last executing test programs: 3m52.124118893s ago: executing program 32 (id=338): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000000)=0x7, 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000040)=0xf2b, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f00000001c0)=""/36, &(0x7f0000000080)=0xfffffe75) 3m38.961406557s ago: executing program 1 (id=491): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/bus/pci/devices/0000:00:03.0/resource0\x00', 0x1, 0x10) write(r0, &(0x7f00000004c0)='a', 0x1) 3m38.842465749s ago: executing program 1 (id=494): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/kcore\x00', 0x0, 0x0) lseek(r0, 0xd57, 0x2) 3m38.740295179s ago: executing program 1 (id=497): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x26}, 0x10) 3m38.611900723s ago: executing program 1 (id=498): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000b80)='./file0\x00', 0x1008002, &(0x7f0000000d00)={[{@grpjquota}]}, 0x3, 0x5ee, &(0x7f0000000280)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f00000008c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './bus'}}, {@redirect_dir_off}]}) removexattr(&(0x7f0000000a00)='./file0\x00', &(0x7f0000000a40)=@random={'trusted.', 'syz_tun\x00'}) 3m38.254685159s ago: executing program 1 (id=504): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000004882, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) io_setup(0x5, &(0x7f0000000040)=0x0) io_submit(r1, 0xf3, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x1, 0x0, r0, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}]) 3m37.330114963s ago: executing program 1 (id=521): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) sendmmsg$inet(r0, &(0x7f0000000040)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000240)="d2a7b3", 0x3}, {&(0x7f0000000400)="e06bd3f745", 0xfcfd}, {&(0x7f0000000500)="86e9a0d8", 0x4}, {&(0x7f00000005c0)="25062456", 0x4}], 0x4}}], 0x1, 0x4000800) 3m37.176367409s ago: executing program 33 (id=521): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) sendmmsg$inet(r0, &(0x7f0000000040)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000240)="d2a7b3", 0x3}, {&(0x7f0000000400)="e06bd3f745", 0xfcfd}, {&(0x7f0000000500)="86e9a0d8", 0x4}, {&(0x7f00000005c0)="25062456", 0x4}], 0x4}}], 0x1, 0x4000800) 3m28.011586954s ago: executing program 2 (id=606): r0 = syz_usb_connect$cdc_ecm(0x2, 0x56, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000090000102505a1a4400000000101090244000101000000090400001202060000052406000005240000000d240f010000000000000000000905810340000000000905820260000000000905030208"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000001c0)={0x14, 0x0, &(0x7f00000002c0)={0x0, 0x3, 0x1a, {0xfffffffffffffea4}}}, 0x0) 3m25.181126883s ago: executing program 2 (id=627): mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000002c0)='./file1\x00', 0x0) io_setup(0x200, &(0x7f0000000300)=0x0) io_submit(r1, 0x3b, &(0x7f0000000480)=[&(0x7f00000004c0)={0x25, 0x0, 0x2, 0x1, 0x0, r0, &(0x7f0000000500), 0x4000}]) 3m25.050298507s ago: executing program 2 (id=629): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, &(0x7f0000000100)={0x20, 0x4, 0xb, {0xb, 0xc, "0c9d79cbbd4ae27bf5"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000040)={0x2c, &(0x7f0000000080)={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0}) 3m22.031757795s ago: executing program 2 (id=648): syz_mount_image$squashfs(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00'], 0x1, 0x1f7, &(0x7f00000004c0)="$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") mount$overlay(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000080)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) 3m21.289118831s ago: executing program 2 (id=654): mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000680)='fdinfo\x00') getdents64(r0, &(0x7f00000088c0)=""/42, 0x2a) getdents(r0, &(0x7f0000000300)=""/175, 0xaf) 3m20.279070064s ago: executing program 2 (id=660): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000070000000000000000000a40000000160a05000000000000000000020000000900010073797a300000000014000380080001400000000008000240000000030900020073797a300000000014000000110001"], 0x68}}, 0x20000800) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x48, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'geneve0\x00'}]}]}]}, @NFT_MSG_NEWFLOWTABLE={0x14, 0x16, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}}], {0x14}}, 0x84}}, 0x24040884) 3m20.007965811s ago: executing program 34 (id=660): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000070000000000000000000a40000000160a05000000000000000000020000000900010073797a300000000014000380080001400000000008000240000000030900020073797a300000000014000000110001"], 0x68}}, 0x20000800) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x48, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'geneve0\x00'}]}]}]}, @NFT_MSG_NEWFLOWTABLE={0x14, 0x16, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}}], {0x14}}, 0x84}}, 0x24040884) 2m47.286084522s ago: executing program 5 (id=1039): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/net/bridge0/bridge/priority\x00', 0x2, 0x0) read$FUSE(r0, &(0x7f0000000240)={0x2020}, 0x2020) 2m47.171791944s ago: executing program 5 (id=1042): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000ac0)='./file1\x00', 0x2000010, &(0x7f00000022c0)=ANY=[], 0x4, 0x6ea, &(0x7f0000000280)="$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") symlink(&(0x7f0000000dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') creat(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x189) unlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 2m46.775617414s ago: executing program 5 (id=1046): mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = io_uring_setup(0x1684, &(0x7f0000000280)={0x0, 0x3a2b, 0x2, 0x4, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001640)=""/4095, 0x440000}], 0x100000000000011a) 2m46.415838631s ago: executing program 5 (id=1061): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x2000004, &(0x7f0000002000)=ANY=[], 0xfc, 0x5520, &(0x7f0000000380)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000340)='./file0\x00', 0x2888004, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@nfs_export_off}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)) 2m44.46370518s ago: executing program 5 (id=1073): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x47f, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x18, {[@global=@item_012={0x1, 0x1, 0x0, "01"}, @global=@item_012={0x1, 0x1, 0x1, "c0"}, @global=@item_012={0x1, 0x1, 0x8, "ff"}, @main=@item_4={0x3, 0x0, 0xa, "4632a909"}, @main=@item_4={0x3, 0x0, 0x9, "223b54cc"}, @local=@item_012={0x1, 0x2, 0x0, "01"}, @main=@item_012={0x1, 0x0, 0xa, '\x00'}, @global=@item_012={0x1, 0x1, 0x0, '\b'}, @global=@item_012={0x0, 0x1, 0x9}, @main=@item_012={0x0, 0x0, 0x9}]}}, 0x0}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000003c0)=0x14) 2m43.860154282s ago: executing program 5 (id=1074): mkdirat(0xffffffffffffff9c, &(0x7f00000012c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000001340)='./sys\x00', &(0x7f0000001380)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000014c0)='./sys/kernel/reboot/mode\x00', 0x0, 0x0) read(r0, &(0x7f0000001500), 0x100) 2m43.669313241s ago: executing program 35 (id=1074): mkdirat(0xffffffffffffff9c, &(0x7f00000012c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000001340)='./sys\x00', &(0x7f0000001380)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000014c0)='./sys/kernel/reboot/mode\x00', 0x0, 0x0) read(r0, &(0x7f0000001500), 0x100) 2m43.38915958s ago: executing program 6 (id=1080): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r0, &(0x7f0000000100)={0x2, 0x20, @remote}, 0x10) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/crypto\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) 2m43.228015236s ago: executing program 6 (id=1082): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@RTM_NEWMDB={0x38, 0x54, 0x401, 0x0, 0x0, {0x7, r2}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x0, {@in6_addr=@dev={0xfe, 0x80, '\x00', 0x2b}, 0x86dd}}}]}, 0x38}}, 0x0) 2m42.948262885s ago: executing program 6 (id=1084): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000000000000000000000001850000002c00000095000000000000004495e980d4ab43a654dbda1289491fde9751ca443daaa97c18e213"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000001000010828bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000042004001c002b8008000800", @ANYRES32=r1, @ANYBLOB="080003001500000008000100", @ANYRES32=r1, @ANYBLOB="08001b"], 0x44}}, 0x4) 2m42.642985176s ago: executing program 6 (id=1089): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000b80)='./file0\x00', 0x1008002, &(0x7f0000000d00)={[{@grpjquota}]}, 0x3, 0x5ee, &(0x7f0000000280)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000180)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380), 0x64, 0x1) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]}) 2m41.897772572s ago: executing program 6 (id=1099): capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0xf4, 0x81, 0xfffffffb}) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000340)={{}, {}, [], {0x4, 0x4}}, 0x24, 0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f0000000140)) listxattr(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) 2m39.76304968s ago: executing program 6 (id=1111): syz_mount_image$minix(&(0x7f0000000300), &(0x7f0000000340)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0041e96a0f5e69f9a7f61c16124cb6d02711dffa581b9544ce66de31fff051ad15c004c6c6a100a59056ebb6bf9f1d33af"], 0x1, 0x156, &(0x7f00000003c0)="$eJzs271OwlAYxvHnAALiF4o6GAcTB12kfEQSN70UApUQixpxgTjoFXgN3pkXoIObkxgawEQ+mkjsifb/W/o2T0/6djjtu1QAIutUezIySvZPdtPZx5yx3RKAkPQGx48egOiJv9vuAIAdr2fSs6SXt7ua4smx+aCf3w/zWGo8f5B2EoPcpLX4fb54kg6G601m4vrMKF+amB/uD++/rBWtak1ZrWtDuUFeH63fnmMSAgAgOozyQfnMC2I6b3puYWq+4OfFqXnSz0sBeXlqnvLzfO3Kq89qE8AEsTn3fzxg/ycC9j8Ae9qd7kXV89wbCgoKilFh+80E4Lc5t61rp93pHjVb1YbbcC9LhcJJ5bhcrJQcf7J3Zs/3AP6ur4++7U4AAAAAAAAAAAAAAMBPbWrLdgsAAAAAQhLG70S2nxEAAAAAAAAAAAAAAAAAgP/mMwAA//9E/CIc") syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000000580)='./bus\x00', 0x204b82f, 0x0, 0x0, 0x0, &(0x7f00000005c0)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000780)=ANY=[], 0x10448) 2m39.556037651s ago: executing program 36 (id=1111): syz_mount_image$minix(&(0x7f0000000300), &(0x7f0000000340)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0041e96a0f5e69f9a7f61c16124cb6d02711dffa581b9544ce66de31fff051ad15c004c6c6a100a59056ebb6bf9f1d33af"], 0x1, 0x156, &(0x7f00000003c0)="$eJzs271OwlAYxvHnAALiF4o6GAcTB12kfEQSN70UApUQixpxgTjoFXgN3pkXoIObkxgawEQ+mkjsifb/W/o2T0/6djjtu1QAIutUezIySvZPdtPZx5yx3RKAkPQGx48egOiJv9vuAIAdr2fSs6SXt7ua4smx+aCf3w/zWGo8f5B2EoPcpLX4fb54kg6G601m4vrMKF+amB/uD++/rBWtak1ZrWtDuUFeH63fnmMSAgAgOozyQfnMC2I6b3puYWq+4OfFqXnSz0sBeXlqnvLzfO3Kq89qE8AEsTn3fzxg/ycC9j8Ae9qd7kXV89wbCgoKilFh+80E4Lc5t61rp93pHjVb1YbbcC9LhcJJ5bhcrJQcf7J3Zs/3AP6ur4++7U4AAAAAAAAAAAAAAMBPbWrLdgsAAAAAQhLG70S2nxEAAAAAAAAAAAAAAAAAgP/mMwAA//9E/CIc") syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000000580)='./bus\x00', 0x204b82f, 0x0, 0x0, 0x0, &(0x7f00000005c0)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000780)=ANY=[], 0x10448) 2m18.442560696s ago: executing program 4 (id=1300): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f0000000200)={0xa200000000000000}) 2m18.180303123s ago: executing program 4 (id=1304): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000740)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x3f, 0x40206}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x3, 0x3}}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x8}, @IFLA_BR_MCAST_MLD_VERSION={0x5, 0x2c, 0x2}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x44000}, 0x0) 2m18.021716559s ago: executing program 4 (id=1305): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x1, 0x4, 0x8, 0x1, 0x1, 0x0, 0x0, '\x00', 0x0, r0, 0x1, 0x3}, 0x50) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1, 0x8, &(0x7f00000007c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f0000000800)='GPL\x00', 0x2, 0x1000, &(0x7f0000000840)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m17.877937904s ago: executing program 4 (id=1307): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000b80)='./file0\x00', 0x1008002, &(0x7f0000000d00)={[{@grpjquota}]}, 0x3, 0x5ee, &(0x7f0000000280)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f00000008c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './bus'}}, {@redirect_dir_off}]}) removexattr(&(0x7f0000000a00)='./file0\x00', &(0x7f0000000a40)=@random={'trusted.', 'syz_tun\x00'}) 2m17.280152115s ago: executing program 4 (id=1312): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='nodev\x00', &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/clk/clk_summary\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/1000, 0x3e8) 2m15.420296325s ago: executing program 4 (id=1326): mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_tracefs\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='my_tracefs/events/task/task_rename/filter\x00', 0x1, 0x0) write(r0, &(0x7f0000000540)="28276d5f73638f33952a8fbf3318c5f5286df3ae4b291d6e0cc9e7961db414a8914f6df033df38d627", 0x29) 2m15.192692388s ago: executing program 37 (id=1326): mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_tracefs\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='my_tracefs/events/task/task_rename/filter\x00', 0x1, 0x0) write(r0, &(0x7f0000000540)="28276d5f73638f33952a8fbf3318c5f5286df3ae4b291d6e0cc9e7961db414a8914f6df033df38d627", 0x29) 4.01116325s ago: executing program 8 (id=2986): getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x4) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x6, 0x68, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000040)="1c3513000000", &(0x7f0000002240)=""/4103, 0x10000, 0x30520cf7f25f0c64, 0x0, 0x0}) 3.90456697s ago: executing program 8 (id=2989): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/dri/0/name\x00', 0x0, 0x0) read(r0, &(0x7f0000000100)=""/256, 0x100) 3.869225224s ago: executing program 9 (id=2990): setns(0xc9, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)="d391625b8c", 0x5}, 0x1, 0x0, 0x0, 0x81}, 0x24000800) 3.839341847s ago: executing program 8 (id=2992): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_PRIORITY={0x8}]}, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {}, [@FRA_FLOW={0x8, 0xb, 0xffffffff}]}, 0x24}}, 0x4000840) 3.775402144s ago: executing program 9 (id=2993): r0 = socket$kcm(0xa, 0x2, 0x3a) setsockopt$sock_attach_bpf(r0, 0x29, 0x21, &(0x7f0000000100), 0x4) sendmsg$kcm(r0, &(0x7f00000004c0)={&(0x7f0000000800)=@in6={0xa, 0xfffe, 0x0, @mcast2, 0x1a}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000180)="80005b020eaa4da2", 0x8}], 0x1, 0x0, 0x0, 0x900}, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x100) 3.747266777s ago: executing program 8 (id=2995): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x9, &(0x7f0000000080)={[{@barrier}, {@jqfmt_vfsv0}, {@abort}, {@auto_da_alloc}, {@noquota}, {@usrjquota, 0x2e}], [], 0x2e}, 0x1, 0x48d, &(0x7f0000000980)="$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") r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000000)={[{@redirect_dir_nofollow}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) sendfile(r0, r0, 0x0, 0x2000007ff) 3.32647965s ago: executing program 8 (id=2996): syz_mount_image$xfs(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x80, &(0x7f000001f500)={[{@discard}, {@filestreams}, {@gqnoenforce}, {@bsdgroups}, {@gqnoenforce}, {@discard}]}, 0x1, 0x97e8, &(0x7f000001f540)="$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") openat(0xffffffffffffff9c, 0x0, 0xc4842, 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f000002b280)='.\x00', 0x0, 0x100) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x8040587f, &(0x7f000002b2c0)={0x25, 0x300000000, 0xfff}) 2.944226959s ago: executing program 8 (id=2999): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x9, 0x7fff0000}]}) setreuid(0x0, 0xee00) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x401, 0x12, r0, 0x0) 2.82938032s ago: executing program 38 (id=2999): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x9, 0x7fff0000}]}) setreuid(0x0, 0xee00) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x401, 0x12, r0, 0x0) 2.815678952s ago: executing program 9 (id=3001): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="08000000040000000400000009"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0xa, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000070000008500000021000000b70000000000000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000700)="b9d5e01a991e924ccc78cbc0a3ba", 0x0, 0xe8a2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.578293876s ago: executing program 9 (id=3002): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000024c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="50000000100001042abd70000000000000000000", @ANYRES32=r1, @ANYBLOB="824900000000000028003780090021007665746800000000180002"], 0x50}, 0x1, 0x0, 0x0, 0xc10}, 0x8004) 2.255703339s ago: executing program 9 (id=3003): syz_mount_image$xfs(&(0x7f0000009740), &(0x7f0000009780)='./file1\x00', 0x0, &(0x7f0000000180)={[{@nogrpid}]}, 0x1, 0x9764, &(0x7f00000097c0)="$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") mmap$IORING_OFF_SQ_RING(0x0, 0x3ff, 0x2000001, 0x5d031, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x20) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000000)) 1.800518296s ago: executing program 3 (id=3006): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x72) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./trace/options/bin\x00', 0xe0202, 0x70) write$cgroup_subtree(r0, &(0x7f00000000c0)=ANY=[@ANYRESOCT], 0x82d7) 1.731131813s ago: executing program 7 (id=3007): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0xc0000080, 0x0, 0xd01}]}) 1.544414682s ago: executing program 3 (id=3009): setresuid(0x0, 0xee00, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x10000000) 1.408175556s ago: executing program 7 (id=3010): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000002180)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x9, 0x1c, 0x68, 0x0, 0x0, 0x11, 0x0, @private=0xa010100, @local}, {0x4e21, 0x4e20, 0x8}}}}}, 0x0) 1.316070825s ago: executing program 7 (id=3012): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b705000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="340000003b0007010000000000000000047c0000ec0000000c00018006000600800a0000100002800c0003"], 0x34}}, 0xc000) 1.253516852s ago: executing program 3 (id=3013): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0x10, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000200000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="7638300c000000000000e9000000", 0x0, 0xfeff, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.106012756s ago: executing program 7 (id=3016): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="68000000000905040000000000000000020000000900010073797a3000000000140002800600010000020000050002000600000008000500000000002c0004800800010000000001200002800c000100706f6c69637930000800020000000002080003000000001e", 0x68}], 0x1}, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="68000000010905040000000000000000020000000900010073797a3000000000140002800600010000020000050002000600000008000500000000002c0004800800010000000001200002800c000100706f6c69637930000800020005000002080003000000001e", 0x68}], 0x1}, 0x0) 1.061289341s ago: executing program 0 (id=3017): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x38, 0x7, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x20000014) 927.086945ms ago: executing program 7 (id=3018): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f00000003c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000540)={0x4, 0x0, 0x3, 0x8, 0x6, 0x8000000000000000, 0x20000001002, 0xf64, 0xfffffffd}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchown(r0, 0xee00, 0xee01) 828.720915ms ago: executing program 0 (id=3019): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000180)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000100)={r1, 0x9}, 0x8) 644.039004ms ago: executing program 3 (id=3020): r0 = io_uring_setup(0x1d40, &(0x7f0000000940)={0x0, 0xdf07, 0x40, 0x0, 0x91}) close_range(r0, 0xffffffffffffffff, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) write(r1, &(0x7f0000000000)="fa", 0xfffffdef) 629.970935ms ago: executing program 0 (id=3021): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000002a00)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x2, @dev={0xfe, 0x80, '\x00', 0x19}, 0x1}, 0x1c, &(0x7f0000001880)=[{&(0x7f0000000400)="df", 0x1}], 0x1}}], 0x1, 0x40000) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e21, @local}}}, &(0x7f00000003c0)=0x84) 628.718085ms ago: executing program 9 (id=3022): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000d80)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x6, 0x15, &(0x7f0000000f40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000001000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001040)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) 393.546799ms ago: executing program 3 (id=3023): unshare(0x22020400) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x18, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000140)='syzkaller\x00'}, 0x80) close(0x3) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000280)=@generic={0x0, r0}, 0x18) 380.370371ms ago: executing program 0 (id=3024): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000004c0)={{{@in=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x1234, 0x32}, 0x2, @in=@loopback, 0x0, 0x1}}, 0xe8) connect$inet(r0, &(0x7f0000000480)={0x2, 0x1234, @loopback}, 0x10) write(r0, &(0x7f0000000500)='hello', 0x5) 242.161655ms ago: executing program 7 (id=3025): r0 = syz_mount_image$msdos(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x8d0, &(0x7f0000000300)=ANY=[@ANYBLOB="7379735f696d6d757461626c652c00a99176bffea999ec4947785a4b3392b470a878b010acc5fde3f7c39533b111d92aa1e3cd9504b4aec083a038cd1b944d504716e6b8463de9dc9743fbe9e0ef9396a932024b904283205650ea735ae7adac50b5efe5244d737dc9515a51775b2fafbc85c9c1c8f62872a466192aae714a90990e0b07aa2b92e463ad98"], 0x1, 0x25f, &(0x7f00000003c0)="$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") r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000640)='./file0\x00', 0x1c) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000080)) 198.565029ms ago: executing program 0 (id=3026): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)={0x2c, r1, 0x1, 0x4070bd28, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}]}, 0x2c}}, 0x18) 125.230676ms ago: executing program 3 (id=3027): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0xbf) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/1/root/var\x00', 0x1ff) 0s ago: executing program 0 (id=3028): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x42200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x3a, 0x0, 0x1}]}) kernel console output (not intermixed with test programs): ANGE): vlan0: link becomes ready [ 202.084116][ T5366] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 202.160458][ T5366] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 202.221217][ T5366] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 202.266281][ T5366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 202.301331][ T5366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 202.330358][ T8606] device veth0_macvtap entered promiscuous mode [ 202.380325][ T9012] loop7: detected capacity change from 0 to 128 [ 202.440845][ T9012] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 202.506909][ T8606] device veth1_macvtap entered promiscuous mode [ 202.522788][ T9012] hpfs: filesystem error: improperly stopped [ 202.554772][ T9012] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 202.581518][ T7] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 202.592917][ T8606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.626723][ T9012] hpfs: You really don't want any checks? You are crazy... [ 202.646397][ T8606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.659086][ T9012] hpfs: Code page directory magic doesn't match (magic = 7b3184b5) [ 202.685530][ T9012] hpfs: code page support is disabled [ 202.690976][ T8606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.709003][ T9012] hpfs: hpfs_map_4sectors(): unaligned read [ 202.719101][ T8606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.735240][ T9012] hpfs: hpfs_map_4sectors(): unaligned read [ 202.741198][ T9012] hpfs: filesystem error: unable to find root dir [ 202.749818][ T8606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.770440][ T8606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.786654][ T8606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.813526][ T8606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.827314][ T9012] hpfs: hpfs_map_4sectors(): unaligned read [ 202.851487][ T7] usb 9-1: Using ep0 maxpacket: 32 [ 202.877873][ T8606] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 202.919444][ T8140] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 202.972506][ T7] usb 9-1: config 16 has an invalid interface number: 233 but max is 0 [ 202.989095][ T9023] loop3: detected capacity change from 0 to 512 [ 202.996548][ T8140] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 203.011802][ T7] usb 9-1: config 16 has no interface number 0 [ 203.028150][ T7] usb 9-1: config 16 interface 233 altsetting 8 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 203.065384][ T9023] EXT4-fs (loop3): corrupt root inode, run e2fsck [ 203.087785][ T7] usb 9-1: config 16 interface 233 has no altsetting 0 [ 203.098371][ T9023] EXT4-fs (loop3): mount failed [ 203.112446][ T8140] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 203.153519][ T8140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 203.174370][ T8606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.189931][ T8606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.205314][ T8606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.218179][ T8606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.234234][ T8606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.247216][ T8606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.258727][ T8606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.271746][ T7] usb 9-1: New USB device found, idVendor=0bfd, idProduct=0003, bcdDevice=d1.4c [ 203.282989][ T8606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.294504][ T7] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.306134][ T8606] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 203.315013][ T7] usb 9-1: Product: syz [ 203.319730][ T8140] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 203.341924][ T7] usb 9-1: Manufacturer: syz [ 203.357567][ T7] usb 9-1: SerialNumber: syz [ 203.365563][ T8140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 203.398963][ T9023] autofs4:pid:9023:autofs_fill_super: could not open pipe file descriptor [ 203.415932][ T8606] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.433786][ T8606] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.451029][ T8606] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.476535][ T8606] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.679171][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.701986][ T7] kvaser_usb 9-1:16.233: Cannot get usb endpoint(s) [ 203.719487][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.752155][ T7] usb 9-1: USB disconnect, device number 5 [ 203.809194][ T8140] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 203.864393][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.921800][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.985681][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 204.385262][ T9064] loop8: detected capacity change from 0 to 32768 [ 204.449170][ T9064] JBD2: Ignoring recovery information on journal [ 204.456797][ T9064] jbd2_journal_bmap: journal block not found at offset 32 on loop8-75 [ 204.465067][ T9064] JBD2: bad block at offset 32 [ 204.480107][ T9064] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode. [ 204.497443][ T9064] OCFS2: ERROR (device loop8): int __ocfs2_find_path(struct ocfs2_caching_info *, struct ocfs2_extent_list *, u32, path_insert_t *, void *): Owner 65 has invalid tree depth 312 in extent list [ 204.516583][ T9064] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 204.526422][ T9064] OCFS2: File system is now read-only. [ 204.532194][ T9064] (syz.8.1477,9064,0):ocfs2_find_leaf:1941 ERROR: status = -30 [ 204.539730][ T9064] (syz.8.1477,9064,0):ocfs2_get_clusters_nocache:421 ERROR: status = -30 [ 204.548165][ T9064] (syz.8.1477,9064,0):ocfs2_get_clusters:624 ERROR: status = -30 [ 204.555924][ T9064] (syz.8.1477,9064,0):ocfs2_extent_map_get_blocks:671 ERROR: status = -30 [ 204.564782][ T9064] (syz.8.1477,9064,0):ocfs2_read_virt_blocks:989 ERROR: status = -30 [ 204.573048][ T9064] (syz.8.1477,9064,0):ocfs2_read_dir_block:511 ERROR: status = -30 [ 204.580945][ T9064] (syz.8.1477,9064,0):ocfs2_find_dir_space_el:3565 ERROR: status = -5 [ 204.589127][ T9064] (syz.8.1477,9064,0):ocfs2_prepare_dir_for_insert:4372 ERROR: status = -5 [ 204.597818][ T9064] (syz.8.1477,9064,0):ocfs2_mknod:299 ERROR: status = -5 [ 204.605046][ T9064] (syz.8.1477,9064,0):ocfs2_mknod:504 ERROR: status = -5 [ 204.741141][ T7685] ocfs2: Unmounting device (7,8) on (node local) [ 204.785838][ T9076] loop0: detected capacity change from 0 to 512 [ 205.023328][ T9076] EXT4-fs (loop0): mounted filesystem without journal. Opts: resgid=0x0000000000000000,errors=remount-ro,usrjquota=,noblock_validity,usrquota,. Quota mode: writeback. [ 205.138342][ T9095] loop9: detected capacity change from 0 to 1024 [ 205.145403][ T9093] CUSE: unknown device info "ìŠxó�KJ éH+ßãÛ¤2Lh¸änLþ1Õ`†CcÝòn§õ†îì8­¨×0:©âSU™3Õ¶ië" [ 205.178814][ T9076] ext4 filesystem being mounted at /2/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 205.227007][ T9093] CUSE: unknown device info "Ù®,�°ð<Ö_e¤FÀÆ" [ 205.301459][ T9093] CUSE: unknown device info "3�ÜŸ•,²¥Ì˜õ" [ 205.351579][ T9093] CUSE: unknown device info "Jô©Ð2S Zûü !e/ëÅúãõž‘­J½+-n´¸a4¼¿\Nšÿä4¨ô" [ 205.441557][ T9093] CUSE: unknown device info "´ƒ [ 205.441557][ T9093] f𳦧ìýzóÚXÁS! [ 205.441557][ T9093] „Aäx¡Ùjª½T¾Ç”¨åw— üæšxR�É�Q÷®(hÒ�j pøVdY0¨Æ|M?2JÿúIšvö^RÎ@´å" [ 205.510483][ T9104] loop7: detected capacity change from 0 to 2048 [ 205.577626][ T9110] loop0: detected capacity change from 0 to 512 [ 205.628295][ T9093] CUSE: unknown device info "!ToÛ}Ý�&|L+U²®oæõϲ±„Ð"–¨FstVµ:׌E• gJºî‹ÂÁ<@cÁ”²ûŽ4ÊTáM˜­_“ž�á/íËV ™¨º§{»‡ò" [ 205.656044][ T9104] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 205.699841][ T9110] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 205.743924][ T9104] ext4 filesystem being mounted at /169/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 205.765196][ T9093] CUSE: unknown device info "ÊþwhU~‘ÄÎV¥ß¶âݸFsºXý,xækƒÅq¾é/òQ]Ñ3•ÞH" [ 205.790414][ T9110] EXT4-fs (loop0): inline encryption not supported [ 205.821113][ T9110] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 205.834410][ T9093] CUSE: zero length info key specified [ 205.918428][ T9110] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1062: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 206.078428][ T9110] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.1492: bg 0: block 248: padding at end of block bitmap is not set [ 206.198682][ T9110] Quota error (device loop0): write_blk: dquota write failed [ 206.247166][ T9110] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 206.307248][ T9110] EXT4-fs error (device loop0): ext4_acquire_dquot:6236: comm syz.0.1492: Failed to acquire dquot type 1 [ 206.441091][ T9110] EXT4-fs (loop0): 1 truncate cleaned up [ 206.481240][ T9110] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,inlinecrypt,nombcache,,errors=continue. Quota mode: writeback. [ 206.565587][ T9156] device geneve2 entered promiscuous mode [ 206.896397][ T9170] loop0: detected capacity change from 0 to 128 [ 207.019686][ T9170] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 207.118209][ T9170] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 207.215389][ T9170] ext2 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 207.647543][ T9205] loop0: detected capacity change from 0 to 8 [ 207.814101][ T9205] SQUASHFS error: xz decompression failed, data probably corrupt [ 207.867776][ T9205] SQUASHFS error: Failed to read block 0x108: -5 [ 207.910223][ T9205] SQUASHFS error: Unable to read metadata cache entry [106] [ 207.966623][ T9205] SQUASHFS error: Unable to read inode 0x11f [ 208.018528][ T9153] loop3: detected capacity change from 0 to 32768 [ 208.255298][ T9153] XFS (loop3): Mounting V5 Filesystem [ 208.409784][ T9153] XFS (loop3): Ending clean mount [ 208.555270][ T26] audit: type=1800 audit(1793503695.516:39): pid=9153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1505" name="file1" dev="loop3" ino=4422 res=0 errno=0 [ 208.726857][ T4195] XFS (loop3): Unmounting Filesystem [ 208.936423][ T9277] loop9: detected capacity change from 0 to 256 [ 209.020829][ T9277] exFAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 209.110656][ T9277] exFAT-fs (loop9): Medium has reported failures. Some data may be lost. [ 209.170081][ T9277] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 209.226750][ T9289] program syz.8.1555 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 209.285049][ T4341] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 209.373072][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 209.681661][ T4341] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 209.718955][ T4341] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 209.735814][ T9307] loop0: detected capacity change from 0 to 512 [ 209.768347][ T9307] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 209.872313][ T9307] EXT4-fs (loop0): 1 truncate cleaned up [ 209.908368][ T9307] EXT4-fs (loop0): mounted filesystem without journal. Opts: nojournal_checksum,jqfmt=vfsold,errors=remount-ro,usrquota,usrquota,. Quota mode: writeback. [ 209.941704][ T4341] usb 8-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 209.970981][ T4341] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.008057][ T4341] usb 8-1: Product: syz [ 210.039371][ T4341] usb 8-1: Manufacturer: syz [ 210.069201][ T4341] usb 8-1: SerialNumber: syz [ 210.107249][ T4341] usb 8-1: config 0 descriptor?? [ 210.151666][ T9282] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 210.211508][ T9282] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 210.464787][ T9320] loop3: detected capacity change from 0 to 8192 [ 210.476149][ T9282] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 210.534626][ T9282] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 210.605588][ T9335] device erspan0 entered promiscuous mode [ 210.631820][ T9337] loop8: detected capacity change from 0 to 64 [ 210.874824][ T9346] loop0: detected capacity change from 0 to 1024 [ 210.918603][ T7922] input: syz0 as /devices/virtual/misc/uhid/D1BC:0B05:8502.0005/input/input11 [ 210.964781][ T9346] EXT4-fs (loop0): mounted filesystem without journal. Opts: norecovery,quota,,errors=continue. Quota mode: writeback. [ 211.015283][ T7922] hid-generic D1BC:0B05:8502.0005: input,hidraw0: HID v0.00 Mouse [syz0] on syz1 [ 211.051647][ T4341] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 211.274702][ T4341] dm9601 8-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 211.317867][ T4341] usb 8-1: USB disconnect, device number 4 [ 211.413191][ T4796] usb 10-1: new full-speed USB device number 2 using dummy_hcd [ 211.732724][ T4341] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 211.861564][ T4796] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 211.885673][ T4796] usb 10-1: can't read configurations, error -71 [ 212.081049][ T9389] tun0: tun_chr_ioctl cmd 1074025681 [ 212.113681][ T4341] usb 9-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 212.140640][ T4341] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.187369][ T4341] usb 9-1: config 0 descriptor?? [ 212.243642][ T4341] cp210x 9-1:0.0: cp210x converter detected [ 212.363831][ T9397] ip_tables: iptables: counters copy to user failed while replacing table [ 212.577180][ T9386] loop7: detected capacity change from 0 to 32768 [ 212.636597][ T9386] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop7 scanned by syz.7.1581 (9386) [ 212.671492][ T4341] cp210x 9-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 212.700014][ T9412] loop3: detected capacity change from 0 to 8 [ 212.743649][ T4341] usb 9-1: cp210x converter now attached to ttyUSB0 [ 212.763255][ T9386] BTRFS info (device loop7): using blake2b (blake2b-256-generic) checksum algorithm [ 212.819102][ T9412] SQUASHFS error: lzo decompression failed, data probably corrupt [ 212.863631][ T9386] BTRFS info (device loop7): use zlib compression, level 3 [ 212.907807][ T9412] SQUASHFS error: Failed to read block 0x62b: -5 [ 212.916664][ T9386] BTRFS info (device loop7): using free space tree [ 212.943474][ T4796] usb 9-1: USB disconnect, device number 6 [ 212.963408][ T9386] BTRFS info (device loop7): has skinny extents [ 212.982712][ T9412] SQUASHFS error: Unable to read metadata cache entry [629] [ 213.006944][ T4796] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 213.069833][ T4796] cp210x 9-1:0.0: device disconnected [ 213.078716][ T9412] SQUASHFS error: Unable to read inode 0x11f [ 213.169462][ T9386] BTRFS info (device loop7): enabling ssd optimizations [ 213.327909][ T9386] BTRFS error (device loop7): target device is invalid! [ 213.753187][ T9465] Failed to get privilege flags for destination (handle=0x2:0x1) [ 214.101734][ T9461] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1598'. [ 214.320059][ T9478] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 214.343317][ T9450] loop0: detected capacity change from 0 to 32768 [ 214.440017][ T9450] XFS (loop0): Mounting V5 Filesystem [ 214.560795][ T9450] XFS (loop0): Ending clean mount [ 214.574809][ T9494] loop3: detected capacity change from 0 to 512 [ 214.616386][ T9496] kAFS: Invalid Command on /proc/fs/afs/cells file [ 214.697015][ T9494] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #2: comm syz.3.1604: missing EA_INODE flag [ 214.735027][ T8606] XFS (loop0): Unmounting Filesystem [ 214.881508][ T9494] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.1604: error while reading EA inode 2 err=-117 [ 214.993733][ T9515] rnbd_client L125: Can't parse path i: -93 [ 215.017957][ T9494] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: comm syz.3.1604: inode #3584: comm syz.3.1604: iget: illegal inode # [ 215.169836][ T9494] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.1604: error while reading EA inode 3584 err=-117 [ 215.338201][ T9494] EXT4-fs (loop3): 1 orphan inode deleted [ 215.354015][ T9531] loop9: detected capacity change from 0 to 256 [ 215.374735][ T9494] EXT4-fs (loop3): mounted filesystem without journal. Opts: nombcache,nogrpid,,errors=continue. Quota mode: writeback. [ 215.437886][ T9531] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x5d6de3ec, utbl_chksum : 0xe619d30d) [ 216.295848][ T7] kernel write not supported for file /input/event2 (pid: 7 comm: kworker/0:0) [ 216.644966][ T9609] loop8: detected capacity change from 0 to 512 [ 216.734133][ T9609] EXT4-fs (loop8): Ignoring removed orlov option [ 216.756260][ T9613] loop7: detected capacity change from 0 to 256 [ 216.834867][ T9609] EXT4-fs (loop8): mounted filesystem without journal. Opts: noload,orlov,quota,,errors=continue. Quota mode: writeback. [ 216.855139][ T9613] exFAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 216.939748][ T9613] exFAT-fs (loop7): Medium has reported failures. Some data may be lost. [ 216.962810][ T9609] ext4 filesystem being mounted at /100/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 216.975405][ T9625] loop0: detected capacity change from 0 to 128 [ 217.032601][ T9613] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 217.099836][ T9625] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpjquota=,dioread_lock,nobarrier,,errors=continue. Quota mode: none. [ 217.217602][ T9625] ext4 filesystem being mounted at /29/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 217.495721][ T26] audit: type=1400 audit(1793503704.456:40): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="foo" pid=9644 comm="syz.7.1653" name="foo" offset=55 [ 217.664255][ T9655] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1657'. [ 217.740308][ T9655] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1657'. [ 217.815030][ T9662] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 217.895965][ T9665] loop0: detected capacity change from 0 to 1024 [ 217.941915][ T9662] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.950808][ T9662] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.146073][ T5366] hfsplus: b-tree write err: -5, ino 25 [ 218.200121][ T5366] hfsplus: b-tree write err: -5, ino 4 [ 218.237464][ T5366] hfsplus: b-tree write err: -5, ino 2 [ 218.447761][ T9691] netlink: 1 bytes leftover after parsing attributes in process `syz.7.1672'. [ 218.537929][ T9695] loop0: detected capacity change from 0 to 512 [ 218.614851][ T9695] EXT4-fs (loop0): Ignoring removed bh option [ 218.681687][ T9695] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 218.748275][ T9695] EXT4-fs (loop0): 1 truncate cleaned up [ 218.775732][ T9695] EXT4-fs (loop0): mounted filesystem without journal. Opts: bh,,errors=continue. Quota mode: none. [ 218.910048][ T9715] loop9: detected capacity change from 0 to 64 [ 218.925329][ T9712] loop7: detected capacity change from 0 to 2048 [ 219.054054][ T9715] hfs: get root inode failed [ 219.134269][ T9712] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 219.381181][ T26] audit: type=1400 audit(1793503706.336:41): apparmor="STATUS" info="profile missing flags" error=-71 profile="unconfined" name="/" pid=9725 comm="syz.0.1682" name="/" offset=33 [ 219.430617][ T9667] loop3: detected capacity change from 0 to 32768 [ 219.554986][ T9667] XFS (loop3): Mounting V5 Filesystem [ 219.735776][ T9667] XFS (loop3): Ending clean mount [ 219.782117][ T4277] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 219.949199][ T4195] XFS (loop3): Unmounting Filesystem [ 220.171616][ T4277] usb 10-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 220.230538][ T4277] usb 10-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 220.298345][ T4277] usb 10-1: config 0 interface 0 has no altsetting 0 [ 220.328479][ T4277] usb 10-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 220.364527][ T4277] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.406846][ T4277] usb 10-1: config 0 descriptor?? [ 220.600283][ T9787] loop0: detected capacity change from 0 to 512 [ 220.705175][ T9787] EXT4-fs error (device loop0): ext4_orphan_get:1410: inode #15: comm syz.0.1701: iget: bad i_size value: 38620345925642 [ 220.790275][ T9787] EXT4-fs error (device loop0): ext4_orphan_get:1415: comm syz.0.1701: couldn't read orphan inode 15 (err -117) [ 220.846338][ T9787] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 220.974074][ T4277] hid-picolcd 0003:04D8:F002.0006: No report with id 0xf3 found [ 221.013410][ T4277] hid-picolcd 0003:04D8:F002.0006: No report with id 0xf4 found [ 221.106589][ T4219] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm kworker/u4:4: bg 0: block 5: invalid block bitmap [ 221.121515][ C0] hid-picolcd 0003:04D8:F002.0006: invalid size value (65) for picolcd raw event (0) [ 221.204883][ T4219] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 8 with max blocks 16 with error 28 [ 221.288396][ T4219] EXT4-fs (loop0): This should not happen!! Data will be lost [ 221.288396][ T4219] [ 221.336163][ T4796] usb 10-1: USB disconnect, device number 4 [ 221.360998][ T4219] EXT4-fs (loop0): Total free blocks count 0 [ 221.414485][ T4219] EXT4-fs (loop0): Free/Dirty block details [ 221.438665][ T9816] loop7: detected capacity change from 0 to 8192 [ 221.449980][ T4219] EXT4-fs (loop0): free_blocks=0 [ 221.478018][ T4219] EXT4-fs (loop0): dirty_blocks=16 [ 221.515812][ T4219] EXT4-fs (loop0): Block reservation details [ 221.548281][ T4219] EXT4-fs (loop0): i_reserved_data_blocks=16 [ 221.900788][ T9816] loop7: p1 < > p2 p4 < p5 > [ 221.955555][ T9816] loop7: partition table partially beyond EOD, truncated [ 221.991320][ T9840] loop9: detected capacity change from 0 to 128 [ 222.070847][ T9816] loop7: p1 start 134217728 is beyond EOD, truncated [ 222.098947][ T9812] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 222.127507][ T9816] loop7: p2 size 591360 extends beyond EOD, truncated [ 222.236645][ T9816] loop7: p5 size 591360 extends beyond EOD, truncated [ 222.352743][ T9851] loop8: detected capacity change from 0 to 256 [ 222.463222][ T9851] exFAT-fs (loop8): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xdd63664a, utbl_chksum : 0xe619d30d) [ 222.677250][ T4520] udevd[4520]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory [ 222.689089][ T4516] udevd[4516]: inotify_add_watch(7, /dev/loop7p5, 10) failed: No such file or directory [ 222.729899][ T4521] udevd[4521]: inotify_add_watch(7, /dev/loop7p2, 10) failed: No such file or directory [ 222.752019][ T9863] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input15 [ 222.798645][ T9857] loop0: detected capacity change from 0 to 8192 [ 223.518046][ T9897] loop9: detected capacity change from 0 to 128 [ 223.625116][ T9897] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 223.691287][ T9897] ext4 filesystem being mounted at /129/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 223.747606][ T9835] loop3: detected capacity change from 0 to 32768 [ 223.859542][ T9835] XFS (loop3): Mounting V5 Filesystem [ 223.986702][ T9835] XFS (loop3): Ending clean mount [ 224.174188][ T4277] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 224.246504][ T4195] XFS (loop3): Unmounting Filesystem [ 224.404421][ T9946] loop9: detected capacity change from 0 to 256 [ 224.441584][ T4277] usb 9-1: Using ep0 maxpacket: 8 [ 224.485925][ T9946] exFAT-fs (loop9): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 224.564026][ T4277] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 224.594292][ T4277] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 224.668731][ T4277] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 224.719850][ T4277] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 224.775634][ T4277] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 224.822263][ T4277] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 224.838139][ T9957] device-mapper: verity: blake2b-256 using implementation "blake2b-256-generic" [ 224.857512][ T4277] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.874416][ T9957] device-mapper: table: 248:9: verity: Invalid root digest [ 224.928692][ T9957] device-mapper: ioctl: error adding target to table [ 225.151521][ T4277] usb 9-1: GET_CAPABILITIES returned 0 [ 225.157020][ T4277] usbtmc 9-1:16.0: can't read capabilities [ 225.355482][ T4277] usb 9-1: USB disconnect, device number 7 [ 225.442782][ T4783] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 225.786611][ T9975] loop7: detected capacity change from 0 to 32768 [ 225.863065][ T9975] XFS (loop7): Mounting V5 Filesystem [ 225.992095][ T4783] usb 10-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 226.031520][ T4783] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.071072][ T4783] usb 10-1: Product: syz [ 226.094704][ T4783] usb 10-1: Manufacturer: syz [ 226.099412][ T4783] usb 10-1: SerialNumber: syz [ 226.157510][ T4783] usb 10-1: config 0 descriptor?? [ 226.189806][ T9975] XFS (loop7): Ending clean mount [ 226.210006][ T9975] XFS (loop7): Quotacheck needed: Please wait. [ 226.228705][ T4783] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 226.287729][ T4783] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 226.368188][ T4783] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 226.428486][ T4783] usb 10-1: media controller created [ 226.482849][ T4783] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 226.612870][ T9975] XFS (loop7): Quotacheck: Done. [ 226.637424][ T4783] DVB: Unable to find symbol mt352_attach() [ 226.757674][ T4783] DVB: Unable to find symbol nxt6000_attach() [ 226.784241][ T4783] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 226.860405][T10006] loop8: detected capacity change from 0 to 32768 [ 226.875860][ T6353] XFS (loop7): Unmounting Filesystem [ 226.882356][ T4783] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.9/usb10/10-1/input/input16 [ 226.944160][T10006] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop8 scanned by syz.8.1757 (10006) [ 226.961908][ T4783] dvb-usb: schedule remote query interval to 1000 msecs. [ 227.010640][ T4783] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 227.072958][T10030] tun0: tun_chr_ioctl cmd 1074025675 [ 227.084715][ T4783] dvb-usb: bulk message failed: -22 (7/0) [ 227.110066][T10032] loop3: detected capacity change from 0 to 2048 [ 227.116670][T10030] tun0: persist disabled [ 227.120934][ T4783] dvb-usb: bulk message failed: -22 (7/0) [ 227.156986][ T4783] usb 10-1: USB disconnect, device number 5 [ 227.206988][T10006] BTRFS info (device loop8): using crc32c (crc32c-intel) checksum algorithm [ 227.282810][T10032] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 227.334436][ T4783] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 227.351499][T10006] BTRFS info (device loop8): metadata ratio 2 [ 227.357666][T10006] BTRFS info (device loop8): force zlib compression, level 3 [ 227.448432][T10006] BTRFS info (device loop8): enabling auto defrag [ 227.508109][T10006] BTRFS info (device loop8): max_inline at 0 [ 227.556629][T10006] BTRFS info (device loop8): using free space tree [ 227.572646][ T26] audit: type=1400 audit(1793503714.536:42): apparmor="STATUS" info="failed to unpack profile capabilities" error=-71 profile="unconfined" name="p" pid=10042 comm="syz.0.1764" name="p" offset=74 [ 227.615801][T10006] BTRFS info (device loop8): has skinny extents [ 227.859598][ T26] audit: type=1800 audit(1793503714.816:43): pid=10006 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1757" name="file1" dev="loop8" ino=260 res=0 errno=0 [ 228.156393][ T4521] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 9 /dev/loop8 scanned by udevd (4521) [ 228.361568][T10085] netlink: 'syz.0.1774': attribute type 32 has an invalid length. [ 228.835131][T10097] loop9: detected capacity change from 0 to 4096 [ 228.885129][T10107] loop8: detected capacity change from 0 to 64 [ 229.085082][T10097] ntfs3: loop9: Failed to load $Extend. [ 229.292949][T10119] loop8: detected capacity change from 0 to 16 [ 229.406781][T10119] erofs: (device loop8): mounted with root inode @ nid 36. [ 229.522546][T10119] erofs: (device loop8): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 229.569507][T10125] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 229.640360][T10119] erofs: (device loop8): z_erofs_readpage: failed to read, err [-117] [ 229.917361][T10135] loop3: detected capacity change from 0 to 512 [ 229.968274][T10142] loop0: detected capacity change from 0 to 256 [ 229.980287][T10138] loop8: detected capacity change from 0 to 2048 [ 230.129546][T10135] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,bsdgroups,quota,,errors=continue. Quota mode: writeback. [ 230.156787][T10138] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 230.220962][T10138] ext4 filesystem being mounted at /128/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 230.319045][T10135] ext4 filesystem being mounted at /322/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 230.342128][T10158] device geneve2 entered promiscuous mode [ 230.567441][T10170] loop7: detected capacity change from 0 to 8 [ 231.081481][ T4784] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 231.150380][T10202] vxcan0: tx address claim with dest, not broadcast [ 231.268133][T10206] loop9: detected capacity change from 0 to 4096 [ 231.413693][T10221] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 231.481542][ T4784] usb 8-1: config 1 has an invalid descriptor of length 216, skipping remainder of the config [ 231.541507][ T4784] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 231.600194][ T4784] usb 8-1: config 1 has no interface number 0 [ 231.624500][T10232] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1822'. [ 231.637275][ T4784] usb 8-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 231.668912][T10232] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 231.835602][T10239] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1824'. [ 231.846644][ T4784] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 231.881431][ T4784] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.946010][ T4784] usb 8-1: Product: syz [ 231.950195][ T4784] usb 8-1: Manufacturer: syz [ 231.991765][ T4784] usb 8-1: SerialNumber: syz [ 232.062241][ T4784] usb 8-1: selecting invalid altsetting 1 [ 232.201310][T10257] loop3: detected capacity change from 0 to 256 [ 232.508071][T10274] loop9: detected capacity change from 0 to 512 [ 232.549913][T10273] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 232.654829][T10273] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 232.724340][ T4784] cdc_ncm 8-1:1.1: SET_CRC_MODE failed [ 232.765386][ T4784] usb 8-1: selecting invalid altsetting 1 [ 232.810999][ T4784] cdc_ncm 8-1:1.1: bind() failure [ 232.835812][T10274] EXT4-fs (loop9): Test dummy encryption mode enabled [ 232.867112][T10274] EXT4-fs (loop9): Ignoring removed nobh option [ 232.885553][ T4784] usb 8-1: USB disconnect, device number 5 [ 232.921898][T10274] EXT4-fs (loop9): Test dummy encryption mode enabled [ 232.984718][T10274] EXT4-fs (loop9): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 233.083936][T10274] EXT4-fs (loop9): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable=0x0000000000000000,dioread_nolock,nobh,nojournal_checksum,minixdf,norecovery,errors=remount-ro,lazytime,test_dummy_encryption,max_dir_size_kb=0x0000000000000008,. Quota mode: none. [ 233.110217][ C0] vkms_vblank_simulate: vblank timer overrun [ 233.195977][T10294] nfsd: exp_rootfh path not found \ [ 233.968553][T10336] set_capacity_and_notify: 2 callbacks suppressed [ 233.968564][T10336] loop3: detected capacity change from 0 to 64 [ 234.170886][T10345] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 234.178487][T10345] IPv6: NLM_F_CREATE should be set when creating new route [ 234.494493][T10355] loop7: detected capacity change from 0 to 2048 [ 234.590617][T10355] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 234.618227][T10322] loop8: detected capacity change from 0 to 32768 [ 234.645293][T10355] ext4 filesystem being mounted at /239/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 234.676868][ C0] vkms_vblank_simulate: vblank timer overrun [ 234.778477][T10322] find_entry called with index = 0 [ 234.821565][T10322] find_entry called with index >= next_index [ 234.879422][T10322] find_entry called with index >= next_index [ 234.916809][T10322] find_entry called with index = 0 [ 234.929725][T10375] loop3: detected capacity change from 0 to 256 [ 234.961195][T10322] find_entry called with index >= next_index [ 235.015657][T10322] find_entry called with index >= next_index [ 235.044167][T10375] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 235.135778][T10322] ERROR: (device loop8): jfs_readdir: JFS:Dtree error: ino = 2, bn=48, index = 4 [ 235.135778][T10322] [ 235.182172][T10375] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 235.270068][T10322] ERROR: (device loop8): jfs_readdir: JFS:Dtree error: ino = 2, bn=48, index = 5 [ 235.270068][T10322] [ 235.311310][T10375] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 235.900656][T10408] loop7: detected capacity change from 0 to 1024 [ 235.985034][T10408] EXT4-fs (loop7): mounted filesystem without journal. Opts: errors=remount-ro,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,. Quota mode: none. [ 236.065625][T10408] ext4 filesystem being mounted at /244/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 236.163355][ T4341] usb 9-1: new low-speed USB device number 8 using dummy_hcd [ 236.388903][T10436] loop7: detected capacity change from 0 to 256 [ 236.488193][T10436] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x4fc69fa9, utbl_chksum : 0xe619d30d) [ 236.561577][ T4341] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 8, setting to 0 [ 236.619400][ T4341] usb 9-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 32, setting to 0 [ 236.656776][T10448] loop0: detected capacity change from 0 to 736 [ 236.941581][ T4341] usb 9-1: string descriptor 0 read error: -22 [ 236.960267][ T4341] usb 9-1: New USB device found, idVendor=1397, idProduct=00bd, bcdDevice= 0.40 [ 237.012028][T10460] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 237.032761][ T4341] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.190013][ T4341] usb 9-1: invalid MIDI EP [ 237.249427][ T4341] usb 9-1: snd-bcd2000: error during probing [ 237.290781][ T4341] snd-bcd2000: probe of 9-1:1.1 failed with error -22 [ 237.333109][ T4341] usb 9-1: invalid MIDI EP [ 237.356119][ T4341] usb 9-1: snd-bcd2000: error during probing [ 237.380780][ T4341] snd-bcd2000: probe of 9-1:1.2 failed with error -22 [ 237.396785][T10484] scsi_strcpy_devinfo: model string '�¡w�|a•¥ä‹Áæu“‘¤NÀÓ¤1žœ�ópEwõ‰�zdz' is too long [ 237.433945][ T4341] usb 9-1: USB disconnect, device number 8 [ 237.635024][T10491] loop7: detected capacity change from 0 to 764 [ 238.262772][T10518] overlayfs: upper fs does not support tmpfile. [ 238.474113][T10531] tap0: tun_chr_ioctl cmd 35111 [ 238.906782][T10500] loop7: detected capacity change from 0 to 40427 [ 238.969412][T10500] F2FS-fs (loop7): Invalid SB checksum offset: 0 [ 239.018808][T10500] F2FS-fs (loop7): Can't find valid F2FS filesystem in 2th superblock [ 239.122403][T10500] F2FS-fs (loop7): invalid crc value [ 239.172404][T10500] F2FS-fs (loop7): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 239.392450][T10556] loop9: detected capacity change from 0 to 64 [ 239.451453][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 239.501979][T10500] F2FS-fs (loop7): Try to recover 2th superblock, ret: 0 [ 239.558358][T10500] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 239.607902][T10561] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.626937][T10539] loop0: detected capacity change from 0 to 32768 [ 239.776371][T10539] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.1921 (10539) [ 239.804910][ T26] audit: type=1800 audit(1793503726.766:44): pid=10500 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1907" name="file0" dev="loop7" ino=10 res=0 errno=0 [ 239.825355][ C0] vkms_vblank_simulate: vblank timer overrun [ 239.964966][T10539] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 240.051450][T10539] BTRFS info (device loop0): disabling tree log [ 240.057744][T10539] BTRFS info (device loop0): using free space tree [ 240.141256][T10539] BTRFS info (device loop0): has skinny extents [ 240.374757][T10539] BTRFS info (device loop0): enabling ssd optimizations [ 240.608370][T10500] attempt to access beyond end of device [ 240.608370][T10500] loop7: rw=2049, want=57344, limit=40427 [ 240.860403][T10500] attempt to access beyond end of device [ 240.860403][T10500] loop7: rw=2049, want=51672, limit=40427 [ 241.116807][T10574] loop8: detected capacity change from 0 to 32768 [ 241.329329][T10574] XFS (loop8): Mounting V5 Filesystem [ 241.352947][ T6353] attempt to access beyond end of device [ 241.352947][ T6353] loop7: rw=2049, want=45104, limit=40427 [ 241.522821][T10574] XFS (loop8): Ending clean mount [ 241.564478][T10574] XFS (loop8): Quotacheck needed: Please wait. [ 241.731468][T10574] XFS (loop8): Quotacheck: Done. [ 241.747596][T10635] loop9: detected capacity change from 0 to 64 [ 241.982025][T10635] hfs: request for non-existent node 131072 in B*Tree [ 242.077150][T10635] hfs: request for non-existent node 131072 in B*Tree [ 242.129704][ T7685] XFS (loop8): Unmounting Filesystem [ 242.248953][T10644] loop0: detected capacity change from 0 to 8192 [ 242.518387][T10655] loop9: detected capacity change from 0 to 256 [ 242.604571][T10655] exfat: Deprecated parameter 'utf8' [ 242.669911][T10655] exfat: Deprecated parameter 'namecase' [ 242.732193][T10534] ftl_cs: FTL header not found. [ 242.755086][T10655] exfat: Deprecated parameter 'namecase' [ 242.873385][T10655] exFAT-fs (loop9): failed to load upcase table (idx : 0x0001fe89, chksum : 0x9420891b, utbl_chksum : 0xe619d30d) [ 243.122706][T10534] phram: test device: 0x40000000 at 0x400000000 for erasesize 0x1000 [ 243.556845][T10701] netlink: 'syz.8.1939': attribute type 12 has an invalid length. [ 243.613625][T10701] netlink: 'syz.8.1939': attribute type 29 has an invalid length. [ 243.686338][T10701] netlink: 148 bytes leftover after parsing attributes in process `syz.8.1939'. [ 243.732459][T10707] loop9: detected capacity change from 0 to 764 [ 243.751429][T10701] netlink: 'syz.8.1939': attribute type 1 has an invalid length. [ 243.814679][T10708] loop7: detected capacity change from 0 to 4096 [ 243.850355][T10701] netlink: 'syz.8.1939': attribute type 2 has an invalid length. [ 243.919190][T10703] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1951'. [ 244.044626][T10715] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 244.142361][T10708] NILFS (loop7): nilfs_sufile_do_free: segment 9 is already clean [ 244.805254][T10755] netem: incorrect gi model size [ 244.810756][T10755] netem: change failed [ 244.881072][T10759] loop7: detected capacity change from 0 to 512 [ 244.984569][T10759] EXT4-fs error (device loop7): ext4_validate_block_bitmap:429: comm syz.7.1974: bg 0: block 5: invalid block bitmap [ 245.070149][T10759] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 245.085938][T10771] netlink: 'syz.0.1976': attribute type 1 has an invalid length. [ 245.128653][T10759] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #11: comm syz.7.1974: invalid indirect mapped block 3 (level 2) [ 245.224797][T10759] EXT4-fs (loop7): 1 orphan inode deleted [ 245.268847][T10759] EXT4-fs (loop7): 1 truncate cleaned up [ 245.301064][T10779] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1980'. [ 245.314005][T10759] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 245.600778][T10792] loop8: detected capacity change from 0 to 256 [ 245.661267][T10792] exfat: Deprecated parameter 'namecase' [ 245.767685][T10792] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 246.289145][T10828] loop0: detected capacity change from 0 to 1024 [ 246.334084][ T4284] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 246.363762][ T4341] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 246.400924][T10828] hfsplus: invalid length 32517 has been corrected to 255 [ 246.631655][ T4341] usb 10-1: Using ep0 maxpacket: 32 [ 246.731652][ T4284] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 246.761553][ T4341] usb 10-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 246.789217][ T4284] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 246.839961][ T4341] usb 10-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 10 [ 246.879070][ T4284] usb 9-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 246.916928][T10846] loop7: detected capacity change from 0 to 8192 [ 246.923686][ T4341] usb 10-1: config 0 interface 0 has no altsetting 0 [ 246.930391][ T4341] usb 10-1: New USB device found, idVendor=05ac, idProduct=021c, bcdDevice= 0.00 [ 246.957187][ T4284] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.014546][T10846] REISERFS (device loop7): found reiserfs format "3.5" with non-standard journal [ 247.032115][ T4284] usb 9-1: config 0 descriptor?? [ 247.055127][ T4341] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.073745][T10846] REISERFS (device loop7): using ordered data mode [ 247.080251][T10846] reiserfs: using flush barriers [ 247.124788][ T4341] usb 10-1: config 0 descriptor?? [ 247.164120][T10846] REISERFS (device loop7): journal params: device loop7, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 247.207430][ T9] hfsplus: b-tree write err: -5, ino 20 [ 247.254057][T10846] REISERFS (device loop7): checking transaction log (loop7) [ 247.291575][ T4783] Bluetooth: hci3: command 0x0406 tx timeout [ 247.310204][T10846] REISERFS (device loop7): Using r5 hash to sort names [ 247.339806][T10846] REISERFS (device loop7): Created .reiserfs_priv - reserved for xattr storage. [ 247.548023][ T4284] playstation 0003:054C:0DF2.0007: unknown main item tag 0x0 [ 247.595347][ T4284] playstation 0003:054C:0DF2.0007: unknown main item tag 0x0 [ 247.632598][ T4341] apple 0003:05AC:021C.0008: unknown main item tag 0x0 [ 247.650020][ T4284] playstation 0003:054C:0DF2.0007: unknown main item tag 0x0 [ 247.669212][ T4341] apple 0003:05AC:021C.0008: unknown main item tag 0x0 [ 247.687925][ T4284] playstation 0003:054C:0DF2.0007: unknown main item tag 0x0 [ 247.708345][ T4341] apple 0003:05AC:021C.0008: unexpected long global item [ 247.730724][ T4284] playstation 0003:054C:0DF2.0007: unknown main item tag 0x0 [ 247.752191][ T4341] apple 0003:05AC:021C.0008: parse failed [ 247.784455][ T4284] playstation 0003:054C:0DF2.0007: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.8-1/input0 [ 247.796819][ T4341] apple: probe of 0003:05AC:021C.0008 failed with error -22 [ 247.853915][ T4341] usb 10-1: USB disconnect, device number 6 [ 247.971562][ T4284] playstation 0003:054C:0DF2.0007: Invalid reportID received, expected 9 got 0 [ 248.024620][ T4284] playstation 0003:054C:0DF2.0007: Failed to retrieve DualSense pairing info: -22 [ 248.074160][ T4284] playstation 0003:054C:0DF2.0007: Failed to get MAC address from DualSense [ 248.091915][T10882] block2mtd: too many arguments [ 248.134136][ T4284] playstation 0003:054C:0DF2.0007: Failed to create dualsense. [ 248.194764][ T4284] playstation: probe of 0003:054C:0DF2.0007 failed with error -22 [ 248.243321][ T4284] usb 9-1: USB disconnect, device number 9 [ 248.366220][T10892] netlink: 203516 bytes leftover after parsing attributes in process `syz.7.2012'. [ 248.399008][T10888] fido_id[10888]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 248.460715][T10892] netlink: zone id is out of range [ 248.488460][T10892] netlink: zone id is out of range [ 248.521087][T10892] netlink: zone id is out of range [ 248.565055][T10892] netlink: zone id is out of range [ 248.594994][T10892] netlink: zone id is out of range [ 248.620103][T10892] netlink: zone id is out of range [ 248.669709][T10892] netlink: zone id is out of range [ 248.697861][T10892] netlink: zone id is out of range [ 248.727000][T10892] netlink: zone id is out of range [ 248.768925][T10892] netlink: zone id is out of range [ 249.372502][T10939] loop8: detected capacity change from 0 to 2048 [ 249.452089][T10946] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2029'. [ 249.474517][T10939] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 250.243828][T10985] sctp: [Deprecated]: syz.9.2043 (pid 10985) Use of struct sctp_assoc_value in delayed_ack socket option. [ 250.243828][T10985] Use struct sctp_sack_info instead [ 250.574387][T11004] netlink: 144 bytes leftover after parsing attributes in process `syz.8.2052'. [ 250.680724][T11008] sd 0:0:1:0: PR command failed: 2 [ 250.722773][T11008] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 250.780679][T11008] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 251.367063][ T26] audit: type=1400 audit(1793503738.326:45): apparmor="STATUS" info="profile missing flags" error=-71 profile="unconfined" name="foo" pid=11040 comm="syz.0.2067" name="foo" offset=35 [ 251.531547][ T4341] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 251.741592][ T4284] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 251.757439][T11070] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 251.757439][T11070] The task syz.0.2076 (11070) triggered the difference, watch for misbehavior. [ 251.861578][ T4783] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 251.921572][ T4341] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 251.954845][ T4341] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 251.989814][ T4341] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 252.024845][ T4341] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 252.122697][ T4783] usb 10-1: Using ep0 maxpacket: 32 [ 252.133484][ T4284] usb 9-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 252.175206][ T4284] usb 9-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 252.191613][ T4341] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 252.216408][ T4341] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 252.244901][ T4284] usb 9-1: config 0 interface 0 has no altsetting 0 [ 252.269757][ T4341] usb 4-1: Product: syz [ 252.274219][ T4783] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 252.296035][ T4341] usb 4-1: Manufacturer: syz [ 252.301241][ T4284] usb 9-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 252.315792][ T4783] usb 10-1: config 0 has no interface number 0 [ 252.351262][ T4284] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.373584][ T4341] cdc_wdm 4-1:1.0: skipping garbage [ 252.378793][ T4341] cdc_wdm 4-1:1.0: skipping garbage [ 252.404743][ T4284] usb 9-1: config 0 descriptor?? [ 252.435361][ T4341] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 252.461053][ T4341] cdc_wdm 4-1:1.0: Unknown control protocol [ 252.503342][ T4783] usb 10-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 252.538506][ T4783] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.568882][ T4783] usb 10-1: Product: syz [ 252.586237][T11087] loop0: detected capacity change from 0 to 512 [ 252.602086][ T4783] usb 10-1: Manufacturer: syz [ 252.616426][ T4783] usb 10-1: SerialNumber: syz [ 252.662451][ T4783] usb 10-1: config 0 descriptor?? [ 252.687019][T11087] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 252.733347][T11087] ext4 filesystem being mounted at /117/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 252.745458][ T4783] usb 10-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 252.767329][ T4783] usb 10-1: selecting invalid altsetting 1 [ 252.788865][ T4783] usb 10-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 252.839437][ T4783] usb 10-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 252.881048][ T4783] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 252.910706][ T4783] usb 10-1: media controller created [ 252.941203][ T4783] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 252.994057][ T4284] hid-picolcd 0003:04D8:F002.0009: No report with id 0xf3 found [ 253.013447][ T4284] hid-picolcd 0003:04D8:F002.0009: No report with id 0xf4 found [ 253.051825][ T4783] usb 10-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 253.077651][ T4783] zl10353_read_register: readreg error (reg=127, ret==-71) [ 253.105105][ T4284] usb 4-1: USB disconnect, device number 10 [ 253.111679][ T4783] usb 10-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 253.161420][ C0] hid-picolcd 0003:04D8:F002.0009: invalid size value (65) for picolcd raw event (0) [ 253.236409][ T4783] usb 10-1: USB disconnect, device number 7 [ 253.378284][ T7] usb 9-1: USB disconnect, device number 10 [ 253.841207][T11138] loop3: detected capacity change from 0 to 256 [ 253.959165][T11138] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011bf5, chksum : 0x5eaa6302, utbl_chksum : 0xe619d30d) [ 254.082918][T11138] exFAT-fs (loop3): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 254.129678][T11140] loop0: detected capacity change from 0 to 8192 [ 254.156243][T11146] comedi comedi0: comedi_test: 1000000 microvolt, 100000 microsecond waveform attached [ 254.210023][T11140] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 254.293384][T11140] REISERFS (device loop0): using ordered data mode [ 254.346352][T11149] comedi comedi1: Minor -1 is invalid! [ 254.355795][T11140] reiserfs: using flush barriers [ 254.403723][T11140] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 254.500637][T11140] REISERFS (device loop0): checking transaction log (loop0) [ 254.739079][T11166] loop8: detected capacity change from 0 to 256 [ 254.873117][T11171] loop7: detected capacity change from 0 to 164 [ 254.920934][T11140] REISERFS (device loop0): Using tea hash to sort names [ 254.972066][T11140] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 255.116458][T11180] loop8: detected capacity change from 0 to 512 [ 255.225936][T11185] ieee802154 phy0 wpan0: encryption failed: -126 [ 255.254711][T11180] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 255.397171][T11180] EXT4-fs error (device loop8): ext4_validate_block_bitmap:420: comm syz.8.2109: bg 0: bad block bitmap checksum [ 255.453960][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.460351][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.718899][T11204] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2107'. [ 256.426016][T11251] loop3: detected capacity change from 0 to 256 [ 256.459047][T11253] loop9: detected capacity change from 0 to 256 [ 256.548333][T11253] exFAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 256.619640][T11253] exFAT-fs (loop9): Medium has reported failures. Some data may be lost. [ 256.698818][T11253] exFAT-fs (loop9): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c91aa, utbl_chksum : 0xe619d30d) [ 257.129039][T11284] loop9: detected capacity change from 0 to 256 [ 257.156168][T11285] loop8: detected capacity change from 0 to 1024 [ 257.309414][T11285] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 257.327392][T11292] net_ratelimit: 111 callbacks suppressed [ 257.327403][T11292] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 257.340038][T11292] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 257.381239][T11285] EXT4-fs (loop8): orphan cleanup on readonly fs [ 257.464300][T11285] EXT4-fs error (device loop8): ext4_free_blocks:6231: comm syz.8.2135: Freeing blocks not in datazone - block = 0, count = 4096 [ 257.560492][T11285] EXT4-fs (loop8): 1 orphan inode deleted [ 257.593051][T11285] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 257.684398][T11285] EXT4-fs error (device loop8): ext4_readdir:263: inode #2: block 16: comm syz.8.2135: path /188/file1: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 257.805149][T11285] EXT4-fs error (device loop8): ext4_readdir:263: inode #2: block 17: comm syz.8.2135: path /188/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 257.854917][ T4783] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 257.909755][T11285] EXT4-fs error (device loop8): ext4_readdir:263: inode #2: block 18: comm syz.8.2135: path /188/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 258.028978][T11311] EXT4-fs error (device loop8): ext4_lookup:1860: inode #15: comm syz.8.2135: iget: bad i_size value: 1970324836974602 [ 258.086982][T11319] loop3: detected capacity change from 0 to 256 [ 258.112032][T11285] EXT4-fs error (device loop8): ext4_readdir:263: inode #2: block 19: comm syz.8.2135: path /188/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 258.143791][T11297] loop7: detected capacity change from 0 to 32768 [ 258.230784][T11319] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 258.261574][ T4783] usb 10-1: config 1 has an invalid descriptor of length 121, skipping remainder of the config [ 258.331504][ T4783] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 258.379583][ T4783] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 258.414670][ T4783] usb 10-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 258.610959][T11330] tap0: tun_chr_ioctl cmd 2147767517 [ 258.616814][ T4783] usb 10-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice= 1.00 [ 258.640371][ T4783] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.670224][ T4783] usb 10-1: Product: syz [ 258.689198][ T4783] usb 10-1: Manufacturer: syz [ 258.703833][ T4783] usb 10-1: SerialNumber: syz [ 258.741609][T11302] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 258.779683][T11302] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 258.845992][ T4783] ims_pcu: probe of 10-1:1.1 failed with error -22 [ 259.020785][T11343] loop8: detected capacity change from 0 to 4096 [ 259.115397][T11343] NILFS (loop8): invalid segment: Checksum error in segment payload [ 259.130692][ T4783] usb 10-1: USB disconnect, device number 8 [ 259.139785][T11349] loop3: detected capacity change from 0 to 1024 [ 259.196713][T11343] NILFS (loop8): trying rollback from an earlier position [ 259.289345][T11343] NILFS (loop8): recovery complete [ 259.365751][T11355] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 259.439948][T11353] loop7: detected capacity change from 0 to 4096 [ 259.460911][ T26] audit: type=1400 audit(1793503746.416:46): apparmor="STATUS" info="failed to unpack policydb" error=-71 profile="unconfined" name="p" pid=11357 comm="syz.0.2153" name="p" offset=92 [ 259.515665][T11343] NILFS (loop8): DAT doesn't have a block to manage vblocknr = 4096 [ 259.608462][T11343] NILFS error (device loop8): nilfs_bmap_propagate: broken bmap (inode number=12) [ 259.662105][T11361] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2154'. [ 259.741037][T11343] Remounting filesystem read-only [ 259.790649][T11343] NILFS (loop8): error -5 cleaning segments [ 259.830522][T11368] loop9: detected capacity change from 0 to 1024 [ 259.905972][T11343] NILFS (loop8): error -30 cleaning segments [ 259.912910][T11371] bonding: . is being created... [ 260.065062][ T7685] NILFS (loop8): disposed unprocessed dirty file(s) when stopping log writer [ 260.875926][T11424] loop7: detected capacity change from 0 to 128 [ 260.988616][T11424] EXT4-fs (loop7): mounted filesystem without journal. Opts: resuid=0x0000000000000000,abort,,errors=continue. Quota mode: none. [ 261.061828][T11436] loop0: detected capacity change from 0 to 64 [ 261.090384][T11424] ext4 filesystem being mounted at /301/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 261.195155][T11442] loop3: detected capacity change from 0 to 512 [ 261.225308][T11424] fscrypt (loop7, inode 12): Unsupported encryption flags (0x51) [ 261.345619][T11442] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 261.429544][T11455] loop0: detected capacity change from 0 to 16 [ 261.518023][T11455] erofs: (device loop0): mounted with root inode @ nid 36. [ 261.858326][T11469] SQUASHFS error: Failed to read block 0x6e6: -5 [ 261.911630][T11469] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 261.970926][T11469] SQUASHFS error: Unable to read directory block [631:26] [ 262.005491][T11481] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2198'. [ 262.537577][T11522] ima: Unable to open file: / (-22) [ 262.561092][T11515] ima: policy update failed [ 262.605693][T11524] tipc: Started in network mode [ 262.634422][ T26] audit: type=1802 audit(1793503749.596:47): pid=11515 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.9.2211" res=0 errno=0 [ 262.667272][T11524] tipc: Node identity ac14140f, cluster identity 4711 [ 262.744434][T11524] tipc: New replicast peer: 255.255.255.255 [ 262.800710][T11524] tipc: Enabled bearer , priority 10 [ 262.843758][T11535] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 262.954812][T11535] ext4 filesystem being mounted at /246/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 263.367294][T11564] set_capacity_and_notify: 2 callbacks suppressed [ 263.367305][T11564] loop0: detected capacity change from 0 to 24 [ 263.439429][T11564] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 263.529622][T11564] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 263.613511][ T4341] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 263.895563][T11576] loop8: detected capacity change from 0 to 1024 [ 263.902105][ T4341] usb 10-1: Using ep0 maxpacket: 8 [ 263.913560][ T4783] tipc: Node number set to 2886997007 [ 263.926766][T11546] loop7: detected capacity change from 0 to 32768 [ 263.974934][T11576] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 264.021608][ T4341] usb 10-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 264.034883][T11579] loop0: detected capacity change from 0 to 512 [ 264.074833][T11576] EXT4-fs error (device loop8): ext4_get_journal_inode:5187: inode #32: comm syz.8.2229: iget: special inode unallocated [ 264.089829][ T4341] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.189481][T11546] XFS (loop7): Mounting V5 Filesystem [ 264.209634][T11576] EXT4-fs (loop8): no journal found [ 264.216797][ T4341] pvrusb2: Hardware description: Terratec Grabster AV400 [ 264.255835][T11576] EXT4-fs (loop8): can't get journal size [ 264.271809][ T4341] pvrusb2: ********** [ 264.284693][ T4341] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 264.305265][T11576] EXT4-fs (loop8): filesystem is read-only [ 264.324679][T11576] EXT4-fs (loop8): mounted filesystem without journal. Opts: errors=remount-ro,noload,noblock_validity,bsdgroups,nobarrier,. Quota mode: none. [ 264.345055][ T4341] pvrusb2: Important functionality might not be entirely working. [ 264.374142][ T4341] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 264.425094][T11576] EXT4-fs (loop8): shut down requested (2) [ 264.431422][ T4341] pvrusb2: ********** [ 264.457341][T11546] XFS (loop7): Ending clean mount [ 264.493941][ T2426] pvrusb2: Invalid write control endpoint [ 264.569262][T11599] loop0: detected capacity change from 0 to 512 [ 264.716714][T11599] EXT4-fs (loop0): inline encryption not supported [ 264.764761][T11599] EXT4-fs (loop0): Ignoring removed oldalloc option [ 264.783092][ T4783] usb 10-1: USB disconnect, device number 9 [ 264.808101][ T2426] pvrusb2: Invalid write control endpoint [ 264.831232][ T6353] XFS (loop7): Unmounting Filesystem [ 264.843151][T11599] EXT4-fs (loop0): Test dummy encryption mode enabled [ 264.890992][ T2426] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 264.922859][T11599] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 264.980178][ T2426] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 265.009272][T11599] EXT4-fs error (device loop0): ext4_orphan_get:1436: comm syz.0.2231: bad orphan inode 131083 [ 265.031074][ T2426] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 265.092863][T11599] EXT4-fs (loop0): mounted filesystem without journal. Opts: stripe=0x0000000000000008,resgid=0x0000000000000000,inlinecrypt,oldalloc,discard,journal_ioprio=0x0000000000000003,acl,test_dummy_encryption=v1,noblock_validity,,errors=continue. Quota mode: none. [ 265.135249][ T2426] pvrusb2: Device being rendered inoperable [ 265.168843][T11567] loop3: detected capacity change from 0 to 40427 [ 265.202492][ T2426] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 265.230743][ T2426] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 265.285829][T11567] F2FS-fs (loop3): invalid crc value [ 265.339164][ T2426] pvrusb2: Attached sub-driver cx25840 [ 265.437014][ T2426] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 265.463855][T11567] F2FS-fs (loop3): Found nat_bits in checkpoint [ 265.527046][ T2426] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 265.601187][T11631] loop8: detected capacity change from 0 to 512 [ 265.779330][T11631] EXT4-fs (loop8): mounted filesystem without journal. Opts: nombcache,auto_da_alloc=0x0000000000000006,,errors=continue. Quota mode: writeback. [ 265.892627][T11567] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 265.913794][T11631] ext4 filesystem being mounted at /210/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 266.062515][T11649] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2241'. [ 266.096002][ T4783] usb 10-1: new full-speed USB device number 10 using dummy_hcd [ 266.151934][T11651] EXT4-fs error (device loop8): ext4_get_inode_usage:835: inode #12: comm syz.8.2238: corrupted xattr block 6 [ 266.223304][ T4195] attempt to access beyond end of device [ 266.223304][ T4195] loop3: rw=2049, want=45104, limit=40427 [ 266.246271][T11631] EXT4-fs error (device loop8): ext4_xattr_block_get:543: inode #12: comm syz.8.2238: corrupted xattr block 6 [ 266.290238][T11659] netlink: 616 bytes leftover after parsing attributes in process `syz.7.2244'. [ 266.360734][T11631] overlayfs: failed to get origin (-117) [ 266.453344][ T4783] usb 10-1: not running at top speed; connect to a high speed hub [ 266.464835][T11631] EXT4-fs error (device loop8): ext4_xattr_block_find:1857: inode #12: comm syz.8.2238: corrupted xattr block 6 [ 266.541519][ T4783] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 266.586988][T11631] overlayfs: failed to verify origin (/, ino=2, err=-117) [ 266.615993][ T4783] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 266.646299][T11631] overlayfs: failed to verify upper root origin [ 266.831496][ T4783] usb 10-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 266.880316][ T4783] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.926106][ T4783] usb 10-1: Product: syz [ 266.948958][ T4783] usb 10-1: Manufacturer: syz [ 266.970151][ T4783] usb 10-1: SerialNumber: syz [ 267.042365][ T4783] oti6858 10-1:1.0: oti6858 converter detected [ 267.075161][ T4783] usb 10-1: oti6858 converter now attached to ttyUSB0 [ 267.270183][T11697] loop0: detected capacity change from 0 to 1024 [ 267.514398][T11626] oti6858 ttyUSB0: oti6858_open(): usb_submit_urb() failed with error -90 [ 267.557579][ T4783] usb 10-1: USB disconnect, device number 10 [ 267.588220][ T4783] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 267.630198][ T4783] oti6858 10-1:1.0: device disconnected [ 267.934812][T11715] loop8: detected capacity change from 0 to 128 [ 268.384967][ T4201] block nbd0: Receive control failed (result -32) [ 268.392100][ T4203] block nbd0: Receive control failed (result -32) [ 268.414667][T11733] loop8: detected capacity change from 0 to 16 [ 268.455071][T11733] erofs: (device loop8): erofs_read_inode: unsupported chunk format ffff of nid 36 [ 268.725957][T11746] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2269'. [ 268.774726][T11746] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2269'. [ 268.814387][T11746] netlink: 'syz.9.2269': attribute type 19 has an invalid length. [ 268.854508][T11746] netlink: 'syz.9.2269': attribute type 20 has an invalid length. [ 268.914017][T11746] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 268.922929][T11746] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 268.931746][T11746] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 268.940880][T11746] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 269.054475][T11758] loop7: detected capacity change from 0 to 2048 [ 269.128744][T11758] Alternate GPT is invalid, using primary GPT. [ 269.165611][T11758] loop7: p2 p3 p7 [ 269.628208][T11777] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 269.670694][T11779] loop8: detected capacity change from 0 to 512 [ 269.741455][T11779] EXT4-fs (loop8): Ignoring removed orlov option [ 269.798611][T11779] EXT4-fs (loop8): mounted filesystem without journal. Opts: grpquota,orlov,inode_readahead_blks=0x0000000000000100,,errors=continue. Quota mode: writeback. [ 269.907852][T11779] ext4 filesystem being mounted at /218/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 269.927687][T11793] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 270.300203][T11813] loop3: detected capacity change from 0 to 64 [ 270.430518][T11819] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2295'. [ 270.495742][T11819] netlink: 580 bytes leftover after parsing attributes in process `syz.0.2295'. [ 270.784230][T11839] ip_tables: iptables: counters copy to user failed while replacing table [ 270.855590][T11842] [ 270.857302][T11843] loop3: detected capacity change from 0 to 512 [ 271.379850][T11865] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2310'. [ 271.511477][ T4277] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 271.648869][T11878] program syz.0.2317 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 271.760891][ T26] audit: type=1400 audit(1793503758.716:48): apparmor="STATUS" info="profile missing flags" error=-71 profile="unconfined" name="foo" pid=11882 comm="syz.8.2319" name="foo" offset=35 [ 271.781361][ T4277] usb 10-1: Using ep0 maxpacket: 8 [ 271.819495][T11885] program syz.0.2320 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 272.061691][ T4277] usb 10-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=f9.64 [ 272.087812][ T4277] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67 [ 272.101906][T11898] loop0: detected capacity change from 0 to 512 [ 272.124632][ T4277] usb 10-1: Product: syz [ 272.138112][T11898] EXT4-fs (loop0): Ignoring removed oldalloc option [ 272.167513][ T4277] usb 10-1: Manufacturer: syz [ 272.189366][ T4277] usb 10-1: SerialNumber: syz [ 272.207103][T11898] EXT4-fs (loop0): mounted filesystem without journal. Opts: norecovery,acl,oldalloc,debug_want_extra_isize=0x0000000000000008,,errors=continue. Quota mode: writeback. [ 272.234683][ T4277] usb 10-1: config 0 descriptor?? [ 272.286197][ T4277] gspca_main: sn9c2028-2.14.0 probing 0c45:8003 [ 272.329638][T11907] loop7: detected capacity change from 0 to 256 [ 272.377672][T11907] exfat: Deprecated parameter 'utf8' [ 272.413231][T11907] exfat: Deprecated parameter 'namecase' [ 272.448566][T11907] exfat: Deprecated parameter 'namecase' [ 272.475399][T11907] exfat: Deprecated parameter 'utf8' [ 272.503609][ T4277] gspca_sn9c2028: read1 error -32 [ 272.513395][T11907] exFAT-fs (loop7): failed to load upcase table (idx : 0x00012153, chksum : 0x69f3fdb7, utbl_chksum : 0xe619d30d) [ 272.561535][ T4277] gspca_sn9c2028: read1 error -32 [ 272.693392][ T4792] kernel read not supported for file /video9 (pid: 4792 comm: kworker/0:17) [ 272.860485][ T4277] usb 10-1: USB disconnect, device number 11 [ 273.038499][T11927] loop3: detected capacity change from 0 to 512 [ 273.101189][T11932] RDS: rds_bind could not find a transport for ::a:0:0, load rds_tcp or rds_rdma? [ 273.158954][T11927] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 273.549068][T11952] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2346'. [ 273.687567][T11961] loop9: detected capacity change from 0 to 256 [ 273.755830][T11961] exFAT-fs (loop9): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbd11d127, utbl_chksum : 0xe619d30d) [ 273.837270][T11964] loop8: detected capacity change from 0 to 64 [ 273.910561][T11964] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. mounting read-only. [ 273.989821][T11941] loop0: detected capacity change from 0 to 32768 [ 274.048871][T11969] loop3: detected capacity change from 0 to 256 [ 274.149634][T11969] exfat: Deprecated parameter 'utf8' [ 274.198102][T11972] loop8: detected capacity change from 0 to 16 [ 274.225885][T11969] exfat: Deprecated parameter 'utf8' [ 274.231229][T11969] exfat: Deprecated parameter 'utf8' [ 274.280175][T11972] erofs: (device loop8): mounted with root inode @ nid 36. [ 274.384758][T11969] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 274.908860][T11992] user requested TSC rate below hardware speed [ 275.327785][T12001] loop9: detected capacity change from 0 to 8192 [ 275.389590][T12001] REISERFS (device loop9): found reiserfs format "3.5" with non-standard journal [ 275.459596][T12001] REISERFS (device loop9): using ordered data mode [ 275.483833][T12008] loop3: detected capacity change from 0 to 764 [ 275.520751][T12001] reiserfs: using flush barriers [ 275.559922][T12001] REISERFS (device loop9): journal params: device loop9, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 275.657551][T11983] loop8: detected capacity change from 0 to 40427 [ 275.687560][T12001] REISERFS (device loop9): checking transaction log (loop9) [ 275.733767][T11983] F2FS-fs (loop8): Insane cp_payload (553648128 >= 504) [ 275.748059][T12001] REISERFS (device loop9): Using r5 hash to sort names [ 275.770791][T11983] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 275.786951][T12001] REISERFS (device loop9): Created .reiserfs_priv - reserved for xattr storage. [ 275.866077][T11983] F2FS-fs (loop8): build fault injection attr: rate: 17008, type: 0x1ffff [ 275.939301][T11983] F2FS-fs (loop8): build fault injection attr: rate: 0, type: 0x1f8 [ 276.005831][T11983] F2FS-fs (loop8): invalid crc value [ 276.035247][T11983] F2FS-fs (loop8): Found nat_bits in checkpoint [ 276.212227][T11983] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 276.236776][T11983] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 276.364020][T12029] loop3: detected capacity change from 0 to 2048 [ 276.475935][T12029] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 276.523334][ T7685] attempt to access beyond end of device [ 276.523334][ T7685] loop8: rw=2049, want=45104, limit=40427 [ 276.633542][ T26] audit: type=1800 audit(1793503763.596:49): pid=12044 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.2378" name="idVendor" dev="configfs" ino=59926 res=0 errno=0 [ 276.653872][ C0] vkms_vblank_simulate: vblank timer overrun [ 277.087509][T12060] loop7: detected capacity change from 0 to 256 [ 277.633768][T12043] XFS (loop0): Mounting V5 Filesystem [ 277.703291][T12043] XFS (loop0): Ending clean mount [ 277.739533][ T26] audit: type=1800 audit(1793503764.696:50): pid=12043 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2377" name="file1" dev="loop0" ino=4422 res=0 errno=0 [ 277.830792][ T8606] XFS (loop0): Unmounting Filesystem [ 278.186260][T12101] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 278.211401][ T4792] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 278.254436][T12101] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #16: comm syz.8.2401: invalid indirect mapped block 32768 (level 2) [ 278.289519][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 278.300424][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 278.328621][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 278.339529][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 278.371939][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 278.382892][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 278.395068][T12101] EXT4-fs (loop8): Remounting filesystem read-only [ 278.408634][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 278.419571][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 278.438317][T12101] EXT4-fs (loop8): 1 orphan inode deleted [ 278.453884][T12101] EXT4-fs (loop8): 1 truncate cleaned up [ 278.465062][T12101] EXT4-fs (loop8): mounted filesystem without journal. Opts: errors=remount-ro,nodelalloc,debug_want_extra_isize=0x000000000000002e,inode_readahead_blks=0x0000000004000000,jqfmt=vfsv0,usrquota,. Quota mode: writeback. [ 278.489547][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 278.500453][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 278.558343][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 278.569281][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 278.604499][T12101] EXT4-fs warning (device loop8): ext4_resize_begin:83: There are errors in the filesystem, so online resizing is not allowed [ 278.645637][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 278.656539][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 278.669993][ T4792] usb 4-1: Using ep0 maxpacket: 32 [ 278.675651][ T4521] ldm_validate_partition_table(): Disk read failed. [ 278.721810][T12102] set_capacity_and_notify: 4 callbacks suppressed [ 278.721819][T12102] loop9: detected capacity change from 0 to 32768 [ 278.744028][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 278.754940][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 278.812572][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 278.823481][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 278.860937][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 278.871863][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 278.917904][ T4521] Dev loop7: unable to read RDB block 0 [ 278.961506][ T4792] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 278.978492][T12102] ERROR: (device loop9): dbAllocNext: Corrupt dmap page [ 278.978492][T12102] [ 278.990571][ T4521] loop7: unable to read partition table [ 279.013740][ T4792] usb 4-1: config 0 has no interface number 0 [ 279.030855][ T4521] loop7: partition table beyond EOD, truncated [ 279.039360][T12121] sd 0:0:1:0: PR command failed: 2 [ 279.055534][T12102] ERROR: (device loop9): remounting filesystem as read-only [ 279.075080][T12121] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 279.086329][T12106] ldm_validate_partition_table(): Disk read failed. [ 279.117745][T12102] ialloc: diAlloc returned -5! [ 279.136054][T12121] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 279.145534][T12106] Dev loop7: unable to read RDB block 0 [ 279.165220][T12106] loop7: unable to read partition table [ 279.198420][T12102] ERROR: (device loop9): dbAllocAG: unable to allocate blocks [ 279.198420][T12102] [ 279.221434][ T4792] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 279.240762][T12106] loop7: partition table beyond EOD, truncated [ 279.267252][ T4792] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.280521][T12106] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü�¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö�˜Èµ4FLQkÝŠ) failed (rc=-5) [ 279.299283][T12102] ERROR: (device loop9): dbDiscardAG: -EIO [ 279.299283][T12102] [ 279.319345][ T4792] usb 4-1: Product: syz [ 279.349963][ T4792] usb 4-1: Manufacturer: syz [ 279.378140][ T4792] usb 4-1: SerialNumber: syz [ 279.416074][ T4792] usb 4-1: config 0 descriptor?? [ 279.493455][ T4792] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 279.552164][ T4792] usb 4-1: selecting invalid altsetting 1 [ 279.580262][ T4792] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 279.639743][ T4792] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 279.710943][ T4792] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 279.761292][ T4792] usb 4-1: media controller created [ 279.814901][ T4792] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 279.829326][T12141] loop0: detected capacity change from 0 to 4096 [ 279.890065][T12141] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,noblock_validity,,errors=continue. Quota mode: writeback. [ 279.961516][ T4792] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 280.000583][ T4792] zl10353_read_register: readreg error (reg=127, ret==-71) [ 280.035870][T12141] EXT4-fs warning (device loop0): ext4_resize_fs:1981: can't read last block, resize aborted [ 280.091711][ T4792] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 280.206799][ T4792] usb 4-1: USB disconnect, device number 11 [ 280.379559][T12154] loop9: detected capacity change from 0 to 512 [ 280.494080][T12154] EXT4-fs (loop9): Ignoring removed nobh option [ 280.560505][T12154] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 280.670995][T12154] EXT4-fs error (device loop9): ext4_free_branches:1030: inode #11: comm syz.9.2405: invalid indirect mapped block 4278190080 (level 0) [ 280.759142][T12143] loop8: detected capacity change from 0 to 32768 [ 280.775068][T12170] Set syz1 is full, maxelem 246 reached [ 280.799359][T12154] EXT4-fs error (device loop9): ext4_free_branches:1030: inode #11: comm syz.9.2405: invalid indirect mapped block 1 (level 1) [ 280.865442][T12143] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode. [ 280.941216][T12154] EXT4-fs (loop9): 1 truncate cleaned up [ 281.003931][T12154] EXT4-fs (loop9): mounted filesystem without journal. Opts: abort,errors=continue,inode_readahead_blks=0x0000000000000040,sb=0x0000000000000009,jqfmt=vfsv1,resgid=0x0000000000000000,nolazytime,nobh,auto_da_alloc=0x0000000000000006,data=journal,init_itable=0x0000000000000005,,errors=continue. Quota mode: none. [ 281.105524][T12186] loop3: detected capacity change from 0 to 64 [ 281.148316][ T7685] ocfs2: Unmounting device (7,8) on (node local) [ 281.165228][T12191] loop7: detected capacity change from 0 to 128 [ 281.382684][T12154] EXT4-fs (loop9): shut down requested (1) [ 281.636022][T12201] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 281.726237][T12208] loop7: detected capacity change from 0 to 1024 [ 281.864709][T12208] hfsplus: inconsistency in B*Tree (128,1,255,1,0) [ 281.923399][T12208] hfsplus: xattr searching failed [ 282.276762][T12240] loop9: detected capacity change from 0 to 2048 [ 282.367678][T12240] EXT4-fs (loop9): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000006,user_xattr,,errors=continue. Quota mode: none. [ 282.387581][T12245] loop3: detected capacity change from 0 to 1024 [ 282.478787][T12245] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 282.495078][T12240] ext4 filesystem being mounted at /285/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 282.598993][T12245] EXT4-fs (loop3): Errors on filesystem, clearing orphan list. [ 282.676272][T12263] EXT4-fs error (device loop9): ext4_validate_block_bitmap:438: comm syz.9.2439: bg 0: block 345: padding at end of block bitmap is not set [ 282.695674][T12245] EXT4-fs (loop3): mounted filesystem without journal. Opts: norecovery,quota,,errors=continue. Quota mode: writeback. [ 282.825431][T12263] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 15 with max blocks 61 with error 117 [ 282.888989][T12272] loop0: detected capacity change from 0 to 512 [ 282.910862][T12263] EXT4-fs (loop9): This should not happen!! Data will be lost [ 282.910862][T12263] [ 282.961068][T12272] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e02c, mo2=0002] [ 283.044018][T12272] System zones: 1-12 [ 283.087984][T12272] EXT4-fs error (device loop0): dx_probe:823: inode #2: comm syz.0.2449: Directory hole found for htree index block 0 [ 283.138435][ T4783] Bluetooth: hci2: command 0x0406 tx timeout [ 283.204189][T12284] hfs: inconsistency in B*Tree (-1,0,2,3,0) [ 283.219869][T12272] EXT4-fs (loop0): Remounting filesystem read-only [ 283.230460][ T4286] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 15 with error 28 [ 283.255720][T12286] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2455'. [ 283.268235][T12284] hfs: get root inode failed [ 283.275220][T12272] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -117 [ 283.290033][ T4286] EXT4-fs (loop9): This should not happen!! Data will be lost [ 283.290033][ T4286] [ 283.310956][T12272] EXT4-fs error (device loop0): dx_probe:823: inode #2: comm syz.0.2449: Directory hole found for htree index block 0 [ 283.327568][T12286] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2455'. [ 283.346009][ T4286] EXT4-fs (loop9): Total free blocks count 0 [ 283.390477][ T4286] EXT4-fs (loop9): Free/Dirty block details [ 283.400541][T12272] EXT4-fs (loop0): Remounting filesystem read-only [ 283.428863][ T4286] EXT4-fs (loop9): free_blocks=0 [ 283.439578][T12272] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 283.466959][ T4286] EXT4-fs (loop9): dirty_blocks=32 [ 283.492755][T12272] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpjquota=Jdebug,jqfmt=vfsold,noquota,bsdgroups,usrjquota="nojournal_checksum,errors=remount-ro,,. Quota mode: writeback. [ 283.513282][ T4286] EXT4-fs (loop9): Block reservation details [ 283.545854][ T4286] EXT4-fs (loop9): i_reserved_data_blocks=2 [ 283.693671][T12272] EXT4-fs (loop0): shut down requested (2) [ 283.903297][T12312] atomic_op ffff88801bff7198 conn xmit_atomic 0000000000000000 [ 284.014919][ T4792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.193916][T12329] set_capacity_and_notify: 1 callbacks suppressed [ 284.193926][T12329] loop9: detected capacity change from 0 to 256 [ 284.554005][ T4282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.965468][T12364] loop0: detected capacity change from 0 to 1024 [ 285.050197][T12364] hfsplus: invalid length 256 has been corrected to 255 [ 285.115039][T12364] hfsplus: invalid length 256 has been corrected to 255 [ 285.613010][ T4282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.905941][T12429] loop9: detected capacity change from 0 to 512 [ 285.972824][T12434] IPVS: mh: UDP 127.0.0.1:20000 - no destination available [ 286.008308][T12429] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 286.173838][ T4341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.409546][T12462] i2c i2c-0: new_device: Invalid device name [ 286.530740][T12470] ieee802154 phy0 wpan0: encryption failed: -22 [ 286.652210][ T4341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.799896][T12487] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2518'. [ 287.402231][T12492] loop0: detected capacity change from 0 to 131072 [ 287.483851][T12492] F2FS-fs (loop0): Found nat_bits in checkpoint [ 287.527097][T12492] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 287.564564][ T4282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.630403][T12492] F2FS-fs (loop0): inode (7) has corrupted xattr [ 287.734859][T12504] loop8: detected capacity change from 0 to 1024 [ 287.760655][ T4783] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.810286][T12504] EXT4-fs (loop8): warning: mounting unchecked fs, running e2fsck is recommended [ 287.909847][T12504] EXT4-fs (loop8): Errors on filesystem, clearing orphan list. [ 287.979668][T12504] EXT4-fs (loop8): mounted filesystem without journal. Opts: norecovery,quota,,errors=continue. Quota mode: writeback. [ 288.346753][ T4783] Bluetooth: hci1: command 0x0406 tx timeout [ 288.651275][ T4783] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 288.811535][ T4282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 288.920988][ T4783] usb 9-1: Using ep0 maxpacket: 8 [ 289.061126][ T4783] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 289.106587][ T4783] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 289.174235][ T4783] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 289.279128][ T4783] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 289.376153][T12529] loop0: detected capacity change from 0 to 32768 [ 289.387026][ T4783] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 289.458525][ T4783] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 289.543186][ T4783] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.812538][T12535] loop7: detected capacity change from 0 to 40427 [ 289.851643][ T4341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.883477][T12571] tipc: Started in network mode [ 289.955913][T12571] tipc: Node identity 7f000001, cluster identity 4711 [ 289.970387][T12535] F2FS-fs (loop7): Found nat_bits in checkpoint [ 290.032225][T12571] tipc: New replicast peer: 0.0.0.0 [ 290.064867][T12571] tipc: Enabled bearer , priority 10 [ 290.110984][ T4783] usb 9-1: USB disconnect, device number 11 [ 290.199511][T12535] F2FS-fs (loop7): Start checkpoint disabled! [ 290.305268][T12535] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6 [ 290.410896][ T4783] Bluetooth: hci1: command 0x0405 tx timeout [ 290.473675][T12535] attempt to access beyond end of device [ 290.473675][T12535] loop7: rw=2049, want=53256, limit=40427 [ 290.589024][ T4341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.838557][ T4286] attempt to access beyond end of device [ 290.838557][ T4286] loop7: rw=2049, want=41000, limit=40427 [ 290.869165][T12614] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2552'. [ 290.892256][ T4341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 291.076330][T12615] loop3: detected capacity change from 0 to 4096 [ 291.096827][T12629] netlink: 'syz.0.2558': attribute type 11 has an invalid length. [ 291.181412][ T4341] tipc: Node number set to 2130706433 [ 291.206077][T12615] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512) [ 291.871961][ T4203] block nbd1: Receive control failed (result -32) [ 291.931618][ T4783] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.002492][T12674] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2571'. [ 292.137827][T12681] loop7: detected capacity change from 0 to 512 [ 292.217422][T12681] EXT4-fs error (device loop7): ext4_orphan_get:1410: inode #15: comm syz.7.2584: inode has both inline data and extents flags [ 292.263541][T12692] loop8: detected capacity change from 0 to 512 [ 292.283381][T12681] EXT4-fs error (device loop7): ext4_orphan_get:1415: comm syz.7.2584: couldn't read orphan inode 15 (err -117) [ 292.335146][T12681] EXT4-fs (loop7): mounted filesystem without journal. Opts: noblock_validity,resgid=0x000000000000ee00,acl,noload,acl,nodiscard,,errors=continue. Quota mode: none. [ 292.469486][T12681] EXT4-fs (loop7): shut down requested (0) [ 292.978312][ T4341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.011908][T12720] loop9: detected capacity change from 0 to 2048 [ 293.098037][T12729] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 293.297052][T12737] loop9: detected capacity change from 0 to 512 [ 293.374659][T12737] EXT4-fs (loop9): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 293.428158][T12737] ext4 filesystem being mounted at /315/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 293.456232][T12746] overlayfs: failed to clone upperpath [ 293.499579][T12746] overlayfs: failed to clone upperpath [ 293.611114][ T4341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.829210][T12764] loop9: detected capacity change from 0 to 512 [ 293.845130][T12765] loop0: detected capacity change from 0 to 256 [ 294.044221][ T4792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.460347][T12795] program syz.8.2608 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 294.504266][T12799] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2611'. [ 294.645638][T12812] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.655034][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.799099][T12812] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.812826][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.900249][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.914300][T12808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.527521][T12810] loop0: detected capacity change from 0 to 32768 [ 295.665373][T12810] XFS (loop0): Mounting V5 Filesystem [ 295.707577][T12809] loop7: detected capacity change from 0 to 40427 [ 295.777918][T12810] XFS (loop0): Ending clean mount [ 295.802199][T12809] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 295.809935][T12809] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 295.861291][T12857] netlink: 128 bytes leftover after parsing attributes in process `syz.8.2626'. [ 295.973639][T12857] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2626'. [ 295.987857][T12809] F2FS-fs (loop7): invalid crc value [ 296.002507][ T8606] XFS (loop0): Unmounting Filesystem [ 296.061183][T12809] F2FS-fs (loop7): Found nat_bits in checkpoint [ 296.204020][T12870] ubi31: attaching mtd0 [ 296.271959][T12870] ubi31: scanning is finished [ 296.276695][T12870] ubi31 error: ubi_read_volume_table: the layout volume was not found [ 296.298399][T12831] loop9: detected capacity change from 0 to 32768 [ 296.313885][T12809] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 296.348429][T12809] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 296.692945][T12870] ubi31 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 296.778961][ T26] audit: type=1804 audit(1793504039.741:51): pid=12809 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.2614" name="/newroot/390/file0/file0" dev="loop7" ino=10 res=1 errno=0 [ 296.800715][ C0] vkms_vblank_simulate: vblank timer overrun [ 296.842059][T12873] ubi16: attaching mtd0 [ 296.875114][T12873] ubi16: scanning is finished [ 297.015537][T12873] ubi16 error: ubi_read_volume_table: the layout volume was not found [ 297.079466][T12891] loop0: detected capacity change from 0 to 512 [ 297.134855][ T4783] net_ratelimit: 5 callbacks suppressed [ 297.134866][ T4783] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 297.220315][T12891] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 297.267780][T12891] System zones: 1-12 [ 297.296345][T12873] ubi16 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 297.324620][T12891] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: inode #12: comm syz.0.2628: missing EA_INODE flag [ 297.407658][T12891] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.2628: error while reading EA inode 12 err=-117 [ 297.513902][T12891] EXT4-fs (loop0): 1 orphan inode deleted [ 297.519670][T12891] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback. [ 297.619325][T12913] clocksource: Override clocksource jiffies is not currently HRT compatible - deferring [ 297.715812][T12891] fscrypt (loop0, inode 15): Mutually exclusive encryption flags (0x1a) [ 298.185655][ T4792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.194113][ T4783] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 298.220941][T12948] loop7: detected capacity change from 0 to 64 [ 298.376361][T12952] loop3: detected capacity change from 0 to 1024 [ 298.460562][ T4783] usb 9-1: Using ep0 maxpacket: 8 [ 298.478220][T12952] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 298.574208][T12952] EXT4-fs (loop3): mounted filesystem without journal. Opts: discard,bsddf,grpquota,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,delalloc,nogrpid,noauto_da_alloc,dioread_nolock,,errors=continue. Quota mode: writeback. [ 298.596905][ T4783] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 298.621675][ T4783] usb 9-1: config 0 has no interfaces? [ 298.684868][T12964] netlink: 64 bytes leftover after parsing attributes in process `syz.7.2656'. [ 298.791114][ T4783] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 298.818246][ T4783] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.841577][ T4783] usb 9-1: Product: syz [ 298.845737][ T4783] usb 9-1: Manufacturer: syz [ 298.859003][T12942] loop9: detected capacity change from 0 to 40427 [ 298.869199][ T4783] usb 9-1: SerialNumber: syz [ 298.887370][T12942] F2FS-fs (loop9): build fault injection attr: rate: 14, type: 0x1ffff [ 298.906194][ T4783] usb 9-1: config 0 descriptor?? [ 298.955450][T12942] F2FS-fs (loop9): build fault injection attr: rate: 0, type: 0x30e4 [ 299.014587][T12942] F2FS-fs (loop9): invalid crc value [ 299.060920][T12942] F2FS-fs (loop9): Found nat_bits in checkpoint [ 299.126445][T12942] F2FS-fs (loop9) : inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x44e/0xaa0 [ 299.178871][ T4783] usb 9-1: USB disconnect, device number 12 [ 299.214508][ T4341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.238560][T12942] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 299.324443][T12942] F2FS-fs (loop9) : inject page alloc in f2fs_grab_cache_page of f2fs_new_node_page+0x136/0x8e0 [ 299.345519][T12983] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2663'. [ 299.503707][T12989] loop7: detected capacity change from 0 to 512 [ 299.564136][T12989] EXT4-fs (loop7): Quota format mount options ignored when QUOTA feature is enabled [ 299.624804][T12989] EXT4-fs (loop7): Quota format mount options ignored when QUOTA feature is enabled [ 299.653357][T12989] EXT4-fs (loop7): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 299.689981][ T4783] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.751184][T12989] EXT4-fs (loop7): mounted filesystem without journal. Opts: dioread_nolock,barrier=0x000000000000000d,jqfmt=vfsold,stripe=0x0000000000000b74,min_batch_time=0x0000000000000000,jqfmt=vfsv1,grpjquota=,i_version,,errors=continue. Quota mode: writeback. [ 299.855409][T12998] ima: Unable to open file: /p (-2) [ 299.855566][T12989] ext4 filesystem being mounted at /403/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 299.881795][T12997] ima: policy update failed [ 299.896548][ T26] audit: type=1802 audit(1793504042.861:52): pid=12997 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.9.2666" res=0 errno=0 [ 299.997908][T13004] loop9: detected capacity change from 0 to 736 [ 300.015323][T13002] loop8: detected capacity change from 0 to 1024 [ 300.075854][T13002] EXT4-fs (loop8): Ignoring removed bh option [ 300.184263][T13002] EXT4-fs (loop8): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000010,bh,init_itable,. Quota mode: none. [ 300.293375][ T4277] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.783981][T13035] set_capacity_and_notify: 1 callbacks suppressed [ 300.783992][T13035] loop7: detected capacity change from 0 to 4096 [ 300.804176][T13038] bonding: no command found in bonding_masters - use +ifname or -ifname [ 300.851878][T13035] ntfs3: loop7: Different NTFS' sector size (4096) and media sector size (512) [ 300.954894][T13035] ntfs3: loop7: Mark volume as dirty due to NTFS errors [ 301.016591][T13042] Line length is too long: Should be less than 4094 [ 301.038677][T13035] ntfs3: loop7: ino=5, "/" directory corrupted [ 301.068478][T13044] netlink: 'syz.8.2689': attribute type 4 has an invalid length. [ 301.094819][ T6353] ntfs3: loop7: ntfs_sync_fs r=1a failed, -22. [ 301.105380][T13044] netlink: 17 bytes leftover after parsing attributes in process `syz.8.2689'. [ 301.124859][ T6353] ntfs3: loop7: ntfs_evict_inode r=1a failed, -22. [ 301.260931][T13051] ip_tables: iptables: counters copy to user failed while replacing table [ 301.386626][ T4277] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 301.529498][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 301.952679][ T4792] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 302.116148][T13088] loop3: detected capacity change from 0 to 2048 [ 302.206089][T13088] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 302.320641][ T9] rpcbind: server 127.0.0.1 not responding, timed out [ 302.329703][ T4792] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 302.382426][ T4792] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 302.491354][ T4341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.500237][ T4792] usb 10-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 302.536181][ T4792] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 302.578323][ T4792] usb 10-1: SerialNumber: syz [ 302.729779][ T4341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.881103][ T4792] usb 10-1: 0:2 : does not exist [ 302.898675][ T4792] usb 10-1: unit 120 not found! [ 302.965687][ T4792] usb 10-1: USB disconnect, device number 12 [ 303.214319][T13110] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2719'. [ 303.288549][T13117] loop8: detected capacity change from 0 to 64 [ 303.297193][T13118] loop0: detected capacity change from 0 to 16 [ 303.326594][T13118] erofs: (device loop0): mounted with root inode @ nid 36. [ 303.422712][T13118] overlayfs: failed to get metacopy (-117) [ 303.480725][T13120] bond0: no command found in slaves file - use +ifname or -ifname [ 303.544044][ T4277] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.578082][T13124] loop3: detected capacity change from 0 to 8 [ 303.693918][T13129] loop8: detected capacity change from 0 to 512 [ 303.792934][T13129] EXT4-fs error (device loop8): ext4_orphan_get:1410: inode #15: comm syz.8.2728: inode has both inline data and extents flags [ 303.847630][T13124] SQUASHFS error: Failed to read block 0x636: -5 [ 303.888573][T13129] EXT4-fs error (device loop8): ext4_orphan_get:1415: comm syz.8.2728: couldn't read orphan inode 15 (err -117) [ 303.915001][T13137] serial 00:03: in use; can't configure [ 303.953053][T13129] EXT4-fs (loop8): mounted filesystem without journal. Opts: noblock_validity,resgid=0x000000000000ee00,acl,noload,journal_dev=0x0000000000000003,nodiscard,,errors=continue. Quota mode: none. [ 303.979207][T13124] SQUASHFS error: Unable to read metadata cache entry [634] [ 304.060787][T13141] loop0: detected capacity change from 0 to 1024 [ 304.103826][T13141] EXT4-fs (loop0): inline encryption not supported [ 304.148554][T13141] EXT4-fs (loop0): Ignoring removed bh option [ 304.210086][T13141] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodelalloc,noblock_validity,noauto_da_alloc,nolazytime,errors=continue,lazytime,inlinecrypt,stripe=0x0000000000000005,bh,nombcache,resuid=0x0000000000000000,,errors=continue. Quota mode: none. [ 304.234261][ C0] vkms_vblank_simulate: vblank timer overrun [ 304.397028][T13151] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2738'. [ 304.419128][ T4792] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 304.570230][ T4277] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.659119][ T4792] usb 10-1: Using ep0 maxpacket: 32 [ 304.790469][ T4792] usb 10-1: config 0 has an invalid interface number: 12 but max is 0 [ 304.832574][ T4792] usb 10-1: config 0 has no interface number 0 [ 304.878116][ T4792] usb 10-1: config 0 interface 12 has no altsetting 0 [ 305.017242][T13185] binder: 13182:13185 ioctl c0306201 200000000600 returned -14 [ 305.059084][ T4792] usb 10-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 305.098607][ T4792] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.126231][ T4792] usb 10-1: Product: syz [ 305.152213][ T4792] usb 10-1: Manufacturer: syz [ 305.161235][ T4792] usb 10-1: SerialNumber: syz [ 305.188180][ T4792] usb 10-1: config 0 descriptor?? [ 305.372610][ T4783] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.411569][T13204] netlink: 1 bytes leftover after parsing attributes in process `syz.8.2761'. [ 305.612149][ T4783] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.772544][ T4783] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.818213][T13225] loop3: detected capacity change from 0 to 1024 [ 305.942032][T13225] hfsplus: invalid length 1280 has been corrected to 255 [ 306.175095][T13241] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2775'. [ 306.267911][T13243] loop7: detected capacity change from 0 to 128 [ 306.286593][T13245] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2778'. [ 306.311330][ T4792] f81534 10-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71 [ 306.335890][T13243] ufs: ufs_fill_super(): fragment size 2066844866 is not a power of 2 [ 306.353366][ T4792] f81534 10-1:0.12: f81534_find_config_idx: read failed: -71 [ 306.375371][ T4792] f81534 10-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 306.394138][ T4792] f81534: probe of 10-1:0.12 failed with error -71 [ 306.435057][ T4792] usb 10-1: USB disconnect, device number 13 [ 306.483294][T13248] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2778'. [ 306.656553][ T4783] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.669081][ T4277] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.804811][T13256] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2783'. [ 306.900534][T13270] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2790'. [ 306.952093][T13272] scsi_dev_info_list_add_str: bad dev info string 'ÖõI“¤`m¼}X!5,¶Nôì„�º)q­hcòjÁ€.‹¯hyÍŸ Ö­Hh' 'ƒ3íº [ 306.952093][T13272] Ìj' '(null)' [ 307.408294][T13299] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 307.443733][T13299] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 307.689158][ T4277] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.917589][T13325] MPI: mpi too large (16392 bits) [ 308.142171][T13334] loop3: detected capacity change from 0 to 256 [ 308.430149][T13352] loop9: detected capacity change from 0 to 512 [ 308.686604][T13363] loop7: detected capacity change from 0 to 1024 [ 308.732834][ T4792] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.764233][T13363] EXT4-fs (loop7): inline encryption not supported [ 308.808799][ T4277] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.827165][T13363] EXT4-fs (loop7): Ignoring removed oldalloc option [ 308.888651][T13363] EXT4-fs (loop7): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000007,nodioread_nolock,noquota,inlinecrypt,journal_dev=0x0000000000000009,nodiscard,oldalloc,,errors=continue. Quota mode: none. [ 308.909780][ C0] vkms_vblank_simulate: vblank timer overrun [ 308.997563][T13363] ext4 filesystem being mounted at /441/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 309.032990][T13379] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2836'. [ 309.066910][T13363] EXT4-fs error (device loop7): ext4_map_blocks:741: inode #15: block 3: comm syz.7.2830: lblock 3 mapped to illegal pblock 3 (length 3) [ 309.169464][T13363] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 309.233240][T13363] EXT4-fs (loop7): This should not happen!! Data will be lost [ 309.233240][T13363] [ 309.255779][T13390] loop8: detected capacity change from 0 to 16 [ 309.277012][T13389] EXT4-fs error (device loop7): ext4_map_blocks:741: inode #15: comm syz.7.2830: lblock 0 mapped to illegal pblock 0 (length 1) [ 309.312484][T13390] erofs: (device loop8): mounted with root inode @ nid 36. [ 309.493699][ T156] EXT4-fs error (device loop7): ext4_map_blocks:741: inode #15: block 8: comm kworker/u4:3: lblock 8 mapped to illegal pblock 8 (length 8) [ 309.578766][ T156] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 309.621646][ T156] EXT4-fs (loop7): This should not happen!! Data will be lost [ 309.621646][ T156] [ 309.810805][T13400] loop7: detected capacity change from 0 to 64 [ 309.843498][ T4277] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.866194][T13386] loop9: detected capacity change from 0 to 32768 [ 309.941342][T13386] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop9 scanned by syz.9.2839 (13386) [ 310.054725][T13386] BTRFS info (device loop9): using crc32c (crc32c-intel) checksum algorithm [ 310.116219][T13403] loop3: detected capacity change from 0 to 256 [ 310.145467][T13386] BTRFS info (device loop9): using free space tree [ 310.188131][T13386] BTRFS info (device loop9): has skinny extents [ 310.253113][T13403] exfat: Deprecated parameter 'utf8' [ 310.387910][T13403] exfat: Deprecated parameter 'utf8' [ 310.455179][T13386] BTRFS info (device loop9): enabling ssd optimizations [ 310.540464][T13432] loop7: detected capacity change from 0 to 64 [ 310.551482][T13403] exfat: Deprecated parameter 'utf8' [ 310.802401][T13434] i2c i2c-0: delete_device: Extra parameters [ 310.994856][T13403] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 311.340627][ T4786] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.365177][T13442] tipc: Enabled bearer , priority 0 [ 311.758023][T13466] netlink: 44 bytes leftover after parsing attributes in process `syz.9.2863'. [ 311.848805][ T4795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.162920][T13497] netlink: 'syz.7.2877': attribute type 11 has an invalid length. [ 312.203320][T13495] loop3: detected capacity change from 0 to 2048 [ 312.276999][T13495] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 312.400339][T13505] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 312.414054][ T4795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.433696][T13495] attempt to access beyond end of device [ 312.433696][T13495] loop3: rw=524288, want=33554432, limit=2048 [ 312.828353][T13493] loop9: detected capacity change from 0 to 40427 [ 312.863195][T13493] F2FS-fs (loop9): Small segment_count (9 < 1 * 24) [ 312.908231][T13493] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 312.927837][T13525] loop7: detected capacity change from 0 to 64 [ 312.993427][T13493] F2FS-fs (loop9): invalid crc value [ 313.029196][T13493] F2FS-fs (loop9): Found nat_bits in checkpoint [ 313.188135][T13493] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 313.215533][T13493] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 313.400074][ T26] audit: type=1800 audit(1793504056.363:53): pid=13548 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.2898" name="idProduct" dev="configfs" ino=64594 res=0 errno=0 [ 313.448705][ T4783] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.462732][T13549] loop3: detected capacity change from 0 to 64 [ 313.692290][T13553] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 313.731469][T13555] loop3: detected capacity change from 0 to 1024 [ 313.802042][T13555] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 313.832312][ T4783] kernel write not supported for file /snd/seq (pid: 4783 comm: kworker/0:9) [ 313.869194][T13555] EXT4-fs (loop3): Errors on filesystem, clearing orphan list. [ 313.907692][T13555] EXT4-fs (loop3): mounted filesystem without journal. Opts: norecovery,quota,,errors=continue. Quota mode: writeback. [ 314.160243][ T4795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.169255][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.183814][T13580] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.192496][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.207608][T13580] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.216994][T13577] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.229551][T13577] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.237801][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.488300][ T4783] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 314.907155][T13586] loop8: detected capacity change from 0 to 64 [ 315.095033][T13590] loop9: detected capacity change from 0 to 1024 [ 315.114363][T13592] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2914'. [ 315.149316][T13590] EXT4-fs (loop9): warning: mounting unchecked fs, running e2fsck is recommended [ 315.188174][T13590] EXT4-fs (loop9): Errors on filesystem, clearing orphan list. [ 315.208015][T13590] EXT4-fs (loop9): mounted filesystem without journal. Opts: norecovery,quota,,errors=continue. Quota mode: writeback. [ 315.471078][T13601] RDS: rds_bind could not find a transport for ::a:0:0, load rds_tcp or rds_rdma? [ 315.629725][T13608] loop3: detected capacity change from 0 to 16 [ 315.698143][T13608] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 315.718392][ T4521] udevd[4521]: incorrect cramfs checksum on /dev/loop3 [ 315.854706][T13616] loop8: detected capacity change from 0 to 128 [ 316.043931][T13620] input: syz1 as /devices/virtual/input/input19 [ 316.290703][T13603] loop9: detected capacity change from 0 to 32768 [ 316.316327][T13631] overlayfs: failed to clone upperpath [ 316.342393][T13636] netlink: 'syz.8.2938': attribute type 8 has an invalid length. [ 316.372870][T13603] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop9 scanned by syz.9.2920 (13603) [ 316.483982][T13603] BTRFS info (device loop9): using blake2b (blake2b-256-generic) checksum algorithm [ 316.517044][ T26] audit: type=1400 audit(1793504059.473:54): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="/" pid=13638 comm="syz.7.2941" name="/" offset=48 [ 316.580087][T13603] BTRFS info (device loop9): turning off barriers [ 316.629978][T13603] BTRFS info (device loop9): enabling auto defrag [ 316.636422][T13603] BTRFS info (device loop9): force zlib compression, level 3 [ 316.729791][T13603] BTRFS info (device loop9): enabling ssd optimizations [ 316.790531][T13603] BTRFS info (device loop9): using spread ssd allocation scheme [ 316.871602][T13656] EXT4-fs error (device loop7): ext4_orphan_get:1410: inode #15: comm syz.7.2947: iget: bad extended attribute block 134217728 [ 316.892556][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.901044][T13603] BTRFS info (device loop9): using free space tree [ 316.946866][T13603] BTRFS info (device loop9): has skinny extents [ 316.978982][T13656] EXT4-fs error (device loop7): ext4_orphan_get:1415: comm syz.7.2947: couldn't read orphan inode 15 (err -117) [ 317.056718][T13656] EXT4-fs (loop7): mounted filesystem without journal. Opts: prjquota,,errors=continue. Quota mode: writeback. [ 317.183137][T13603] BTRFS info (device loop9): not using ssd optimizations [ 317.236921][T13603] BTRFS info (device loop9): not using spread ssd allocation scheme [ 317.275379][T13659] lec:lec_atm_close: lec0: Shut down! [ 317.312803][T13603] BTRFS info (device loop9): enabling ssd optimizations [ 317.398078][T13603] BTRFS info (device loop9): using spread ssd allocation scheme [ 317.505818][T13703] set_capacity_and_notify: 1 callbacks suppressed [ 317.505829][T13703] loop7: detected capacity change from 0 to 512 [ 317.792588][T13713] loop3: detected capacity change from 0 to 256 [ 318.248196][T13697] loop8: detected capacity change from 0 to 32768 [ 318.334686][T13697] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode. [ 318.431229][T13697] (syz.8.2957,13697,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: directory entry overrun - offset=0, inode=65, rec_len=16, name_len=1 [ 318.552281][T13697] (syz.8.2957,13697,0):ocfs2_prepare_dir_for_insert:4372 ERROR: status = -2 [ 318.593976][ T4795] net_ratelimit: 5 callbacks suppressed [ 318.593987][ T4795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 318.618375][T13732] netlink: 'syz.0.2963': attribute type 29 has an invalid length. [ 318.626529][T13732] netlink: 'syz.0.2963': attribute type 29 has an invalid length. [ 318.658817][T13697] (syz.8.2957,13697,0):ocfs2_mknod:299 ERROR: status = -2 [ 318.665952][T13697] (syz.8.2957,13697,0):ocfs2_mknod:504 ERROR: status = -2 [ 318.693972][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 318.760569][T13737] netlink: 'syz.0.2963': attribute type 29 has an invalid length. [ 318.768622][T13697] (syz.8.2957,13697,0):ocfs2_create:678 ERROR: status = -2 [ 318.780789][ T7] lec:lec_start_xmit: lec0:No lecd attached [ 318.822743][T13732] netlink: 'syz.0.2963': attribute type 29 has an invalid length. [ 318.897009][ T7685] ocfs2: Unmounting device (7,8) on (node local) [ 319.149175][T13752] device-mapper: table: 248:11: start=1 not aligned to h/w logical block size 1024 of ram6 [ 319.227323][T13752] device-mapper: core: Cannot calculate initial queue limits [ 319.271998][T13752] device-mapper: ioctl: unable to set up device queue for new table. [ 319.294703][T13765] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 319.770364][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.084791][T13807] ieee802154 phy0 wpan0: encryption failed: -22 [ 320.206743][T13815] loop8: detected capacity change from 0 to 512 [ 320.238215][T13816] loop3: detected capacity change from 0 to 512 [ 320.304205][T13815] EXT4-fs (loop8): orphan cleanup on readonly fs [ 320.320722][T13816] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 320.339748][T13815] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -13 [ 320.371197][T13815] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 320.406441][T13816] EXT4-fs (loop3): 1 truncate cleaned up [ 320.415978][T13815] EXT4-fs error (device loop8): ext4_clear_blocks:883: inode #13: comm syz.8.2995: attempt to clear invalid blocks 2 len 1 [ 320.438250][T13816] EXT4-fs (loop3): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,usrjquota=,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 320.468546][T13815] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #13: comm syz.8.2995: invalid indirect mapped block 1819239214 (level 0) [ 320.486510][T13815] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #13: comm syz.8.2995: invalid indirect mapped block 1819239214 (level 1) [ 320.511932][T13815] EXT4-fs (loop8): 1 truncate cleaned up [ 320.529008][T13815] EXT4-fs (loop8): mounted filesystem without journal. Opts: barrier,jqfmt=vfsv0,abort,auto_da_alloc,noquota,usrjquota=..,errors=continue. Quota mode: writeback. [ 320.586213][ T7685] EXT4-fs error (device loop8): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: inode out of bounds - offset=24, inode=85, rec_len=20, size=1024 fake=0 [ 320.815014][ T4785] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.888966][ T8140] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.139902][ T8140] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.242959][ T8140] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.411664][T13836] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3002'. [ 321.451880][T13836] device macvlan0 entered promiscuous mode [ 321.515582][T13836] netlink: 'syz.9.3002': attribute type 2 has an invalid length. [ 321.566596][T13839] rxe_eth0 speed is unknown, defaulting to 1000 [ 321.613630][ T4783] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.851944][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.866666][T13849] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.875859][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.009089][ T4783] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.148277][T13856] loop0: detected capacity change from 0 to 64 [ 322.521711][T13839] chnl_net:caif_netlink_parms(): no params data found [ 322.682971][T13882] openvswitch: netlink: Actions may not be safe on all matching packets [ 322.819547][T13845] loop9: detected capacity change from 0 to 32768 [ 322.934577][T13845] XFS (loop9): Mounting V5 Filesystem [ 323.017581][T13839] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.084685][T13905] loop7: detected capacity change from 0 to 512 [ 323.096779][T13839] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.124966][T13845] XFS (loop9): Ending clean mount [ 323.162718][T13839] device bridge_slave_0 entered promiscuous mode [ 323.229079][T13905] EXT4-fs (loop7): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 323.287948][ T7806] XFS (loop9): Unmounting Filesystem [ 323.323385][T13839] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.336442][T13905] ext4 filesystem being mounted at /480/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 323.378048][T13839] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.448865][T13839] device bridge_slave_1 entered promiscuous mode [ 323.572493][ T4783] Bluetooth: hci2: command 0x0409 tx timeout [ 323.628891][T13839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 323.738412][T13839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 323.903173][ T8140] device hsr_slave_0 left promiscuous mode [ 323.925361][T13932] loop7: detected capacity change from 0 to 512 [ 323.932082][ C0] ------------[ cut here ]------------ [ 323.932183][ C0] NETDEV WATCHDOG: lec0 (): transmit queue 0 timed out [ 323.932630][ C0] WARNING: CPU: 0 PID: 13932 at net/sched/sch_generic.c:481 dev_watchdog+0x85d/0xa40 [ 323.932661][ C0] Modules linked in: [ 323.932675][ C0] CPU: 0 PID: 13932 Comm: syz.7.3025 Not tainted syzkaller #0 [ 323.932689][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 323.932703][ C0] RIP: 0010:dev_watchdog+0x85d/0xa40 [ 323.932720][ C0] Code: 77 4c 06 01 48 8b 5c 24 20 48 89 df e8 9c ca e3 ff 48 c7 c7 c0 68 23 8b 48 89 de 48 8b 1c 24 48 89 c2 44 89 e1 e8 83 96 b1 01 <0f> 0b e9 51 fe ff ff e8 37 3a 6c f9 0f 0b e9 33 fe ff ff 89 d9 80 [ 323.932733][ C0] RSP: 0018:ffffc90000007af0 EFLAGS: 00010246 [ 323.932746][ C0] RAX: c5bac26b80b3b400 RBX: ffff88807bb18448 RCX: ffff888056cd5940 [ 323.932758][ C0] RDX: 0000000000000100 RSI: 0000000000000102 RDI: 0000000000000000 [ 323.932767][ C0] RBP: dffffc0000000000 R08: ffff8880b8e2795b R09: 1ffff110171c4f2b [ 323.932779][ C0] R10: dffffc0000000000 R11: ffffed10171c4f2c R12: 0000000000000000 [ 323.932790][ C0] R13: ffff88807bb18540 R14: 0000000000000000 R15: dffffc0000000000 [ 323.932800][ C0] FS: 00007f0fd742c6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 323.932814][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 323.932824][ C0] CR2: 00007f0fcf04b000 CR3: 000000002074c000 CR4: 00000000003506f0 [ 323.932837][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 323.932846][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 323.932867][ C0] Call Trace: [ 323.932872][ C0] [ 323.932883][ C0] ? dev_init_scheduler+0x360/0x360 [ 323.932900][ C0] call_timer_fn+0x17b/0x540 [ 323.932916][ C0] ? dev_init_scheduler+0x360/0x360 [ 323.932932][ C0] ? __run_timers+0x810/0x810 [ 323.932951][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 323.932966][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 323.932987][ C0] ? dev_init_scheduler+0x360/0x360 [ 323.933003][ C0] __run_timers+0x56c/0x810 [ 323.933027][ C0] ? detach_timer+0x2b0/0x2b0 [ 323.933040][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 323.933060][ C0] ? sched_clock_cpu+0x15/0x3c0 [ 323.933075][ C0] ? seqcount_lockdep_reader_access+0x177/0x1d0 [ 323.933093][ C0] run_timer_softirq+0x63/0xf0 [ 323.933109][ C0] handle_softirqs+0x336/0x830 [ 323.933126][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 323.933141][ C0] ? do_softirq+0x210/0x210 [ 323.933154][ C0] ? hrtimer_interrupt+0x6a2/0x8b0 [ 323.933171][ C0] ? irqtime_account_irq+0xb2/0x1b0 [ 323.933187][ C0] __irq_exit_rcu+0x13b/0x230 [ 323.933200][ C0] ? irq_exit_rcu+0x20/0x20 [ 323.933220][ C0] irq_exit_rcu+0x5/0x20 [ 323.933231][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 323.933246][ C0] [ 323.933250][ C0] [ 323.933256][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 323.933271][ C0] RIP: 0010:console_unlock+0xc90/0x10f0 [ 323.933284][ C0] Code: 75 11 e8 b3 e9 18 00 4d 85 e4 75 16 e8 a9 e9 18 00 eb 15 e8 a2 e9 18 00 e8 6d 47 69 08 4d 85 e4 74 ea e8 93 e9 18 00 fb 31 ff <89> de e8 e9 ec 18 00 85 db 0f 94 c0 22 44 24 1f 3c 01 75 1f e8 77 [ 323.933295][ C0] RSP: 0018:ffffc9000314ee00 EFLAGS: 00000246 [ 323.933307][ C0] RAX: ffffffff816043fd RBX: 0000000000000000 RCX: 0000000000080000 [ 323.933316][ C0] RDX: ffffc90003901000 RSI: 000000000000b799 RDI: 0000000000000000 [ 323.933325][ C0] RBP: ffffc9000314f070 R08: ffffffff910470c7 R09: 1ffffffff2208e18 [ 323.933336][ C0] R10: dffffc0000000000 R11: fffffbfff2208e19 R12: 0000000000000200 [ 323.933346][ C0] R13: 0000000000000045 R14: 0000000000000000 R15: dffffc0000000000 [ 323.933360][ C0] ? console_unlock+0xc8d/0x10f0 [ 323.933376][ C0] ? read_lock_is_recursive+0x10/0x10 [ 323.933396][ C0] ? console_trylock_spinning+0x370/0x370 [ 323.933409][ C0] ? __down_trylock_console_sem+0xf2/0x1f0 [ 323.933424][ C0] ? __down_trylock_console_sem+0x19f/0x1f0 [ 323.933437][ C0] ? vprintk_emit+0xa7/0x150 [ 323.933449][ C0] ? printk_parse_prefix+0x310/0x310 [ 323.933461][ C0] ? vprintk_emit+0xa7/0x150 [ 323.933473][ C0] ? console_trylock+0x70/0x70 [ 323.933485][ C0] ? mark_lock+0x94/0x320 [ 323.933499][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 323.933520][ C0] ? vprintk_emit+0x150/0x150 [ 323.933537][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 323.933551][ C0] ? _raw_spin_unlock+0x40/0x40 [ 323.933566][ C0] vprintk_emit+0xc0/0x150 [ 323.933581][ C0] _printk+0xda/0x130 [ 323.933599][ C0] ? load_image+0x410/0x410 [ 323.933617][ C0] ? do_raw_spin_unlock+0x11d/0x230 [ 323.933633][ C0] set_capacity_and_notify+0x363/0x390 [ 323.933650][ C0] ? set_capacity+0xa0/0xa0 [ 323.933663][ C0] ? sysfs_create_group+0x20/0x20 [ 323.933682][ C0] loop_set_size+0x44/0xa0 [ 323.933696][ C0] loop_configure+0xf88/0x1480 [ 323.933719][ C0] lo_ioctl+0x2e1/0x20e0 [ 323.933736][ C0] ? __lock_acquire+0x12df/0x7d40 [ 323.933755][ C0] ? lo_release+0x1f0/0x1f0 [ 323.933769][ C0] ? __lock_acquire+0x13b3/0x7d40 [ 323.933788][ C0] ? mark_lock+0x94/0x320 [ 323.933800][ C0] ? verify_lock_unused+0x140/0x140 [ 323.933818][ C0] ? mark_lock+0x94/0x320 [ 323.933848][ C0] ? rcu_lock_release+0x5/0x20 [ 323.933865][ C0] ? __lock_acquire+0x7d40/0x7d40 [ 323.933883][ C0] ? unwind_next_frame+0x11ec/0x1cf0 [ 323.933902][ C0] ? 0xffffffffa0030000 [ 323.933913][ C0] ? is_bpf_text_address+0x254/0x270 [ 323.933928][ C0] ? __kernel_text_address+0x9a/0x100 [ 323.933957][ C0] ? unwind_get_return_address+0x49/0x80 [ 323.933975][ C0] ? stack_trace_save+0xf0/0xf0 [ 323.933987][ C0] ? arch_stack_walk+0xf2/0x140 [ 323.934008][ C0] ? kfree+0xef/0x2a0 [ 323.934021][ C0] ? stack_trace_save+0xa6/0xf0 [ 323.934035][ C0] ? stack_trace_snprint+0xe0/0xe0 [ 323.934047][ C0] ? slab_free_freelist_hook+0xec/0x170 [ 323.934061][ C0] ? security_file_ioctl+0x6c/0xa0 [ 323.934076][ C0] ? __se_sys_ioctl+0x48/0x170 [ 323.934088][ C0] ? do_syscall_64+0x4c/0xa0 [ 323.934099][ C0] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 323.934116][ C0] ? kfree+0xef/0x2a0 [ 323.934128][ C0] ? kasan_set_track+0x62/0x70 [ 323.934142][ C0] ? kasan_set_track+0x4b/0x70 [ 323.934154][ C0] ? kasan_set_free_info+0x1f/0x40 [ 323.934169][ C0] ? ____kasan_slab_free+0xd5/0x110 [ 323.934182][ C0] ? slab_free_freelist_hook+0xec/0x170 [ 323.934195][ C0] ? kfree+0xef/0x2a0 [ 323.934207][ C0] ? tomoyo_path_number_perm+0x55c/0x6b0 [ 323.934221][ C0] ? security_file_ioctl+0x6c/0xa0 [ 323.934234][ C0] ? __se_sys_ioctl+0x48/0x170 [ 323.934246][ C0] ? do_syscall_64+0x4c/0xa0 [ 323.934257][ C0] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 323.934287][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 323.934305][ C0] ? lock_chain_count+0x20/0x20 [ 323.934320][ C0] ? do_vfs_ioctl+0x1d5e/0x1f40 [ 323.934350][ C0] ? blkdev_common_ioctl+0x6b9/0x1ed0 [ 323.934364][ C0] ? tomoyo_path_number_perm+0x5f7/0x6b0 [ 323.934380][ C0] ? blkdev_bszset+0x200/0x200 [ 323.934414][ C0] ? lo_release+0x1f0/0x1f0 [ 323.934429][ C0] blkdev_ioctl+0x347/0x6f0 [ 323.934444][ C0] ? blkdev_compat_ptr_ioctl+0xd0/0xd0 [ 323.934462][ C0] ? blkdev_iopoll+0x100/0x100 [ 323.934478][ C0] block_ioctl+0xac/0xf0 [ 323.934494][ C0] __se_sys_ioctl+0xfa/0x170 [ 323.934508][ C0] do_syscall_64+0x4c/0xa0 [ 323.934520][ C0] ? clear_bhb_loop+0x30/0x80 [ 323.934533][ C0] ? clear_bhb_loop+0x30/0x80 [ 323.934547][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 323.934561][ C0] RIP: 0033:0x7f0fd91d51eb [ 323.934573][ C0] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 323.934584][ C0] RSP: 002b:00007f0fd742bdb0 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 323.934599][ C0] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f0fd91d51eb [ 323.934608][ C0] RDX: 0000000000000003 RSI: 0000000000004c00 RDI: 0000000000000004 [ 323.934617][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 323.934625][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 323.934633][ C0] R13: 00007f0fd742bee0 R14: 00007f0fd742bea0 R15: 00007f0fcf00c000 [ 323.934653][ C0] [ 323.934662][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 323.934669][ C0] CPU: 0 PID: 13932 Comm: syz.7.3025 Not tainted syzkaller #0 [ 323.934681][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 323.934688][ C0] Call Trace: [ 323.934692][ C0] [ 323.934697][ C0] dump_stack_lvl+0x188/0x250 [ 323.934714][ C0] ? show_regs_print_info+0x20/0x20 [ 323.934728][ C0] ? load_image+0x410/0x410 [ 323.934750][ C0] panic+0x2f8/0x850 [ 323.934766][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 323.934786][ C0] ? dev_watchdog+0x85d/0xa40 [ 323.934801][ C0] __warn+0x248/0x2b0 [ 323.934815][ C0] ? dev_watchdog+0x85d/0xa40 [ 323.934830][ C0] report_bug+0x1b9/0x2e0 [ 323.934849][ C0] handle_bug+0x3a/0x70 [ 323.934860][ C0] exc_invalid_op+0x16/0x40 [ 323.934872][ C0] asm_exc_invalid_op+0x16/0x20 [ 323.934884][ C0] RIP: 0010:dev_watchdog+0x85d/0xa40 [ 323.934898][ C0] Code: 77 4c 06 01 48 8b 5c 24 20 48 89 df e8 9c ca e3 ff 48 c7 c7 c0 68 23 8b 48 89 de 48 8b 1c 24 48 89 c2 44 89 e1 e8 83 96 b1 01 <0f> 0b e9 51 fe ff ff e8 37 3a 6c f9 0f 0b e9 33 fe ff ff 89 d9 80 [ 323.934909][ C0] RSP: 0018:ffffc90000007af0 EFLAGS: 00010246 [ 323.934920][ C0] RAX: c5bac26b80b3b400 RBX: ffff88807bb18448 RCX: ffff888056cd5940 [ 323.934930][ C0] RDX: 0000000000000100 RSI: 0000000000000102 RDI: 0000000000000000 [ 323.934938][ C0] RBP: dffffc0000000000 R08: ffff8880b8e2795b R09: 1ffff110171c4f2b [ 323.934948][ C0] R10: dffffc0000000000 R11: ffffed10171c4f2c R12: 0000000000000000 [ 323.934957][ C0] R13: ffff88807bb18540 R14: 0000000000000000 R15: dffffc0000000000 [ 323.934985][ C0] ? dev_init_scheduler+0x360/0x360 [ 323.935000][ C0] call_timer_fn+0x17b/0x540 [ 323.935014][ C0] ? dev_init_scheduler+0x360/0x360 [ 323.935029][ C0] ? __run_timers+0x810/0x810 [ 323.935048][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 323.935060][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 323.935073][ C0] ? dev_init_scheduler+0x360/0x360 [ 323.935088][ C0] __run_timers+0x56c/0x810 [ 323.935111][ C0] ? detach_timer+0x2b0/0x2b0 [ 323.935123][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 323.935142][ C0] ? sched_clock_cpu+0x15/0x3c0 [ 323.935155][ C0] ? seqcount_lockdep_reader_access+0x177/0x1d0 [ 323.935172][ C0] run_timer_softirq+0x63/0xf0 [ 323.935186][ C0] handle_softirqs+0x336/0x830 [ 323.935201][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 323.935216][ C0] ? do_softirq+0x210/0x210 [ 323.935228][ C0] ? hrtimer_interrupt+0x6a2/0x8b0 [ 323.935244][ C0] ? irqtime_account_irq+0xb2/0x1b0 [ 323.935260][ C0] __irq_exit_rcu+0x13b/0x230 [ 323.935272][ C0] ? irq_exit_rcu+0x20/0x20 [ 323.935291][ C0] irq_exit_rcu+0x5/0x20 [ 323.935301][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 323.935315][ C0] [ 323.935319][ C0] [ 323.935324][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 323.935337][ C0] RIP: 0010:console_unlock+0xc90/0x10f0 [ 323.935349][ C0] Code: 75 11 e8 b3 e9 18 00 4d 85 e4 75 16 e8 a9 e9 18 00 eb 15 e8 a2 e9 18 00 e8 6d 47 69 08 4d 85 e4 74 ea e8 93 e9 18 00 fb 31 ff <89> de e8 e9 ec 18 00 85 db 0f 94 c0 22 44 24 1f 3c 01 75 1f e8 77 [ 323.935359][ C0] RSP: 0018:ffffc9000314ee00 EFLAGS: 00000246 [ 323.935370][ C0] RAX: ffffffff816043fd RBX: 0000000000000000 RCX: 0000000000080000 [ 323.935379][ C0] RDX: ffffc90003901000 RSI: 000000000000b799 RDI: 0000000000000000 [ 323.935387][ C0] RBP: ffffc9000314f070 R08: ffffffff910470c7 R09: 1ffffffff2208e18 [ 323.935397][ C0] R10: dffffc0000000000 R11: fffffbfff2208e19 R12: 0000000000000200 [ 323.935406][ C0] R13: 0000000000000045 R14: 0000000000000000 R15: dffffc0000000000 [ 323.935419][ C0] ? console_unlock+0xc8d/0x10f0 [ 323.935435][ C0] ? read_lock_is_recursive+0x10/0x10 [ 323.935454][ C0] ? console_trylock_spinning+0x370/0x370 [ 323.935466][ C0] ? __down_trylock_console_sem+0xf2/0x1f0 [ 323.935481][ C0] ? __down_trylock_console_sem+0x19f/0x1f0 [ 323.935493][ C0] ? vprintk_emit+0xa7/0x150 [ 323.935504][ C0] ? printk_parse_prefix+0x310/0x310 [ 323.935516][ C0] ? vprintk_emit+0xa7/0x150 [ 323.935527][ C0] ? console_trylock+0x70/0x70 [ 323.935538][ C0] ? mark_lock+0x94/0x320 [ 323.935551][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 323.935572][ C0] ? vprintk_emit+0x150/0x150 [ 323.935588][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 323.935601][ C0] ? _raw_spin_unlock+0x40/0x40 [ 323.935616][ C0] vprintk_emit+0xc0/0x150 [ 323.935630][ C0] _printk+0xda/0x130 [ 323.935665][ C0] ? load_image+0x410/0x410 [ 323.935684][ C0] ? do_raw_spin_unlock+0x11d/0x230 [ 323.935700][ C0] set_capacity_and_notify+0x363/0x390 [ 323.935716][ C0] ? set_capacity+0xa0/0xa0 [ 323.935730][ C0] ? sysfs_create_group+0x20/0x20 [ 323.935748][ C0] loop_set_size+0x44/0xa0 [ 323.935761][ C0] loop_configure+0xf88/0x1480 [ 323.935785][ C0] lo_ioctl+0x2e1/0x20e0 [ 323.935802][ C0] ? __lock_acquire+0x12df/0x7d40 [ 323.935822][ C0] ? lo_release+0x1f0/0x1f0 [ 323.935835][ C0] ? __lock_acquire+0x13b3/0x7d40 [ 323.935855][ C0] ? mark_lock+0x94/0x320 [ 323.935867][ C0] ? verify_lock_unused+0x140/0x140 [ 323.935886][ C0] ? mark_lock+0x94/0x320 [ 323.935916][ C0] ? rcu_lock_release+0x5/0x20 [ 323.935932][ C0] ? __lock_acquire+0x7d40/0x7d40 [ 323.935950][ C0] ? unwind_next_frame+0x11ec/0x1cf0 [ 323.935989][ C0] ? 0xffffffffa0030000 [ 323.935999][ C0] ? is_bpf_text_address+0x254/0x270 [ 323.936015][ C0] ? __kernel_text_address+0x9a/0x100 [ 323.936031][ C0] ? unwind_get_return_address+0x49/0x80 [ 323.936046][ C0] ? stack_trace_save+0xf0/0xf0 [ 323.936059][ C0] ? arch_stack_walk+0xf2/0x140 [ 323.936079][ C0] ? kfree+0xef/0x2a0 [ 323.936091][ C0] ? stack_trace_save+0xa6/0xf0 [ 323.936104][ C0] ? stack_trace_snprint+0xe0/0xe0 [ 323.936116][ C0] ? slab_free_freelist_hook+0xec/0x170 [ 323.936131][ C0] ? security_file_ioctl+0x6c/0xa0 [ 323.936145][ C0] ? __se_sys_ioctl+0x48/0x170 [ 323.936156][ C0] ? do_syscall_64+0x4c/0xa0 [ 323.936168][ C0] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 323.936185][ C0] ? kfree+0xef/0x2a0 [ 323.936198][ C0] ? kasan_set_track+0x62/0x70 [ 323.936211][ C0] ? kasan_set_track+0x4b/0x70 [ 323.936227][ C0] ? kasan_set_free_info+0x1f/0x40 [ 323.936241][ C0] ? ____kasan_slab_free+0xd5/0x110 [ 323.936255][ C0] ? slab_free_freelist_hook+0xec/0x170 [ 323.936268][ C0] ? kfree+0xef/0x2a0 [ 323.936280][ C0] ? tomoyo_path_number_perm+0x55c/0x6b0 [ 323.936294][ C0] ? security_file_ioctl+0x6c/0xa0 [ 323.936307][ C0] ? __se_sys_ioctl+0x48/0x170 [ 323.936319][ C0] ? do_syscall_64+0x4c/0xa0 [ 323.936330][ C0] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 323.936361][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 323.936379][ C0] ? lock_chain_count+0x20/0x20 [ 323.936395][ C0] ? do_vfs_ioctl+0x1d5e/0x1f40 [ 323.936425][ C0] ? blkdev_common_ioctl+0x6b9/0x1ed0 [ 323.936439][ C0] ? tomoyo_path_number_perm+0x5f7/0x6b0 [ 323.936456][ C0] ? blkdev_bszset+0x200/0x200 [ 323.936491][ C0] ? lo_release+0x1f0/0x1f0 [ 323.936506][ C0] blkdev_ioctl+0x347/0x6f0 [ 323.936521][ C0] ? blkdev_compat_ptr_ioctl+0xd0/0xd0 [ 323.936539][ C0] ? blkdev_iopoll+0x100/0x100 [ 323.936559][ C0] block_ioctl+0xac/0xf0 [ 323.936575][ C0] __se_sys_ioctl+0xfa/0x170 [ 323.936590][ C0] do_syscall_64+0x4c/0xa0 [ 323.936602][ C0] ? clear_bhb_loop+0x30/0x80 [ 323.936615][ C0] ? clear_bhb_loop+0x30/0x80 [ 323.936629][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 323.936643][ C0] RIP: 0033:0x7f0fd91d51eb [ 323.936653][ C0] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 323.936664][ C0] RSP: 002b:00007f0fd742bdb0 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 323.936678][ C0] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f0fd91d51eb [ 323.936687][ C0] RDX: 0000000000000003 RSI: 0000000000004c00 RDI: 0000000000000004 [ 323.936696][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 323.936704][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 323.936712][ C0] R13: 00007f0fd742bee0 R14: 00007f0fd742bea0 R15: 00007f0fcf00c000 [ 323.936732][ C0] [ 323.936808][ C0] Kernel Offset: disabled [ 325.529004][ C0] Rebooting in 86400 seconds..