 0x1, 0x5, 0x7ff, 0x4, 0x1, 0x6, 0x70b, 0x2, 0x3, 0x5, 0x6, 0xf, 0xc, 0x5, 0x1, 0x4, 0x10, 0x93d, 0x3, 0x5, 0x9, 0x9, 0x0, 0x3, 0x2f24, 0x6, 0x8, 0x3, 0x7b, 0x3, 0xe1e, 0x2, 0x6, 0x7b, 0xd, 0xa, 0xe0, 0x20, 0xc], 0x7}}, 0x3ff}) 8m7.891288079s ago: executing program 5 (id=1510): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0x34, r1, 0x105, 0xffffffff, 0xa, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0xfac0a}], @crypto_settings=[@NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x4}]]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x4004050) 8m6.989308032s ago: executing program 5 (id=1513): bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) mlockall(0x7) 8m5.724941649s ago: executing program 5 (id=1517): syz_mount_image$vfat(&(0x7f0000001140), &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa18c56, &(0x7f0000001180)={[{@fat=@gid={'gid', 0x3d, 0xee01}}, {@iocharset={'iocharset', 0x3d, 'cp949'}}, {@fat=@flush}, {@fat=@codepage={'codepage', 0x3d, '737'}}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@numtail}, {@shortname_winnt}, {@iocharset={'iocharset', 0x3d, 'cp949'}}, {@shortname_mixed}, {@shortname_mixed}, {@fat=@discard}, {@rodir}, {@numtail}]}, 0x7f, 0x2b1, &(0x7f00000015c0)="$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") write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a40)='memory.swap.current\x00', 0x275a, 0x0) 8m4.537851383s ago: executing program 5 (id=1520): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x40e, &(0x7f00000005c0)={[{@barrier_val={'barrier', 0x3d, 0x101}}, {@errors_remount}]}, 0x1, 0x445, &(0x7f0000000b00)="$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") mkdirat(0xffffffffffffff9c, 0x0, 0x61) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 8m2.848465951s ago: executing program 5 (id=1526): r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x20000000fe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000001c0)=@mmap={0x4, 0x1, 0x4, 0x20, 0x0, {0x77359400}, {0x4, 0x8, 0x1, 0x7, 0x0, 0x1}, 0x291d, 0x1, {}, 0x8000d}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000100)=0x1) 8m1.779960696s ago: executing program 5 (id=1529): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0xc00}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)) 7m59.633049231s ago: executing program 35 (id=1529): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0xc00}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)) 7m40.427264945s ago: executing program 0 (id=1594): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000300), 0x0, 0x0) mmap$snddsp_control(&(0x7f0000000000/0x3000)=nil, 0x1000, 0x1, 0x11, r1, 0x82000000) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0xfffffff9, 0x7fff, 0x16, "0062007d82000000000000002240f7ffffff00"}) 7m39.806144419s ago: executing program 0 (id=1597): socket$inet(0x2, 0x4000000000000001, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) 7m39.194381809s ago: executing program 0 (id=1599): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) sendmmsg$sock(r0, &(0x7f000000bb40)=[{{0x0, 0x48, 0x0}}, {{0x0, 0xfffffffffffffe60, 0x0}}], 0x400006d, 0x2400c045) 7m37.247903704s ago: executing program 0 (id=1605): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000180)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}}, {@bh}, {@nomblk_io_submit}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x469, &(0x7f0000000500)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0, 0x1) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000140), 0x8, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) 7m35.620347408s ago: executing program 0 (id=1609): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1e, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2, 0x0, 0x2}, [@NDA_LLADDR={0xa, 0x2, @remote}]}, 0x28}}, 0x4000800) 7m34.68378111s ago: executing program 0 (id=1614): openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='loginuid\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x804000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 7m32.186590145s ago: executing program 36 (id=1614): openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='loginuid\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x804000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 4m51.134838662s ago: executing program 6 (id=2191): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)={0x30, r1, 0x1, 0x0, 0x3, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x0) 4m50.184977944s ago: executing program 6 (id=2195): r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e24, 0xf, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80000001}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x74, @dev={0xfe, 0x80, '\x00', 0x18}, 0x6}, 0x1c) 4m49.419570543s ago: executing program 6 (id=2198): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x3ffffffffffffcd0}) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64d0, &(0x7f0000000280)={0x3, r2, 0x6, 0x3, 0x3}) 4m48.637345004s ago: executing program 6 (id=2202): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000200)={[{@quota}, {@oldalloc}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x7c}}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x434, &(0x7f0000000940)="$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") mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x100000, 0x0) pivot_root(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='./file0/file0\x00') 4m47.454143209s ago: executing program 6 (id=2205): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r0, 0x3ba0, &(0x7f0000000240)={0x48, 0xb, r2}) 4m45.79390083s ago: executing program 6 (id=2213): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x6, 0x7}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, 0x0, 0x0) 4m43.313231291s ago: executing program 37 (id=2213): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x6, 0x7}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, 0x0, 0x0) 4m22.100643375s ago: executing program 8 (id=2283): r0 = shmget$private(0x0, 0x800000, 0x0, &(0x7f0000173000/0x800000)=nil) shmat(r0, &(0x7f0000000000/0x4000)=nil, 0xbbdccba4532b703b) mbind(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x6, 0x1) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 4m21.412414856s ago: executing program 8 (id=2287): setresuid(0xee00, 0xee00, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000008c0)={0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) sendmmsg$unix(r0, &(0x7f0000000b80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@cred={{0x1c, 0x1, 0x2, {r1, r2, r3}}}], 0x20, 0x40001}}], 0x1, 0x20008011) 4m20.699726603s ago: executing program 8 (id=2290): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000018) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310007000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a68000000090a010400000000000000000a0000040900020073797a310000000008000a40fffffffc0900010073797a3100000000080005400000000d18001280e1140180090001006c617374000000000400028008000340000001300c00098008000140ff"], 0x90}, 0x1, 0x0, 0x0, 0x4044050}, 0x4000000) 4m19.705130885s ago: executing program 8 (id=2292): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x214802, &(0x7f0000000980)={[{@nojournal_checksum}, {@nombcache}, {@barrier}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@noauto_da_alloc}, {@bh}, {@init_itable}]}, 0xff, 0x551, &(0x7f0000000cc0)="$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") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0xe, &(0x7f0000000140)={[{@sysvgroups}, {@dax_inode}, {@noauto_da_alloc}, {@minixdf}, {@data_journal}, {@quota}]}, 0x3, 0x455, &(0x7f0000000f00)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount(0x0, &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x20, &(0x7f0000000140)='usrjquota=') 4m17.758068607s ago: executing program 8 (id=2299): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000004c0), 0x100, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f00000005c0)={0x48, 0x5, r2, 0x0, 0xffffffffffffffff, 0x1}) 4m16.549082507s ago: executing program 8 (id=2304): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000180), 0x3, 0x566, &(0x7f00000015c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) setresuid(0xee00, 0xee00, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) 4m13.724788767s ago: executing program 38 (id=2304): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000180), 0x3, 0x566, &(0x7f00000015c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) setresuid(0xee00, 0xee00, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) 17.27076257s ago: executing program 2 (id=3175): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xe) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20082, 0x0) writev(r1, &(0x7f0000000240)=[{&(0x7f0000000e40)='\b', 0x1}], 0x1) 15.772220905s ago: executing program 2 (id=3180): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@bridge_dellink={0x2c, 0x13, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x4, 0x0, 0x1, {0x4, 0x2}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 15.412913502s ago: executing program 2 (id=3182): mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) unshare(0x2c020400) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r0, &(0x7f0000000000), 0x12) 14.60403721s ago: executing program 2 (id=3185): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000700)='./file2\x00', 0x100004e, &(0x7f0000000740)={[{@resgid}]}, 0x3, 0x53e, &(0x7f00000001c0)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000000)='./file0\x00') mount$overlay(0x0, &(0x7f0000000100)='./file2\x00', 0x0, 0x2000, 0x0) 12.881893803s ago: executing program 2 (id=3192): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="120000000b0000000800000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000280)=r0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000440)={r2, &(0x7f00000002c0), 0x0}, 0x20) 12.392235302s ago: executing program 9 (id=3194): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f000001bd80)={[{@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x8001}}, {@errors_remount}, {@nouid32}]}, 0x1, 0x441, &(0x7f00000011c0)="$eJzs28tvG8UfAPDv2kn66zP5VeXRBxAoiIpH0qSl9MAFBBIHkJDgUI4hSatQt0FNkGgVQUCoHFEl7ogjEv8AnOCCgBMSV7ijShXKpYWT0dq7ie3aaZI62RR/PtK2M7tjzXw9O/bMThxAzxpO/0ki9kTE7xExWM82Fxiu/3draWHy76WFySSq1Tf/Smrlbi4tTOZF89ftzjN9EaVPkzjcpt65y1fOT1Qq05ey/Oj8hfdG5y5feXbmwsS56XPTF8dPnz55Yuz5U+PPdSXONK6bhz6cPXLw1bevvT555to7P3+T5PG3xNElw6tdfKJa7XJ1xdrbkE76CmwI61KuD9Por43/wSjHSucNxiufFNo4YFNVq9Xq/Z0vL1aB/7Akim4BUIz8iz5d/+bHFk09toUbL9YXQGnct7KjfqUvSlmZ/pb1bTcNR8SZxX++TI/YnOcQAABNvk/nP8+0m/+VovG50L5sD2UoIv4fEfsj4lREHIiI+yJqZR+IiAfXWX/rJsnt85/S9Q0Ftkbp/O+FbG+ref6Xz/5iqJzl9tbi70/OzlSmj2fvybHo35Hmx1ap44eXf/u807XG+V96pPXnc8GsHdf7djS/ZmpifuJuYm504+OIQ33t4k+WdwKSiDgYEYc2WMfMU18f6XTtzvGvogv7TNWvIp6s9/9itMSfS1bfnxz9X1Smj4/md8Xtfvn16hud6r+r+Lsg7f9dbe//5fiHksb92rn113H1j8/ar2n2bfz+H0jeajr3wcT8/KWxiIHktXqjG8+Pt5QbXymfxn/saPvxvz9W3onDEZHexA9FxMMR8UjWd49GxGMRcXSV+H966fF3O13bDv0/ta7+X0kMROuZ9ony+R+/a6p0aD3xp/1/spY6lp1Zy+ffWtq1sbsZAAAA7j2liNgTSWlkOV0qjYzU/4b/QOwqVWbn5p8+O/v+xan6bwSGor+UP+kabHgeOpYt6/P8eEv+RPbc+Ivyzlp+ZHK2MlV08NDjdncY/6k/y0W3Dth0fq8Fvcv4h95l/EPvMv6hd7UZ/zuLaAew9dp9/39UQDuArdcy/m37QQ+x/ofe1Tj+kwLbAWw93//Qk+Z2xp1/JN8DiYHt0Yx7KBGltRf+Nrvbim6zxNoTBX8wAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMm/AQAA//8iOuPQ") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x109342, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8080c61) fallocate(r0, 0x3, 0x4, 0x8080c62) 11.071025849s ago: executing program 2 (id=3199): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='hugetlbfs\x00', 0x16, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') lseek(r0, 0x10001, 0x0) 11.070693386s ago: executing program 9 (id=3200): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000240)={0x0, 0x1c, "128cf1cbd51ee6be54bb733a52b8d5e266ff426a143085fcf29e7966"}, &(0x7f00000002c0)=0x24) 8.55687829s ago: executing program 39 (id=3199): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='hugetlbfs\x00', 0x16, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') lseek(r0, 0x10001, 0x0) 8.505740961s ago: executing program 9 (id=3202): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000007c0)='./file2\x00', 0x0, &(0x7f0000000780), 0x3, 0x546, &(0x7f0000000180)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x2) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000000)={0x6, 0x6, 0x2, 0x0, 0xffffffff, 0x2}) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x3, 0x200, 0x1, 0x80, 0xfffffff9, 0x400}) 8.407246094s ago: executing program 4 (id=3205): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x8041) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x3, 0x4, 0x4, 0x3}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r0, &(0x7f0000000040), 0x0}, 0x20) 7.175320637s ago: executing program 4 (id=3208): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) r0 = getpgrp(0x0) r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x15, &(0x7f00000003c0)={0x2a, 0xfffffffe, 0x5}) 6.872482763s ago: executing program 9 (id=3210): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000600)={0x2, {{0x2, 0x0, @multicast2}}, 0x0, 0x3, [{{0x2, 0x0, @broadcast}}, {{0x2, 0x4e20, @multicast1}}, {{0x2, 0x4e20, @private=0xa010102}}]}, 0x210) setsockopt$inet_group_source_req(r0, 0x0, 0x2b, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @empty}}}, 0x108) 6.813784341s ago: executing program 1 (id=3211): r0 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffef9, 0x0, 0x0, 0x10, 0xff}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94) 5.91815815s ago: executing program 1 (id=3212): r0 = socket$inet6(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x6e23, 0xffff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) 5.556112839s ago: executing program 9 (id=3213): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000300)=@newlink={0x48, 0x10, 0x503, 0xfffffffc, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000004}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x48}, 0x1, 0x0, 0x0, 0x8090}, 0x0) 5.555802861s ago: executing program 7 (id=3214): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000a00)={0x28, 0x7, r1, 0x0, &(0x7f00000a0000)='LL', 0x2}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000c00)={0x18, r1, 0x0, 0x200000000000000}) 5.275028358s ago: executing program 4 (id=3215): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="b9ff03076844268cb89e14f008004be0ffff00124000632f77fbac141416ac141416940807034d2f87e5890c6aab845013f2325f1a39014403178da1880b251812a59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126f4000000000000000000", 0x0, 0xfe, 0x60000000, 0x0, 0xfffffffffffffcb6, &(0x7f0000000000), &(0x7f0000000880)="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", 0x6}, 0x2c) 5.149489851s ago: executing program 1 (id=3216): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'team_slave_0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, [], [0xff], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x258, 0x120, 0x1000000, 0xffffffff, 0x1c0, 0xffffffff, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3, 0x0, {[{{@ip={@rand_addr=0x64010101, @rand_addr=0x640100ff, 0xffffffff, 0x0, 'bond_slave_1\x00', 'geneve1\x00', {}, {}, 0x4, 0x0, 0x28}, 0x0, 0xf0, 0x120, 0x0, {0x0, 0x1c8}, [@common=@inet=@ecn={{0x28}, {0x0, 0x10, 0x1a}}, @common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0xa, 0x1eb, 0x8, 0x0, 0x0, 0x5, 0x23}}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x9, 0x4, 0x3ff, 0xc15ac56b9c76af00}}}, {{@ip={@loopback, @rand_addr=0x64010101, 0xff, 0xffffff00, 'veth0_to_team\x00', 'vcan0\x00', {}, {0xff}, 0x32, 0x3}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x9, 0x3, 0x3, 0x55367656ae40811c}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x64}}}}, 0x2b8) 4.650587471s ago: executing program 7 (id=3217): syz_mount_image$hfsplus(&(0x7f0000003000), &(0x7f0000000240)='./bus\x00', 0x208000, &(0x7f0000003f80)=ANY=[@ANYBLOB="6e6c733d63703935302c6e6f626172726965722c666f7263652c756d61736b3d30303030303030303030303030303030303030313030302c00d01280f532b0f4cf3b36fd5c6ef64269a533fc6b052f92ffcac08ca18519d5b3711b97ec291e41355fa65d9c0d15e7c10c63ab0bba736f92ab9d30478ae1452a017be98c2a0507febf295db17e98d0fffc0d349264ce2acdedc0a61ae132d4024d39e11de2dc8679fac7efcb6137aa2e361c5f6cb851e3a60ba05f834666694667f27f0d632cf9a85fe247e27251acbd739ff85088cb201010900132000000000000000000002593d600000000"], 0xfd, 0x693, &(0x7f0000000980)="$eJzs3UtsHHcdB/DvrDd+BJS6bdIWhNSoERE0IrGzlAQBIiCEcqhQJC69cLASp7GySSvHRW6FiMvzyrGHHopQOPSEekAq4lBRzkhInLjkHom7Tyya2dn1Ohs73rx2TT8faXb+M//H/Obn/8y+ZG2Az6zzr+XARoqcP/Hqerl9+1arfftW61qvnGQmSSNpdlcprifFp8m5dJd8odxZD1fsdJxX7nz8/vH3Pmx1t5r1UrVv7NZvyD1bbtRLjiaZqtcPYdt4Fx96vKIfd5mwY73Ewbh1hmyM0n3v1y0wsYru8+aQ+eRgktn6dUDqu0PjyUb36I10lwMAAIB96qnNbGY9h8YdBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOwn9e//F/XS6JWPpuj9/v90tW+6aj497ngf1ifjDgAAAAAAAAAAHoEXN7OZ9RzqbXeK6jv/l6qNw9Xj5/JWbmQ5qzmZ9SxlLWtZzWKS+ar+3epxen1pbW11caeenU7nZmeq6nm63zMDPU8PhVbsHnln5qFPHgAAAAAAAAD2mV2+LP9Fzm99/w8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJOgSKa6q2o53CvPp9FMMptkumy3kfy1V97PPhl3AAAAAPAEPLWZzaznUPHf7nanqN7zP1e975/NW7metaxkLe0s51L1WUD3XX/jnxut9u1brWvlMjzu9/4zUhjViOl+9nDvIy9ULY7U7TeS/DA/zokczYWsZiU/zVLWspyj+UFVWkqR+Wqsf38nqeMcinemfDi3LZQL94v1hSqSuVzOShXbyVzsfwzS6LUZONqfp5NtGWrk3TI7xXdre8zRpXpd/g1+V68nw3x1Ugf6GVmoc19m4+nbO+W+0p0nM6MfqVnvafQ/gzq825EeMOcH63WZ698M5vzFvUb8uAzmvIzqdBr92ffc7jlPvvqvv1240r5+9crlGycmZxrtqNPp3Ny59u7Z1+pnYjbP7z0TGztk4qPtm1P3ajM74gk9JtN1Nroxbt0tk/ODd8tOJxm6W75U9T2Ulfwob+RSlnMmC1nM2Szkmzmd1rYZdmT3vFbXWmO0a+3YV+rCXJLf1uvJUOb16YG8Dt7p5qu6wT1bWXpmD1ka8Y7U/GJdKI/xy4FnnPG7OxOLA5l4dvdM/L6ckbnRvn519crSm3s83vF6XV62v97+fPiHR3E+D66cL8+Uf6xqa/vsKOuevWfdYlV3uF/XGKo70q+735U6Xb+GGx6pW/f8PetaVd0LA3XbXuXkjbT7r0IAmBSd4V0HXz44PXdn7h9zH8z9au7K3Kuz3585O/Ol6Rz4e/MvU39q/LHx7eLlfJCf59A4AgYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgP83N95+5+pSu728OoGFNEbrVZ7PuGOe2MJMklF6dW52OkXz0YbxUZIH7t77rcDeni+3l/P5XXo1B2b4Vq+J+Fs8fOFbP6mTcZ/GzdEu87l6wMn5cTHg8Tm1du3NUzfefudrK9eWXl9+ffn66bNnzp5pfWPx66cur7SXF7qP444SeBy2nv3HHQkAAAAAAAAAAACwV0/iPxbGfY4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA/nb+tRzYSJHFhZML5fbtW612ufTKWy2bSRpJip8lxafJuXSXzA8MV+x0nFfufPz+8fc+bG2N1ey1b+zWb2826iVHk0zV67sbDJvZ03gXB8drPEh4Rf8My4Qd6yUOxu1/AQAA//8V6AHY") mkdir(&(0x7f0000000440)='./file1\x00', 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f0000000280), &(0x7f000000a440)=ANY=[], 0x90f, 0x0) lremovexattr(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000180)=@known='trusted.overlay.upper\x00') 4.0545743s ago: executing program 4 (id=3218): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file1\x00', 0x3000010, &(0x7f0000000080)=ANY=[@ANYRES64=0x0], 0x1, 0x5db, &(0x7f0000002580)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file1\x00') setxattr$trusted_overlay_upper(&(0x7f0000000180)='./file1\x00', &(0x7f0000000200), &(0x7f0000000240)=ANY=[], 0x105, 0x0) 3.508133364s ago: executing program 7 (id=3219): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) ppoll(&(0x7f0000000080)=[{r0, 0x5004}], 0x1, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x18) ioctl$SNDCTL_DSP_GETISPACE(r0, 0x8010500d, &(0x7f0000000000)) 3.128998092s ago: executing program 1 (id=3220): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x1}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$UFFDIO_REGISTER(r0, 0xc020aa07, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) 2.360362897s ago: executing program 1 (id=3221): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"/306], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\n'], 0x98) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0xffff0000, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x0, 0xffff0000}, 0x48) 2.106731462s ago: executing program 4 (id=3222): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x200041a, &(0x7f0000000300)=ANY=[@ANYBLOB="6465636f6d706f73652c6e6f626172726965722c6e6c733d69736f383835392d342c0000eb25ba11b788a23b6013ffe5be87fc27664d64fc0e4dd46a49567c77a44ad292e9ed9872dc027d083d66154fe9c6fa40cb8833ec287f8eb2ef9e4c9c6ae7b8da63b8266bd0f93bb7f4b826c2c59bdcfac9aa018a168337d4fddf10b9274d217f93c391ba0112113fee152a52ab91faf3e116456889a3b530bd345c1bed71f1f605c74ee209509d4275f16a8a4e18a5eca2dc8256559f25a39e59e97509fb488db249ecae8d5a2341f85ca194d28668ae031384066e9dc4190c4d9bdeeaeb6503303cac86f2c0b9f933ca805833"], 0x1, 0x5c8, &(0x7f00000006c0)="$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") r0 = open(&(0x7f0000000140)='.\x00', 0x0, 0x192) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1994468, 0x0, 0x5, 0x0, &(0x7f00000001c0)) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 1.662935691s ago: executing program 7 (id=3223): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xd) ioctl$TIOCVHANGUP(r0, 0x5437, 0x200000000000000) 1.096337454s ago: executing program 7 (id=3224): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) io_submit(0x0, 0x1, &(0x7f0000000800)=[&(0x7f0000000000)={0x180a, 0x0, 0x3, 0x2, 0x0, r0, 0x0, 0x0, 0x8}]) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x0, &(0x7f0000000340)}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x23, &(0x7f0000000000), 0x0) 729.336732ms ago: executing program 1 (id=3225): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000580)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x9, 0x0) mq_timedreceive(r0, &(0x7f0000004600)=""/102381, 0xfffffceb, 0x0, 0x0) 341.692859ms ago: executing program 9 (id=3226): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) close(r0) 102.380018ms ago: executing program 7 (id=3227): timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x2}, &(0x7f0000bbdffc)) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000400)={[0xfffffffffffffff5]}, 0x8, 0x80000) ppoll(&(0x7f0000000040)=[{r0, 0x8007}], 0x1, 0x0, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) 0s ago: executing program 4 (id=3228): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000400)={r0, r0, 0x6, 0x1, &(0x7f00000006c0)='>', 0x9, 0x1, 0xc45, 0x1010, 0xc3, 0x0, 0x7, 'syz0\x00'}) kernel console output (not intermixed with test programs): ata mode. [ 808.805084][T12900] (syz.1.2420,12900,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x98842a5e, computed 0xe74db1cd. Applying ECC. [ 808.966762][T12900] (syz.1.2420,12900,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xdf8356d3, computed 0xb8c23ae4. Applying ECC. [ 808.981177][T12900] (syz.1.2420,12900,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0xdf8356d3, computed 0x2acb7e3c [ 808.994252][T12900] (syz.1.2420,12900,0):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 809.003083][T12900] (syz.1.2420,12900,0):ocfs2_quota_read:201 ERROR: status = -5 [ 809.011450][T12900] Quota error (device loop1): qtree_write_dquot: Error -5 occurred while creating quota [ 809.023683][T12900] (syz.1.2420,12900,0):ocfs2_acquire_dquot:904 ERROR: status = -5 [ 809.383587][T12165] ocfs2: Unmounting device (7,1) on (node local) [ 810.554180][T12916] »»»»»» speed is unknown, defaulting to 1000 [ 811.004824][T12933] tap0: tun_chr_ioctl cmd 1074025677 [ 811.041341][T12933] tap0: linktype set to 6 [ 811.625429][T12936] batman_adv: batadv0: Adding interface: vlan2 [ 811.658757][T12936] batman_adv: batadv0: The MTU of interface vlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 811.770129][T12936] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 812.020945][T12945] loop9: detected capacity change from 0 to 1024 [ 812.056468][T12945] EXT4-fs: Ignoring removed bh option [ 812.224264][T12945] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 812.528449][T12945] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 812.600178][T12945] EXT4-fs: can't change dax mount option while remounting [ 813.495934][T10298] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 813.526565][ T9374] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 813.744997][ T9374] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 813.892031][ T9374] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 814.041146][ T9374] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 814.593915][ T9374] bridge_slave_1: left allmulticast mode [ 814.621265][ T9374] bridge_slave_1: left promiscuous mode [ 814.641401][ T9374] bridge0: port 2(bridge_slave_1) entered disabled state [ 815.471181][ T9374] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 815.510633][ T9374] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 815.536730][ T9374] bond0 (unregistering): Released all slaves [ 816.074345][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 816.112448][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 816.138888][T11369] Bluetooth: hci1: command 0x0406 tx timeout [ 816.242010][ T9374] hsr_slave_0: left promiscuous mode [ 816.251749][ T9374] hsr_slave_1: left promiscuous mode [ 816.262959][ T9374] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 816.274695][ T9374] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 816.306140][ T9374] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 816.322092][ T9374] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 816.354152][ T9374] veth1_macvtap: left promiscuous mode [ 816.360453][ T9374] veth0_macvtap: left promiscuous mode [ 816.366343][ T9374] veth1_vlan: left promiscuous mode [ 816.373996][ T9374] veth0_vlan: left promiscuous mode [ 817.250245][ T9374] team0 (unregistering): Port device team_slave_1 removed [ 817.298514][ T9374] team0 (unregistering): Port device team_slave_0 removed [ 817.740775][ T3285] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 817.768281][ T3285] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 818.563524][T11369] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 818.573495][T11369] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 818.583770][T11369] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 818.618538][T11369] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 818.636176][T11369] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 819.420101][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 819.436771][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 819.491521][T13009] loop4: detected capacity change from 0 to 32768 [ 819.507451][T13009] (syz.4.2432,13009,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 819.524670][T13009] (syz.4.2432,13009,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 819.649415][T13009] JBD2: Ignoring recovery information on journal [ 819.795463][T13009] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 819.837369][T13009] (syz.4.2432,13009,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x98842a5e, computed 0xe74db1cd. Applying ECC. [ 819.990506][T13009] (syz.4.2432,13009,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xdf8356d3, computed 0xb8c23ae4. Applying ECC. [ 820.008364][T13009] (syz.4.2432,13009,1):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0xdf8356d3, computed 0x2acb7e3c [ 820.021309][T13009] (syz.4.2432,13009,1):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 820.030114][T13009] (syz.4.2432,13009,1):ocfs2_quota_read:201 ERROR: status = -5 [ 820.038435][T13009] Quota error (device loop4): qtree_write_dquot: Error -5 occurred while creating quota [ 820.048741][T13009] (syz.4.2432,13009,1):ocfs2_acquire_dquot:904 ERROR: status = -5 [ 820.295336][T12476] ocfs2: Unmounting device (7,4) on (node local) [ 820.676638][T13030] loop1: detected capacity change from 0 to 512 [ 820.698089][T11369] Bluetooth: hci2: command tx timeout [ 820.772791][T13030] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 820.778729][T13031] loop7: detected capacity change from 0 to 2048 [ 820.912811][T13031] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 820.949905][T13030] EXT4-fs error (device loop1): __ext4_iget:5481: inode #15: block 1803188595: comm syz.1.2438: invalid block [ 821.080707][T13030] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 821.088007][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 821.103974][ C0] EXT4-fs (loop1): initial error at time 54460743: __ext4_iget:5481: inode 15: block 1803188595 [ 821.114929][ C0] EXT4-fs (loop1): last error at time 54460743: __ext4_iget:5481: inode 15: block 1803188595 [ 821.137408][T13030] EXT4-fs (loop1): Remounting filesystem read-only [ 821.183302][T13040] bond0: option miimon: invalid value (18446744073709551615) [ 821.210984][T13030] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 821.259796][T13040] bond0: option miimon: allowed values 0 - 2147483647 [ 821.739703][T12165] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 822.778147][T11369] Bluetooth: hci2: command tx timeout [ 823.690066][T13004] »»»»»» speed is unknown, defaulting to 1000 [ 823.727612][T13065] loop1: detected capacity change from 0 to 32768 [ 823.752983][T13065] (syz.1.2446,13065,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 823.774648][T13065] (syz.1.2446,13065,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 823.879446][T13065] JBD2: Ignoring recovery information on journal [ 823.969224][T13065] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 823.994354][T13065] (syz.1.2446,13065,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x98842a5e, computed 0xe74db1cd. Applying ECC. [ 824.131732][T13065] (syz.1.2446,13065,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xdf8356d3, computed 0xb8c23ae4. Applying ECC. [ 824.145784][T13065] (syz.1.2446,13065,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0xdf8356d3, computed 0x2acb7e3c [ 824.158975][T13065] (syz.1.2446,13065,0):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 824.167672][T13065] (syz.1.2446,13065,0):ocfs2_quota_read:201 ERROR: status = -5 [ 824.178119][T13065] Quota error (device loop1): qtree_write_dquot: Error -5 occurred while creating quota [ 824.188368][T13065] (syz.1.2446,13065,0):ocfs2_acquire_dquot:904 ERROR: status = -5 [ 824.600171][T12165] ocfs2: Unmounting device (7,1) on (node local) [ 824.858683][T11369] Bluetooth: hci2: command tx timeout [ 825.489113][ T808] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 825.709918][ T808] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 243, changing to 11 [ 825.756471][ T808] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 825.824606][ T808] usb 3-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 825.867309][ T808] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 825.997556][T13098] loop1: detected capacity change from 0 to 64 [ 826.009684][ T808] usb 3-1: config 0 descriptor?? [ 826.668981][ T808] mcp2200 0003:04D8:00DF.000D: unknown main item tag 0x0 [ 826.693130][ T808] mcp2200 0003:04D8:00DF.000D: unknown main item tag 0x0 [ 826.726673][ T808] mcp2200 0003:04D8:00DF.000D: unknown main item tag 0x0 [ 826.786572][ T808] mcp2200 0003:04D8:00DF.000D: unknown main item tag 0x0 [ 826.818451][ T808] mcp2200 0003:04D8:00DF.000D: unknown main item tag 0x0 [ 826.869855][ T808] mcp2200 0003:04D8:00DF.000D: unknown main item tag 0x0 [ 826.913503][ T808] mcp2200 0003:04D8:00DF.000D: unknown main item tag 0x0 [ 826.939690][T11369] Bluetooth: hci2: command tx timeout [ 826.976609][ T808] mcp2200 0003:04D8:00DF.000D: unknown main item tag 0x0 [ 827.043090][ T808] mcp2200 0003:04D8:00DF.000D: unknown main item tag 0x0 [ 827.076836][ T808] mcp2200 0003:04D8:00DF.000D: unknown main item tag 0x0 [ 827.111957][ T808] mcp2200 0003:04D8:00DF.000D: item fetching failed at offset 70/235 [ 827.142578][ T808] mcp2200 0003:04D8:00DF.000D: can't parse reports [ 827.182074][ T808] mcp2200 0003:04D8:00DF.000D: probe with driver mcp2200 failed with error -22 [ 827.256874][T13111] loop1: detected capacity change from 0 to 512 [ 827.277551][ T808] usb 3-1: USB disconnect, device number 13 [ 827.364912][T13111] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #12: comm syz.1.2460: missing EA_INODE flag [ 827.381211][T13111] loop1: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 827.386492][T13111] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.2460: error while reading EA inode 12 err=-117 [ 827.397907][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 827.416330][ C1] EXT4-fs (loop1): initial error at time 54460749: ext4_xattr_inode_iget:441: inode 12 [ 827.426333][ C1] EXT4-fs (loop1): last error at time 54460749: ext4_xattr_inode_iget:441: inode 12 [ 827.564894][T13111] loop1: lost filesystem error report for type 5 error -117 [ 827.565919][T13111] EXT4-fs (loop1): 1 orphan inode deleted [ 827.747514][T13111] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 828.321071][T13117] loop7: detected capacity change from 0 to 32768 [ 828.338283][T13117] (syz.7.2463,13117,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 828.352693][T13117] (syz.7.2463,13117,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 828.408815][T13117] JBD2: Ignoring recovery information on journal [ 828.563468][T13117] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 828.595228][T13117] (syz.7.2463,13117,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x98842a5e, computed 0xe74db1cd. Applying ECC. [ 828.636329][T13120] loop4: detected capacity change from 0 to 1024 [ 828.684797][T13004] bridge0: port 1(bridge_slave_0) entered blocking state [ 828.749614][T13004] bridge0: port 1(bridge_slave_0) entered disabled state [ 828.774527][T13117] (syz.7.2463,13117,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xdf8356d3, computed 0xb8c23ae4. Applying ECC. [ 828.794436][T13117] (syz.7.2463,13117,1):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0xdf8356d3, computed 0x2acb7e3c [ 828.806198][T13004] bridge_slave_0: entered allmulticast mode [ 828.811090][T13117] (syz.7.2463,13117,1):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 828.822110][T13117] (syz.7.2463,13117,1):ocfs2_quota_read:201 ERROR: status = -5 [ 828.830385][T13117] Quota error (device loop7): qtree_write_dquot: Error -5 occurred while creating quota [ 828.840561][T13117] (syz.7.2463,13117,1):ocfs2_acquire_dquot:904 ERROR: status = -5 [ 828.866611][T12165] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 828.933751][T13004] bridge_slave_0: entered promiscuous mode [ 829.040918][T13004] bridge0: port 2(bridge_slave_1) entered blocking state [ 829.083581][T13004] bridge0: port 2(bridge_slave_1) entered disabled state [ 829.083861][T13128] hfsplus: can't free extent: start 2889, count 1 [ 829.162762][T13004] bridge_slave_1: entered allmulticast mode [ 829.207287][ T9635] ocfs2: Unmounting device (7,7) on (node local) [ 829.286871][T13004] bridge_slave_1: entered promiscuous mode [ 829.863232][T13004] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 829.973744][T13004] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 829.975440][T13138] loop2: detected capacity change from 0 to 512 [ 830.049591][T13138] EXT4-fs: Ignoring removed bh option [ 830.192232][T13138] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 830.300210][T13004] team0: Port device team_slave_0 added [ 830.322728][T13004] team0: Port device team_slave_1 added [ 830.356324][T13138] EXT4-fs (loop2): 1 truncate cleaned up [ 830.414265][T13138] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 830.689806][T13138] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2468: bg 0: block 465: padding at end of block bitmap is not set [ 830.792263][T13138] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 131075 with max blocks 1 with error 28 [ 830.839000][T13147] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 830.925837][T13138] EXT4-fs (loop2): This should not happen!! Data will be lost [ 830.925837][T13138] [ 830.997576][T13004] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 831.026572][T13147] EXT4-fs (loop2): This should not happen!! Data will be lost [ 831.026572][T13147] [ 831.028907][T13004] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 831.153874][T13147] EXT4-fs (loop2): Total free blocks count 0 [ 831.201049][T13138] EXT4-fs (loop2): Total free blocks count 0 [ 831.217539][T13004] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 831.245677][T13138] EXT4-fs (loop2): Free/Dirty block details [ 831.282614][T13147] EXT4-fs (loop2): Free/Dirty block details [ 831.314776][T13004] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 831.323234][T13138] EXT4-fs (loop2): free_blocks=0 [ 831.360493][T13004] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 831.476986][ T29] audit: type=1804 audit(54460753.632:94): pid=13153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2473" name="/newroot/26/cgroup.controllers" dev="tmpfs" ino=155 res=1 errno=0 [ 831.501427][T13004] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 831.584224][ T29] audit: type=1800 audit(54460753.662:95): pid=13153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2473" name="cgroup.controllers" dev="tmpfs" ino=155 res=0 errno=0 [ 831.733703][T11090] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 832.289763][ T808] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 832.493727][ T808] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 243, changing to 11 [ 832.547571][ T808] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 832.625537][ T808] usb 5-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 832.677221][ T808] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 832.948954][T13162] loop2: detected capacity change from 0 to 32768 [ 833.005752][T13162] (syz.2.2476,13162,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 833.026941][T13162] (syz.2.2476,13162,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 833.033646][ T808] usb 5-1: config 0 descriptor?? [ 833.076061][T13004] hsr_slave_0: entered promiscuous mode [ 833.130215][T13162] JBD2: Ignoring recovery information on journal [ 833.190466][T13004] hsr_slave_1: entered promiscuous mode [ 833.214253][T13004] debugfs: 'hsr0' already exists in 'hsr' [ 833.220937][T13004] Cannot create hsr debugfs directory [ 833.230459][T13162] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 833.257673][T13162] (syz.2.2476,13162,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x98842a5e, computed 0xe74db1cd. Applying ECC. [ 833.316007][ T5226] 8021q: adding VLAN 0 to HW filter on device eth1 [ 833.403144][T13162] (syz.2.2476,13162,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xdf8356d3, computed 0xb8c23ae4. Applying ECC. [ 833.423666][T13162] (syz.2.2476,13162,1):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0xdf8356d3, computed 0x2acb7e3c [ 833.436716][T13162] (syz.2.2476,13162,1):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 833.445515][T13162] (syz.2.2476,13162,1):ocfs2_quota_read:201 ERROR: status = -5 [ 833.453851][T13162] Quota error (device loop2): qtree_write_dquot: Error -5 occurred while creating quota [ 833.464095][T13162] (syz.2.2476,13162,1):ocfs2_acquire_dquot:904 ERROR: status = -5 [ 833.681989][T11090] ocfs2: Unmounting device (7,2) on (node local) [ 833.803837][ T808] hid_parser_main: 50 callbacks suppressed [ 833.815142][ T808] mcp2200 0003:04D8:00DF.000E: unknown main item tag 0x0 [ 833.838117][ T808] mcp2200 0003:04D8:00DF.000E: unknown main item tag 0x0 [ 833.880965][ T808] mcp2200 0003:04D8:00DF.000E: unknown main item tag 0x0 [ 833.942749][ T808] mcp2200 0003:04D8:00DF.000E: unknown main item tag 0x0 [ 833.995134][ T808] mcp2200 0003:04D8:00DF.000E: unknown main item tag 0x0 [ 834.043537][ T808] mcp2200 0003:04D8:00DF.000E: unknown main item tag 0x0 [ 834.090570][ T808] mcp2200 0003:04D8:00DF.000E: unknown main item tag 0x0 [ 834.148885][T13175] loop7: detected capacity change from 0 to 2048 [ 834.164497][ T808] mcp2200 0003:04D8:00DF.000E: unknown main item tag 0x0 [ 834.221052][ T808] mcp2200 0003:04D8:00DF.000E: unknown main item tag 0x0 [ 834.251806][T13175] NILFS (loop7): broken superblock, retrying with spare superblock (blocksize = 1024) [ 834.270149][ T808] mcp2200 0003:04D8:00DF.000E: unknown main item tag 0x0 [ 834.353957][ T808] mcp2200 0003:04D8:00DF.000E: item fetching failed at offset 70/235 [ 834.408285][T13179] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 834.438271][ T808] mcp2200 0003:04D8:00DF.000E: can't parse reports [ 834.484826][ T808] mcp2200 0003:04D8:00DF.000E: probe with driver mcp2200 failed with error -22 [ 834.501365][ T6403] udevd[6403]: incorrect nilfs2 checksum on /dev/loop7 [ 834.570848][T13181] program syz.1.2483 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 834.615613][ T808] usb 5-1: USB disconnect, device number 6 [ 835.611618][T13184] loop2: detected capacity change from 0 to 4096 [ 835.805377][T13184] NILFS (loop2): invalid segment: Checksum error in segment payload [ 835.856715][T13184] NILFS (loop2): trying rollback from an earlier position [ 836.044478][T13184] NILFS (loop2): recovery complete [ 836.112448][T13195] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 836.424783][T13197] netlink: 'syz.4.2489': attribute type 11 has an invalid length. [ 836.479532][T13197] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2489'. [ 836.635989][T13192] loop7: detected capacity change from 0 to 4096 [ 837.043104][T13192] ntfs3(loop7): Mark volume as dirty due to NTFS errors [ 837.310153][T13192] ntfs3(loop7): Failed to load $Extend (-22). [ 837.369548][T13192] ntfs3(loop7): Failed to initialize $Extend. [ 837.570196][ T29] audit: type=1800 audit(54460759.722:96): pid=13192 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2486" name="file1" dev="loop7" ino=30 res=0 errno=0 [ 838.113301][T13206] loop4: detected capacity change from 0 to 32768 [ 838.171154][T13206] (syz.4.2492,13206,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 838.187490][T13206] (syz.4.2492,13206,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 838.265441][T13206] JBD2: Ignoring recovery information on journal [ 838.268644][T13004] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 838.343120][T13004] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 838.359593][T13004] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 838.434262][T13206] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 838.453387][T13004] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 838.466630][T13206] (syz.4.2492,13206,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x98842a5e, computed 0xe74db1cd. Applying ECC. [ 838.504470][T13004] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 838.590485][T13206] (syz.4.2492,13206,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xdf8356d3, computed 0xb8c23ae4. Applying ECC. [ 838.610568][T13206] (syz.4.2492,13206,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0xdf8356d3, computed 0x2acb7e3c [ 838.623706][T13206] (syz.4.2492,13206,0):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 838.634520][T13206] (syz.4.2492,13206,0):ocfs2_quota_read:201 ERROR: status = -5 [ 838.642876][T13206] Quota error (device loop4): qtree_write_dquot: Error -5 occurred while creating quota [ 838.653165][T13206] (syz.4.2492,13206,0):ocfs2_acquire_dquot:904 ERROR: status = -5 [ 838.735680][T13004] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 838.751224][T13004] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 838.805377][T13004] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 838.927481][T12476] ocfs2: Unmounting device (7,4) on (node local) [ 839.491264][T13228] binder: 13225:13228 unknown command 3 [ 839.557665][T13228] binder: 13225:13228 ioctl c0306201 200000000180 returned -22 [ 839.626264][T13231] loop1: detected capacity change from 0 to 128 [ 840.108946][T13229] loop4: detected capacity change from 0 to 2048 [ 840.180123][T13229] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 840.342502][T13233] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 840.845706][T13235] loop2: detected capacity change from 0 to 1024 [ 840.864490][T13224] loop7: detected capacity change from 0 to 8192 [ 841.035654][T13004] 8021q: adding VLAN 0 to HW filter on device bond0 [ 841.540122][T13004] 8021q: adding VLAN 0 to HW filter on device team0 [ 841.726470][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 841.734156][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 842.000021][ T3285] bridge0: port 2(bridge_slave_1) entered blocking state [ 842.007507][ T3285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 843.178665][T13254] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2506'. [ 843.419218][ T5685] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 843.632833][ T5685] usb 3-1: Using ep0 maxpacket: 32 [ 843.693677][ T5685] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 843.765457][ T5685] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 843.823119][ T5685] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 843.885744][ T5685] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 843.984330][ T5685] usb 3-1: config 0 descriptor?? [ 844.055574][ T5685] hub 3-1:0.0: USB hub found [ 844.287216][ T5685] hub 3-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 844.433831][T13268] loop1: detected capacity change from 0 to 2048 [ 844.519011][T13268] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 844.671886][T13273] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 844.774690][ T5685] hid-generic 0003:046D:C31C.000F: item fetching failed at offset 0/1 [ 844.865659][ T5685] hid-generic 0003:046D:C31C.000F: probe with driver hid-generic failed with error -22 [ 845.009874][ T5685] usb 3-1: USB disconnect, device number 14 [ 846.306853][T13291] loop2: detected capacity change from 0 to 2048 [ 846.378545][T10774] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 846.437786][T13291] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 846.624320][T13288] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2516'. [ 846.743453][T10774] usb 2-1: unable to get BOS descriptor or descriptor too short [ 846.790662][T10774] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 846.832928][T10774] usb 2-1: can't read configurations, error -71 [ 847.115657][T13300] loop4: detected capacity change from 0 to 8 [ 847.795601][T13307] loop7: detected capacity change from 0 to 64 [ 847.883750][T13307] MINIX-fs: mounting file system with errors, running fsck is recommended [ 847.962005][T13307] MINIX-fs warning: remounting fs with errors, running fsck is recommended [ 848.036971][ T5226] 8021q: adding VLAN 0 to HW filter on device eth2 [ 848.044376][T13307] MINIX-fs warning: remounting unchecked fs, running fsck is recommended [ 848.385553][T13004] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 849.838997][ T2158] usb 8-1: new full-speed USB device number 10 using dummy_hcd [ 850.054198][ T2158] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 850.125808][ T2158] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 850.205485][ T2158] usb 8-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 850.234492][ T2158] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 850.263744][ T2158] usb 8-1: Product: syz [ 850.311461][ T2158] usb 8-1: Manufacturer: syz [ 850.318818][ T2158] usb 8-1: SerialNumber: syz [ 850.359070][ T2158] usb 8-1: config 0 descriptor?? [ 850.648134][ T2158] usb 8-1: USB disconnect, device number 10 [ 851.326954][T13004] veth0_vlan: entered promiscuous mode [ 851.474213][T13357] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2536'. [ 851.496939][T13004] veth1_vlan: entered promiscuous mode [ 851.877551][T13362] loop7: detected capacity change from 0 to 64 [ 852.087660][T13004] veth0_macvtap: entered promiscuous mode [ 852.141452][T13362] BFS-fs: bfs_readdir(): Bad f_pos=00000003 for loop7:00000002 [ 852.237243][T13004] veth1_macvtap: entered promiscuous mode [ 852.675227][T13004] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 852.850602][T13374] loop7: detected capacity change from 0 to 128 [ 852.870809][T13004] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 853.001264][T13374] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 853.049831][ T9374] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 853.096610][ T9374] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 853.119870][T12494] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 853.185795][T12494] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 853.460371][T13382] loop6: detected capacity change from 512 to 0 [ 853.905169][ T9635] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 854.406262][T13389] 9p: Unknown access argument 18446744073709551615: -34 [ 856.162341][ T5226] 8021q: adding VLAN 0 to HW filter on device eth3 [ 856.803773][ T175] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 856.829298][ T175] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 856.931797][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 856.954193][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 858.189292][T13446] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2548'. [ 858.881686][T13455] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2552'. [ 859.218119][T13458] loop7: detected capacity change from 0 to 512 [ 859.307223][T13458] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 859.443083][T13458] EXT4-fs error (device loop7): ext4_orphan_get:1423: comm syz.7.2553: bad orphan inode 131083 [ 859.593270][T13458] loop7: lost filesystem error report for type 5 error -117 [ 859.607910][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 859.621955][ C1] EXT4-fs (loop7): initial error at time 54460781: ext4_orphan_get:1423 [ 859.630629][ C1] EXT4-fs (loop7): last error at time 54460781: ext4_orphan_get:1423 [ 859.659378][T13458] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 859.862948][ T29] audit: type=1800 audit(54460782.022:97): pid=13458 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2553" name="file1" dev="loop7" ino=15 res=0 errno=0 [ 860.451281][ T9635] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 860.947170][T13480] loop4: detected capacity change from 0 to 512 [ 861.019929][T13480] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 861.060713][ T9946] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 861.189902][T13480] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 861.190495][T13490] netlink: 'syz.2.2566': attribute type 11 has an invalid length. [ 861.212411][T13490] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2566'. [ 861.265680][ T9946] usb 10-1: config 0 interface 0 altsetting 251 bulk endpoint 0x9 has invalid maxpacket 99 [ 861.277031][ T9946] usb 10-1: config 0 interface 0 has no altsetting 0 [ 861.304415][ T9946] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 861.335415][ T9946] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 861.362366][ T9946] usb 10-1: Product: syz [ 861.388247][ T9946] usb 10-1: Manufacturer: syz [ 861.406717][ T9946] usb 10-1: SerialNumber: syz [ 861.424543][T13480] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2565: bg 0: block 217: padding at end of block bitmap is not set [ 861.514771][ T9946] usb 10-1: config 0 descriptor?? [ 861.542177][T13480] EXT4-fs (loop4): Remounting filesystem read-only [ 861.564420][T13481] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 861.655689][ T9946] usb 10-1: selecting invalid altsetting 0 [ 861.746371][T13493] loop7: detected capacity change from 0 to 16 [ 861.842496][T13493] erofs (device loop7): invalid ishare xattr prefix id 0 [ 862.163751][T12476] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 862.735316][ T9946] usb 10-1: USB disconnect, device number 3 [ 863.385473][ T6401] udevd[6401]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 864.642926][ T5679] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 864.690750][T13528] loop9: detected capacity change from 0 to 1024 [ 864.808557][ T5679] usb 8-1: Using ep0 maxpacket: 32 [ 864.871943][ T5679] usb 8-1: config 0 has an invalid interface number: 51 but max is 0 [ 864.905672][ T5679] usb 8-1: config 0 has no interface number 0 [ 864.944492][ T5679] usb 8-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 865.002225][ T5679] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 865.057052][ T5679] usb 8-1: Product: syz [ 865.075462][ T5679] usb 8-1: Manufacturer: syz [ 865.115274][ T5679] usb 8-1: SerialNumber: syz [ 865.167414][ T5679] usb 8-1: config 0 descriptor?? [ 865.252602][ T5679] quatech2 8-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 865.501499][ T5679] usb 8-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 865.616802][ T5679] usb 8-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 865.836554][T13544] loop9: detected capacity change from 0 to 256 [ 865.845177][ C1] usb 8-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 865.850763][ T808] usb 8-1: USB disconnect, device number 11 [ 866.023035][ T808] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 866.095485][ T5226] 8021q: adding VLAN 0 to HW filter on device eth4 [ 866.115601][ T808] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 866.212078][ T808] quatech2 8-1:0.51: device disconnected [ 866.228813][ T5679] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 866.417795][T13546] loop1: detected capacity change from 0 to 1024 [ 866.469304][ T5679] usb 10-1: Using ep0 maxpacket: 32 [ 866.558060][ T5679] usb 10-1: unable to get BOS descriptor or descriptor too short [ 866.623594][ T5679] usb 10-1: config 128 has an invalid interface number: 127 but max is 3 [ 866.706561][ T5679] usb 10-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 866.786415][ T5679] usb 10-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 866.822756][ T5679] usb 10-1: config 128 has no interface number 0 [ 866.857663][ T5679] usb 10-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 866.914637][ T5679] usb 10-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 866.962448][ T5679] usb 10-1: config 128 interface 127 has no altsetting 0 [ 867.042390][ T5679] usb 10-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 867.093232][ T5679] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 867.164815][ T5679] usb 10-1: Product: syz [ 867.211836][ T5679] usb 10-1: Manufacturer: syz [ 867.233814][ T5679] usb 10-1: SerialNumber: syz [ 867.541575][ T29] audit: type=1326 audit(54460789.692:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13561 comm="syz.1.2592" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff39319cdd9 code=0x7ffc0000 [ 867.770823][ T29] audit: type=1326 audit(54460789.702:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13561 comm="syz.1.2592" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff39319cdd9 code=0x7ffc0000 [ 867.879048][ T29] audit: type=1326 audit(54460789.762:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13561 comm="syz.1.2592" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7ff39319cdd9 code=0x7ffc0000 [ 868.057712][ T29] audit: type=1326 audit(54460789.762:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13561 comm="syz.1.2592" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff39319cdd9 code=0x7ffc0000 [ 868.263043][ T29] audit: type=1326 audit(54460789.782:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13561 comm="syz.1.2592" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7ff39319cdd9 code=0x7ffc0000 [ 868.440614][ T5679] usb 10-1: USB disconnect, device number 4 [ 868.461232][ T29] audit: type=1326 audit(54460789.802:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13561 comm="syz.1.2592" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff39319cdd9 code=0x7ffc0000 [ 868.604116][ T808] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 868.641570][ T29] audit: type=1326 audit(54460789.802:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13561 comm="syz.1.2592" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7ff39319cdd9 code=0x7ffc0000 [ 868.707501][T13565] loop4: detected capacity change from 0 to 4096 [ 868.780337][T13565] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 868.799513][ T29] audit: type=1326 audit(54460789.802:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13561 comm="syz.1.2592" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff39319cdd9 code=0x7ffc0000 [ 868.822959][ T808] usb 8-1: Using ep0 maxpacket: 32 [ 868.899420][ T808] usb 8-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 868.953929][ T808] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 869.023651][ T808] usb 8-1: config 0 descriptor?? [ 869.103320][ T808] gspca_main: sunplus-2.14.0 probing 041e:400b [ 869.186460][T13565] ntfs3(loop4): ino=1a, mi_enum_attr [ 869.232449][T13565] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 869.313566][T13565] ntfs3(loop4): ino=1a, mi_enum_attr [ 869.358831][T13565] ntfs3(loop4): Failed to initialize $Extend/$Reparse. [ 869.568962][T13565] ntfs3(loop4): ino=5, "/" ntfs_readdir [ 869.600004][T13581] Bluetooth: MGMT ver 1.23 [ 869.936364][ T808] gspca_sunplus: reg_r err -71 [ 869.982260][ T808] sunplus 8-1:0.0: probe with driver sunplus failed with error -71 [ 870.091567][ T808] usb 8-1: USB disconnect, device number 12 [ 870.355614][ T6403] udevd[6403]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 871.571921][T13605] netlink: 'syz.7.2605': attribute type 16 has an invalid length. [ 872.064795][T13610] loop9: detected capacity change from 0 to 512 [ 872.123179][T13610] EXT4-fs: Ignoring removed oldalloc option [ 872.216753][T13610] EXT4-fs: Ignoring removed bh option [ 872.315573][T13610] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c118, mo2=0002] [ 872.348989][T13610] System zones: 1-12 [ 872.359904][T13612] loop1: detected capacity change from 0 to 2048 [ 872.371983][T13610] EXT4-fs error (device loop9): ext4_iget_extra_inode:5128: inode #15: comm syz.9.2607: corrupted in-inode xattr: e_value size too large [ 872.387060][T13610] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 872.387910][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 872.403992][ C0] EXT4-fs (loop9): initial error at time 54460794: ext4_iget_extra_inode:5128: inode 15 [ 872.414134][ C0] EXT4-fs (loop9): last error at time 54460794: ext4_iget_extra_inode:5128: inode 15 [ 872.418941][T13612] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 872.432206][T13610] EXT4-fs error (device loop9): ext4_orphan_get:1402: comm syz.9.2607: couldn't read orphan inode 15 (err -117) [ 872.453186][T13610] loop9: lost filesystem error report for type 5 error -117 [ 872.496728][T13610] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 872.656858][T13622] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 873.351292][T13004] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 873.511197][T13629] loop4: detected capacity change from 0 to 8 [ 873.622805][T13630] loop1: detected capacity change from 0 to 512 [ 873.657762][T13629] SQUASHFS error: Failed to read block 0x71: -5 [ 873.669430][T13630] EXT4-fs: Ignoring removed nomblk_io_submit option [ 873.729058][ T29] audit: type=1800 audit(54460795.852:106): pid=13629 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2613" name="file0" dev="loop4" ino=1 res=0 errno=0 [ 873.748594][ T808] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 873.783817][T13629] SQUASHFS error: Failed to read block 0x71: -5 [ 873.853142][T13630] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #15: comm syz.1.2614: iget: bad extended attribute block 262144 [ 873.908506][ T808] usb 3-1: Using ep0 maxpacket: 32 [ 873.935240][T13630] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 873.940798][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 873.956847][ C1] EXT4-fs (loop1): initial error at time 54460796: ext4_orphan_get:1397: inode 15 [ 873.966385][ C1] EXT4-fs (loop1): last error at time 54460796: ext4_orphan_get:1397: inode 15 [ 873.968777][ T808] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 874.060900][T13630] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.2614: couldn't read orphan inode 15 (err -117) [ 874.107739][ T808] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 874.159547][T13630] loop1: lost filesystem error report for type 5 error -117 [ 874.214789][T13630] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 874.532957][ T808] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 874.559521][ T808] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 874.595094][ T808] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 874.595216][ T808] usb 3-1: media controller created [ 874.743025][T13644] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 874.743689][T13644] overlayfs: NFS export requires an index dir, falling back to nfs_export=off. [ 874.839214][T12165] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 874.937317][ T808] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 874.976512][T13638] loop7: detected capacity change from 0 to 4096 [ 875.338439][ T808] az6027: usb out operation failed. (-71) [ 875.405142][ T808] az6027: usb out operation failed. (-71) [ 875.443107][ T808] stb0899_attach: Driver disabled by Kconfig [ 875.485130][ T808] az6027: no front-end attached [ 875.485130][ T808] [ 875.550249][ T808] az6027: usb out operation failed. (-71) [ 875.600840][ T808] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 875.682378][ T808] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input30 [ 875.799592][ T808] dvb-usb: schedule remote query interval to 400 msecs. [ 875.819101][T13651] loop9: detected capacity change from 0 to 64 [ 875.863264][ T808] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 875.946151][ T808] usb 3-1: USB disconnect, device number 15 [ 876.672008][ T808] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 876.903270][T13659] loop1: detected capacity change from 0 to 1024 [ 879.551994][T13689] loop9: detected capacity change from 0 to 128 [ 879.635752][T13691] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2635'. [ 879.678325][ T29] audit: type=1800 audit(54460801.832:107): pid=13689 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.2634" name="bus" dev="loop9" ino=1048785 res=0 errno=0 [ 880.630142][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 880.641509][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 881.850773][ T5679] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 882.110586][ T5679] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 882.172195][ T5679] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 882.243961][ T5679] usb 5-1: config 0 descriptor?? [ 882.330373][ T5679] cp210x 5-1:0.0: cp210x converter detected [ 882.698260][ T4872] Bluetooth: hci0: command 0x0c1a tx timeout [ 882.862126][ T5679] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 882.980446][ T5679] usb 5-1: cp210x converter now attached to ttyUSB0 [ 883.214775][ T5679] usb 5-1: USB disconnect, device number 7 [ 883.340155][T13729] loop7: detected capacity change from 0 to 128 [ 883.378510][ T5679] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 883.501917][T13729] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 883.532598][ T5679] cp210x 5-1:0.0: device disconnected [ 884.154238][ T9635] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 884.841338][T13739] tap0: tun_chr_ioctl cmd 1074025678 [ 884.862110][T13739] tap0: group set to 0 [ 886.064943][T13747] bond1: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 886.141690][T13747] bond1 (unregistering): Released all slaves [ 886.329183][T13758] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2659'. [ 886.612313][T13762] syz.7.2661: vmalloc error: size 70368744185856, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 886.723084][T13762] CPU: 1 UID: 0 PID: 13762 Comm: syz.7.2661 Tainted: G W L syzkaller #0 PREEMPT(full) [ 886.723263][T13762] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 886.723316][T13762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 886.723394][T13762] Call Trace: [ 886.723439][T13762] [ 886.723483][T13762] __dump_stack+0x26/0x30 [ 886.723636][T13762] dump_stack_lvl+0x14c/0x1c0 [ 886.723785][T13762] dump_stack+0x1e/0x25 [ 886.723918][T13762] warn_alloc+0x46f/0x6a0 [ 886.724098][T13762] ? kmsan_internal_poison_memory+0x4a/0x90 [ 886.724272][T13762] ? kmsan_get_metadata+0xf1/0x160 [ 886.724450][T13762] __vmalloc_node_range_noprof+0x148/0x2cd0 [ 886.724591][T13762] ? kfree+0x1d1/0x1100 [ 886.724762][T13762] ? stack_depot_save_flags+0x35/0x790 [ 886.724964][T13762] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 886.725132][T13762] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 886.725296][T13762] ? kmsan_get_metadata+0xf1/0x160 [ 886.725461][T13762] ? kmsan_get_metadata+0xf1/0x160 [ 886.725620][T13762] ? kmsan_get_metadata+0xf1/0x160 [ 886.725797][T13762] vmalloc_noprof+0xce/0x140 [ 886.725921][T13762] ? dvb_dmxdev_set_buffer_size+0x142/0x2e0 [ 886.726195][T13762] dvb_dmxdev_set_buffer_size+0x142/0x2e0 [ 886.726398][T13762] dvb_demux_do_ioctl+0x95a/0xc80 [ 886.726577][T13762] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 886.726747][T13762] dvb_usercopy+0x263/0x500 [ 886.726935][T13762] ? kmsan_get_metadata+0xf1/0x160 [ 886.727109][T13762] dvb_demux_ioctl+0x46/0x70 [ 886.727273][T13762] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 886.727434][T13762] __se_sys_ioctl+0x23c/0x400 [ 886.727602][T13762] __x64_sys_ioctl+0x97/0xe0 [ 886.727763][T13762] x64_sys_call+0x1975/0x3ea0 [ 886.727918][T13762] do_syscall_64+0x134/0xf80 [ 886.728156][T13762] ? clear_bhb_loop+0x50/0xa0 [ 886.728291][T13762] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 886.728423][T13762] RIP: 0033:0x7fad3639cdd9 [ 886.728531][T13762] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 886.728636][T13762] RSP: 002b:00007fad3730a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 886.728753][T13762] RAX: ffffffffffffffda RBX: 00007fad36615fa0 RCX: 00007fad3639cdd9 [ 886.728840][T13762] RDX: 0000400000002000 RSI: 0000000000006f2d RDI: 0000000000000003 [ 886.728918][T13762] RBP: 00007fad36432d69 R08: 0000000000000000 R09: 0000000000000000 [ 886.728998][T13762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 886.729068][T13762] R13: 00007fad36616038 R14: 00007fad36615fa0 R15: 00007fffac2f15b8 [ 886.729188][T13762] [ 887.089205][T13762] Mem-Info: [ 887.092482][T13762] active_anon:8084 inactive_anon:0 isolated_anon:0 [ 887.092482][T13762] active_file:14610 inactive_file:40788 isolated_file:0 [ 887.092482][T13762] unevictable:768 dirty:226 writeback:0 [ 887.092482][T13762] slab_reclaimable:5613 slab_unreclaimable:24139 [ 887.092482][T13762] mapped:30517 shmem:1689 pagetables:2016 [ 887.092482][T13762] sec_pagetables:0 bounce:0 [ 887.092482][T13762] kernel_misc_reclaimable:0 [ 887.092482][T13762] free:347626 free_pcp:10863 free_cma:0 [ 887.139074][T13762] Node 0 active_anon:32416kB inactive_anon:0kB active_file:58440kB inactive_file:162944kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:122020kB dirty:928kB writeback:0kB shmem:5220kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5760kB pagetables:7752kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 887.181967][T13762] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16kB pagetables:372kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 887.216562][T13762] Node 0 DMA free:4096kB boost:0kB min:164kB low:204kB high:244kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:4096kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 887.246754][T13762] lowmem_reserve[]: 0 927 1241 1241 1241 [ 887.258103][T13762] Node 0 DMA32 free:458884kB boost:0kB min:36852kB low:46064kB high:55276kB reserved_highatomic:0KB free_highatomic:0KB active_anon:12620kB inactive_anon:0kB active_file:55636kB inactive_file:88444kB unevictable:0kB writepending:344kB zspages:0kB present:3129332kB managed:950024kB mlocked:0kB bounce:0kB free_pcp:29316kB local_pcp:22672kB free_cma:0kB [ 887.305643][T13762] lowmem_reserve[]: 0 0 313 313 313 [ 887.311664][T13762] Node 0 Normal free:16228kB boost:0kB min:13056kB low:16320kB high:19584kB reserved_highatomic:0KB free_highatomic:0KB active_anon:19828kB inactive_anon:0kB active_file:2804kB inactive_file:74500kB unevictable:1536kB writepending:592kB zspages:0kB present:1048580kB managed:321492kB mlocked:0kB bounce:0kB free_pcp:13984kB local_pcp:6856kB free_cma:0kB [ 887.562514][T13762] lowmem_reserve[]: 0 0 0 0 0 [ 887.620206][T13762] Node 1 Normal free:911324kB boost:0kB min:40032kB low:50040kB high:60048kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:985788kB mlocked:0kB bounce:0kB free_pcp:64kB local_pcp:0kB free_cma:0kB [ 887.757794][T13762] lowmem_reserve[]: 0 0 0 0 0 [ 887.805365][T13773] loop1: detected capacity change from 0 to 512 [ 887.836833][T13762] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 1*4096kB (M) = 4096kB [ 887.860705][T13773] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 887.895554][T13762] Node 0 DMA32: 2596*4kB (UM) 1543*8kB (UME) 1086*16kB (UME) 570*32kB (UME) 227*64kB (UME) 133*128kB (UME) 80*256kB (UME) 58*512kB (UME) 34*1024kB (UM) 15*2048kB (U) 62*4096kB (UM) = 459560kB [ 887.988145][ T5679] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 887.994739][T13762] Node 0 Normal: 101*4kB (UME) 148*8kB (UM) 61*16kB (UME) 23*32kB (UME) 20*64kB (UME) 5*128kB (UME) 3*256kB (UME) 6*512kB (UME) 3*1024kB (UME) 2*2048kB (UM) 0*4096kB = 16228kB [ 888.058361][T13762] Node 1 Normal: 1*4kB (U) 13*8kB (UM) 11*16kB (UM) 8*32kB (UM) 7*64kB (UM) 4*128kB (U) 4*256kB (UM) 1*512kB (U) 5*1024kB (UM) 3*2048kB (UM) 219*4096kB (M) = 911324kB [ 888.110801][T13762] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 888.130615][T13773] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.2662: invalid indirect mapped block 9 (level 0) [ 888.202179][T13762] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 888.229211][ T5679] usb 10-1: Using ep0 maxpacket: 16 [ 888.252055][T13762] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 888.255311][T13773] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 888.279470][ T5679] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 888.288002][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 888.308419][ C0] EXT4-fs (loop1): initial error at time 54460810: ext4_free_branches:1023: inode 11 [ 888.318286][ C0] EXT4-fs (loop1): last error at time 54460810: ext4_free_branches:1023: inode 11 [ 888.331372][T13773] EXT4-fs (loop1): 1 truncate cleaned up [ 888.333042][ T5679] usb 10-1: New USB device found, idVendor=0b05, idProduct=183d, bcdDevice= 0.00 [ 888.339494][T13773] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 888.389753][T13762] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 888.437021][T13762] 57065 total pagecache pages [ 888.448305][T13762] 0 pages in swap cache [ 888.454632][T13762] Free swap = 124996kB [ 888.459988][T13762] Total swap = 124996kB [ 888.479315][T13762] 2097051 pages RAM [ 888.487495][ T5679] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 888.489590][T13762] 0 pages HighMem/MovableOnly [ 888.524144][T13762] 1531701 pages reserved [ 888.561354][ T5679] usb 10-1: config 0 descriptor?? [ 888.567247][T13762] 0 pages cma reserved [ 888.922282][T12165] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 889.044984][ T5679] hid (null): bogus close delimiter [ 889.118653][ T5679] hid_parser_main: 50 callbacks suppressed [ 889.118744][ T5679] asus 0003:0B05:183D.0010: unknown main item tag 0x2 [ 889.207797][ T5679] asus 0003:0B05:183D.0010: bogus close delimiter [ 889.249647][ T5679] asus 0003:0B05:183D.0010: item 0 0 2 10 parsing failed [ 889.324553][ T5679] asus 0003:0B05:183D.0010: Asus hid parse failed: -22 [ 889.362106][ T5679] asus 0003:0B05:183D.0010: probe with driver asus failed with error -22 [ 889.436415][ T5679] usb 10-1: USB disconnect, device number 5 [ 889.462958][T13788] loop2: detected capacity change from 0 to 512 [ 889.635727][T13788] EXT4-fs (loop2): 1 truncate cleaned up [ 889.703316][T13788] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 890.256226][T11090] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 890.594153][T13797] loop1: detected capacity change from 0 to 1024 [ 891.364892][T13806] vcan0: tx drop: invalid da for name 0x00000000000000c7 [ 891.708930][T13813] netlink: 'syz.2.2678': attribute type 10 has an invalid length. [ 891.793033][T13810] loop7: detected capacity change from 0 to 1024 [ 891.802228][T13813] syz_tun: entered promiscuous mode [ 891.845323][T13810] EXT4-fs: Ignoring removed bh option [ 891.874004][T13815] netlink: 'syz.2.2678': attribute type 10 has an invalid length. [ 891.916227][T13810] EXT4-fs: inline encryption not supported [ 891.972451][T13810] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 892.124057][T13813] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 892.132861][T13810] EXT4-fs error (device loop7): ext4_map_blocks:791: inode #3: block 2: comm syz.7.2677: lblock 2 mapped to illegal pblock 2 (length 1) [ 892.133027][T13810] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 892.139423][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 892.163701][ C0] EXT4-fs (loop7): initial error at time 54460814: ext4_map_blocks:791: inode 3: block 2 [ 892.173992][ C0] EXT4-fs (loop7): last error at time 54460814: ext4_map_blocks:791: inode 3: block 2 [ 892.219302][T13810] EXT4-fs (loop7): Remounting filesystem read-only [ 892.238861][T13810] Quota error (device loop7): qtree_write_dquot: dquota write failed [ 892.300280][T13810] Quota error (device loop7): v2_write_file_info: Can't write info structure [ 892.341892][T13810] EXT4-fs (loop7): 1 orphan inode deleted [ 892.387155][T13815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 892.399114][T13810] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 892.525043][T13815] team0: Port device bond0 added [ 892.935003][ T9635] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 894.100972][T13847] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2688'. [ 894.820488][T13855] loop4: detected capacity change from 0 to 64 [ 895.413208][ T808] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 895.608572][ T808] usb 8-1: Using ep0 maxpacket: 8 [ 895.657482][ T808] usb 8-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 895.700693][ T808] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 895.845573][ T808] pvrusb2: Hardware description: Terratec Grabster AV400 [ 895.901529][ T808] pvrusb2: ********** [ 895.940370][ T808] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 896.004275][ T808] pvrusb2: Important functionality might not be entirely working. [ 896.068704][ T808] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 896.159774][ T808] pvrusb2: ********** [ 896.201273][ T2350] pvrusb2: Invalid write control endpoint [ 896.485647][ T5685] usb 8-1: USB disconnect, device number 13 [ 896.511560][T13869] loop1: detected capacity change from 0 to 4096 [ 896.585360][T13869] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512). [ 896.779059][ T2350] pvrusb2: Invalid write control endpoint [ 896.811484][ T2350] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 896.855216][ T2350] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 896.894349][ T2350] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 896.932624][T13869] ntfs3(loop1): ino=5, mi_enum_attr [ 896.944323][ T2350] pvrusb2: Device being rendered inoperable [ 896.962158][T13869] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 897.014580][ T2350] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 897.088241][ T2350] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 897.144821][ T2350] pvrusb2: Attached sub-driver cx25840 [ 897.177084][ T2350] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 897.270263][ T2350] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 898.704025][T13903] loop4: detected capacity change from 0 to 512 [ 898.869306][T13903] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #12: comm syz.4.2709: missing EA_INODE flag [ 899.011380][T13903] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 899.018865][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 899.035023][ C0] EXT4-fs (loop4): initial error at time 54460821: ext4_xattr_inode_iget:441: inode 12 [ 899.045056][ C0] EXT4-fs (loop4): last error at time 54460821: ext4_xattr_inode_iget:441: inode 12 [ 899.070393][T13903] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.2709: error while reading EA inode 12 err=-117 [ 899.136513][T13903] loop4: lost filesystem error report for type 5 error -117 [ 899.153938][T13903] EXT4-fs (loop4): 1 orphan inode deleted [ 899.237744][T13903] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 899.425559][T13903] fscrypt (loop4, inode 15): Unsupported encryption flags (0xa0) [ 899.774668][T12476] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 900.041435][T13923] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2716'. [ 900.638860][T13929] loop9: detected capacity change from 0 to 2048 [ 900.763537][T13929] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 901.066027][T13932] loop2: detected capacity change from 0 to 2048 [ 901.290466][T13932] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 901.419000][T13914] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 901.420809][T13936] Bluetooth: hci0: command 0x0c1a tx timeout [ 902.973708][T13916] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 903.178149][T13936] Bluetooth: hci3: command 0x0406 tx timeout [ 903.375704][T13953] loop2: detected capacity change from 0 to 512 [ 903.473403][T13953] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 903.579992][ T4872] Bluetooth: hci0: command 0x0c1a tx timeout [ 903.673433][T13953] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4222: comm syz.2.2726: Allocating blocks 41-42 which overlap fs metadata [ 903.728857][T13953] loop2: lost filesystem error report for type 5 error -117 [ 903.737366][T13953] Quota error (device loop2): write_blk: dquota write failed [ 903.745153][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 903.745241][ C0] EXT4-fs (loop2): initial error at time 54461081: ext4_mb_mark_diskspace_used:4222 [ 903.745360][ C0] EXT4-fs (loop2): last error at time 54461081: ext4_mb_mark_diskspace_used:4222 [ 903.921016][T13953] Quota error (device loop2): find_free_dqentry: Can't write quota data block 5 [ 903.983319][T13953] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 904.062462][T13953] EXT4-fs error (device loop2): ext4_acquire_dquot:7034: comm syz.2.2726: Failed to acquire dquot type 1 [ 904.157372][T13953] loop2: lost filesystem error report for type 5 error -117 [ 904.168548][T13953] EXT4-fs error (device loop2): mb_free_blocks:2049: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 904.268387][T13953] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #12: comm syz.2.2726: corrupted inode contents [ 904.371406][T13953] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 904.383113][T13953] EXT4-fs error (device loop2): ext4_dirty_inode:6587: inode #12: comm syz.2.2726: mark_inode_dirty error [ 904.547360][T13953] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 904.557966][T13953] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #12: comm syz.2.2726: corrupted inode contents [ 904.689234][T13953] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 904.691177][T13953] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #12: comm syz.2.2726: mark_inode_dirty error [ 904.756433][T13953] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 904.766170][T13953] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #12: comm syz.2.2726: corrupted inode contents [ 904.828360][T13953] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 904.832253][T13953] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 904.922725][T13953] loop2: lost filesystem error report for type 5 error -117 [ 904.924116][T13953] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #12: comm syz.2.2726: corrupted inode contents [ 904.973767][T13953] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 904.975379][T13953] EXT4-fs error (device loop2): ext4_truncate:4690: inode #12: comm syz.2.2726: mark_inode_dirty error [ 905.058488][T13953] loop2: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 905.060718][T13953] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 905.123797][T13953] loop2: lost filesystem error report for type 5 error -117 [ 905.137655][T13953] EXT4-fs (loop2): 1 truncate cleaned up [ 905.231366][T13953] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 905.304481][T13953] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 906.358833][T13998] loop2: detected capacity change from 0 to 64 [ 906.490773][T13998] Trying to free block not in datazone [ 907.601087][T14002] loop4: detected capacity change from 0 to 40427 [ 907.610200][T14002] F2FS-fs: heap/no_heap options were deprecated [ 907.628816][T14002] F2FS-fs (loop4): build fault injection rate: 19 [ 907.635410][T14002] F2FS-fs (loop4): build fault injection type: 0x3bfe8c [ 907.646307][T14002] F2FS-fs (loop4): invalid crc value [ 907.694569][T14002] F2FS-fs (loop4): inject page alloc in f2fs_grab_cache_folio of f2fs_build_free_nids+0xd0b/0x1e80 [ 907.947652][T14002] F2FS-fs (loop4): inject slab alloc in f2fs_kmem_cache_alloc of read_node_folio+0x1d2/0x4b0 [ 907.970178][T14002] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 907.993235][T14002] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 910.574118][T14038] loop9: detected capacity change from 0 to 764 [ 910.681072][T14038] rock: directory entry would overflow storage [ 910.746828][T14038] rock: sig=0x4654, size=5, remaining=4 [ 910.760722][T14040] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2754'. [ 914.168136][T14078] loop2: detected capacity change from 0 to 512 [ 914.265339][T14078] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.2777: Invalid inode bitmap blk 4 in block_group 0 [ 914.299490][T14078] loop2: lost filesystem error report for type 5 error -117 [ 914.361574][T14078] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 914.536147][T14078] EXT4-fs (loop2): shut down requested (2) [ 915.069388][T11090] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 915.225859][T14091] program syz.4.2770 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 916.910644][T14112] loop7: detected capacity change from 0 to 512 [ 917.670577][T14121] loop4: detected capacity change from 0 to 512 [ 917.804647][T14121] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 917.888653][T14129] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2783'. [ 917.925484][T14121] EXT4-fs (loop4): 1 truncate cleaned up [ 917.979554][T14121] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 918.184735][T14121] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2780: bg 0: block 465: padding at end of block bitmap is not set [ 918.336193][T14134] loop9: detected capacity change from 0 to 512 [ 918.347786][T14121] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 131075 with max blocks 1 with error 28 [ 918.405272][T14134] EXT4-fs: Ignoring removed nobh option [ 918.420754][T14121] EXT4-fs (loop4): This should not happen!! Data will be lost [ 918.420754][T14121] [ 918.443778][T14134] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 918.499006][T14121] EXT4-fs (loop4): Total free blocks count 0 [ 918.549535][T14121] EXT4-fs (loop4): Free/Dirty block details [ 918.557640][T14121] EXT4-fs (loop4): free_blocks=0 [ 918.563286][T14121] EXT4-fs (loop4): dirty_blocks=2 [ 918.565431][T14134] EXT4-fs (loop9): 1 truncate cleaned up [ 918.601854][T14121] EXT4-fs (loop4): Block reservation details [ 918.651856][T14134] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 918.678510][T14121] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 918.785094][T14134] EXT4-fs error (device loop9): ext4_empty_dir:3125: inode #2: block 13: comm syz.9.2794: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 919.078652][ T175] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 919.174720][T12476] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 919.246887][T13004] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 919.286904][T14146] loop1: detected capacity change from 0 to 64 [ 919.870151][T14153] loop4: detected capacity change from 0 to 512 [ 919.880902][ T9946] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 919.957621][T14153] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 920.080617][ T9946] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 920.113736][ T9946] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 920.153670][ T9946] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 920.202959][ T9946] usb 8-1: config 0 descriptor?? [ 920.634313][T12476] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 920.765350][ T9946] keytouch 0003:0926:3333.0011: fixing up Keytouch IEC report descriptor [ 920.903966][ T9946] input: HID 0926:3333 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:0926:3333.0011/input/input31 [ 921.200280][ T9946] keytouch 0003:0926:3333.0011: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.7-1/input0 [ 921.390558][ T9946] usb 8-1: USB disconnect, device number 14 [ 921.729070][T14174] vlan2: entered promiscuous mode [ 921.775516][T14174] mac80211_hwsim hwsim24 wlan0: entered promiscuous mode [ 921.833493][T14174] vlan2: entered allmulticast mode [ 921.854509][T14174] mac80211_hwsim hwsim24 wlan0: entered allmulticast mode [ 922.432579][T14185] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2802'. [ 922.465640][T14185] netlink: 148 bytes leftover after parsing attributes in process `syz.9.2802'. [ 922.888535][ T5685] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 923.084777][ T29] audit: type=1800 audit(54461101.250:108): pid=14193 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2804" name="nullb0" dev="devtmpfs" ino=4036 res=0 errno=0 [ 923.110204][ T5685] usb 8-1: Using ep0 maxpacket: 16 [ 923.157366][ T5685] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 923.234832][ T5685] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 923.311944][ T5685] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 923.412197][ T5685] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 923.485932][ T5685] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 923.572883][T14189] fido_id[14189]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/8-1/report_descriptor': No such file or directory [ 923.591656][ T5685] usb 8-1: config 0 descriptor?? [ 924.198770][ T5685] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 924.234788][ T5685] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 924.268390][ T5685] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 924.271114][T14202] batman_adv: batadv0: Adding interface: vlan2 [ 924.314457][ T5685] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 924.342189][T14202] batman_adv: batadv0: The MTU of interface vlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 924.358066][ T5685] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 924.440015][ T9] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 924.448968][ T5685] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 924.469384][T14202] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 924.500942][ T5685] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 924.565800][ T5685] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 924.598917][ T5685] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 924.650244][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 924.651152][ T5685] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 924.717445][ T9] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 924.789176][ T9] usb 3-1: config 0 has no interface number 0 [ 924.848903][ T9] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 924.890773][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 924.935304][ T9] usb 3-1: Product: syz [ 924.945695][ T9] usb 3-1: Manufacturer: syz [ 925.010780][ T9] usb 3-1: SerialNumber: syz [ 925.040156][ T5685] input: HID 045e:07da as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:045E:07DA.0012/input/input32 [ 925.124754][ T9] usb 3-1: config 0 descriptor?? [ 925.195988][ T9] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 925.229033][ T5685] microsoft 0003:045E:07DA.0012: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.7-1/input0 [ 925.387375][ T5685] usb 8-1: USB disconnect, device number 15 [ 925.509621][ T9] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 925.765734][ T9] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 925.873190][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 925.932888][ T9] usb 3-1: USB disconnect, device number 16 [ 926.044333][ T9] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 926.208722][ T9] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 926.290281][ T9] quatech2 3-1:0.51: device disconnected [ 926.598541][T14225] loop4: detected capacity change from 0 to 1024 [ 926.727369][T14225] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (47942!=20869) [ 926.826718][T14225] EXT4-fs (loop4): orphan cleanup on readonly fs [ 926.967364][T14225] EXT4-fs warning (device loop4): ext4_enable_quotas:7269: Failed to enable quota tracking (type=0, err=-13, ino=3). Please run e2fsck to fix. [ 927.101880][T14225] EXT4-fs (loop4): Cannot turn on quotas: error -13 [ 927.238254][T14225] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.2817: couldn't read orphan inode 12 (err -116) [ 927.316873][T14228] fido_id[14228]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 927.329199][T14239] bpf: Bad value for 'uid' [ 927.340882][T14225] loop4: lost filesystem error report for type 5 error -116 [ 927.347983][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 927.362202][ C1] EXT4-fs (loop4): initial error at time 54461105: ext4_orphan_get:1402 [ 927.370838][ C1] EXT4-fs (loop4): last error at time 54461105: ext4_orphan_get:1402 [ 927.428461][T14225] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 927.657494][T14229] loop7: detected capacity change from 0 to 4096 [ 928.080932][T12476] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 928.372230][T14248] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 928.481052][T14248] overlayfs: overlapping lowerdir path [ 928.637623][T14247] loop2: detected capacity change from 0 to 1024 [ 928.732238][ T29] audit: type=1326 audit(54461106.890:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14249 comm="syz.9.2825" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0585b9cdd9 code=0x7ffc0000 [ 928.765585][T14247] EXT4-fs: Ignoring removed bh option [ 928.840096][T14247] EXT4-fs: Ignoring removed bh option [ 928.943186][ T29] audit: type=1326 audit(54461106.930:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14249 comm="syz.9.2825" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0585b9cdd9 code=0x7ffc0000 [ 929.082734][T14247] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 929.108207][ T29] audit: type=1326 audit(54461106.930:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14249 comm="syz.9.2825" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0585b9cdd9 code=0x7ffc0000 [ 929.167407][ T29] audit: type=1326 audit(54461106.940:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14249 comm="syz.9.2825" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7f0585b9cdd9 code=0x7ffc0000 [ 929.287236][T14247] EXT4-fs error (device loop2): ext4_read_inline_dir:1494: inode #12: block 7: comm syz.2.2823: path /181/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 929.324396][ T29] audit: type=1326 audit(54461106.970:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14249 comm="syz.9.2825" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0585b9cdd9 code=0x7ffc0000 [ 929.507694][ T29] audit: type=1326 audit(54461106.990:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14249 comm="syz.9.2825" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0585b5d60e code=0x7ffc0000 [ 929.711685][ T29] audit: type=1326 audit(54461107.010:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14249 comm="syz.9.2825" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0585b5d60e code=0x7ffc0000 [ 929.864016][ T29] audit: type=1326 audit(54461107.020:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14249 comm="syz.9.2825" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0585b5d60e code=0x7ffc0000 [ 929.969767][T11090] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 929.985887][ T29] audit: type=1326 audit(54461107.020:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14249 comm="syz.9.2825" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0585b5d60e code=0x7ffc0000 [ 930.137432][ T29] audit: type=1326 audit(54461107.040:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14249 comm="syz.9.2825" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0585b5d60e code=0x7ffc0000 [ 930.501664][T14270] loop7: detected capacity change from 0 to 512 [ 930.641952][T14270] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 930.700641][T14276] loop2: detected capacity change from 0 to 764 [ 930.763442][T14276] rock: directory entry would overflow storage [ 930.793659][T14276] rock: sig=0x4654, size=5, remaining=4 [ 930.852478][T14270] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 930.970152][T14281] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 931.685057][ T9635] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 933.293676][T14311] netlink: 'syz.9.2844': attribute type 11 has an invalid length. [ 933.361773][T14311] netlink: 32 bytes leftover after parsing attributes in process `syz.9.2844'. [ 935.015150][T14335] loop7: detected capacity change from 0 to 512 [ 935.053717][T14335] EXT4-fs: Ignoring removed bh option [ 935.145711][T14335] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended [ 935.314690][T14335] EXT4-fs (loop7): 1 truncate cleaned up [ 935.330511][T14335] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 935.510864][T14335] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.2851: bg 0: block 465: padding at end of block bitmap is not set [ 935.602748][T14335] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 131075 with max blocks 1 with error 28 [ 935.625939][T14349] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 935.757543][T14349] EXT4-fs (loop7): This should not happen!! Data will be lost [ 935.757543][T14349] [ 935.774042][T14335] EXT4-fs (loop7): This should not happen!! Data will be lost [ 935.774042][T14335] [ 935.871342][T14349] EXT4-fs (loop7): Total free blocks count 0 [ 935.873954][T14335] EXT4-fs (loop7): Total free blocks count 0 [ 935.967582][T14349] EXT4-fs (loop7): Free/Dirty block details [ 936.005619][T14349] EXT4-fs (loop7): free_blocks=0 [ 936.038921][T14335] EXT4-fs (loop7): Free/Dirty block details [ 936.295500][T14355] Attempt to restore checkpoint with obsolete wellknown handles [ 936.513340][ T9635] EXT4-fs warning (device loop7): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 937.087697][T14367] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2863'. [ 937.232492][T14372] ipvlan0: entered promiscuous mode [ 938.442215][ T5679] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 938.688256][ T5679] usb 10-1: Using ep0 maxpacket: 16 [ 938.737483][ T5679] usb 10-1: unable to get BOS descriptor or descriptor too short [ 938.792780][ T5679] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 938.841166][ T5679] usb 10-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 938.906354][ T5679] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 938.946918][ T5679] usb 10-1: Product: syz [ 938.976284][ T5679] usb 10-1: Manufacturer: syz [ 939.006816][ T5679] usb 10-1: SerialNumber: syz [ 939.358710][T14398] netlink: 'syz.4.2873': attribute type 1 has an invalid length. [ 939.415034][ T5679] usb 10-1: Audio class v2/v3 interfaces need an interface association [ 939.457559][ T5679] snd-usb-audio 10-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 940.146902][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 940.146968][ T29] audit: type=1800 audit(54461118.310:127): pid=14407 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2877" name="nullb0" dev="devtmpfs" ino=4036 res=0 errno=0 [ 940.248571][ T5679] usb 10-1: USB disconnect, device number 6 [ 940.525024][ T6403] udevd[6403]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 941.493090][T14424] loop2: detected capacity change from 0 to 64 [ 942.082875][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 942.102425][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 942.483752][T14426] loop7: detected capacity change from 0 to 32768 [ 942.507341][T14426] [ 942.507341][T14426] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 942.507341][T14426] [ 942.562689][T14426] [ 942.562689][T14426] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 942.562689][T14426] [ 942.576617][T14426] [ 942.576617][T14426] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 942.576617][T14426] [ 942.587721][T14426] [ 942.587721][T14426] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 942.587721][T14426] [ 942.598649][T14426] [ 942.598649][T14426] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 942.598649][T14426] [ 942.609524][T14426] [ 942.609524][T14426] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 942.609524][T14426] [ 942.624473][T14426] [ 942.624473][T14426] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 942.624473][T14426] [ 942.656534][ T117] [ 942.656534][ T117] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 942.656534][ T117] [ 942.975524][T14422] loop1: detected capacity change from 0 to 8192 [ 942.987796][T14436] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2888'. [ 943.043051][ T9635] [ 943.043051][ T9635] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 943.043051][ T9635] [ 943.131010][ T9635] [ 943.131010][ T9635] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 943.131010][ T9635] [ 943.242651][T14436] bond0: entered promiscuous mode [ 943.283627][T14436] bond_slave_0: entered promiscuous mode [ 943.344389][T14436] bond_slave_1: entered promiscuous mode [ 943.463372][T14436] bond0: left promiscuous mode [ 943.515145][T14436] bond_slave_0: left promiscuous mode [ 943.564936][T14436] bond_slave_1: left promiscuous mode [ 944.200706][ T29] audit: type=1800 audit(54461122.370:128): pid=14451 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.2892" name="nullb0" dev="devtmpfs" ino=4241 res=0 errno=0 [ 945.665752][T14464] loop2: detected capacity change from 0 to 512 [ 945.796104][T14464] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #15: comm syz.2.2899: inode has both inline data and extents flags [ 945.944515][T14464] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 945.951901][T14464] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.2899: couldn't read orphan inode 15 (err -117) [ 945.961488][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 945.961573][ C1] EXT4-fs (loop2): initial error at time 54461124: ext4_orphan_get:1397: inode 15 [ 945.961724][ C1] EXT4-fs (loop2): last error at time 54461124: ext4_orphan_get:1397: inode 15 [ 946.042648][T14464] loop2: lost filesystem error report for type 5 error -117 [ 946.086068][T14464] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 946.832225][T11090] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 947.858951][T14488] loop2: detected capacity change from 0 to 4096 [ 947.962442][T14488] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 948.478903][T11090] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 951.411937][T14539] loop2: detected capacity change from 0 to 128 [ 951.459587][T14540] netlink: 'syz.1.2930': attribute type 11 has an invalid length. [ 951.497201][T14540] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2930'. [ 951.573870][ T2158] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 951.788451][ T2158] usb 8-1: Using ep0 maxpacket: 8 [ 951.859357][ T2158] usb 8-1: config 179 has an invalid interface number: 65 but max is 0 [ 951.912570][ T2158] usb 8-1: config 179 has no interface number 0 [ 951.946876][ T2158] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 952.024331][ T2158] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 952.087335][ T2158] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 952.166510][ T2158] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 952.248359][ T2158] usb 8-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 952.311131][ T2158] usb 8-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 952.336603][ T2158] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 952.430531][T14536] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 952.996771][ T2158] usb 8-1: USB disconnect, device number 16 [ 953.004292][ C1] xpad 8-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 953.004492][ C1] xpad 8-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 953.454181][T14558] loop1: detected capacity change from 0 to 512 [ 953.532744][T14558] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 953.700649][T14558] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 953.859751][T14558] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2936: bg 0: block 217: padding at end of block bitmap is not set [ 953.982188][T14558] EXT4-fs (loop1): Remounting filesystem read-only [ 954.206264][T14570] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2938'. [ 954.417330][T14570] bond0: entered promiscuous mode [ 954.434614][T12165] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 954.501529][T14570] bond_slave_0: entered promiscuous mode [ 954.569604][T14570] bond_slave_1: entered promiscuous mode [ 954.789813][T14570] bond0: left promiscuous mode [ 954.828556][T14570] bond_slave_0: left promiscuous mode [ 954.899291][T14570] bond_slave_1: left promiscuous mode [ 955.132124][T14572] loop4: detected capacity change from 0 to 4096 [ 955.453378][T14572] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 955.744130][T14572] ntfs3(loop4): Failed to load $Extend (-22). [ 955.780556][T14572] ntfs3(loop4): Failed to initialize $Extend. [ 955.916379][T14584] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2942'. [ 955.963373][ T29] audit: type=1800 audit(54461134.120:129): pid=14572 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2949" name="file1" dev="loop4" ino=30 res=0 errno=0 [ 956.850659][T14596] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2948'. [ 956.963176][T14595] loop2: detected capacity change from 0 to 1024 [ 957.741895][ T2158] kernel read not supported for file /media5 (pid: 2158 comm: kworker/1:2) [ 958.460762][T14615] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2955'. [ 958.572118][T14615] bond0: entered promiscuous mode [ 958.576476][T14615] bond_slave_0: entered promiscuous mode [ 958.577771][T14615] bond_slave_1: entered promiscuous mode [ 958.650490][T14615] bond0: left promiscuous mode [ 958.650596][T14615] bond_slave_0: left promiscuous mode [ 958.651818][T14615] bond_slave_1: left promiscuous mode [ 960.242928][T14638] TCP: TCP_TX_DELAY enabled [ 961.501802][T14653] loop1: detected capacity change from 0 to 8 [ 961.637755][T14653] SQUASHFS error: Failed to read block 0x71: -5 [ 961.859246][ T29] audit: type=1800 audit(54461140.000:130): pid=14653 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2980" name="file0" dev="loop1" ino=1 res=0 errno=0 [ 961.982542][T14653] SQUASHFS error: Failed to read block 0x71: -5 [ 962.806971][T14667] loop2: detected capacity change from 0 to 8 [ 962.975287][T14671] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2972'. [ 963.007194][T14667] SQUASHFS error: Failed to read block 0x71: -5 [ 963.054882][ T29] audit: type=1800 audit(54461141.220:131): pid=14667 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2983" name="file0" dev="loop2" ino=1 res=0 errno=0 [ 963.211328][T14671] bond0: entered promiscuous mode [ 963.211427][T14671] bond_slave_0: entered promiscuous mode [ 963.212488][T14671] bond_slave_1: entered promiscuous mode [ 963.248784][T14667] SQUASHFS error: Failed to read block 0x71: -5 [ 963.339096][T14671] bond0: left promiscuous mode [ 963.339196][T14671] bond_slave_0: left promiscuous mode [ 963.340198][T14671] bond_slave_1: left promiscuous mode [ 963.921409][T14680] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 964.032282][T14680] overlayfs: NFS export requires an index dir, falling back to nfs_export=off. [ 964.429210][T14676] loop9: detected capacity change from 0 to 4096 [ 964.512095][T14676] ntfs3(loop9): Different NTFS sector size (4096) and media sector size (512). [ 964.608084][T14688] loop1: detected capacity change from 0 to 64 [ 964.812863][ T9946] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 964.928706][T14676] ntfs3(loop9): ino=1a, mi_enum_attr [ 964.957819][T14676] ntfs3(loop9): Mark volume as dirty due to NTFS errors [ 965.006107][T14676] ntfs3(loop9): ino=1a, mi_enum_attr [ 965.028772][ T9946] usb 5-1: Using ep0 maxpacket: 32 [ 965.044179][T14676] ntfs3(loop9): Failed to initialize $Extend/$Reparse. [ 965.065972][ T2158] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 965.084837][ T9946] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 965.136242][ T9946] usb 5-1: config 0 has no interface number 0 [ 965.177103][ T9946] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 965.247812][ T9946] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 965.258938][T14676] ntfs3(loop9): ino=5, "/" ntfs_readdir [ 965.281340][ T2158] usb 3-1: Using ep0 maxpacket: 32 [ 965.296442][ T9946] usb 5-1: Product: syz [ 965.317238][ T9946] usb 5-1: Manufacturer: syz [ 965.352152][ T2158] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 965.361491][ T9946] usb 5-1: SerialNumber: syz [ 965.437620][ T2158] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 965.450960][ T9946] usb 5-1: config 0 descriptor?? [ 965.494085][ T2158] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 965.555365][ T9946] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 965.556130][ T2158] usb 3-1: config 1 has no interface number 0 [ 965.627393][ T2158] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 965.691779][ T2158] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 965.750625][ T2158] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 965.804645][ T9946] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 965.832421][ T2158] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 965.955120][ T9946] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 966.046188][ T2158] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 966.175216][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 966.177011][T10774] usb 5-1: USB disconnect, device number 8 [ 966.294198][ T2158] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached [ 966.411282][T10774] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 966.749768][T10774] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 966.818668][ T2158] usb 3-1: USB disconnect, device number 17 [ 966.850135][ T2158] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 966.872859][T10774] quatech2 5-1:0.51: device disconnected [ 967.096179][T14707] loop7: detected capacity change from 0 to 1024 [ 967.559354][T14711] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2990'. [ 967.774050][T14711] bond0: entered promiscuous mode [ 967.803137][T14711] bond_slave_0: entered promiscuous mode [ 967.847286][T14711] bond_slave_1: entered promiscuous mode [ 968.016306][T14711] bond0: left promiscuous mode [ 968.105161][T14711] bond_slave_0: left promiscuous mode [ 968.193069][T14711] bond_slave_1: left promiscuous mode [ 968.530349][T14727] vcan0: tx drop: invalid da for name 0x00000000000000c7 [ 969.005372][T14731] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2997'. [ 969.825677][T14741] loop4: detected capacity change from 0 to 1024 [ 969.876053][T14745] loop7: detected capacity change from 0 to 256 [ 970.298951][ T4872] Bluetooth: hci0: command 0x0c1a tx timeout [ 970.307615][T14720] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 971.149158][T14756] program syz.4.3005 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 971.335081][T14723] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 971.366903][T14760] loop9: detected capacity change from 0 to 512 [ 971.542812][T14760] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 972.034596][T13004] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 972.069730][T14773] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3010'. [ 972.378215][ T4872] Bluetooth: hci0: command 0x0c1a tx timeout [ 974.582622][T14812] loop1: detected capacity change from 0 to 256 [ 975.611319][T14828] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3029'. [ 975.678220][T14831] loop9: detected capacity change from 0 to 128 [ 975.837738][T14831] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 976.304289][T14844] vcan0: tx drop: invalid da for name 0x00000000000000fe [ 976.456425][T13004] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 976.963516][T14853] program syz.9.3038 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 978.186804][T14869] loop4: detected capacity change from 0 to 2048 [ 979.733318][T14880] loop9: detected capacity change from 0 to 32768 [ 979.745770][ T29] audit: type=1326 audit(54461157.800:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14881 comm="syz.7.3051" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fad3639cdd9 code=0x0 [ 979.863311][T14880] JBD2: Ignoring recovery information on journal [ 980.066491][T14880] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode. [ 980.105634][T14880] ocfs2: Unmounting device (7,9) on (node local) [ 980.403654][T14891] loop1: detected capacity change from 0 to 512 [ 980.494212][T14891] EXT4-fs (loop1): Test dummy encryption mode enabled [ 980.563342][T14891] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 980.655180][T14891] EXT4-fs error (device loop1): ext4_orphan_get:1423: comm syz.1.3053: bad orphan inode 131083 [ 980.731667][T14891] loop1: lost filesystem error report for type 5 error -117 [ 980.783820][T14891] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 980.853753][T14899] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3055'. [ 981.111134][T14899] vlan3: entered allmulticast mode [ 981.162816][T14899] macvtap0: entered allmulticast mode [ 981.212941][T14899] veth0_macvtap: entered allmulticast mode [ 981.564385][T12165] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 982.153713][T14909] loop1: detected capacity change from 0 to 512 [ 982.200387][T14909] EXT4-fs: Ignoring removed nobh option [ 982.330257][T14909] fscrypt (loop1, inode 2): Error -61 getting encryption context [ 982.443306][T14909] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -61 [ 982.488488][T14909] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #13: comm syz.1.3058: inode has both inline data and extents flags [ 982.552816][T14909] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 982.557973][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 982.574001][ C1] EXT4-fs (loop1): initial error at time 54461160: ext4_orphan_get:1397: inode 13 [ 982.583557][ C1] EXT4-fs (loop1): last error at time 54461160: ext4_orphan_get:1397: inode 13 [ 982.602617][T14909] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.3058: couldn't read orphan inode 13 (err -117) [ 982.667424][T14909] loop1: lost filesystem error report for type 5 error -117 [ 982.695449][T14909] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 982.862595][T14909] EXT4-fs (loop1): shut down requested (2) [ 982.901765][T14909] fscrypt (loop1, inode 2): Error -5 getting encryption context [ 983.100150][T14921] netlink: 'syz.4.3064': attribute type 10 has an invalid length. [ 983.183104][T14922] netlink: 'syz.4.3064': attribute type 10 has an invalid length. [ 983.260424][T14921] syz_tun: entered promiscuous mode [ 983.314531][T12165] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 983.445403][T14924] loop9: detected capacity change from 0 to 128 [ 983.492240][T14921] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 983.530639][T14924] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 983.583382][T14924] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 983.644341][T14924] hpfs: You really don't want any checks? You are crazy... [ 983.696484][T14924] hpfs: hpfs_map_sector(): read error [ 983.734226][T14924] hpfs: code page support is disabled [ 983.737333][T14922] 8021q: adding VLAN 0 to HW filter on device bond0 [ 983.776688][T14924] hpfs: hpfs_map_4sectors(): unaligned read [ 983.825289][T14924] hpfs: hpfs_map_4sectors(): unaligned read [ 983.866340][T14922] team0: Port device bond0 added [ 983.876531][T14924] hpfs: filesystem error: unable to find root dir [ 983.946854][T14930] netlink: 'syz.1.3068': attribute type 12 has an invalid length. [ 984.043466][T14930] netlink: 'syz.1.3068': attribute type 29 has an invalid length. [ 984.124098][T14930] netlink: 148 bytes leftover after parsing attributes in process `syz.1.3068'. [ 984.281298][T14932] loop2: detected capacity change from 0 to 64 [ 984.722951][T14938] loop4: detected capacity change from 0 to 512 [ 984.886847][T14938] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 984.957936][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 984.964669][ C0] EXT4-fs (loop4): initial error at time 54461163: ext4_mb_generate_buddy:1317 [ 984.973978][ C0] EXT4-fs (loop4): last error at time 54461163: ext4_mb_generate_buddy:1317 [ 984.991549][T14938] EXT4-fs (loop4): Remounting filesystem read-only [ 985.029297][T14938] EXT4-fs (loop4): 1 truncate cleaned up [ 985.093916][T14938] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 985.797365][T12476] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 985.980225][T12495] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 986.724048][T14962] loop9: detected capacity change from 0 to 64 [ 986.792757][T14962] BFS-fs: bfs_fill_super(): loop9 is unclean, continuing [ 988.410679][ T29] audit: type=1326 audit(54461166.560:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14983 comm="syz.9.3092" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0585b9cdd9 code=0x7ffc0000 [ 988.493683][T14984] loop9: detected capacity change from 0 to 256 [ 988.515239][ T29] audit: type=1326 audit(54461166.570:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14983 comm="syz.9.3092" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0585b9cdd9 code=0x7ffc0000 [ 988.669582][ T29] audit: type=1326 audit(54461166.620:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14983 comm="syz.9.3092" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f0585b9cdd9 code=0x7ffc0000 [ 988.793536][ T29] audit: type=1326 audit(54461166.630:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14983 comm="syz.9.3092" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f0585b9cb42 code=0x7ffc0000 [ 988.923210][ T29] audit: type=1326 audit(54461166.630:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14983 comm="syz.9.3092" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f0585b5d60e code=0x7ffc0000 [ 989.084966][ T29] audit: type=1326 audit(54461166.630:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14983 comm="syz.9.3092" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f0585b9cc07 code=0x7ffc0000 [ 989.217032][ T29] audit: type=1326 audit(54461166.650:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14983 comm="syz.9.3092" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0585b5d60e code=0x7ffc0000 [ 989.375421][T14998] loop7: detected capacity change from 0 to 512 [ 989.376973][ T29] audit: type=1326 audit(54461166.660:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14983 comm="syz.9.3092" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0585b9ca6b code=0x7ffc0000 [ 989.463583][T14998] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 989.501505][ T29] audit: type=1326 audit(54461166.680:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14983 comm="syz.9.3092" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f0585b5d60e code=0x7ffc0000 [ 989.565147][T15002] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 989.619900][ T29] audit: type=1326 audit(54461166.680:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14983 comm="syz.9.3092" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f0585b5d60e code=0x7ffc0000 [ 989.636864][T14998] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4222: comm syz.7.3098: Allocating blocks 41-42 which overlap fs metadata [ 989.710545][T14998] loop7: lost filesystem error report for type 5 error -117 [ 989.717956][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 989.732123][ C1] EXT4-fs (loop7): initial error at time 54461167: ext4_mb_mark_diskspace_used:4222 [ 989.741772][ C1] EXT4-fs (loop7): last error at time 54461167: ext4_mb_mark_diskspace_used:4222 [ 989.772157][T15002] pim6reg: entered allmulticast mode [ 989.783237][T14998] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4222: comm syz.7.3098: Allocating blocks 41-42 which overlap fs metadata [ 989.838640][T14998] loop7: lost filesystem error report for type 5 error -117 [ 989.844063][T14998] EXT4-fs error (device loop7): ext4_acquire_dquot:7034: comm syz.7.3098: Failed to acquire dquot type 1 [ 989.977252][T14998] loop7: lost filesystem error report for type 5 error -117 [ 989.978465][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 990.012667][T14998] EXT4-fs error (device loop7): mb_free_blocks:2049: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 990.240259][T14998] EXT4-fs error (device loop7): ext4_do_update_inode:5690: inode #12: comm syz.7.3098: corrupted inode contents [ 990.302137][T14998] loop7: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 990.303495][T14998] EXT4-fs error (device loop7): ext4_dirty_inode:6587: inode #12: comm syz.7.3098: mark_inode_dirty error [ 990.442022][T14998] loop7: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 990.443389][T14998] EXT4-fs error (device loop7): ext4_do_update_inode:5690: inode #12: comm syz.7.3098: corrupted inode contents [ 990.598468][T14998] loop7: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 990.601260][T14998] EXT4-fs error (device loop7): __ext4_ext_dirty:207: inode #12: comm syz.7.3098: mark_inode_dirty error [ 990.738615][T14998] loop7: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 990.740022][T14998] EXT4-fs error (device loop7): ext4_do_update_inode:5690: inode #12: comm syz.7.3098: corrupted inode contents [ 990.830734][T14998] loop7: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 990.836241][T14998] EXT4-fs error (device loop7) in ext4_orphan_del:303: Corrupt filesystem [ 990.889962][T15016] loop2: detected capacity change from 0 to 256 [ 990.947749][T15016] exfat: Deprecated parameter 'utf8' [ 990.990926][T15016] exfat: Deprecated parameter 'utf8' [ 990.998382][T14998] loop7: lost filesystem error report for type 5 error -117 [ 991.002346][T14998] EXT4-fs error (device loop7): ext4_do_update_inode:5690: inode #12: comm syz.7.3098: corrupted inode contents [ 991.042861][T15018] loop9: detected capacity change from 0 to 256 [ 991.045419][T15016] exfat: Deprecated parameter 'utf8' [ 991.104885][T14998] loop7: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 991.160611][T14998] EXT4-fs error (device loop7): ext4_truncate:4690: inode #12: comm syz.7.3098: mark_inode_dirty error [ 991.227126][T15018] exFAT-fs (loop9): failed to load upcase table (idx : 0x0001e4a3, chksum : 0xe65d9f0a, utbl_chksum : 0x7319d30d) [ 991.255396][T14998] loop7: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 991.256556][T14998] EXT4-fs error (device loop7) in ext4_process_orphan:345: Corrupt filesystem [ 991.263005][T15016] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 991.357631][T14998] loop7: lost filesystem error report for type 5 error -117 [ 991.364085][T14998] EXT4-fs (loop7): 1 truncate cleaned up [ 991.478577][T14998] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 991.635735][T14998] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 993.106168][T15039] loop1: detected capacity change from 0 to 64 [ 993.319971][T15039] Trying to free block not in datazone [ 993.799085][T15044] pimreg: tun_chr_ioctl cmd 1074812118 [ 995.825779][T15078] loop1: detected capacity change from 0 to 1024 [ 996.073742][T15078] hfsplus: inconsistency in B*Tree (1,0,1,0,2) [ 996.116982][T15078] hfsplus: xattr search failed [ 996.163484][T15078] hfsplus: inconsistency in B*Tree (1,0,1,0,2) [ 996.217742][T15078] hfsplus: xattr search failed [ 996.258587][T15078] hfsplus: can't free extent: start 2889, count 1 [ 997.296897][T15094] loop1: detected capacity change from 0 to 512 [ 997.511324][T15094] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 997.581644][T15094] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.3137: corrupted xattr block 33: e_value out of bounds [ 997.600768][T15094] EXT4-fs (loop1): Remounting filesystem read-only [ 998.150219][T12165] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 998.391294][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 998.943883][T15118] netlink: 27 bytes leftover after parsing attributes in process `syz.9.3147'. [ 999.670283][ T9958] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 999.848178][ T9958] usb 5-1: Using ep0 maxpacket: 8 [ 999.858956][T15131] loop2: detected capacity change from 0 to 512 [ 999.937755][ T9958] usb 5-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 999.951455][T15132] loop7: detected capacity change from 0 to 512 [ 999.961900][T15131] EXT4-fs: Ignoring removed oldalloc option [ 999.973141][ T9958] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1000.030571][ T9958] usb 5-1: Product: syz [ 1000.035809][ T9958] usb 5-1: Manufacturer: syz [ 1000.042232][ T9958] usb 5-1: SerialNumber: syz [ 1000.060226][ T9958] usb 5-1: config 0 descriptor?? [ 1000.064375][T15131] EXT4-fs (loop2): 1 truncate cleaned up [ 1000.113747][ T9958] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 1000.118514][T15132] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1000.152256][T15131] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1000.368622][T15132] EXT4-fs error (device loop7): ext4_validate_inode_bitmap:105: comm syz.7.3153: Corrupt inode bitmap - block_group = 0, inode_bitmap = 20 [ 1000.398780][T15140] EXT4-fs error (device loop7): ext4_validate_inode_bitmap:105: comm syz.7.3153: Corrupt inode bitmap - block_group = 0, inode_bitmap = 20 [ 1000.443511][T15142] netlink: 'syz.9.3157': attribute type 4 has an invalid length. [ 1000.455823][T15132] EXT4-fs error (device loop7) in ext4_free_inode:361: Filesystem failed CRC [ 1000.692711][T11090] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1000.964632][ T9958] gspca_sonixj: reg_r err -71 [ 1000.986525][ T9958] sonixj 5-1:0.0: probe with driver sonixj failed with error -71 [ 1001.004269][T15145] program syz.1.3158 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1001.037208][ T9958] usb 5-1: USB disconnect, device number 9 [ 1001.110478][ T9635] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1003.040560][ T9946] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 1003.091276][T13094] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 1003.260603][T13094] usb 10-1: Using ep0 maxpacket: 8 [ 1003.310803][ T9946] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 1003.351823][T13094] usb 10-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1003.371961][ T9946] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1003.390003][T13094] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1003.404208][ T9946] usb 2-1: Product: syz [ 1003.424216][ T9946] usb 2-1: Manufacturer: syz [ 1003.438502][T13094] usb 10-1: Product: syz [ 1003.451806][ T9946] usb 2-1: SerialNumber: syz [ 1003.469241][T13094] usb 10-1: Manufacturer: syz [ 1003.494802][T13094] usb 10-1: SerialNumber: syz [ 1003.518691][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 1003.536499][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 1003.596377][T13094] usb 10-1: config 0 descriptor?? [ 1003.814050][T15182] loop7: detected capacity change from 0 to 256 [ 1003.875988][T13094] usb 10-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1004.256219][T15182] FAT-fs (loop7): Directory bread(block 64) failed [ 1004.346649][T15182] FAT-fs (loop7): Directory bread(block 65) failed [ 1004.424587][T15182] FAT-fs (loop7): Directory bread(block 66) failed [ 1004.435267][ T9946] rtl8150 2-1:1.0: couldn't reset the device [ 1004.462317][T15188] program syz.2.3173 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1004.480027][T15182] FAT-fs (loop7): Directory bread(block 67) failed [ 1004.488060][ T9946] rtl8150 2-1:1.0: probe with driver rtl8150 failed with error -5 [ 1004.508845][T13094] dvb_usb_rtl28xxu 10-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1004.538679][T15182] FAT-fs (loop7): Directory bread(block 68) failed [ 1004.571946][T15182] FAT-fs (loop7): Directory bread(block 69) failed [ 1004.595566][T13094] usb 10-1: USB disconnect, device number 7 [ 1004.614608][T15182] FAT-fs (loop7): Directory bread(block 70) failed [ 1004.642180][ T9946] usb 2-1: USB disconnect, device number 4 [ 1004.668495][T15182] FAT-fs (loop7): Directory bread(block 71) failed [ 1004.730501][T15182] FAT-fs (loop7): Directory bread(block 72) failed [ 1004.781987][T15182] FAT-fs (loop7): Directory bread(block 73) failed [ 1005.896049][T15196] loop9: detected capacity change from 0 to 256 [ 1006.181177][T15196] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 1006.415275][T15195] loop1: detected capacity change from 0 to 32768 [ 1006.431460][T15195] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.3176 (15195) [ 1006.467345][T15195] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1006.478534][T15195] BTRFS info (device loop1): using sha256 checksum algorithm [ 1006.596908][T15195] BTRFS info (device loop1): rebuilding free space tree [ 1006.629341][T15195] BTRFS info (device loop1): disabling free space tree [ 1006.636520][T15195] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1006.653062][T15195] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1006.725875][T15195] BTRFS info (device loop1): setting nodatasum [ 1006.732410][T15195] BTRFS info (device loop1): setting nodatacow [ 1006.741641][T15195] BTRFS info (device loop1): turning off barriers [ 1006.753425][T15195] BTRFS info (device loop1): force clearing of disk cache [ 1007.072894][T12165] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1007.119601][T15214] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1007.974969][T15224] loop2: detected capacity change from 0 to 512 [ 1008.089850][T15224] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 1008.114747][T15224] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 1008.124365][T15224] System zones: 0-1, 15-15, 18-18, 34-34 [ 1008.131495][T15224] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1008.143747][T15224] __quota_error: 14 callbacks suppressed [ 1008.143832][T15224] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0 [ 1008.159929][T15224] EXT4-fs warning (device loop2): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1008.177612][T15224] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 1008.196610][T15224] EXT4-fs error (device loop2): ext4_orphan_get:1423: comm syz.2.3185: bad orphan inode 16 [ 1008.243561][T15224] loop2: lost filesystem error report for type 5 error -117 [ 1008.244346][T15224] ext4_test_bit(bit=15, block=18) = 1 [ 1008.251978][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 1008.252057][ C1] EXT4-fs (loop2): initial error at time 54461186: ext4_orphan_get:1423 [ 1008.252172][ C1] EXT4-fs (loop2): last error at time 54461186: ext4_orphan_get:1423 [ 1008.416533][T15224] is_bad_inode(inode)=0 [ 1008.445173][T15224] NEXT_ORPHAN(inode)=0 [ 1008.499529][T15224] max_ino=32 [ 1008.526869][T15224] i_nlink=2 [ 1008.546283][T15224] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1008.688160][ T9946] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 1008.808653][T15224] fscrypt (loop2, inode 16): Error -61 getting encryption context [ 1008.908303][ T9946] usb 5-1: Using ep0 maxpacket: 16 [ 1008.988541][ T9946] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1009.034946][ T9946] usb 5-1: config 1 interface 0 altsetting 151 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 1009.080039][ T9946] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1009.136729][ T9946] usb 5-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.40 [ 1009.194224][ T9946] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1009.244391][ T9946] usb 5-1: Product: syz [ 1009.263836][ T9946] usb 5-1: Manufacturer: syz [ 1009.288161][ T9946] usb 5-1: SerialNumber: syz [ 1009.415091][T11090] EXT4-fs error (device loop2): ext4_ext_check_inode:521: inode #13: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic f300, entries 1, max 4(0), depth 0(0) [ 1009.491913][T15241] cgroup: Need name or subsystem set [ 1009.512901][T11090] EXT4-fs error (device loop2): ext4_ext_check_inode:521: inode #13: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic f300, entries 1, max 4(0), depth 0(0) [ 1009.851106][ T9946] usbhid 5-1:1.0: can't add hid device: -71 [ 1009.894288][ T9946] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 1010.011229][ T9946] usb 5-1: USB disconnect, device number 10 [ 1010.316194][T15248] loop9: detected capacity change from 0 to 512 [ 1010.355222][T11945] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1010.400867][T15248] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 1010.596744][T15248] EXT4-fs (loop9): 1 truncate cleaned up [ 1010.649136][T15248] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1010.789734][T11945] bond0: (slave syz_tun): Releasing backup interface [ 1011.185953][T13004] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1011.223481][ T3285] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1011.404589][T15258] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3198'. [ 1011.576217][ T3285] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1011.918566][ T3285] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1012.189579][ T3285] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1012.801081][ T3285] bridge_slave_1: left allmulticast mode [ 1012.826564][ T3285] bridge_slave_1: left promiscuous mode [ 1012.857364][ T3285] bridge0: port 2(bridge_slave_1) entered disabled state [ 1012.921636][ T3285] bridge_slave_0: left allmulticast mode [ 1012.949076][ T3285] bridge_slave_0: left promiscuous mode [ 1012.966540][ T3285] bridge0: port 1(bridge_slave_0) entered disabled state [ 1013.965380][T15264] loop9: detected capacity change from 0 to 512 [ 1013.997414][ T3285] team0: Port device bond0 removed [ 1014.095036][T15264] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 1014.127583][T15264] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 1014.156329][ T3285] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1014.234183][T15264] System zones: 0-1, 15-15, 18-18, 34-34 [ 1014.302695][ T3285] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1014.311794][T15264] EXT4-fs (loop9): orphan cleanup on readonly fs [ 1014.378480][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1014.392101][T15264] Quota error (device loop9): v2_read_header: Failed header read: expected=8 got=0 [ 1014.411867][ T3285] bond0 (unregistering): Released all slaves [ 1014.442426][T15264] EXT4-fs warning (device loop9): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1014.520245][T15264] EXT4-fs (loop9): Cannot turn on quotas: error -22 [ 1014.601130][T15264] EXT4-fs (loop9): 1 truncate cleaned up [ 1014.690739][T15264] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1015.238517][ T3285] batman_adv: batadv0: Removing interface: vlan2 [ 1015.398290][T13004] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1015.475931][T13936] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1015.496716][T13936] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1015.508691][T13936] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1015.523452][T13936] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1015.537035][T13936] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1015.686806][T15282] loop7: detected capacity change from 0 to 256 [ 1015.756933][T15282] exfat: Deprecated parameter 'utf8' [ 1015.976541][T15282] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x47dfe6af, utbl_chksum : 0xe619d30d) [ 1016.456452][ T3285] hsr_slave_0: left promiscuous mode [ 1016.536390][ T3285] hsr_slave_1: left promiscuous mode [ 1016.608807][ T3285] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1016.663397][ T3285] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1016.791049][ T3285] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1016.833058][ T3285] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1016.992690][ T3285] veth1_macvtap: left promiscuous mode [ 1017.048677][ T3285] veth0_macvtap: left promiscuous mode [ 1017.085722][ T3285] veth1_vlan: left promiscuous mode [ 1017.120378][ T3285] veth0_vlan: left promiscuous mode [ 1017.658098][T13936] Bluetooth: hci1: command tx timeout [ 1018.027400][T15312] loop7: detected capacity change from 0 to 1024 [ 1019.181292][T15318] loop4: detected capacity change from 0 to 1024 [ 1019.738915][T13936] Bluetooth: hci1: command tx timeout [ 1020.100571][ T3285] team0 (unregistering): Port device team_slave_1 removed [ 1020.240877][ T3285] team0 (unregistering): Port device team_slave_0 removed [ 1020.954086][T15333] loop4: detected capacity change from 0 to 1024 [ 1021.315528][ T55] smbdirect: ib_dev[syś2] removed [ 1021.454424][ T9946] »»»»»» speed is unknown, defaulting to 1000 [ 1021.484440][ T5226] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1021.510877][ T9946] syś2: Port: 1 Link DOWN [ 1021.828417][T13936] Bluetooth: hci1: command tx timeout [ 1022.240346][ T6403] ===================================================== [ 1022.247596][ T6403] BUG: KMSAN: uninit-value in inode_set_ctime_to_ts+0x1eb/0x3b0 [ 1022.255679][ T6403] inode_set_ctime_to_ts+0x1eb/0x3b0 [ 1022.262431][ T6403] setattr_copy+0xc20/0xd30 [ 1022.267249][ T6403] shmem_setattr+0x1230/0x1a00 [ 1022.272351][ T6403] notify_change+0x1abe/0x1bd0 [ 1022.277319][ T6403] vfs_utimes+0x72c/0xaf0 [ 1022.282012][ T6403] do_utimes+0x2d8/0x4f0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1022.286387][ T6403] __x64_sys_utimensat+0x1b8/0x450 [ 1022.291856][ T6403] x64_sys_call+0x370c/0x3ea0 [ 1022.297095][ T6403] do_syscall_64+0x134/0xf80 [ 1022.302058][ T6403] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1022.308245][ T6403] [ 1022.310630][ T6403] Uninit was stored to memory at: [ 1022.318282][ T6403] inode_set_ctime_to_ts+0x1e4/0x3b0 [ 1022.323733][ T6403] setattr_copy+0xc20/0xd30 [ 1022.329579][ T6403] shmem_setattr+0x1230/0x1a00 [ 1022.334889][ T6403] notify_change+0x1abe/0x1bd0 [ 1022.342510][ T6403] vfs_utimes+0x72c/0xaf0 [ 1022.346984][ T6403] do_utimes+0x2d8/0x4f0 [ 1022.351867][ T6403] __x64_sys_utimensat+0x1b8/0x450 [ 1022.357120][ T6403] x64_sys_call+0x370c/0x3ea0 [ 1022.362062][ T6403] do_syscall_64+0x134/0xf80 [ 1022.366812][ T6403] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1022.373289][ T6403] [ 1022.375732][ T6403] Uninit was stored to memory at: [ 1022.381142][ T6403] inode_set_ctime_to_ts+0x19f/0x3b0 [ 1022.386577][ T6403] setattr_copy+0xc20/0xd30 [ 1022.391352][ T6403] shmem_setattr+0x1230/0x1a00 [ 1022.396260][ T6403] notify_change+0x1abe/0x1bd0 [ 1022.401401][ T6403] vfs_utimes+0x72c/0xaf0 [ 1022.405862][ T6403] do_utimes+0x2d8/0x4f0 [ 1022.410390][ T6403] __x64_sys_utimensat+0x1b8/0x450 [ 1022.417301][ T6403] x64_sys_call+0x370c/0x3ea0 [ 1022.422764][ T6403] do_syscall_64+0x134/0xf80 [ 1022.427517][ T6403] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1022.433673][ T6403] [ 1022.436055][ T6403] Local variable newattrs created at: [ 1022.442449][ T6403] vfs_utimes+0x43/0xaf0 [ 1022.446819][ T6403] do_utimes+0x2d8/0x4f0 [ 1022.451576][ T6403] [ 1022.453992][ T6403] CPU: 0 UID: 0 PID: 6403 Comm: udevd Tainted: G W L syzkaller #0 PREEMPT(full) [ 1022.464859][ T6403] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 1022.470271][ T6403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1022.480559][ T6403] ===================================================== [ 1022.487561][ T6403] Disabling lock debugging due to kernel taint [ 1022.684886][ T3285] IPVS: stop unused estimator thread 0... [ 1022.939884][ T6403] Kernel panic - not syncing: kmsan.panic set ... [ 1022.946457][ T6403] CPU: 0 UID: 0 PID: 6403 Comm: udevd Tainted: G B W L syzkaller #0 PREEMPT(full) [ 1022.957067][ T6403] Tainted: [B]=BAD_PAGE, [W]=WARN, [L]=SOFTLOCKUP [ 1022.963568][ T6403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1022.973735][ T6403] Call Trace: [ 1022.977091][ T6403] [ 1022.980085][ T6403] __dump_stack+0x26/0x30 [ 1022.984558][ T6403] dump_stack_lvl+0x50/0x1c0 [ 1022.989283][ T6403] ? dump_stack+0x12/0x25 [ 1022.993768][ T6403] dump_stack+0x1e/0x25 [ 1022.998066][ T6403] vpanic+0x7b4/0x1430 [ 1023.002308][ T6403] panic+0x15d/0x160 [ 1023.006388][ T6403] kmsan_report+0x31a/0x320 [ 1023.011048][ T6403] ? __msan_warning+0x1b/0x30 [ 1023.015868][ T6403] ? inode_set_ctime_to_ts+0x1eb/0x3b0 [ 1023.021478][ T6403] ? setattr_copy+0xc20/0xd30 [ 1023.026299][ T6403] ? shmem_setattr+0x1230/0x1a00 [ 1023.031364][ T6403] ? notify_change+0x1abe/0x1bd0 [ 1023.036473][ T6403] ? vfs_utimes+0x72c/0xaf0 [ 1023.041104][ T6403] ? do_utimes+0x2d8/0x4f0 [ 1023.045656][ T6403] ? __x64_sys_utimensat+0x1b8/0x450 [ 1023.051158][ T6403] ? x64_sys_call+0x370c/0x3ea0 [ 1023.056180][ T6403] ? do_syscall_64+0x134/0xf80 [ 1023.061096][ T6403] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1023.067305][ T6403] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1023.073510][ T6403] ? preempt_schedule_irq+0x79/0xa0 [ 1023.078842][ T6403] ? kmsan_get_metadata+0xf1/0x160 [ 1023.084117][ T6403] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1023.090103][ T6403] ? inode_nohighmem+0x51/0x60 [ 1023.095021][ T6403] ? filter_irq_stacks+0x49/0x190 [ 1023.100209][ T6403] ? stack_depot_save_flags+0x35/0x790 [ 1023.105834][ T6403] ? kmsan_get_metadata+0xf1/0x160 [ 1023.111099][ T6403] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1023.117594][ T6403] ? kmsan_get_metadata+0xf1/0x160 [ 1023.122874][ T6403] __msan_warning+0x1b/0x30 [ 1023.127509][ T6403] inode_set_ctime_to_ts+0x1eb/0x3b0 [ 1023.132956][ T6403] setattr_copy+0xc20/0xd30 [ 1023.137634][ T6403] shmem_setattr+0x1230/0x1a00 [ 1023.142532][ T6403] ? kmsan_get_metadata+0xf1/0x160 [ 1023.147817][ T6403] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1023.153797][ T6403] ? kmsan_get_metadata+0xf1/0x160 [ 1023.159073][ T6403] ? __pfx_shmem_setattr+0x10/0x10 [ 1023.164309][ T6403] notify_change+0x1abe/0x1bd0 [ 1023.169272][ T6403] vfs_utimes+0x72c/0xaf0 [ 1023.173727][ T6403] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1023.179727][ T6403] do_utimes+0x2d8/0x4f0 [ 1023.184103][ T6403] __x64_sys_utimensat+0x1b8/0x450 [ 1023.189360][ T6403] ? kmsan_get_metadata+0xf1/0x160 [ 1023.194657][ T6403] x64_sys_call+0x370c/0x3ea0 [ 1023.199490][ T6403] do_syscall_64+0x134/0xf80 [ 1023.204224][ T6403] ? clear_bhb_loop+0x50/0xa0 [ 1023.209032][ T6403] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1023.215060][ T6403] RIP: 0033:0x7f2582f15a1a [ 1023.219566][ T6403] Code: 77 06 c3 0f 1f 44 00 00 48 8b 15 d9 b3 0d 00 f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 41 89 ca b8 18 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 06 c3 0f 1f 44 00 00 48 8b 15 a9 b3 0d 00 f7 [ 1023.239301][ T6403] RSP: 002b:00007ffd20b2e838 EFLAGS: 00000246 ORIG_RAX: 0000000000000118 [ 1023.247842][ T6403] RAX: ffffffffffffffda RBX: 000055d897c2f360 RCX: 00007f2582f15a1a [ 1023.255930][ T6403] RDX: 0000000000000000 RSI: 000055d897c2f360 RDI: 00000000ffffff9c [ 1023.263997][ T6403] RBP: 000055d897c2f379 R08: 0000000000005760 R09: 0000000000000000 [ 1023.272065][ T6403] R10: 0000000000000100 R11: 0000000000000246 R12: 00007ffd20b2ecf0 [ 1023.280130][ T6403] R13: 00007ffd20b2e8f0 R14: 000055d87bc5b6d7 R15: 00007ffd20b2f980 [ 1023.288242][ T6403] [ 1023.291636][ T6403] Kernel Offset: disabled [ 1023.296004][ T6403] Rebooting in 86400 seconds..