last executing test programs: 1m32.465308511s ago: executing program 5 (id=5203): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000040)={0x0, 0xfff9}, &(0x7f0000001080)=0x8) 1m32.159781645s ago: executing program 5 (id=5207): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x400, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x330, 0xffffffff, 0xffffffff, 0x330, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0xffffff00, 0xff000000], [0xffffff00], 'veth0_macvtap\x00', 'dvmrp1\x00', {0xff}, {0xff}, 0x88, 0x0, 0x3}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [0x0, 0x0, 0xffffff00], [0xff, 0x0, 0x0, 0xff000000], 'pimreg0\x00', 'gre0\x00', {}, {}, 0x0, 0x0, 0x3}, 0x0, 0x230, 0x260, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv6=@private2, [0x0, 0xff000000, 0xff000000, 0xffffff00], @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0x0, 0xffffffff, 0xff, 0xff000000], 0x4d5, 0x3504, 0x67, 0x0, 0x11, 0x13}, {@ipv6=@private0, [0xff000000, 0x0, 0xff, 0xff000000], @ipv4=@loopback, [0xff000000, 0x0, 0x0, 0xffffff00], 0x4d5, 0x3500, 0x5c, 0x0, 0x12, 0x6}, {@ipv4=@local, [0xffffff00, 0x0, 0x0, 0xff000000], @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x0, 0xffffff00, 0xffffffff, 0xff000000], 0x4d4, 0x3507, 0xc, 0x1, 0x0, 0x16}, {@ipv4=@multicast1, [0x0, 0x181ffff7f, 0xffffff00, 0xff], @ipv4=@local, [0xffffffff, 0x0, 0xff000000], 0x4d3, 0x0, 0x32, 0x1, 0x8, 0x6}], 0x2, 0x3}}, @common=@ah={{0x30}, {[0x4d4, 0x4d4], 0x84, 0x25, 0x3}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0xffffffff}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x460) 1m31.565535443s ago: executing program 5 (id=5214): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r0, 0x0, 0xd0, &(0x7f0000005900), 0x4) 1m31.238912248s ago: executing program 5 (id=5219): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000240)='./bus\x00', 0x1800840, &(0x7f0000000000)={[{@shortname_win95}, {@shortname_winnt}, {@numtail}, {@shortname_mixed}, {@uni_xlate}, {@rodir}, {@rodir}, {@shortname_win95}, {@uni_xlate}, {@fat=@discard}, {@utf8no}, {@utf8no}, {@shortname_mixed}, {@iocharset={'iocharset', 0x3d, 'macroman'}}]}, 0x1, 0x360, &(0x7f0000001280)="$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") mount$nfs(&(0x7f0000000300)='\xb2\x83\x87J9I\xc3i\xe4\x81\xc5:\xccLD\x9d\xd8\xc7\x90v\x8b\x82\x90\xa4\xdd\x98\xb8\rQh#\xfacl\x01\x8cC\x1f|\xa5\xcb\x8f\xe5WJ\x00>\xf2\xd6\t\xf4IE\xcb\x15A\xb5\xbbG\xa0\xea\xc4\x03\xf2\xf5\xf4\xa1\x98', &(0x7f0000000240)='./file0\x00', 0x0, 0x201008, 0x0) 1m30.23818871s ago: executing program 5 (id=5229): r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/ip6_mr_cache\x00') read$FUSE(r0, &(0x7f0000001c80)={0x2020}, 0x2020) 1m29.375969319s ago: executing program 5 (id=5240): r0 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, 0x0, 0x0) 1m28.595468004s ago: executing program 32 (id=5240): r0 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, 0x0, 0x0) 4.172456434s ago: executing program 4 (id=6266): r0 = syz_mount_image$xfs(&(0x7f0000009600), &(0x7f0000009640)='./file0\x00', 0x0, &(0x7f0000000280)={[{@grpid}, {@nolazytime}, {@inode32}]}, 0x0, 0x9747, &(0x7f000001c440)="$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") ioctl$FITRIM(r0, 0x80405880, 0x0) 2.449764927s ago: executing program 2 (id=6280): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e0, &(0x7f00000014c0)="25208181b7ebb252cc460ef6e472e16a98") 2.326883221s ago: executing program 6 (id=6281): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r0, 0x29, 0x1, 0x0, &(0x7f00000000c0)) 2.211284721s ago: executing program 0 (id=6282): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000300)={0x1f, 0xf0ac, @none, 0x0, 0x3e5bc90dc9f3bbdc}, 0xe) 2.16262389s ago: executing program 6 (id=6283): set_mempolicy(0x2002, &(0x7f0000000000)=0x9, 0x9) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000000000/0x4000)=nil) 1.969079727s ago: executing program 4 (id=6284): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, 0x0) 1.928246436s ago: executing program 3 (id=6285): r0 = syz_open_dev$swradio(&(0x7f0000000340), 0x0, 0x2) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000d80)={0x0, 0xb, 0x0, "2ac0749f7a19d71029970ac5e8092a6c6bd27d45d01f1af84d4f7d0b48a36eb2"}) 1.919587734s ago: executing program 2 (id=6286): r0 = syz_open_dev$I2C(&(0x7f0000000800), 0x0, 0x0) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f00000000c0)={0x0, 0x0, 0x5, &(0x7f0000000080)={0x7, "96ab3f272339cf3935a8824943478cb18a5722d2da3a03f39b5eaee25558f362e7"}}) 1.865799133s ago: executing program 0 (id=6287): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x8, 0x0, 0x7ffc0002}]}) migrate_pages(0x0, 0x7, 0x0, 0x0) 1.806754005s ago: executing program 6 (id=6288): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x2, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000020100000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000004000000bf09000000000000550901000074f696e500000000000000180100002020702500000000002020207baaf8ff00000000bda100000000000027010000f8ffffffb702000008000000b7030000000000002500000006000000be91000000000000b502ecffffff00008500000005000000b70000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.579506938s ago: executing program 2 (id=6290): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x1012, 0x2, @stepwise={0x7fffffff, 0x1, 0x5, 0x7, 0x6, 0x80000000}}) 1.488317263s ago: executing program 0 (id=6291): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000980)={0x28, 0x1412, 0x1, 0x70bd27, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x8000001}]}, 0x28}, 0x1, 0x0, 0x0, 0x40084}, 0x810) 1.476533364s ago: executing program 3 (id=6292): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b06, &(0x7f0000000140)={'wlan1\x00', @random="0100000000eb"}) 1.307925014s ago: executing program 6 (id=6293): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000c0], 0x11, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff8646000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff00000000"]}, 0x108) 1.274633884s ago: executing program 1 (id=6294): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r0, 0x118, 0x1, &(0x7f0000000100)=0x40280, 0x25) 1.140278807s ago: executing program 2 (id=6295): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x409, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x31}, @NFTA_SET_USERDATA={0x5, 0xd, 0x1, 0x0, "aa"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x8c}, 0x1, 0x0, 0x0, 0x4008084}, 0x604c000) 1.091171102s ago: executing program 0 (id=6296): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x200000, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000400)='gadgetfs\x00', 0x10, 0x0) 1.032388688s ago: executing program 3 (id=6297): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000f80)={0x24, 0x2c, 0x107, 0x0, 0x25dfdbff, {0x3, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@typed={0x4, 0x6}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x1}]}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) 931.320067ms ago: executing program 1 (id=6298): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, 0x42, 0xb, 0x70ad23, 0x25cfdbfe, {0x1}, [@typed={0x8, 0x2, 0x0, 0x0, @pid}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x40094) 888.763911ms ago: executing program 6 (id=6299): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/cpuinfo\x00', 0x0, 0x0) lseek(r0, 0xfffffffffffffff5, 0x1) 735.928955ms ago: executing program 0 (id=6300): r0 = socket$can_bcm(0x1d, 0x2, 0x2) accept4$packet(r0, 0x0, 0x0, 0x800) 735.097599ms ago: executing program 2 (id=6301): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000580)={0x2, 0xd, 0x0, 0x2, 0x7, 0x0, 0x70bd27, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}}]}, 0x38}, 0x1, 0x7}, 0x4040080) 718.736299ms ago: executing program 4 (id=6302): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x1, 0x0, &(0x7f00000001c0)=[@enter_looper], 0x1, 0x0, &(0x7f0000001a40)}) 695.834965ms ago: executing program 3 (id=6303): r0 = socket(0x1e, 0x1, 0x0) getsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f00000003c0), &(0x7f0000000400)=0x4) 578.934375ms ago: executing program 1 (id=6304): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000080)) 507.223894ms ago: executing program 6 (id=6305): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000380)='./file0\x00', 0x2000002, &(0x7f0000000340), 0x9, 0x558, &(0x7f0000001a80)="$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") chown(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 474.778018ms ago: executing program 4 (id=6306): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@RTM_DELMDB={0x38, 0x55, 0x93d, 0x2000002, 0x25dfdbfc, {}, [@MDBA_SET_ENTRY={0x12, 0x1, {0x0, 0x0, 0x3, 0x3, {@ip4=@broadcast, 0x86dd}}}]}, 0x38}}, 0x0) 379.099282ms ago: executing program 1 (id=6307): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000200)=@req3={0xf, 0x2, 0x1, 0x768, 0x4, 0x5, 0x8}, 0x1c) 378.505337ms ago: executing program 3 (id=6308): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, &(0x7f0000000240)) 337.110988ms ago: executing program 2 (id=6309): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @local, 0x15, 0x3, 'lc\x00', 0x1, 0x4, 0x8}, 0x2c) 326.52342ms ago: executing program 0 (id=6310): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x8, &(0x7f0000000180)=@raw=[@printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000080)={0xf400, 0x1}, 0xf4240}, 0x94) 290.900031ms ago: executing program 1 (id=6311): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000700)={0x24, 0x1, 0x1, 0x201, 0x0, 0x0, {0x3, 0x0, 0x1}, [@CTA_TUPLE_REPLY={0x4}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x200}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x20000080) 138.808058ms ago: executing program 3 (id=6312): r0 = socket$inet6(0xa, 0x2, 0x3a) sendto$inet6(r0, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) 62.923415ms ago: executing program 4 (id=6313): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x35d, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x16}]}}, @common=@hl={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) 10.756754ms ago: executing program 1 (id=6314): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_HOOK_HOOKNUM={0x8}]}]}], {0x14}}, 0x90}, 0x1, 0x1000000}, 0x0) 0s ago: executing program 4 (id=6315): r0 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, 0x0, 0x0) kernel console output (not intermixed with test programs): +0x14/0x30 [ 753.283316][T18084] ? srso_alias_return_thunk+0x5/0xfbef5 [ 753.283366][T18084] ima_calc_file_hash_tfm+0x25c/0x350 [ 753.283433][T18084] ? __pfx_ima_calc_file_hash_tfm+0x10/0x10 [ 753.283547][T18084] ? stack_trace_save+0x60/0xc0 [ 753.283609][T18084] ? __pfx_stack_trace_save+0x10/0x10 [ 753.283664][T18084] ? srso_alias_return_thunk+0x5/0xfbef5 [ 753.283708][T18084] ? ima_alloc_tfm+0x21a/0x2e0 [ 753.283759][T18084] ? srso_alias_return_thunk+0x5/0xfbef5 [ 753.283804][T18084] ? generic_fillattr+0x6bf/0x940 [ 753.283851][T18084] ima_calc_file_hash+0x1ba/0x490 [ 753.283916][T18084] ima_collect_measurement+0x8a6/0xa50 [ 753.283993][T18084] ? __pfx_ima_collect_measurement+0x10/0x10 [ 753.284085][T18084] ? srso_alias_return_thunk+0x5/0xfbef5 [ 753.284129][T18084] ? __mutex_lock+0x1c5/0x1060 [ 753.284180][T18084] ? srso_alias_return_thunk+0x5/0xfbef5 [ 753.284224][T18084] ? is_bad_inode+0xd/0x40 [ 753.284272][T18084] ? srso_alias_return_thunk+0x5/0xfbef5 [ 753.284315][T18084] ? xattr_resolve_name+0x27b/0x3f0 [ 753.284378][T18084] ? srso_alias_return_thunk+0x5/0xfbef5 [ 753.284422][T18084] ? vfs_getxattr_alloc+0xec/0x350 [ 753.284489][T18084] ? srso_alias_return_thunk+0x5/0xfbef5 [ 753.284533][T18084] ? ima_get_hash_algo+0x27c/0x400 [ 753.284590][T18084] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 753.284639][T18084] ? srso_alias_return_thunk+0x5/0xfbef5 [ 753.284695][T18084] ? process_measurement+0x11fa/0x23e0 [ 753.284747][T18084] ? srso_alias_return_thunk+0x5/0xfbef5 [ 753.284800][T18084] process_measurement+0x11fa/0x23e0 [ 753.284875][T18084] ? __pfx_process_measurement+0x10/0x10 [ 753.284927][T18084] ? tomoyo_check_open_permission+0x20e/0x3c0 [ 753.284993][T18084] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 753.285121][T18084] ? srso_alias_return_thunk+0x5/0xfbef5 [ 753.285164][T18084] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 753.285226][T18084] ? srso_alias_return_thunk+0x5/0xfbef5 [ 753.285270][T18084] ? inode_to_bdi+0x9e/0x160 [ 753.285335][T18084] ima_file_check+0xc5/0x110 [ 753.285389][T18084] ? __pfx_ima_file_check+0x10/0x10 [ 753.285449][T18084] ? srso_alias_return_thunk+0x5/0xfbef5 [ 753.285501][T18084] security_file_post_open+0x8e/0x210 [ 753.285541][T18084] path_openat+0x1404/0x2cb0 [ 753.285621][T18084] ? __pfx_path_openat+0x10/0x10 [ 753.285683][T18084] ? __lock_acquire+0xb8a/0x1c90 [ 753.285751][T18084] do_filp_open+0x20b/0x470 [ 753.285810][T18084] ? __pfx_do_filp_open+0x10/0x10 [ 753.285905][T18084] ? srso_alias_return_thunk+0x5/0xfbef5 [ 753.285949][T18084] ? alloc_fd+0x471/0x7d0 [ 753.286021][T18084] do_sys_openat2+0x11b/0x1d0 [ 753.286063][T18084] ? __pfx_do_sys_openat2+0x10/0x10 [ 753.286127][T18084] __x64_sys_openat+0x174/0x210 [ 753.286171][T18084] ? __pfx___x64_sys_openat+0x10/0x10 [ 753.286223][T18084] ? srso_alias_return_thunk+0x5/0xfbef5 [ 753.286279][T18084] do_syscall_64+0xcd/0xfa0 [ 753.286355][T18084] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 753.286392][T18084] RIP: 0033:0x7feee338f749 [ 753.286422][T18084] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 753.286462][T18084] RSP: 002b:00007feee4291038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 753.286497][T18084] RAX: ffffffffffffffda RBX: 00007feee35e5fa0 RCX: 00007feee338f749 [ 753.286523][T18084] RDX: 0000000000101042 RSI: 0000200000000240 RDI: ffffffffffffff9c [ 753.286547][T18084] RBP: 00007feee3413f91 R08: 0000000000000000 R09: 0000000000000000 [ 753.286577][T18084] R10: 0000000000000100 R11: 0000000000000246 R12: 0000000000000000 [ 753.286600][T18084] R13: 00007feee35e6038 R14: 00007feee35e5fa0 R15: 00007ffc150ba548 [ 753.286653][T18084] [ 753.286668][T18084] NILFS (loop5): btree level mismatch (ino=16): 1 != 7 [ 753.290111][ T43] usb 4-1: config 179 has no interface number 0 [ 753.310147][T18127] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 753.314361][ T43] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 753.435601][T18084] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 753.439623][ T43] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 753.589377][T18127] ntfs3(loop2): ino=19, mi_enum_attr [ 753.596790][T18084] CPU: 1 UID: 0 PID: 18084 Comm: syz.5.4991 Not tainted syzkaller #0 PREEMPT(full) [ 753.596835][T18084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 753.596857][T18084] Call Trace: [ 753.596870][T18084] [ 753.596884][T18084] dump_stack_lvl+0x16c/0x1f0 [ 753.596936][T18084] nilfs_btree_do_lookup+0x68f/0x940 [ 753.596992][T18084] ? __pfx_nilfs_btree_do_lookup+0x10/0x10 [ 753.597028][T18084] ? srso_alias_return_thunk+0x5/0xfbef5 [ 753.597072][T18084] ? srso_alias_return_thunk+0x5/0xfbef5 [ 753.597139][T18084] nilfs_btree_lookup_contig+0x120/0xb90 [ 753.597183][T18084] ? srso_alias_return_thunk+0x5/0xfbef5 [ 753.597231][T18084] ? srso_alias_return_thunk+0x5/0xfbef5 [ 753.597283][T18084] ? __pfx_nilfs_btree_lookup_contig+0x10/0x10 [ 753.597331][T18084] ? srso_alias_return_thunk+0x5/0xfbef5 [ 753.597378][T18084] ? srso_alias_return_thunk+0x5/0xfbef5 [ 753.597421][T18084] ? down_read+0x13d/0x480 [ 753.597480][T18084] ? srso_alias_return_thunk+0x5/0xfbef5 [ 753.597523][T18084] ? down_read+0x13d/0x480 [ 753.597575][T18084] ? __pfx_down_read+0x10/0x10 [ 753.597635][T18084] nilfs_bmap_lookup_contig+0x8c/0x180 [ 753.597695][T18084] nilfs_get_block+0x1ee/0xa90 [ 753.597755][T18084] ? __pfx_nilfs_get_block+0x10/0x10 [ 753.597806][T18084] ? do_raw_spin_unlock+0x172/0x230 [ 753.597857][T18084] ? srso_alias_return_thunk+0x5/0xfbef5 [ 753.597899][T18084] ? __asan_memset+0x23/0x50 [ 753.597950][T18084] ? srso_alias_return_thunk+0x5/0xfbef5 [ 753.597992][T18084] ? zero_user_segments+0x2fa/0x3b0 [ 753.598042][T18084] block_read_full_folio+0x457/0x850 [ 753.598090][T18084] ? __pfx_nilfs_get_block+0x10/0x10 [ 753.598154][T18084] do_mpage_readpage+0x3d2/0x18f0 [ 753.598204][T18084] ? xas_load+0x49/0x5b0 [ 753.598271][T18084] ? __pfx_nilfs_get_block+0x10/0x10 [ 753.598328][T18084] mpage_read_folio+0x128/0x1f0 [ 753.598380][T18084] ? __pfx_mpage_read_folio+0x10/0x10 [ 753.598462][T18084] ? __pfx_nilfs_get_block+0x10/0x10 [ 753.598515][T18084] ? srso_alias_return_thunk+0x5/0xfbef5 [ 753.598562][T18084] ? __pfx___might_resched+0x10/0x10 [ 753.598610][T18084] ? srso_alias_return_thunk+0x5/0xfbef5 [ 753.598662][T18084] ? __pfx_nilfs_read_folio+0x10/0x10 [ 753.598709][T18084] filemap_read_folio+0xc8/0x2a0 [ 753.598758][T18084] ? __pfx_filemap_read_folio+0x10/0x10 [ 753.598806][T18084] ? srso_alias_return_thunk+0x5/0xfbef5 [ 753.598849][T18084] ? page_cache_sync_ra+0x66b/0xbf0 [ 753.598908][T18084] filemap_get_pages+0x10ea/0x1d30 [ 753.598980][T18084] ? __pfx_filemap_get_pages+0x10/0x10 [ 753.599042][T18084] ? __pfx___might_resched+0x10/0x10 [ 753.599100][T18084] filemap_read+0x3d2/0xe40 [ 753.599151][T18084] ? srso_alias_return_thunk+0x5/0xfbef5 [ 753.599202][T18084] ? bpf_ksym_find+0x124/0x1c0 [ 753.599265][T18084] ? __pfx_filemap_read+0x10/0x10 [ 753.599321][T18084] ? srso_alias_return_thunk+0x5/0xfbef5 [ 753.599402][T18084] ? stack_depot_save_flags+0x29/0x9c0 [ 753.599460][T18084] ? srso_alias_return_thunk+0x5/0xfbef5 [ 753.599511][T18084] ? srso_alias_return_thunk+0x5/0xfbef5 [ 753.599563][T18084] generic_file_read_iter+0x344/0x450 [ 753.599613][T18084] ? ima_file_check+0xc5/0x110 [ 753.599664][T18084] ? srso_alias_return_thunk+0x5/0xfbef5 [ 753.599714][T18084] __kernel_read+0x3f3/0xbf0 [ 753.599771][T18084] ? __pfx___kernel_read+0x10/0x10 [ 753.599863][T18084] integrity_kernel_read+0x7e/0xb0 [ 753.599909][T18084] ? __pfx_integrity_kernel_read+0x10/0x10 [ 753.599963][T18084] ? srso_alias_return_thunk+0x5/0xfbef5 [ 753.600006][T18084] ? kasan_save_track+0x14/0x30 [ 753.600060][T18084] ? srso_alias_return_thunk+0x5/0xfbef5 [ 753.600109][T18084] ima_calc_file_hash_tfm+0x25c/0x350 [ 753.600169][T18084] ? __pfx_ima_calc_file_hash_tfm+0x10/0x10 [ 753.600282][T18084] ? stack_trace_save+0x60/0xc0 [ 753.600343][T18084] ? __pfx_stack_trace_save+0x10/0x10 [ 753.600396][T18084] ? srso_alias_return_thunk+0x5/0xfbef5 [ 753.600439][T18084] ? ima_alloc_tfm+0x21a/0x2e0 [ 753.600490][T18084] ? srso_alias_return_thunk+0x5/0xfbef5 [ 753.600532][T18084] ? generic_fillattr+0x6bf/0x940 [ 753.600679][T18084] ima_calc_file_hash+0x1ba/0x490 [ 753.600760][T18084] ima_collect_measurement+0x8a6/0xa50 [ 753.600836][T18084] ? __pfx_ima_collect_measurement+0x10/0x10 [ 753.600932][T18084] ? srso_alias_return_thunk+0x5/0xfbef5 [ 753.600976][T18084] ? __mutex_lock+0x1c5/0x1060 [ 753.601027][T18084] ? srso_alias_return_thunk+0x5/0xfbef5 [ 753.601070][T18084] ? is_bad_inode+0xd/0x40 [ 753.601119][T18084] ? srso_alias_return_thunk+0x5/0xfbef5 [ 753.601161][T18084] ? xattr_resolve_name+0x27b/0x3f0 [ 753.601223][T18084] ? srso_alias_return_thunk+0x5/0xfbef5 [ 753.601266][T18084] ? vfs_getxattr_alloc+0xec/0x350 [ 753.601340][T18084] ? srso_alias_return_thunk+0x5/0xfbef5 [ 753.601383][T18084] ? ima_get_hash_algo+0x27c/0x400 [ 753.601433][T18084] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 753.601480][T18084] ? srso_alias_return_thunk+0x5/0xfbef5 [ 753.601535][T18084] ? process_measurement+0x11fa/0x23e0 [ 753.601585][T18084] ? srso_alias_return_thunk+0x5/0xfbef5 [ 753.601628][T18084] process_measurement+0x11fa/0x23e0 [ 753.601698][T18084] ? __pfx_process_measurement+0x10/0x10 [ 753.601749][T18084] ? tomoyo_check_open_permission+0x20e/0x3c0 [ 753.601813][T18084] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 753.601939][T18084] ? srso_alias_return_thunk+0x5/0xfbef5 [ 753.601981][T18084] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 753.602042][T18084] ? srso_alias_return_thunk+0x5/0xfbef5 [ 753.602085][T18084] ? inode_to_bdi+0x9e/0x160 [ 753.602148][T18084] ima_file_check+0xc5/0x110 [ 753.602202][T18084] ? __pfx_ima_file_check+0x10/0x10 [ 753.602261][T18084] ? srso_alias_return_thunk+0x5/0xfbef5 [ 753.602311][T18084] security_file_post_open+0x8e/0x210 [ 753.602357][T18084] path_openat+0x1404/0x2cb0 [ 753.602433][T18084] ? __pfx_path_openat+0x10/0x10 [ 753.602493][T18084] ? __lock_acquire+0xb8a/0x1c90 [ 753.602560][T18084] do_filp_open+0x20b/0x470 [ 753.602618][T18084] ? __pfx_do_filp_open+0x10/0x10 [ 753.602711][T18084] ? srso_alias_return_thunk+0x5/0xfbef5 [ 753.602754][T18084] ? alloc_fd+0x471/0x7d0 [ 753.602824][T18084] do_sys_openat2+0x11b/0x1d0 [ 753.602866][T18084] ? __pfx_do_sys_openat2+0x10/0x10 [ 753.602928][T18084] __x64_sys_openat+0x174/0x210 [ 753.602972][T18084] ? __pfx___x64_sys_openat+0x10/0x10 [ 753.603023][T18084] ? srso_alias_return_thunk+0x5/0xfbef5 [ 753.603078][T18084] do_syscall_64+0xcd/0xfa0 [ 753.603129][T18084] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 753.603167][T18084] RIP: 0033:0x7feee338f749 [ 753.603197][T18084] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 753.603233][T18084] RSP: 002b:00007feee4291038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 753.603268][T18084] RAX: ffffffffffffffda RBX: 00007feee35e5fa0 RCX: 00007feee338f749 [ 753.603293][T18084] RDX: 0000000000101042 RSI: 0000200000000240 RDI: ffffffffffffff9c [ 753.603323][T18084] RBP: 00007feee3413f91 R08: 0000000000000000 R09: 0000000000000000 [ 753.603347][T18084] R10: 0000000000000100 R11: 0000000000000246 R12: 0000000000000000 [ 753.603369][T18084] R13: 00007feee35e6038 R14: 00007feee35e5fa0 R15: 00007ffc150ba548 [ 753.603421][T18084] [ 753.611500][T18084] NILFS (loop5): btree level mismatch (ino=16): 1 != 7 [ 753.678169][T18127] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 753.681754][T18084] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 753.723204][T18129] openvswitch: netlink: IP tunnel dst address not specified [ 753.760716][T18084] CPU: 1 UID: 0 PID: 18084 Comm: syz.5.4991 Not tainted syzkaller #0 PREEMPT(full) [ 753.760764][T18084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 753.760786][T18084] Call Trace: [ 753.760798][T18084] [ 753.760813][T18084] dump_stack_lvl+0x16c/0x1f0 [ 753.760865][T18084] nilfs_btree_do_lookup+0x68f/0x940 [ 753.760920][T18084] ? __pfx_nilfs_btree_do_lookup+0x10/0x10 [ 753.760957][T18084] ? srso_alias_return_thunk+0x5/0xfbef5 [ 753.761002][T18084] ? srso_alias_return_thunk+0x5/0xfbef5 [ 753.761070][T18084] nilfs_btree_lookup_contig+0x120/0xb90 [ 753.761114][T18084] ? srso_alias_return_thunk+0x5/0xfbef5 [ 753.761162][T18084] ? srso_alias_return_thunk+0x5/0xfbef5 [ 753.761213][T18084] ? __pfx_nilfs_btree_lookup_contig+0x10/0x10 [ 753.761254][T18084] ? srso_alias_return_thunk+0x5/0xfbef5 [ 753.761300][T18084] ? srso_alias_return_thunk+0x5/0xfbef5 [ 753.761349][T18084] ? down_read+0x13d/0x480 [ 753.761407][T18084] ? srso_alias_return_thunk+0x5/0xfbef5 [ 753.761450][T18084] ? down_read+0x13d/0x480 [ 753.761503][T18084] ? __pfx_down_read+0x10/0x10 [ 753.761563][T18084] nilfs_bmap_lookup_contig+0x8c/0x180 [ 753.761622][T18084] nilfs_get_block+0x1ee/0xa90 [ 753.761684][T18084] ? __pfx_nilfs_get_block+0x10/0x10 [ 753.761734][T18084] ? do_raw_spin_unlock+0x172/0x230 [ 753.761785][T18084] ? srso_alias_return_thunk+0x5/0xfbef5 [ 753.761828][T18084] ? __asan_memset+0x23/0x50 [ 753.761878][T18084] ? srso_alias_return_thunk+0x5/0xfbef5 [ 753.761921][T18084] ? zero_user_segments+0x2fa/0x3b0 [ 753.761970][T18084] block_read_full_folio+0x457/0x850 [ 753.762019][T18084] ? __pfx_nilfs_get_block+0x10/0x10 [ 753.762083][T18084] do_mpage_readpage+0x3d2/0x18f0 [ 753.762132][T18084] ? xas_load+0x49/0x5b0 [ 753.762200][T18084] ? __pfx_nilfs_get_block+0x10/0x10 [ 753.762252][T18084] mpage_read_folio+0x128/0x1f0 [ 753.762304][T18084] ? __pfx_mpage_read_folio+0x10/0x10 [ 753.762391][T18084] ? __pfx_nilfs_get_block+0x10/0x10 [ 753.762446][T18084] ? srso_alias_return_thunk+0x5/0xfbef5 [ 753.762492][T18084] ? __pfx___might_resched+0x10/0x10 [ 753.762540][T18084] ? srso_alias_return_thunk+0x5/0xfbef5 [ 753.762592][T18084] ? __pfx_nilfs_read_folio+0x10/0x10 [ 753.762641][T18084] filemap_read_folio+0xc8/0x2a0 [ 753.762688][T18084] ? __pfx_filemap_read_folio+0x10/0x10 [ 753.762737][T18084] ? srso_alias_return_thunk+0x5/0xfbef5 [ 753.762780][T18084] ? page_cache_sync_ra+0x66b/0xbf0 [ 753.762838][T18084] filemap_get_pages+0x10ea/0x1d30 [ 753.762910][T18084] ? __pfx_filemap_get_pages+0x10/0x10 [ 753.762972][T18084] ? __pfx___might_resched+0x10/0x10 [ 753.763030][T18084] filemap_read+0x3d2/0xe40 [ 753.763081][T18084] ? srso_alias_return_thunk+0x5/0xfbef5 [ 753.763132][T18084] ? bpf_ksym_find+0x124/0x1c0 [ 753.763195][T18084] ? __pfx_filemap_read+0x10/0x10 [ 753.763242][T18084] ? srso_alias_return_thunk+0x5/0xfbef5 [ 753.763329][T18084] ? stack_depot_save_flags+0x29/0x9c0 [ 753.763387][T18084] ? srso_alias_return_thunk+0x5/0xfbef5 [ 753.763438][T18084] ? srso_alias_return_thunk+0x5/0xfbef5 [ 753.763490][T18084] generic_file_read_iter+0x344/0x450 [ 753.763540][T18084] ? ima_file_check+0xc5/0x110 [ 753.763591][T18084] ? srso_alias_return_thunk+0x5/0xfbef5 [ 753.763641][T18084] __kernel_read+0x3f3/0xbf0 [ 753.763697][T18084] ? __pfx___kernel_read+0x10/0x10 [ 753.763789][T18084] integrity_kernel_read+0x7e/0xb0 [ 753.763836][T18084] ? __pfx_integrity_kernel_read+0x10/0x10 [ 753.763886][T18084] ? srso_alias_return_thunk+0x5/0xfbef5 [ 753.763929][T18084] ? kasan_save_track+0x14/0x30 [ 753.763984][T18084] ? srso_alias_return_thunk+0x5/0xfbef5 [ 753.764034][T18084] ima_calc_file_hash_tfm+0x25c/0x350 [ 753.764094][T18084] ? __pfx_ima_calc_file_hash_tfm+0x10/0x10 [ 753.764207][T18084] ? stack_trace_save+0x60/0xc0 [ 753.764258][T18084] ? __pfx_stack_trace_save+0x10/0x10 [ 753.764316][T18084] ? srso_alias_return_thunk+0x5/0xfbef5 [ 753.764359][T18084] ? ima_alloc_tfm+0x21a/0x2e0 [ 753.764409][T18084] ? srso_alias_return_thunk+0x5/0xfbef5 [ 753.764452][T18084] ? generic_fillattr+0x6bf/0x940 [ 753.764499][T18084] ima_calc_file_hash+0x1ba/0x490 [ 753.764562][T18084] ima_collect_measurement+0x8a6/0xa50 [ 753.764638][T18084] ? __pfx_ima_collect_measurement+0x10/0x10 [ 753.764729][T18084] ? srso_alias_return_thunk+0x5/0xfbef5 [ 753.764772][T18084] ? __mutex_lock+0x1c5/0x1060 [ 753.764822][T18084] ? srso_alias_return_thunk+0x5/0xfbef5 [ 753.764864][T18084] ? is_bad_inode+0xd/0x40 [ 753.764912][T18084] ? srso_alias_return_thunk+0x5/0xfbef5 [ 753.764955][T18084] ? xattr_resolve_name+0x27b/0x3f0 [ 753.765017][T18084] ? srso_alias_return_thunk+0x5/0xfbef5 [ 753.765060][T18084] ? vfs_getxattr_alloc+0xec/0x350 [ 753.765126][T18084] ? srso_alias_return_thunk+0x5/0xfbef5 [ 753.765169][T18084] ? ima_get_hash_algo+0x27c/0x400 [ 753.765218][T18084] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 753.765266][T18084] ? srso_alias_return_thunk+0x5/0xfbef5 [ 753.765327][T18084] ? process_measurement+0x11fa/0x23e0 [ 753.765378][T18084] ? srso_alias_return_thunk+0x5/0xfbef5 [ 753.765420][T18084] process_measurement+0x11fa/0x23e0 [ 753.765491][T18084] ? __pfx_process_measurement+0x10/0x10 [ 753.765543][T18084] ? tomoyo_check_open_permission+0x20e/0x3c0 [ 753.765606][T18084] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 753.765732][T18084] ? srso_alias_return_thunk+0x5/0xfbef5 [ 753.765775][T18084] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 753.765835][T18084] ? srso_alias_return_thunk+0x5/0xfbef5 [ 753.765878][T18084] ? inode_to_bdi+0x9e/0x160 [ 753.765942][T18084] ima_file_check+0xc5/0x110 [ 753.765995][T18084] ? __pfx_ima_file_check+0x10/0x10 [ 753.766055][T18084] ? srso_alias_return_thunk+0x5/0xfbef5 [ 753.766105][T18084] security_file_post_open+0x8e/0x210 [ 753.766145][T18084] path_openat+0x1404/0x2cb0 [ 753.766219][T18084] ? __pfx_path_openat+0x10/0x10 [ 753.766280][T18084] ? __lock_acquire+0xb8a/0x1c90 [ 753.766369][T18084] do_filp_open+0x20b/0x470 [ 753.766427][T18084] ? __pfx_do_filp_open+0x10/0x10 [ 753.766520][T18084] ? srso_alias_return_thunk+0x5/0xfbef5 [ 753.766563][T18084] ? alloc_fd+0x471/0x7d0 [ 753.766632][T18084] do_sys_openat2+0x11b/0x1d0 [ 753.766674][T18084] ? __pfx_do_sys_openat2+0x10/0x10 [ 753.766737][T18084] __x64_sys_openat+0x174/0x210 [ 753.766781][T18084] ? __pfx___x64_sys_openat+0x10/0x10 [ 753.766832][T18084] ? srso_alias_return_thunk+0x5/0xfbef5 [ 753.766887][T18084] do_syscall_64+0xcd/0xfa0 [ 753.766939][T18084] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 753.766976][T18084] RIP: 0033:0x7feee338f749 [ 753.767004][T18084] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 753.767040][T18084] RSP: 002b:00007feee4291038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 753.767075][T18084] RAX: ffffffffffffffda RBX: 00007feee35e5fa0 RCX: 00007feee338f749 [ 753.767100][T18084] RDX: 0000000000101042 RSI: 0000200000000240 RDI: ffffffffffffff9c [ 753.767124][T18084] RBP: 00007feee3413f91 R08: 0000000000000000 R09: 0000000000000000 [ 753.767147][T18084] R10: 0000000000000100 R11: 0000000000000246 R12: 0000000000000000 [ 753.767170][T18084] R13: 00007feee35e6038 R14: 00007feee35e5fa0 R15: 00007ffc150ba548 [ 753.767222][T18084] [ 753.767236][T18084] NILFS (loop5): btree level mismatch (ino=16): 1 != 7 [ 754.795773][T18142] loop3: detected capacity change from 0 to 164 [ 754.808721][ T43] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 754.825844][ T43] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 754.825898][ T43] usb 4-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 754.844029][T18084] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 754.847722][ T43] usb 4-1: config 179 interface 65 has no altsetting 0 [ 754.877102][ T30] audit: type=1800 audit(2000524714.358:15): pid=18084 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.4991" name="file2" dev="loop5" ino=16 res=0 errno=0 [ 754.879469][ T43] usb 4-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 755.220911][T18142] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 755.229847][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 755.311178][T18144] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5013'. [ 755.396609][ T43] usb 4-1: can't set config #179, error -71 [ 760.794803][ T43] usb 4-1: USB disconnect, device number 13 [ 760.896448][T18120] tty tty21: ldisc open failed (-12), clearing slot 20 [ 760.976995][T18133] tty tty3: ldisc open failed (-12), clearing slot 2 [ 761.333913][T18169] loop1: detected capacity change from 0 to 256 [ 761.381918][T18159] loop4: detected capacity change from 0 to 4096 [ 761.456385][T18173] loop5: detected capacity change from 0 to 8 [ 761.476630][T18173] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 761.503992][T18175] loop2: detected capacity change from 0 to 64 [ 761.506807][T18169] FAT-fs (loop1): Directory bread(block 64) failed [ 761.532908][T18169] FAT-fs (loop1): Directory bread(block 65) failed [ 761.547078][T18169] FAT-fs (loop1): Directory bread(block 66) failed [ 761.560228][T18173] cramfs: Error -3 while decompressing! [ 761.593947][T18179] bond0: (slave wg0): Error: Device can not be enslaved while up [ 761.607756][T18169] FAT-fs (loop1): Directory bread(block 67) failed [ 761.609249][T18173] cramfs: ffffffff9abe57e8(26)->ffff888040235000(4096) [ 761.615952][T18169] FAT-fs (loop1): Directory bread(block 68) failed [ 761.629648][T18178] loop3: detected capacity change from 0 to 2048 [ 761.638333][T18173] cramfs: Error -3 while decompressing! [ 761.659695][T18169] FAT-fs (loop1): Directory bread(block 69) failed [ 761.688976][T18153] udevd[18153]: incorrect cramfs checksum on /dev/loop5 [ 761.723868][T18169] FAT-fs (loop1): Directory bread(block 70) failed [ 761.746164][T18173] cramfs: ffffffff9abe5802(26)->ffff888040d66000(4096) [ 761.766295][T18169] FAT-fs (loop1): Directory bread(block 71) failed [ 761.773938][T18153] udevd[18153]: incorrect cramfs checksum on /dev/loop5 [ 761.781556][T18173] cramfs: Error -3 while decompressing! [ 761.809070][T18178] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 761.832293][T18169] FAT-fs (loop1): Directory bread(block 72) failed [ 761.842122][T18173] cramfs: ffffffff9abe57e8(26)->ffff888040235000(4096) [ 761.850343][ T30] audit: type=1800 audit(2000524720.878:16): pid=18173 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.5029" name="file2" dev="loop5" ino=348 res=0 errno=0 [ 761.906768][T18178] ext4 filesystem being mounted at /865/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 761.921966][T18169] FAT-fs (loop1): Directory bread(block 73) failed [ 761.970343][T18178] EXT4-fs error (device loop3): ext4_ext_check_inode:523: inode #16: comm syz.3.5032: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0) [ 762.113679][T18187] loop2: detected capacity change from 0 to 1024 [ 762.170778][T18184] bond1 (unregistering): Released all slaves [ 762.255454][ T6037] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 762.385034][ T6247] hfsplus: b-tree write err: -5, ino 4 [ 763.316236][T18219] loop4: detected capacity change from 0 to 1024 [ 763.410144][T18219] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 763.655657][ T6040] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 764.432496][T18252] loop1: detected capacity change from 0 to 512 [ 764.473149][T18252] EXT4-fs: Ignoring removed bh option [ 764.525051][T18252] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 764.560495][T18252] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 764.643274][T18252] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=884ec128, mo2=0002] [ 764.651648][T18252] EXT4-fs (loop1): orphan cleanup on readonly fs [ 764.727204][T18234] loop0: detected capacity change from 0 to 32768 [ 764.734313][T18252] EXT4-fs error (device loop1): ext4_quota_enable:7131: comm syz.1.5066: Bad quota inum: 4294967291, type: 0 [ 764.755683][T18234] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 764.764431][T18252] EXT4-fs (loop1): Remounting filesystem read-only [ 764.775191][T18252] EXT4-fs warning (device loop1): ext4_enable_quotas:7176: Failed to enable quota tracking (type=0, err=-117, ino=4294967291). Please run e2fsck to fix. [ 764.820702][T18234] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 764.867703][T18252] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 764.887387][T18252] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 765.194862][ T6035] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 765.266650][ T6049] ocfs2: Unmounting device (7,0) on (node local) [ 765.555378][T18283] loop5: detected capacity change from 0 to 64 [ 765.611704][T18283] hfs: unable to locate alternate MDB [ 765.653616][T18283] hfs: continuing without an alternate MDB [ 765.965657][T18254] loop4: detected capacity change from 0 to 32768 [ 766.087214][T18295] IPv6: sit1: Disabled Multicast RS [ 766.099743][T18254] jfs_strtoUCS: char2uni returned -22. [ 766.117973][T18295] sit1: entered allmulticast mode [ 766.120349][T18298] loop5: detected capacity change from 0 to 64 [ 766.145261][T18254] charset = cp874, char = 0xfc [ 766.161501][ T9] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 766.377937][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 766.389548][ T9] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 766.430354][ T9] usb 1-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 766.488374][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 766.527770][ T9] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 766.576244][ T9] usb 1-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 766.613887][ T9] usb 1-1: Product: syz [ 766.649900][ T9] usb 1-1: Manufacturer: syz [ 766.678009][ T9] usb 1-1: SerialNumber: syz [ 766.711460][ T9] usb 1-1: config 0 descriptor?? [ 766.989008][ T9] gs_usb 1-1:0.0: Couldn't send data format (err=-71) [ 766.998411][ T9] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -71 [ 767.020623][ T9] usb 1-1: USB disconnect, device number 26 [ 767.024337][T18318] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 767.166286][T18324] Cannot find set identified by id 65534 to match [ 767.208760][T18325] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5099'. [ 767.270852][T18325] netlink: 'syz.1.5099': attribute type 4 has an invalid length. [ 767.318004][T18325] netlink: 1 bytes leftover after parsing attributes in process `syz.1.5099'. [ 767.429413][T18329] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5103'. [ 767.743727][T18337] loop1: detected capacity change from 0 to 164 [ 767.813369][T18337] Unable to read rock-ridge attributes [ 767.828174][T18341] loop5: detected capacity change from 0 to 256 [ 767.978721][ T30] audit: type=1326 audit(2000524726.612:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18348 comm="syz.4.5113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd526d8f749 code=0x7ffc0000 [ 768.076455][ T30] audit: type=1326 audit(2000524726.640:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18348 comm="syz.4.5113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd526d8f749 code=0x7ffc0000 [ 768.098775][ C1] vkms_vblank_simulate: vblank timer overrun [ 768.202856][ T30] audit: type=1326 audit(2000524726.678:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18348 comm="syz.4.5113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=459 compat=0 ip=0x7fd526d8f749 code=0x7ffc0000 [ 768.288367][ T30] audit: type=1326 audit(2000524726.678:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18348 comm="syz.4.5113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd526d8f749 code=0x7ffc0000 [ 768.310662][ C1] vkms_vblank_simulate: vblank timer overrun [ 768.319167][T18357] netlink: 'syz.5.5118': attribute type 2 has an invalid length. [ 768.350443][T18357] netlink: 'syz.5.5118': attribute type 3 has an invalid length. [ 768.396973][ T30] audit: type=1326 audit(2000524726.678:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18348 comm="syz.4.5113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd526d8f749 code=0x7ffc0000 [ 768.419615][ C1] vkms_vblank_simulate: vblank timer overrun [ 768.772685][T18375] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5125'. [ 769.474599][T18399] netlink: 'syz.0.5138': attribute type 10 has an invalid length. [ 769.571265][T18399] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 769.664780][T18399] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 769.704672][T18399] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 770.040994][T18415] loop4: detected capacity change from 0 to 64 [ 770.672417][T18438] loop2: detected capacity change from 0 to 256 [ 770.869900][T18438] FAT-fs (loop2): Directory bread(block 64) failed [ 770.911768][T18438] FAT-fs (loop2): Directory bread(block 65) failed [ 770.931101][T18443] bond1 (unregistering): Released all slaves [ 770.951466][T18438] FAT-fs (loop2): Directory bread(block 66) failed [ 770.996747][T18438] FAT-fs (loop2): Directory bread(block 67) failed [ 771.027510][T18438] FAT-fs (loop2): Directory bread(block 68) failed [ 771.048855][T18438] FAT-fs (loop2): Directory bread(block 69) failed [ 771.063640][T18438] FAT-fs (loop2): Directory bread(block 70) failed [ 771.102127][T18455] netlink: 'syz.0.5162': attribute type 1 has an invalid length. [ 771.115361][T18438] FAT-fs (loop2): Directory bread(block 71) failed [ 771.146805][T18455] netlink: 228 bytes leftover after parsing attributes in process `syz.0.5162'. [ 771.159564][T18438] FAT-fs (loop2): Directory bread(block 72) failed [ 771.228095][T18438] FAT-fs (loop2): Directory bread(block 73) failed [ 771.793518][T18467] loop3: detected capacity change from 0 to 4096 [ 771.867676][T18467] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 771.919268][T18472] loop0: detected capacity change from 0 to 4096 [ 771.975967][T18467] ntfs3(loop3): ino=19, mi_enum_attr [ 772.015967][T18467] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 772.432351][T18472] ntfs3(loop0): ino=5, "/" indx_read [ 772.825705][T18500] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5184'. [ 772.960364][T18503] netlink: 'syz.0.5185': attribute type 5 has an invalid length. [ 773.633692][T18527] loop4: detected capacity change from 0 to 8 [ 774.071617][ T24] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 774.201169][T18550] netlink: 'syz.2.5204': attribute type 10 has an invalid length. [ 774.292036][ T24] usb 4-1: config 0 has an invalid interface number: 255 but max is 0 [ 774.304193][ T24] usb 4-1: config 0 has no interface number 0 [ 774.345344][ T24] usb 4-1: New USB device found, idVendor=0b95, idProduct=2790, bcdDevice=c4.f4 [ 774.384031][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 774.428199][ T24] usb 4-1: Product: syz [ 774.448062][ T24] usb 4-1: Manufacturer: syz [ 774.465886][ T24] usb 4-1: SerialNumber: syz [ 774.510410][ T24] usb 4-1: config 0 descriptor?? [ 774.810330][ T9] usb 4-1: USB disconnect, device number 14 [ 775.211948][T18581] new mount options do not match the existing superblock, will be ignored [ 775.387761][T18588] loop5: detected capacity change from 0 to 256 [ 775.423384][T18585] loop2: detected capacity change from 0 to 1024 [ 775.533484][T18588] FAT-fs (loop5): Directory bread(block 64) failed [ 775.586271][T18588] FAT-fs (loop5): Directory bread(block 65) failed [ 775.639896][T18588] FAT-fs (loop5): Directory bread(block 66) failed [ 775.703009][T18588] FAT-fs (loop5): Directory bread(block 67) failed [ 775.760739][T18588] FAT-fs (loop5): Directory bread(block 68) failed [ 775.767323][T18588] FAT-fs (loop5): Directory bread(block 69) failed [ 775.816560][T18588] FAT-fs (loop5): Directory bread(block 70) failed [ 775.845122][T18588] FAT-fs (loop5): Directory bread(block 71) failed [ 775.880457][T18588] FAT-fs (loop5): Directory bread(block 72) failed [ 775.887033][T18588] FAT-fs (loop5): Directory bread(block 73) failed [ 776.237986][ T6045] FAT-fs (loop5): error, corrupted directory (invalid entries) [ 776.271865][ T6045] FAT-fs (loop5): Filesystem has been set read-only [ 776.302205][ T6045] syz-executor: attempt to access beyond end of device [ 776.302205][ T6045] loop5: rw=2051, sector=1128, nr_sectors = 32 limit=256 [ 776.925395][T18592] loop1: detected capacity change from 0 to 32768 [ 777.040283][T18627] bond2 (unregistering): Released all slaves [ 777.122349][T18592] ERROR: (device loop1): dbAllocNext: Corrupt dmap page [ 777.122349][T18592] [ 777.191028][T18592] ERROR: (device loop1): remounting filesystem as read-only [ 777.220484][T18638] Illegal XDP return value 4294967262 on prog (id 289) dev N/A, expect packet loss! [ 777.226685][T18592] ialloc: diAlloc returned -5! [ 777.731050][ T12] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 778.043305][ T12] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 778.358152][ T12] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 778.757600][ T6224] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 778.781066][T18675] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 778.842923][T18672] loop4: detected capacity change from 0 to 2048 [ 778.852201][ T12] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 778.966791][T18672] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 778.969634][ T6224] usb 4-1: config 0 has an invalid interface number: 46 but max is 0 [ 779.021634][ T6224] usb 4-1: config 0 has no interface number 0 [ 779.032063][ T6224] usb 4-1: config 0 interface 46 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 779.046068][ T6224] usb 4-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 779.055685][ T6224] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 779.063707][ T6224] usb 4-1: Product: syz [ 779.077620][ T6224] usb 4-1: Manufacturer: syz [ 779.084989][ T6224] usb 4-1: SerialNumber: syz [ 779.131225][ T6224] usb 4-1: config 0 descriptor?? [ 779.137043][T18669] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 779.146938][ T6224] ums-karma 4-1:0.46: USB Mass Storage device detected [ 779.289501][ T6040] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 779.308539][T18690] Cannot find del_set index 0 as target [ 779.334095][ T6224] ums-karma 4-1:0.46: probe with driver ums-karma failed with error -5 [ 779.371130][T18693] netlink: 'syz.2.5260': attribute type 11 has an invalid length. [ 779.384023][ T6047] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 779.394098][ T6047] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 779.404360][ T6047] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 779.423103][ T6047] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 779.431619][ T6047] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 779.476103][ T6224] usb 4-1: USB disconnect, device number 15 [ 779.577088][ T12] bridge_slave_1: left allmulticast mode [ 779.582801][ T12] bridge_slave_1: left promiscuous mode [ 779.652912][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 779.745506][ T12] bridge_slave_0: left allmulticast mode [ 779.770060][ T12] bridge_slave_0: left promiscuous mode [ 779.797550][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 779.922255][ T9] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 780.103916][ T9] usb 2-1: config 0 has an invalid interface number: 117 but max is 0 [ 780.134154][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 780.161609][ T9] usb 2-1: config 0 has no interface number 0 [ 780.176108][ T9] usb 2-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 780.221009][ T9] usb 2-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 780.265392][ T9] usb 2-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 780.296542][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 780.335946][ T9] usb 2-1: Product: syz [ 780.340218][ T9] usb 2-1: Manufacturer: syz [ 780.357436][ T9] usb 2-1: SerialNumber: syz [ 780.389176][ T9] usb 2-1: config 0 descriptor?? [ 780.492208][T18721] loop0: detected capacity change from 0 to 4096 [ 780.608734][T18725] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 780.939040][ T6194] usb 2-1: USB disconnect, device number 117 [ 781.240436][T18717] loop3: detected capacity change from 0 to 32768 [ 781.253314][T18717] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.5267 (18717) [ 781.304714][T18717] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 781.319078][T18717] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 781.421756][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 781.440037][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 781.460650][ T12] bond0 (unregistering): Released all slaves [ 781.511298][T18717] BTRFS info (device loop3): enabling ssd optimizations [ 781.539359][T18710] netlink: 116 bytes leftover after parsing attributes in process `syz.4.5264'. [ 781.597418][T18717] BTRFS info (device loop3): turning on async discard [ 781.616323][T18717] BTRFS info (device loop3): enabling free space tree [ 781.692401][ T6047] Bluetooth: hci4: command tx timeout [ 781.881539][T18717] BTRFS info (device loop3): setting incompat feature flag for DEFAULT_SUBVOL (0x2) [ 782.106019][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 782.112467][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 782.153841][T18763] loop2: detected capacity change from 0 to 764 [ 782.317501][ T6037] BTRFS info (device loop3): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 782.533616][T18691] chnl_net:caif_netlink_parms(): no params data found [ 783.296765][T18797] loop2: detected capacity change from 0 to 2048 [ 783.359693][T18797] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 783.436648][T18802] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 783.895970][ T6047] Bluetooth: hci4: command tx timeout [ 784.014047][ T12] hsr_slave_0: left promiscuous mode [ 784.088215][ T12] hsr_slave_1: left promiscuous mode [ 784.129380][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 784.150045][T18822] loop1: detected capacity change from 0 to 1024 [ 784.157845][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 784.213290][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 784.244288][T18822] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 784.263914][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 784.483752][ T12] veth1_macvtap: left promiscuous mode [ 784.489342][ T12] veth0_macvtap: left promiscuous mode [ 784.523978][ T6035] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 784.538195][ T12] veth1_vlan: left promiscuous mode [ 784.543542][ T12] veth0_vlan: left promiscuous mode [ 784.570626][T18836] loop2: detected capacity change from 0 to 64 [ 784.809363][T18834] loop0: detected capacity change from 0 to 4096 [ 784.881618][T18842] netlink: 'syz.2.5304': attribute type 1 has an invalid length. [ 785.000105][T18834] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 785.260497][ T6049] ntfs3(loop0): ino=9, ntfs_sync_fs failed, -22. [ 785.456453][ T43] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 785.635469][ T43] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 785.646778][ T43] usb 3-1: config 1 has an invalid descriptor of length 64, skipping remainder of the config [ 785.662026][ T43] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 785.676120][ T43] usb 3-1: config 1 has no interface number 1 [ 785.685613][ T43] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 785.703764][ T43] usb 3-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 785.735458][ T43] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 785.744744][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 785.766424][ T43] usb 3-1: Product: syz [ 785.770624][ T43] usb 3-1: Manufacturer: syz [ 785.775220][ T43] usb 3-1: SerialNumber: syz [ 786.046612][ T43] usb 3-1: No endpoint at altset 1, falling back to MIDI 1.0 [ 786.055993][ T43] usb 3-1: MIDIStreaming interface descriptor not found [ 786.063723][ T12] team0 (unregistering): Port device team_slave_1 removed [ 786.120303][ T6047] Bluetooth: hci4: command tx timeout [ 786.164407][ T43] usb 3-1: USB disconnect, device number 16 [ 786.216734][ T12] team0 (unregistering): Port device team_slave_0 removed [ 786.627095][T18831] bond0: (slave rose0): Enslaving as an active interface with an up link [ 786.651262][T18862] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 786.684768][T18691] bridge0: port 1(bridge_slave_0) entered blocking state [ 786.723095][T18691] bridge0: port 1(bridge_slave_0) entered disabled state [ 786.753320][T18691] bridge_slave_0: entered allmulticast mode [ 786.784131][T18691] bridge_slave_0: entered promiscuous mode [ 786.800632][T18691] bridge0: port 2(bridge_slave_1) entered blocking state [ 786.851201][T18691] bridge0: port 2(bridge_slave_1) entered disabled state [ 786.878669][T18691] bridge_slave_1: entered allmulticast mode [ 786.886791][T18691] bridge_slave_1: entered promiscuous mode [ 787.214986][T18691] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 787.267449][T18691] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 787.527359][T18883] wireguard0: entered promiscuous mode [ 787.786477][T18691] team0: Port device team_slave_0 added [ 787.944717][T18691] team0: Port device team_slave_1 added [ 788.232192][T18691] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 788.258234][T18910] loop2: detected capacity change from 0 to 4096 [ 788.260997][T18691] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 788.290558][ C0] vkms_vblank_simulate: vblank timer overrun [ 788.331153][T18915] loop3: detected capacity change from 0 to 1024 [ 788.344514][ T6047] Bluetooth: hci4: command tx timeout [ 788.350497][T18916] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 788.414022][T18915] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 788.440321][T18691] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 788.486234][T18915] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 788.504699][T18691] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 788.522810][T18691] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 788.557178][T18915] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e84ee118, mo2=0000] [ 788.599662][T18915] System zones: 0-1, 3-12 [ 788.604372][T18915] EXT4-fs (loop3): orphan cleanup on readonly fs [ 788.663400][T18691] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 788.697311][T18915] EXT4-fs error (device loop3): __ext4_get_inode_loc:4831: comm syz.3.5339: Invalid inode table block 0 in block_group 0 [ 788.799691][T18915] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 788.806226][T18922] loop2: detected capacity change from 0 to 1024 [ 788.816102][T18918] loop1: detected capacity change from 0 to 4096 [ 788.850185][T18915] EXT4-fs error (device loop3): ext4_quota_write:7334: inode #3: comm syz.3.5339: mark_inode_dirty error [ 788.932824][T18922] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 789.008616][T18915] Quota error (device loop3): write_blk: dquota write failed [ 789.027153][T18915] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 789.054206][T18930] loop0: detected capacity change from 0 to 24 [ 789.061668][T18915] EXT4-fs error (device loop3): ext4_acquire_dquot:6943: comm syz.3.5339: Failed to acquire dquot type 0 [ 789.087358][T18930] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 789.108058][T18922] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 789.118355][T18915] EXT4-fs error (device loop3): __ext4_get_inode_loc:4831: comm syz.3.5339: Invalid inode table block 0 in block_group 0 [ 789.160785][T18691] hsr_slave_0: entered promiscuous mode [ 789.180505][T18930] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 789.188678][T18918] ntfs3(loop1): Failed to initialize $Extend/$ObjId. [ 789.215711][T18915] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 789.230320][T18691] hsr_slave_1: entered promiscuous mode [ 789.250538][T18930] romfs: read error for inode 0x70040 [ 789.269165][T18915] EXT4-fs error (device loop3): ext4_ext_truncate:4475: inode #15: comm syz.3.5339: mark_inode_dirty error [ 789.369895][T18915] EXT4-fs error (device loop3): __ext4_get_inode_loc:4831: comm syz.3.5339: Invalid inode table block 0 in block_group 0 [ 789.401650][T18915] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 789.423458][T18915] EXT4-fs error (device loop3) in ext4_orphan_del:301: Corrupt filesystem [ 789.441487][T18915] EXT4-fs error (device loop3): __ext4_get_inode_loc:4831: comm syz.3.5339: Invalid inode table block 0 in block_group 0 [ 789.457093][T18906] loop4: detected capacity change from 0 to 32768 [ 789.470063][T18915] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 789.472088][ T6043] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 789.504830][T18906] (syz.4.5335,18906,1):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 789.528767][T18915] EXT4-fs error (device loop3): ext4_truncate:4637: inode #15: comm syz.3.5339: mark_inode_dirty error [ 789.629139][T18906] (syz.4.5335,18906,0):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 789.649238][T18915] EXT4-fs error (device loop3) in ext4_process_orphan:343: Corrupt filesystem [ 789.696963][T18915] EXT4-fs (loop3): 1 truncate cleaned up [ 789.786430][T18915] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 789.824699][T18906] JBD2: Ignoring recovery information on journal [ 789.939664][T18906] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 790.038027][T18915] EXT4-fs error (device loop3): __ext4_get_inode_loc:4831: comm syz.3.5339: Invalid inode table block 0 in block_group 0 [ 790.213581][T18948] ieee802154 phy0 wpan0: encryption failed: -22 [ 790.301722][T18953] wireguard0: entered promiscuous mode [ 790.314696][T18953] wireguard0: entered allmulticast mode [ 790.389335][ T6037] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 790.445374][ T6040] ocfs2: Unmounting device (7,4) on (node local) [ 790.783947][T18963] xt_CT: You must specify a L4 protocol and not use inversions on it [ 790.806970][T18691] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 790.950221][T18691] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 791.028055][T18691] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 791.139354][T18691] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 791.226460][T18975] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5357'. [ 791.601602][T18691] 8021q: adding VLAN 0 to HW filter on device bond0 [ 791.707550][T18691] 8021q: adding VLAN 0 to HW filter on device team0 [ 791.748414][T19001] loop4: detected capacity change from 0 to 128 [ 791.781658][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 791.788842][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 791.899954][ T6247] bridge0: port 2(bridge_slave_1) entered blocking state [ 791.907157][ T6247] bridge0: port 2(bridge_slave_1) entered forwarding state [ 791.913233][T10713] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 792.105646][T10713] usb 1-1: Using ep0 maxpacket: 16 [ 792.149840][T10713] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 792.201786][T10713] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 792.244090][T10713] usb 1-1: config 0 interface 0 has no altsetting 0 [ 792.266945][T10713] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 792.349459][T10713] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 792.385420][T19014] wireguard0: entered promiscuous mode [ 792.417045][T10713] usb 1-1: config 0 descriptor?? [ 792.531018][T19023] loop1: detected capacity change from 0 to 512 [ 792.650497][T10713] usbhid 1-1:0.0: can't add hid device: -71 [ 792.684541][T19023] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 792.728428][T10713] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 792.746192][T19032] loop4: detected capacity change from 0 to 1024 [ 792.778745][T19023] ext4 filesystem being mounted at /831/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 792.807687][T19034] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5375'. [ 792.821847][T10713] usb 1-1: USB disconnect, device number 27 [ 792.957060][T19032] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 793.000577][T18691] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 793.069182][T19032] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 793.276160][ T6035] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 793.375969][ T6040] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 793.538548][T19052] loop1: detected capacity change from 0 to 256 [ 793.546529][T19052] exfat: Deprecated parameter 'namecase' [ 793.637746][T19052] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 793.782811][T19057] loop3: detected capacity change from 0 to 2048 [ 793.956421][T19066] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 794.021250][T19057] NILFS error (device loop3): nilfs_check_folio: bad entry in directory #2: disallowed inode number - offset=56, inode=6, rec_len=24, name_len=5 [ 794.095889][T19057] Remounting filesystem read-only [ 794.184224][ T43] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 794.384107][ T43] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 794.429673][ T43] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 794.457618][ T43] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 794.490161][T18691] veth0_vlan: entered promiscuous mode [ 794.495866][ T43] usb 3-1: config 0 interface 0 has no altsetting 0 [ 794.515177][ T43] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 794.534440][ T43] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 794.546122][ T43] usb 3-1: config 0 interface 0 has no altsetting 0 [ 794.554560][ T43] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 794.559136][T19080] mac80211_hwsim hwsim15 wlan1: entered allmulticast mode [ 794.571080][ T43] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 794.571134][ T43] usb 3-1: config 0 interface 0 has no altsetting 0 [ 794.592215][ T43] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 794.609561][T18691] veth1_vlan: entered promiscuous mode [ 794.615288][ T43] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 794.640124][ T43] usb 3-1: config 0 interface 0 has no altsetting 0 [ 794.657198][ T43] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 794.677238][ T43] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 794.690599][T18691] veth0_macvtap: entered promiscuous mode [ 794.699056][ T43] usb 3-1: config 0 interface 0 has no altsetting 0 [ 794.708504][T18691] veth1_macvtap: entered promiscuous mode [ 794.714037][ T6207] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 794.726132][ T43] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 794.757080][ T43] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 794.780606][ T43] usb 3-1: config 0 interface 0 has no altsetting 0 [ 794.794561][T18691] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 794.813052][ T43] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 794.831174][T18691] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 794.838652][ T43] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 794.873185][ T43] usb 3-1: config 0 interface 0 has no altsetting 0 [ 794.888252][ T6207] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 794.901883][ T43] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 794.904088][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 794.912110][ T43] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 794.921257][ T6207] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 794.964056][ T43] usb 3-1: config 0 interface 0 has no altsetting 0 [ 794.970614][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 794.976791][ T43] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 794.990497][ T43] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 795.000041][ T43] usb 3-1: Product: syz [ 795.004311][ T43] usb 3-1: Manufacturer: syz [ 795.009127][ T43] usb 3-1: SerialNumber: syz [ 795.020367][ T43] usb 3-1: config 0 descriptor?? [ 795.030034][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 795.038929][ T6207] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 795.044776][ T43] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 795.084644][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 795.098955][ T6207] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 795.141585][T19079] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 795.157295][ T6207] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 795.486499][ T43] usb 3-1: USB disconnect, device number 17 [ 795.506624][ T43] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 795.645615][ T6247] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 795.675008][ T6247] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 795.691746][ T6194] usb 2-1: USB disconnect, device number 118 [ 795.833692][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 795.870357][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 796.633738][T19097] loop3: detected capacity change from 0 to 32768 [ 796.679990][T19097] (syz.3.5396,19097,0):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 796.752533][T19097] (syz.3.5396,19097,0):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 796.843045][T19122] loop2: detected capacity change from 0 to 2048 [ 796.903647][T19097] JBD2: Ignoring recovery information on journal [ 796.929541][T19122] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 797.174594][T19097] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 797.338059][ T6043] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 797.590532][ T6037] ocfs2: Unmounting device (7,3) on (node local) [ 797.926093][T19155] loop0: detected capacity change from 0 to 64 [ 798.089529][T19162] netlink: 108 bytes leftover after parsing attributes in process `syz.4.5425'. [ 798.219123][T19164] misc userio: No port type given on /dev/userio [ 798.376018][T19167] loop3: detected capacity change from 0 to 1024 [ 798.470004][T19173] loop4: detected capacity change from 0 to 1024 [ 798.500158][T19173] EXT4-fs: Ignoring removed oldalloc option [ 798.547931][ T6247] hfsplus: b-tree write err: -5, ino 4 [ 798.560288][T19173] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 798.658600][ T6194] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 798.738981][T19173] EXT4-fs warning (device loop4): ext4_empty_dir:3099: inode #11: comm syz.4.5429: directory missing '..' [ 799.000661][ T6194] usb 1-1: Using ep0 maxpacket: 32 [ 799.018957][ T6194] usb 1-1: too many configurations: 42, using maximum allowed: 8 [ 799.085045][ T6040] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 799.116513][ T6194] usb 1-1: New USB device found, idVendor=054c, idProduct=0025, bcdDevice= 1.00 [ 799.139621][ T6194] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 799.147665][ T6194] usb 1-1: Product: syz [ 799.190623][ T6194] usb 1-1: Manufacturer: syz [ 799.210592][ T6194] usb 1-1: SerialNumber: syz [ 799.247606][ T6194] usb 1-1: config 0 descriptor?? [ 799.289857][ T6194] cdc_acm 1-1:0.0: Zero length descriptor references [ 799.319984][ T6194] cdc_acm 1-1:0.0: probe with driver cdc_acm failed with error -22 [ 799.358853][ T6194] usb-storage 1-1:0.0: USB Mass Storage device detected [ 799.410287][T19197] random: crng reseeded on system resumption [ 799.419793][ T6194] usb-storage 1-1:0.0: Quirks match for vid 054c pid 0025: 1 [ 799.500725][T19201] loop4: detected capacity change from 0 to 2048 [ 799.593017][T19201] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 799.652933][ T6194] usb 1-1: USB disconnect, device number 28 [ 799.763320][T19201] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 800.158203][ T30] audit: type=1326 audit(2000524756.706:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19212 comm="syz.3.5446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cce78f749 code=0x7ffc0000 [ 800.264155][ T30] audit: type=1326 audit(2000524756.706:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19212 comm="syz.3.5446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cce78f749 code=0x7ffc0000 [ 800.390370][ T30] audit: type=1326 audit(2000524756.706:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19212 comm="syz.3.5446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cce78f749 code=0x7ffc0000 [ 800.482779][ T30] audit: type=1326 audit(2000524756.706:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19212 comm="syz.3.5446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cce78f749 code=0x7ffc0000 [ 800.505071][ C1] vkms_vblank_simulate: vblank timer overrun [ 800.587107][T19233] warning: `syz.6.5452' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 800.604161][ T30] audit: type=1326 audit(2000524756.715:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19212 comm="syz.3.5446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=284 compat=0 ip=0x7f1cce78f749 code=0x7ffc0000 [ 800.707362][ T30] audit: type=1326 audit(2000524756.715:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19212 comm="syz.3.5446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cce78f749 code=0x7ffc0000 [ 800.768530][T10713] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 800.792642][ T30] audit: type=1326 audit(2000524756.715:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19212 comm="syz.3.5446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cce78f749 code=0x7ffc0000 [ 800.844639][T19241] __vm_enough_memory: pid: 19241, comm: syz.0.5456, bytes: 21199670616064 not enough memory for the allocation [ 800.880273][ T30] audit: type=1326 audit(2000524756.715:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19212 comm="syz.3.5446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f1cce78f749 code=0x7ffc0000 [ 800.972378][T10713] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 801.009459][ T30] audit: type=1326 audit(2000524756.725:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19212 comm="syz.3.5446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f1cce78f749 code=0x7ffc0000 [ 801.012317][T10713] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 801.078639][T10713] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 801.101778][T10713] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 801.141034][T19228] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 801.205736][T10713] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 801.651418][T10713] usb 5-1: USB disconnect, device number 9 [ 801.835695][T18171] udevd[18171]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 801.949613][T19273] netlink: 4268 bytes leftover after parsing attributes in process `syz.3.5473'. [ 801.995037][T19273] netlink: 4268 bytes leftover after parsing attributes in process `syz.3.5473'. [ 802.318956][ T6207] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 802.380146][ T30] audit: type=1326 audit(2000524758.792:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19284 comm="syz.0.5479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f484bf8f749 code=0x7ffc0000 [ 802.511572][ T6207] usb 7-1: config 8 has an invalid interface number: 80 but max is 0 [ 802.520518][ T6207] usb 7-1: config 8 contains an unexpected descriptor of type 0x2, skipping [ 802.550365][ T6207] usb 7-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 802.583346][ T6207] usb 7-1: config 8 has no interface number 0 [ 802.607144][ T6207] usb 7-1: config 8 interface 80 altsetting 0 has an endpoint descriptor with address 0xE7, changing to 0x87 [ 802.688225][ T6207] usb 7-1: config 8 interface 80 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 802.701543][T19294] xt_HMARK: proto mask must be zero with L3 mode [ 802.758476][ T6207] usb 7-1: config 8 interface 80 altsetting 0 endpoint 0x4 has invalid maxpacket 4987, setting to 64 [ 802.892173][ T6207] usb 7-1: config 8 interface 80 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 802.901968][ T6207] usb 7-1: config 8 interface 80 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 14 [ 802.982248][ T6207] usb 7-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.6f [ 803.022094][ T6207] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 803.068338][T19275] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 803.122743][ T6207] usb 7-1: NFC: intf ffff88802da6a000 id ffffffff8f2e1900 [ 803.234671][ T6207] nfcmrvl 7-1:8.80: NFC: registered with nci successfully [ 803.329097][T19310] loop0: detected capacity change from 0 to 512 [ 803.413574][T19313] loop4: detected capacity change from 0 to 1024 [ 803.422253][ T6207] usb 7-1: USB disconnect, device number 2 [ 803.442638][ T6207] usb 7-1: NFC: intf ffff88802da6a000 [ 803.456146][T19310] EXT4-fs error (device loop0): ext4_orphan_get:1418: comm syz.0.5489: bad orphan inode 15 [ 803.476216][T19317] loop3: detected capacity change from 0 to 512 [ 803.487096][T19317] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 803.507451][T19281] loop1: detected capacity change from 0 to 40427 [ 803.559863][T19310] ext4_test_bit(bit=14, block=5) = 0 [ 803.568195][T19281] F2FS-fs (loop1): invalid crc value [ 803.569896][T19310] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 803.645021][T19317] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.5492: inode has both inline data and extents flags [ 803.700306][T19310] EXT4-fs error (device loop0): __ext4_new_inode:1072: comm syz.0.5489: reserved inode found cleared - inode=1 [ 803.767497][T19317] EXT4-fs error (device loop3): ext4_orphan_get:1395: comm syz.3.5492: couldn't read orphan inode 15 (err -117) [ 803.847032][ T6049] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 803.857739][T19317] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 803.944696][T19281] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 803.962634][T19317] process 'syz.3.5492' launched './file2' with NULL argv: empty string added [ 803.973423][T19281] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 804.148457][T19281] F2FS-fs (loop1): Corrupted max_depth of 3: 1537 [ 804.341810][ T6037] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 804.800211][T19352] xt_TPROXY: Can be used only with -p tcp or -p udp [ 805.071312][T19357] mac80211_hwsim hwsim14 wlan1: entered allmulticast mode [ 805.497671][T19374] loop4: detected capacity change from 0 to 512 [ 805.594870][T19374] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 805.680785][T19374] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.5513: inode has both inline data and extents flags [ 805.800115][T19374] EXT4-fs error (device loop4): ext4_orphan_get:1395: comm syz.4.5513: couldn't read orphan inode 15 (err -117) [ 805.848071][T19374] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 806.167291][ T6040] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 806.692716][T19405] bond2 (unregistering): Released all slaves [ 807.105832][T19427] syz.2.5531 (19427): /proc/19424/oom_adj is deprecated, please use /proc/19424/oom_score_adj instead. [ 807.134443][T19366] loop6: detected capacity change from 0 to 32768 [ 807.265095][T19366] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 807.297104][T19434] loop3: detected capacity change from 0 to 128 [ 807.382622][T19434] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 807.472655][T19434] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 807.595839][T19366] XFS (loop6): Ending clean mount [ 807.654038][T19366] XFS (loop6): Quotacheck needed: Please wait. [ 807.753811][T19434] Process accounting resumed [ 807.848438][T19366] XFS (loop6): Quotacheck: Done. [ 807.953098][T19456] ip6erspan0: entered allmulticast mode [ 808.001156][T19459] loop1: detected capacity change from 0 to 256 [ 808.142613][T18691] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 808.166887][T19459] FAT-fs (loop1): Directory bread(block 64) failed [ 808.192646][T19459] FAT-fs (loop1): Directory bread(block 65) failed [ 808.214918][T19459] FAT-fs (loop1): Directory bread(block 66) failed [ 808.236380][T19459] FAT-fs (loop1): Directory bread(block 67) failed [ 808.260674][T19459] FAT-fs (loop1): Directory bread(block 68) failed [ 808.267228][T19459] FAT-fs (loop1): Directory bread(block 69) failed [ 808.290514][T19459] FAT-fs (loop1): Directory bread(block 70) failed [ 808.361016][T19459] FAT-fs (loop1): Directory bread(block 71) failed [ 808.416529][T19459] FAT-fs (loop1): Directory bread(block 72) failed [ 808.441031][T19459] FAT-fs (loop1): Directory bread(block 73) failed [ 808.669866][T19477] loop2: detected capacity change from 0 to 128 [ 808.799195][T19477] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 808.877748][T19477] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 809.163167][T19491] loop1: detected capacity change from 0 to 512 [ 809.203528][T19491] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 809.292118][T19491] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.5552: inode has both inline data and extents flags [ 809.419527][T19491] EXT4-fs error (device loop1): ext4_orphan_get:1395: comm syz.1.5552: couldn't read orphan inode 15 (err -117) [ 809.470893][T19491] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 809.750794][T19506] loop0: detected capacity change from 0 to 1024 [ 809.790942][ T6035] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 810.188988][T19516] loop3: detected capacity change from 0 to 256 [ 810.291813][T19516] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d) [ 810.886896][T19492] loop6: detected capacity change from 0 to 32768 [ 811.000424][T19492] (syz.6.5543,19492,1):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 811.034132][T19539] netlink: 'syz.4.5569': attribute type 1 has an invalid length. [ 811.067179][T19492] (syz.6.5543,19492,1):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 811.079324][T19539] netlink: 5640 bytes leftover after parsing attributes in process `syz.4.5569'. [ 811.241129][T19492] JBD2: Ignoring recovery information on journal [ 811.436564][T19492] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 811.474640][T19550] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 811.992502][T18691] ocfs2: Unmounting device (7,6) on (node local) [ 812.959895][T19605] loop0: detected capacity change from 0 to 64 [ 813.087907][T19611] dlm: no locking on control device [ 813.210219][ T5814] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 813.375553][T19620] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5602'. [ 813.390239][T19619] loop1: detected capacity change from 0 to 22 [ 813.405456][ T5814] usb 7-1: Using ep0 maxpacket: 16 [ 813.435814][ T5814] usb 7-1: config 0 has an invalid interface number: 8 but max is 0 [ 813.436207][T19619] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 813.461438][ T5814] usb 7-1: config 0 has no interface number 0 [ 813.494316][T19619] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 813.496508][ T5814] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 813.565775][ T5814] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 813.611716][ T5814] usb 7-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 813.635388][ T5814] usb 7-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 813.663188][ T5814] usb 7-1: Product: syz [ 813.681498][ T5814] usb 7-1: SerialNumber: syz [ 813.733684][ T5814] usb 7-1: config 0 descriptor?? [ 813.773690][ T5814] cm109 7-1:0.8: invalid payload size 0, expected 4 [ 813.802243][ T5814] input: CM109 USB driver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.8/input/input55 [ 814.135713][ C0] cm109 7-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 814.302511][T19638] ip6t_srh: unknown srh match flags 4000 [ 814.364138][ T24] usb 7-1: USB disconnect, device number 3 [ 814.512935][ T24] cm109 7-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 814.764615][T19627] loop2: detected capacity change from 0 to 32768 [ 814.793882][T19627] lbmIODone: I/O error in JFS log [ 814.810213][T19627] *** Log Format Error ! *** [ 814.828564][T19627] lmLogInit: exit(-22) [ 814.833970][T19627] lmLogOpen: exit(-22) [ 815.761649][T19685] netlink: 'syz.3.5635': attribute type 2 has an invalid length. [ 815.826904][T19685] netlink: 'syz.3.5635': attribute type 1 has an invalid length. [ 816.092907][T19699] xt_nat: multiple ranges no longer supported [ 816.637887][T19716] PM: Enabling pm_trace changes system date and time during resume. [ 816.637887][T19716] PM: Correct system time has to be restored manually after resume. [ 817.018666][T19725] loop0: detected capacity change from 0 to 4096 [ 817.048407][T19725] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 817.157719][T19730] xt_ecn: cannot match TCP bits for non-tcp packets [ 817.198587][T19725] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 817.249963][T19725] ntfs3(loop0): Failed to initialize $Extend/$Reparse. [ 817.266832][T19732] loop6: detected capacity change from 0 to 16 [ 817.296811][T19727] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 817.325940][T19732] erofs (device loop6): mounted with root inode @ nid 36. [ 817.338624][T19725] ntfs3(loop0): ino=1b, mi_enum_attr [ 817.742359][T19736] loop3: detected capacity change from 0 to 512 [ 817.749746][T19736] EXT4-fs: Ignoring removed nobh option [ 817.777770][T19742] fuse: blksize only supported for fuseblk [ 817.789993][T19736] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 817.845327][T19736] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842e02c, mo2=0002] [ 817.859697][T19736] EXT4-fs (loop3): orphan cleanup on readonly fs [ 817.919946][T19736] EXT4-fs error (device loop3): ext4_clear_blocks:874: inode #11: comm syz.3.5662: attempt to clear invalid blocks 1024 len 1 [ 817.970908][T19736] EXT4-fs (loop3): Remounting filesystem read-only [ 818.023352][T19736] EXT4-fs (loop3): 1 truncate cleaned up [ 818.083296][T19736] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 818.263000][T19715] loop4: detected capacity change from 0 to 40427 [ 818.313461][T19720] loop1: detected capacity change from 0 to 32768 [ 818.332554][T19715] F2FS-fs (loop4): Image doesn't support compression [ 818.351136][T19720] (syz.1.5651,19720,1):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 818.365267][T19715] F2FS-fs (loop4): build fault injection rate: 690 [ 818.375748][ T6037] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 818.403380][T19720] (syz.1.5651,19720,0):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 818.444612][T19715] F2FS-fs (loop4): invalid crc value [ 818.582998][T19720] JBD2: Ignoring recovery information on journal [ 818.884738][T19720] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 818.934282][T19715] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 819.024427][T19715] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 819.086530][T19715] F2FS-fs (loop4): Image doesn't support compression [ 819.121787][T19715] F2FS-fs (loop4): build fault injection rate: 690 [ 819.138940][T19771] openvswitch: netlink: Message has 592 unknown bytes. [ 819.208956][T19771] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 819.444860][ T6035] ocfs2: Unmounting device (7,1) on (node local) [ 820.137239][T19789] bond1 (unregistering): Released all slaves [ 820.201586][T19802] loop2: detected capacity change from 0 to 16 [ 820.208893][T19802] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 820.568116][T19810] loop0: detected capacity change from 0 to 128 [ 820.626708][T19810] FAT-fs (loop0): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 820.708564][T19810] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 820.744819][T19810] FAT-fs (loop0): Filesystem has been set read-only [ 820.786889][T19810] syz.0.5694: attempt to access beyond end of device [ 820.786889][T19810] loop0: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 820.825883][T19810] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 820.879370][T19810] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 820.936702][T19810] syz.0.5694: attempt to access beyond end of device [ 820.936702][T19810] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 820.989570][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 820.989600][ T30] audit: type=1800 audit(2000524776.191:36): pid=19810 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.5694" name="file2" dev="loop0" ino=1048735 res=0 errno=0 [ 821.377848][T19834] loop1: detected capacity change from 0 to 128 [ 822.047236][T19863] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5718'. [ 822.146582][T19864] loop4: detected capacity change from 0 to 1024 [ 822.285490][T19868] ip6erspan1: entered allmulticast mode [ 822.373395][T19874] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5725'. [ 822.399895][T19874] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5725'. [ 822.447004][ T1142] hfsplus: b-tree write err: -5, ino 4 [ 822.687583][T19884] unsupported nla_type 52263 [ 822.914386][T19888] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5733'. [ 823.345058][T19910] loop2: detected capacity change from 0 to 128 [ 823.419237][T19910] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 823.731844][T19924] CIFS mount error: No usable UNC path provided in device string! [ 823.731844][T19924] [ 823.757676][T19924] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 823.768067][ T6043] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 823.856041][T19928] loop4: detected capacity change from 0 to 256 [ 823.872951][T19928] exfat: Deprecated parameter 'namecase' [ 823.912010][T19928] exfat: Deprecated parameter 'utf8' [ 824.017211][T19928] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001ff53, chksum : 0xd72bb7d8, utbl_chksum : 0xe619d30d) [ 824.175884][ T6207] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 824.367916][ T6207] usb 3-1: Using ep0 maxpacket: 16 [ 824.375505][ T6207] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 824.420350][ T6207] usb 3-1: New USB device found, idVendor=04b4, idProduct=1002, bcdDevice=58.ab [ 824.470766][ T6207] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 824.511332][ T6207] usb 3-1: Product: syz [ 824.515542][ T6207] usb 3-1: Manufacturer: syz [ 824.533461][ T6207] usb 3-1: SerialNumber: syz [ 824.542116][ T6207] usb 3-1: config 0 descriptor?? [ 824.661146][T19950] bond1 (unregistering): Released all slaves [ 824.899447][ T5814] usb 3-1: USB disconnect, device number 18 [ 824.905639][ T6207] usb 2-1: new full-speed USB device number 119 using dummy_hcd [ 825.116672][ T6207] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 825.161727][ T6207] usb 2-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 825.180456][ T6207] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 825.189579][ T6207] usb 2-1: Product: syz [ 825.194572][ T6207] usb 2-1: Manufacturer: syz [ 825.213083][ T6207] usb 2-1: SerialNumber: syz [ 825.242535][ T6207] usb 2-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 825.271872][T19973] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5771'. [ 825.486279][T19974] loop0: detected capacity change from 0 to 4096 [ 825.533712][T19974] ntfs3(loop0): ino=3, Correct links count -> 2. [ 825.731388][ T6207] usb 2-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 825.812265][T19983] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5776'. [ 825.829258][ T6207] usb 2-1: USB disconnect, device number 119 [ 825.834503][T19983] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5776'. [ 826.047796][ T24] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 826.251368][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 826.276178][ T24] usb 4-1: config 0 has an invalid interface number: 186 but max is 0 [ 826.300033][ T24] usb 4-1: config 0 has no interface number 0 [ 826.332172][ T24] usb 4-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 826.370143][ T24] usb 4-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 826.418666][ T24] usb 4-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 826.464527][ T24] usb 4-1: config 0 interface 186 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 826.497483][ T24] usb 4-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 826.525547][ T24] usb 4-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 826.539042][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 826.547064][ T24] usb 4-1: Product: syz [ 826.602684][ T24] usb 4-1: Manufacturer: syz [ 826.615494][ T24] usb 4-1: SerialNumber: syz [ 826.639084][ T24] usb 4-1: config 0 descriptor?? [ 826.734768][T20008] loop0: detected capacity change from 0 to 2048 [ 826.763114][T10713] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 826.820298][T20008] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 826.886378][ T24] iowarrior 4-1:0.186: IOWarrior product=0x1505, serial=뼹ҷ쏗 interface=186 now attached to iowarrior0 [ 826.935685][T20019] sctp: [Deprecated]: syz.4.5793 (pid 20019) Use of int in maxseg socket option. [ 826.935685][T20019] Use struct sctp_assoc_value instead [ 826.958407][T10713] usb 7-1: Using ep0 maxpacket: 32 [ 826.998342][T10713] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 827.050390][T10713] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 827.084660][T10713] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 8960, setting to 1024 [ 827.143272][T10713] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 827.192738][T10713] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 827.205713][ T6207] usb 4-1: USB disconnect, device number 16 [ 827.238425][T20022] netlink: 'syz.2.5797': attribute type 1 has an invalid length. [ 827.261006][T10713] usb 7-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 827.266757][T20024] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5799'. [ 827.283773][T10713] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 827.308056][T10713] usb 7-1: Product: syz [ 827.318662][T20024] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5799'. [ 827.328235][T10713] usb 7-1: Manufacturer: syz [ 827.338157][T10713] usb 7-1: SerialNumber: syz [ 827.350701][T20024] netlink: 'syz.4.5799': attribute type 5 has an invalid length. [ 827.369455][T10713] usb 7-1: config 0 descriptor?? [ 827.717928][T20032] bond1 (unregistering): Released all slaves [ 827.847646][T10713] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 827.867802][T10713] input input57: Device does not respond to id packet M [ 827.905499][T10713] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 827.919878][T10713] input input57: Device does not respond to id packet P [ 827.942945][T10713] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 827.962557][T10713] input input57: Device does not respond to id packet B [ 828.011031][T10713] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 828.028632][T10713] input input57: Device does not respond to id packet N [ 828.056397][T10713] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 828.084121][T10713] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 828.123875][T10713] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 828.138859][T10713] iforce 7-1:0.0: usb_submit_urb failed: -71 [ 828.176056][T10713] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input57 [ 828.253960][T10713] usb 7-1: USB disconnect, device number 4 [ 828.254052][ C1] iforce 7-1:0.0: iforce_usb_irq - usb_submit_urb failed with result -19 [ 828.948227][ T24] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 829.148905][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 829.178588][ T24] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB8, changing to 0x88 [ 829.214983][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 107, changing to 7 [ 829.249811][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid maxpacket 41480, setting to 1024 [ 829.298354][ T24] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 829.319897][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 829.363218][ T24] usb 2-1: Product: syz [ 829.367435][ T24] usb 2-1: Manufacturer: syz [ 829.406510][ T24] usb 2-1: SerialNumber: syz [ 829.442697][ T24] usb 2-1: config 0 descriptor?? [ 829.495136][ T24] usb 2-1: 0:0 : invalid sync pipe. bmAttributes 95, bLength 9, bSynchAddress 08 [ 829.788044][ T24] usb 2-1: USB disconnect, device number 120 [ 830.610890][ T9] usb 1-1: new full-speed USB device number 29 using dummy_hcd [ 830.814393][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 830.823496][ T9] usb 1-1: not running at top speed; connect to a high speed hub [ 830.852086][ T9] usb 1-1: config 12 has an invalid interface number: 184 but max is 0 [ 830.862454][ T9] usb 1-1: config 12 has no interface number 0 [ 830.875308][ T9] usb 1-1: config 12 interface 184 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 830.937017][ T9] usb 1-1: New USB device found, idVendor=0499, idProduct=100d, bcdDevice=84.a2 [ 830.953184][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 830.982988][ T9] usb 1-1: Product: syz [ 831.007939][ T9] usb 1-1: Manufacturer: syz [ 831.012672][ T9] usb 1-1: SerialNumber: syz [ 831.307887][ T9] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 831.446708][ T9] usb 1-1: USB disconnect, device number 29 [ 831.620228][T18155] udevd[18155]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:12.184/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 831.675001][T20107] loop2: detected capacity change from 0 to 32768 [ 831.703697][T20107] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.5838 (20107) [ 831.775045][T20107] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 831.807805][T20107] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm [ 832.101949][T20107] BTRFS info (device loop2): enabling ssd optimizations [ 832.122320][T20107] BTRFS info (device loop2): turning on async discard [ 832.149421][T20107] BTRFS info (device loop2): enabling free space tree [ 832.507654][ T6043] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 832.801035][T20185] openvswitch: netlink: IP tunnel dst address not specified [ 833.044875][T20193] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5869'. [ 833.651646][ T30] audit: type=1326 audit(2000524788.044:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20210 comm="syz.3.5882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cce78f749 code=0x7ffc0000 [ 833.755485][ T30] audit: type=1326 audit(2000524788.044:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20210 comm="syz.3.5882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cce78f749 code=0x7ffc0000 [ 833.869315][ T30] audit: type=1326 audit(2000524788.044:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20210 comm="syz.3.5882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7f1cce78f749 code=0x7ffc0000 [ 833.946293][T20217] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 833.969992][ T30] audit: type=1326 audit(2000524788.044:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20210 comm="syz.3.5882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cce78f749 code=0x7ffc0000 [ 833.997649][T20222] QAT: failed to copy from user cfg_data. [ 834.068054][ T30] audit: type=1326 audit(2000524788.044:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20210 comm="syz.3.5882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cce78f749 code=0x7ffc0000 [ 834.090347][ C0] vkms_vblank_simulate: vblank timer overrun [ 834.344304][T20231] loop0: detected capacity change from 0 to 512 [ 834.362929][T20231] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 834.393027][T20231] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ce01c, mo2=0002] [ 834.430153][T20231] System zones: 1-12 [ 834.438258][T20231] EXT4-fs (loop0): orphan cleanup on readonly fs [ 834.444936][T20231] EXT4-fs error (device loop0): ext4_free_branches:1020: inode #11: comm syz.0.5892: invalid indirect mapped block 12 (level 1) [ 834.553314][T20231] EXT4-fs error (device loop0): ext4_free_branches:1020: inode #11: comm syz.0.5892: invalid indirect mapped block 2 (level 2) [ 834.598698][T20231] EXT4-fs (loop0): 1 truncate cleaned up [ 834.611441][T20231] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: writeback. [ 834.734162][T20197] loop4: detected capacity change from 0 to 32768 [ 834.795643][ T6049] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 834.865721][T20245] loop3: detected capacity change from 0 to 512 [ 834.872462][T20246] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5899'. [ 834.902081][T20245] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 834.917472][T20246] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5899'. [ 834.962252][T20245] EXT4-fs (loop3): invalid journal inode [ 834.991076][T20245] EXT4-fs (loop3): can't get journal size [ 835.051835][T20245] EXT4-fs (loop3): 1 truncate cleaned up [ 835.107620][T20245] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 835.418533][ T6037] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 835.559770][T20264] netlink: 156 bytes leftover after parsing attributes in process `syz.0.5906'. [ 836.023227][T20278] kAFS: unable to lookup cell '' [ 836.423491][T20296] loop3: detected capacity change from 0 to 256 [ 837.009446][T20314] loop2: detected capacity change from 0 to 1024 [ 837.057657][T20314] EXT4-fs (loop2): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 837.111857][T20314] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 2: comm syz.2.5932: lblock 2 mapped to illegal pblock 2 (length 1) [ 837.171625][T20314] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 837.229898][T20314] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 48: comm syz.2.5932: lblock 0 mapped to illegal pblock 48 (length 1) [ 837.281295][T20314] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 837.290625][T20314] EXT4-fs error (device loop2): ext4_acquire_dquot:6943: comm syz.2.5932: Failed to acquire dquot type 0 [ 837.308514][T20314] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 837.414406][T20314] EXT4-fs error (device loop2): ext4_evict_inode:254: inode #11: comm syz.2.5932: mark_inode_dirty error [ 837.509322][T20314] EXT4-fs warning (device loop2): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 837.583921][T20314] EXT4-fs (loop2): 1 orphan inode deleted [ 837.602484][ T1142] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 837.625552][T20314] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 837.705302][ T1142] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 837.734626][ T1142] EXT4-fs error (device loop2): ext4_release_dquot:6979: comm kworker/u8:7: Failed to release dquot type 0 [ 838.001243][ T6043] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 838.030812][ T6247] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:9: lblock 1 mapped to illegal pblock 1 (length 1) [ 838.076063][T20347] comedi comedi0: fl512: I/O port conflict (0x6,16) [ 838.088664][ T6247] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 838.102143][T20343] loop1: detected capacity change from 0 to 4096 [ 838.115708][ T6247] EXT4-fs error (device loop2): ext4_release_dquot:6979: comm kworker/u8:9: Failed to release dquot type 0 [ 838.159199][ T6043] EXT4-fs error (device loop2): __ext4_get_inode_loc:4831: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 838.226718][ T6043] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 838.296448][ T6043] EXT4-fs error (device loop2): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 838.364367][T20343] ntfs3(loop1): ino=5, "/" indx_read [ 838.393153][T20343] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 839.272236][ T6207] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 839.475502][ T6207] usb 4-1: unable to get BOS descriptor or descriptor too short [ 839.508812][ T6207] usb 4-1: not running at top speed; connect to a high speed hub [ 839.518243][ T6207] usb 4-1: config 4 has an invalid interface number: 147 but max is 0 [ 839.536980][ T6207] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 839.562389][ T6207] usb 4-1: config 4 has no interface number 0 [ 839.574371][ T6207] usb 4-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 839.598977][ T6207] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 839.665408][ T6207] usb 4-1: Product: syz [ 839.669645][ T6207] usb 4-1: Manufacturer: syz [ 839.674245][ T6207] usb 4-1: SerialNumber: syz [ 839.765359][T20397] loop0: detected capacity change from 0 to 256 [ 839.794246][T20397] exfat: Deprecated parameter 'namecase' [ 839.906444][T20397] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36bd6320, utbl_chksum : 0xe619d30d) [ 839.990016][ T6207] uvcvideo 4-1:4.147: Found multiple Units with ID 6 [ 840.022847][ T6207] uvcvideo 4-1:4.147: Found UVC 0.02 device syz (04f2:b746) [ 840.043261][T20407] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 840.054843][ T6207] uvcvideo 4-1:4.147: No valid video chain found. [ 840.104824][ T6207] usb 4-1: USB disconnect, device number 17 [ 840.279913][T20413] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5980'. [ 840.322680][T20413] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5980'. [ 840.693171][T20428] netlink: 'syz.2.5988': attribute type 10 has an invalid length. [ 840.702030][T20428] batman_adv: batadv0: Adding interface: netdevsim0 [ 840.730404][T20428] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 840.787001][T20428] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 840.830522][T20431] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5989'. [ 840.884229][T20431] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5989'. [ 840.926812][ T43] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 841.141059][ T43] usb 2-1: Using ep0 maxpacket: 32 [ 841.168246][ T43] usb 2-1: config 0 has an invalid interface number: 16 but max is 0 [ 841.177574][ T43] usb 2-1: config 0 has no interface number 0 [ 841.198336][ T43] usb 2-1: config 0 interface 16 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 841.226133][ T43] usb 2-1: config 0 interface 16 altsetting 0 endpoint 0x82 has invalid maxpacket 30768, setting to 1024 [ 841.260052][ T43] usb 2-1: config 0 interface 16 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 841.284214][ T43] usb 2-1: New USB device found, idVendor=0499, idProduct=102a, bcdDevice=85.2d [ 841.305350][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 841.340142][ T43] usb 2-1: Product: syz [ 841.361956][ T43] usb 2-1: Manufacturer: syz [ 841.386139][ T43] usb 2-1: SerialNumber: syz [ 841.413588][ T43] usb 2-1: config 0 descriptor?? [ 841.435496][T20425] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 841.455861][T20425] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 841.497507][ T43] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 841.916924][ T6207] usb 2-1: USB disconnect, device number 121 [ 842.098657][T20471] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 842.727484][T20491] loop3: detected capacity change from 0 to 256 [ 842.891804][T20491] FAT-fs (loop3): Directory bread(block 64) failed [ 842.920439][T20491] FAT-fs (loop3): Directory bread(block 65) failed [ 842.983290][T20491] FAT-fs (loop3): Directory bread(block 66) failed [ 843.021987][T20491] FAT-fs (loop3): Directory bread(block 67) failed [ 843.029341][T20491] FAT-fs (loop3): Directory bread(block 68) failed [ 843.071927][T20491] FAT-fs (loop3): Directory bread(block 69) failed [ 843.082797][T20491] FAT-fs (loop3): Directory bread(block 70) failed [ 843.120990][T20491] FAT-fs (loop3): Directory bread(block 71) failed [ 843.127725][T20491] FAT-fs (loop3): Directory bread(block 72) failed [ 843.185078][T20491] FAT-fs (loop3): Directory bread(block 73) failed [ 843.750469][T20521] loop2: detected capacity change from 0 to 4096 [ 843.817223][T20521] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 843.875265][T20521] ntfs3(loop2): Failed to load $Extend (-22). [ 843.922250][T20521] ntfs3(loop2): Failed to initialize $Extend. [ 844.042935][T20529] loop1: detected capacity change from 0 to 64 [ 844.160327][T20531] loop0: detected capacity change from 0 to 128 [ 844.294989][T20501] loop6: detected capacity change from 0 to 32768 [ 844.343998][T20531] EXT4-fs (loop0): Test dummy encryption mode enabled [ 844.344331][T20501] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.6024 (20501) [ 844.478100][T20531] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a802c118, mo2=0002] [ 844.494919][T20531] System zones: 1-3, 19-19, 35-36 [ 844.538080][T20531] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 844.548487][T20501] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 844.576321][T20531] ext4 filesystem being mounted at /983/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 844.638544][T20531] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 844.644368][T20501] BTRFS info (device loop6): using sha256 (sha256-lib) checksum algorithm [ 844.727316][T20531] EXT4-fs error (device loop0): ext4_validate_block_bitmap:423: comm syz.0.6040: bg 0: bad block bitmap checksum [ 845.038502][T20501] BTRFS info (device loop6): enabling ssd optimizations [ 845.106485][T20501] BTRFS info (device loop6): turning on async discard [ 845.127282][ T6049] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 845.159977][T20501] BTRFS info (device loop6): enabling free space tree [ 845.624614][T18691] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 845.673206][T20572] netlink: 'syz.0.6051': attribute type 2 has an invalid length. [ 846.066380][T20586] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 846.191046][T20588] loop1: detected capacity change from 0 to 2048 [ 846.260262][T20588] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 846.383340][T20596] xt_CT: You must specify a L4 protocol and not use inversions on it [ 846.404834][T20588] syz.1.6059: attempt to access beyond end of device [ 846.404834][T20588] loop1: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 846.420058][T20597] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 846.585311][T20588] syz.1.6059: attempt to access beyond end of device [ 846.585311][T20588] loop1: rw=0, sector=9437254, nr_sectors = 2 limit=2048 [ 846.603290][T20588] NILFS (loop1): I/O error reading meta-data file (ino=6, block-offset=0) [ 846.735478][T20607] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6066'. [ 847.120014][ T30] audit: type=1326 audit(2000524800.635:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20612 comm="syz.4.6071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd526d8f749 code=0x7ffc0000 [ 847.142312][ C0] vkms_vblank_simulate: vblank timer overrun [ 847.255540][ T30] audit: type=1326 audit(2000524800.635:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20612 comm="syz.4.6071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd526d8f749 code=0x7ffc0000 [ 847.347348][ T30] audit: type=1326 audit(2000524800.644:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20612 comm="syz.4.6071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=106 compat=0 ip=0x7fd526d8f749 code=0x7ffc0000 [ 847.455495][ T30] audit: type=1326 audit(2000524800.644:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20612 comm="syz.4.6071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd526d8f749 code=0x7ffc0000 [ 847.529796][ T30] audit: type=1326 audit(2000524800.644:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20612 comm="syz.4.6071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd526d8f749 code=0x7ffc0000 [ 847.552159][ C0] vkms_vblank_simulate: vblank timer overrun [ 847.576121][ T6194] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 847.597384][T20629] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6077'. [ 847.616225][T20627] loop3: detected capacity change from 0 to 2048 [ 847.724599][T20627] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 847.770274][ T6194] usb 7-1: config index 0 descriptor too short (expected 23569, got 27) [ 847.795473][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 847.801886][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 847.821097][ T6194] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24933, setting to 1024 [ 847.858216][ T6194] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 847.902590][ T6194] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 847.931998][ T6194] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 847.974419][ T6194] usb 7-1: Manufacturer: syz [ 848.001154][ T6194] usb 7-1: config 0 descriptor?? [ 848.034232][T20620] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 848.053300][T20603] loop0: detected capacity change from 0 to 32768 [ 848.059746][ T6194] igorplugusb 7-1:0.0: endpoint incorrect [ 848.063181][T20636] loop4: detected capacity change from 0 to 128 [ 848.079636][T20636] EXT4-fs: Ignoring removed orlov option [ 848.095217][T20603] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.6065 (20603) [ 848.137111][T20603] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 848.149892][T20636] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 848.198416][T20636] ext4 filesystem being mounted at /1024/control supports timestamps until 2038-01-19 (0x7fffffff) [ 848.238784][T20603] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm [ 848.241302][T20636] EXT4-fs error (device loop4): ext4_validate_inode_bitmap:104: comm syz.4.6082: Corrupt inode bitmap - block_group = 0, inode_bitmap = 19 [ 848.329127][ T6207] usb 7-1: USB disconnect, device number 5 [ 848.456620][ T6040] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 848.486866][T20603] BTRFS info (device loop0): enabling ssd optimizations [ 848.522236][T20603] BTRFS info (device loop0): turning on async discard [ 848.543756][T20603] BTRFS info (device loop0): enabling free space tree [ 848.857635][ T6049] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 849.079136][T20669] loop2: detected capacity change from 0 to 2048 [ 849.136955][T20675] netlink: 'syz.4.6092': attribute type 3 has an invalid length. [ 849.179412][T20675] netlink: 'syz.4.6092': attribute type 3 has an invalid length. [ 849.179567][T20669] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 849.220618][T20675] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6092'. [ 849.234513][T20677] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 849.714839][T20688] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6097'. [ 849.723772][T20688] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6097'. [ 849.917648][T20695] loop1: detected capacity change from 0 to 1024 [ 850.271900][T20706] loop3: detected capacity change from 0 to 764 [ 850.349023][T20706] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 850.810970][T20719] netlink: 'syz.0.6114': attribute type 11 has an invalid length. [ 850.837644][T20719] netlink: 199828 bytes leftover after parsing attributes in process `syz.0.6114'. [ 851.050339][T10713] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 851.161316][T20730] comedi comedi0: mpc624: I/O port conflict (0x6,16) [ 851.263919][T10713] usb 4-1: Using ep0 maxpacket: 32 [ 851.276899][T10713] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 851.307356][T10713] usb 4-1: config 0 has no interface number 0 [ 851.325158][T10713] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 851.384860][T10713] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 851.390195][T20737] ipt_ECN: cannot use operation on non-tcp rule [ 851.422477][T10713] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 851.452293][T10713] usb 4-1: Product: syz [ 851.473993][T10713] usb 4-1: Manufacturer: syz [ 851.495618][T10713] usb 4-1: SerialNumber: syz [ 851.532275][T10713] usb 4-1: config 0 descriptor?? [ 851.555227][T20722] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 851.637710][T20700] loop2: detected capacity change from 0 to 32768 [ 851.690548][T20700] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.6103 (20700) [ 851.759530][T20700] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 851.798465][T20700] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm [ 851.804670][T20722] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 852.078624][T20700] BTRFS info (device loop2): enabling ssd optimizations [ 852.096166][T10713] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 852.114381][T10713] asix 4-1:0.188: probe with driver asix failed with error -71 [ 852.132247][T20700] BTRFS info (device loop2): turning on async discard [ 852.139090][T20700] BTRFS info (device loop2): enabling free space tree [ 852.145803][T10713] usb 4-1: USB disconnect, device number 18 [ 852.168115][T20753] loop1: detected capacity change from 0 to 4096 [ 852.296890][T20773] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 852.530982][ T6043] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 853.328101][T20794] loop4: detected capacity change from 0 to 64 [ 853.414058][T20799] netlink: 172 bytes leftover after parsing attributes in process `syz.6.6144'. [ 853.477711][T20799] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6144'. [ 853.486906][T20799] netlink: 172 bytes leftover after parsing attributes in process `syz.6.6144'. [ 853.587706][T20799] netlink: 100 bytes leftover after parsing attributes in process `syz.6.6144'. [ 853.624725][T20799] netlink: 32 bytes leftover after parsing attributes in process `syz.6.6144'. [ 854.169944][T20823] loop3: detected capacity change from 0 to 16 [ 854.230516][T20823] erofs (device loop3): mounted with root inode @ nid 36. [ 854.635087][T20829] loop1: detected capacity change from 0 to 4096 [ 854.810209][T20838] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 855.006993][T20841] loop6: detected capacity change from 0 to 2048 [ 855.050424][T20841] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 855.176498][ T5814] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 855.373073][ T5814] usb 4-1: New USB device found, idVendor=13d8, idProduct=0011, bcdDevice=d0.62 [ 855.390422][ T5814] usb 4-1: New USB device strings: Mfr=1, Product=6, SerialNumber=3 [ 855.399434][ T5814] usb 4-1: Product: syz [ 855.418028][ T5814] usb 4-1: Manufacturer: syz [ 855.422975][ T5814] usb 4-1: SerialNumber: syz [ 855.462680][ T5814] usb 4-1: config 0 descriptor?? [ 855.526918][ T5814] usb 4-1: selecting invalid altsetting 1 [ 855.554104][ T5814] comedi comedi5: could not switch to alternate setting 1 [ 855.583075][ T5814] usbduxfast 4-1:0.0: driver 'usbduxfast' failed to auto-configure device. [ 855.693499][T20854] netlink: 'syz.4.6171': attribute type 1 has an invalid length. [ 855.828340][ T6207] usb 4-1: USB disconnect, device number 19 [ 856.037806][T20860] loop1: detected capacity change from 0 to 2048 [ 856.112630][T20860] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 856.155084][T20868] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6178'. [ 856.582575][T20878] loop0: detected capacity change from 0 to 8 [ 856.713610][T20878] SQUASHFS error: Unable to read inode 0xa7 [ 857.084157][T20897] netlink: 'syz.4.6192': attribute type 2 has an invalid length. [ 857.112494][T20897] netlink: 'syz.4.6192': attribute type 1 has an invalid length. [ 857.175638][T20901] netlink: 92 bytes leftover after parsing attributes in process `syz.1.6194'. [ 857.363218][T20906] kAFS: unable to lookup cell '.,' [ 857.413612][T20910] netlink: 'syz.2.6195': attribute type 10 has an invalid length. [ 857.421892][T20911] loop4: detected capacity change from 0 to 128 [ 857.465571][T20911] EXT4-fs (loop4): Test dummy encryption mode enabled [ 857.504495][T20911] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a802c118, mo2=0002] [ 857.544176][T20910] batman_adv: batadv0: Adding interface: team0 [ 857.563947][T20911] System zones: 1-3, 19-19, 35-36 [ 857.591010][T20910] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 857.616206][ C0] vkms_vblank_simulate: vblank timer overrun [ 857.628222][T20914] netlink: 48 bytes leftover after parsing attributes in process `syz.6.6200'. [ 857.675405][T20910] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 857.687682][T20911] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 857.723695][T20911] ext4 filesystem being mounted at /1049/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 857.840212][T20911] EXT4-fs error (device loop4): ext4_validate_block_bitmap:423: comm syz.4.6199: bg 0: bad block bitmap checksum [ 857.909281][T20925] netlink: 156 bytes leftover after parsing attributes in process `syz.6.6205'. [ 857.966665][T20925] netlink: 156 bytes leftover after parsing attributes in process `syz.6.6205'. [ 858.120651][ T6040] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 859.194664][T20969] __nla_validate_parse: 1 callbacks suppressed [ 859.194695][T20969] netlink: 3 bytes leftover after parsing attributes in process `syz.3.6226'. [ 859.972458][T20990] loop1: detected capacity change from 0 to 4096 [ 859.999724][T20990] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 860.020448][ T6194] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 860.208229][ T6194] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 860.245027][ T6194] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 860.320978][ T6194] usb 1-1: config 0 descriptor?? [ 860.601580][ T6194] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 860.816128][ T6194] [drm:udl_init] *ERROR* Selecting channel failed [ 860.835321][T21017] loop4: detected capacity change from 0 to 512 [ 860.876995][ T6194] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 860.886840][ T6194] [drm] Initialized udl on minor 2 [ 860.895228][ T6194] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 860.906565][ T6194] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 860.906557][T21017] EXT4-fs error (device loop4): ext4_validate_block_bitmap:440: comm syz.4.6250: bg 0: block 288: padding at end of block bitmap is not set [ 860.914209][ T43] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 860.937286][ T43] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 860.944752][ T6194] usb 1-1: USB disconnect, device number 30 [ 860.950898][ T24] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 861.027167][T21017] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 861.075158][T21017] EXT4-fs error (device loop4): ext4_clear_blocks:874: inode #13: comm syz.4.6250: attempt to clear invalid blocks 1024 len 1 [ 861.102170][T21017] EXT4-fs error (device loop4): ext4_free_branches:1020: inode #13: comm syz.4.6250: invalid indirect mapped block 1819239214 (level 0) [ 861.128993][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 861.135853][T21017] EXT4-fs (loop4): 1 truncate cleaned up [ 861.148118][T21017] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 861.162540][ T24] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 861.203103][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 861.236354][ T24] usb 3-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 861.258306][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 861.279727][ T24] usb 3-1: config 0 descriptor?? [ 861.296943][ T24] em28xx 3-1:0.0: New device @ 480 Mbps (2040:1605, interface 0, class 0) [ 861.305872][ T24] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 861.328473][ T6040] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 861.345402][T21029] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6255'. [ 861.387532][ T5814] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 861.531519][T21031] loop1: detected capacity change from 0 to 1024 [ 861.561543][T21031] EXT4-fs: Ignoring removed orlov option [ 861.567239][T21031] EXT4-fs: Ignoring removed nomblk_io_submit option [ 861.580293][ T24] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 861.588264][T21033] loop0: detected capacity change from 0 to 1024 [ 861.600894][ T5814] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xDF, changing to 0x8F [ 861.604081][ T24] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 861.643219][ T24] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 861.648434][ T5814] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 861.667241][T21031] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a84ec018, mo2=0002] [ 861.667921][T21033] hfsplus: detected inconsistent attributes file, running fsck.hfsplus is recommended. [ 861.675447][T21031] System zones: [ 861.689265][ T24] em28xx 3-1:0.0: No AC97 audio processor [ 861.699539][T21031] 0-1, 3-36 [ 861.707780][ T24] usb 3-1: USB disconnect, device number 19 [ 861.734931][ T5814] usb 4-1: New USB device found, idVendor=077d, idProduct=0410, bcdDevice=ec.c1 [ 861.773214][ T5814] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 861.781266][ T5814] usb 4-1: Product: syz [ 861.796173][ T24] em28xx 3-1:0.0: Disconnecting em28xx [ 861.802898][T21031] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 861.845382][ T5814] usb 4-1: Manufacturer: syz [ 861.846504][ T24] em28xx 3-1:0.0: Freeing device [ 861.894396][ T5814] usb 4-1: SerialNumber: syz [ 861.929978][ T5814] usb 4-1: config 0 descriptor?? [ 862.026613][T21042] loop6: detected capacity change from 0 to 512 [ 862.123897][T21042] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 862.149732][ T6035] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 862.158089][T21042] EXT4-fs error (device loop6): ext4_orphan_get:1392: inode #15: comm syz.6.6261: inode has both inline data and extents flags [ 862.209999][ T5814] input: Griffin PowerMate as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input58 [ 862.254958][T21042] EXT4-fs error (device loop6): ext4_orphan_get:1395: comm syz.6.6261: couldn't read orphan inode 15 (err -117) [ 862.289602][ C0] powermate: config urb returned -71 [ 862.295134][ C0] powermate: config urb returned -71 [ 862.301681][ C0] powermate: config urb returned -71 [ 862.307342][ C0] powermate: config urb returned -71 [ 862.324676][ T5814] usb 4-1: USB disconnect, device number 20 [ 862.324771][ C0] powermate 4-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 862.373190][T21049] loop1: detected capacity change from 0 to 16 [ 862.375051][T21042] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 862.397495][T10713] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 862.445660][T21049] erofs (device loop1): mounted with root inode @ nid 36. [ 862.606844][T10713] usb 1-1: Using ep0 maxpacket: 8 [ 862.686759][T10713] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 862.716503][T10713] usb 1-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 862.747895][T10713] usb 1-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 862.770303][T10713] usb 1-1: Product: syz [ 862.774523][T10713] usb 1-1: Manufacturer: syz [ 862.780686][T18691] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 862.820537][T10713] usb 1-1: SerialNumber: syz [ 863.095955][T21059] loop6: detected capacity change from 0 to 1024 [ 863.134763][T10713] usb 1-1: Handspring Visor / Palm OS: No valid connect info available [ 863.168400][T10713] usb 1-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 863.199982][T21059] hfsplus: extend alloc file! (8192,512,17039360) [ 863.203423][T21063] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6271'. [ 863.207554][T10713] usb 1-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 863.251980][T21063] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6271'. [ 863.289763][T10713] usb 1-1: Handspring Visor / Palm OS: Number of ports: 2 [ 863.331935][T21065] loop2: detected capacity change from 0 to 512 [ 863.343178][T10713] usb 1-1: palm_os_3_probe - error -71 getting bytes available request [ 863.382406][T21065] EXT4-fs: Ignoring removed bh option [ 863.385564][T10713] visor 1-1:1.0: Handspring Visor / Palm OS converter detected [ 863.431339][T21065] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 863.451021][T10713] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 863.462234][T21065] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 863.496776][T10713] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 863.536416][T21065] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 863.548223][T10713] usb 1-1: USB disconnect, device number 31 [ 863.636939][T21065] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 863.684582][T10713] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 863.717211][T21065] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 863.742017][T10713] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 863.783428][T10713] visor 1-1:1.0: device disconnected [ 863.785491][T21065] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 863.854081][T21051] loop4: detected capacity change from 0 to 32768 [ 863.910042][T21051] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 864.038293][ T6043] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 864.185090][T21051] XFS (loop4): Ending clean mount [ 864.296518][T21091] netlink: 'syz.3.6279': attribute type 5 has an invalid length. [ 864.503986][ T6040] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 864.607464][T21072] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 864.773240][ T30] audit: type=1326 audit(2000524817.160:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21102 comm="syz.0.6287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f484bf8f749 code=0x7ffc0000 [ 864.938943][ T30] audit: type=1326 audit(2000524817.160:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21102 comm="syz.0.6287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f484bf8f749 code=0x7ffc0000 [ 865.064976][ T30] audit: type=1326 audit(2000524817.207:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21102 comm="syz.0.6287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=256 compat=0 ip=0x7f484bf8f749 code=0x7ffc0000 [ 865.183555][ T30] audit: type=1326 audit(2000524817.207:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21102 comm="syz.0.6287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f484bf8f749 code=0x7ffc0000 [ 865.542897][T21124] netlink: 'syz.3.6297': attribute type 1 has an invalid length. [ 865.680891][T21128] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6298'. [ 866.011174][ T6047] Bluetooth: hci0: command 0x0406 tx timeout [ 866.209154][T21142] loop6: detected capacity change from 0 to 512 [ 866.266484][T21142] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0007-000000000000 r/w without journal. Quota mode: writeback. [ 866.322996][ T6194] IPVS: starting estimator thread 0... [ 866.347970][T21142] ext4 filesystem being mounted at /144/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 866.454823][T21157] IPVS: using max 24 ests per chain, 57600 per kthread [ 866.509123][T21142] [ 866.511486][T21142] ====================================================== [ 866.518528][T21142] WARNING: possible circular locking dependency detected [ 866.525548][T21142] syzkaller #0 Not tainted [ 866.529959][T21142] ------------------------------------------------------ [ 866.536974][T21142] syz.6.6305/21142 is trying to acquire lock: [ 866.543038][T21142] ffff888056d40b28 (&dquot->dq_lock){+.+.}-{4:4}, at: dqget+0x5f1/0x1180 [ 866.551530][T21142] [ 866.551530][T21142] but task is already holding lock: [ 866.558884][T21142] ffff8880544b00c8 (&ei->xattr_sem){++++}-{4:4}, at: ext4_setattr+0x875/0x2ae0 [ 866.567886][T21142] [ 866.567886][T21142] which lock already depends on the new lock. [ 866.567886][T21142] [ 866.578282][T21142] [ 866.578282][T21142] the existing dependency chain (in reverse order) is: [ 866.587284][T21142] [ 866.587284][T21142] -> #5 (&ei->xattr_sem){++++}-{4:4}: [ 866.594861][T21142] down_read+0x9b/0x480 [ 866.599561][T21142] ext4_setattr+0x875/0x2ae0 [ 866.604691][T21142] notify_change+0x6d2/0x12a0 [ 866.609902][T21142] chown_common+0x54e/0x680 [ 866.614928][T21142] do_fchownat+0x1a7/0x200 [ 866.619870][T21142] __x64_sys_chown+0x7b/0xc0 [ 866.624987][T21142] do_syscall_64+0xcd/0xfa0 [ 866.630038][T21142] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 866.636477][T21142] [ 866.636477][T21142] -> #4 (jbd2_handle){++++}-{0:0}: [ 866.643794][T21142] start_this_handle+0x5ea/0x1410 [ 866.649365][T21142] jbd2__journal_start+0x394/0x6a0 [ 866.655025][T21142] jbd2_journal_start+0x29/0x40 [ 866.660515][T21142] ocfs2_start_trans+0x3b9/0x970 [ 866.666029][T21142] ocfs2_shutdown_local_alloc+0x281/0xa10 [ 866.672305][T21142] ocfs2_dismount_volume+0x1f5/0xa00 [ 866.678147][T21142] generic_shutdown_super+0x156/0x390 [ 866.684056][T21142] kill_block_super+0x3b/0x90 [ 866.689270][T21142] deactivate_locked_super+0xc1/0x1a0 [ 866.695182][T21142] deactivate_super+0xde/0x100 [ 866.700484][T21142] cleanup_mnt+0x225/0x450 [ 866.705443][T21142] task_work_run+0x150/0x240 [ 866.710562][T21142] exit_to_user_mode_loop+0xec/0x130 [ 866.716374][T21142] do_syscall_64+0x426/0xfa0 [ 866.721498][T21142] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 866.727930][T21142] [ 866.727930][T21142] -> #3 (&journal->j_trans_barrier){.+.+}-{4:4}: [ 866.736486][T21142] down_read+0x9b/0x480 [ 866.741274][T21142] ocfs2_start_trans+0x3ae/0x970 [ 866.746750][T21142] ocfs2_shutdown_local_alloc+0x281/0xa10 [ 866.753018][T21142] ocfs2_dismount_volume+0x1f5/0xa00 [ 866.758846][T21142] generic_shutdown_super+0x156/0x390 [ 866.764759][T21142] kill_block_super+0x3b/0x90 [ 866.769980][T21142] deactivate_locked_super+0xc1/0x1a0 [ 866.775903][T21142] deactivate_super+0xde/0x100 [ 866.781204][T21142] cleanup_mnt+0x225/0x450 [ 866.786160][T21142] task_work_run+0x150/0x240 [ 866.791282][T21142] exit_to_user_mode_loop+0xec/0x130 [ 866.797098][T21142] do_syscall_64+0x426/0xfa0 [ 866.802241][T21142] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 866.808661][T21142] [ 866.808661][T21142] -> #2 (sb_internal#2){.+.+}-{0:0}: [ 866.816170][T21142] ocfs2_start_trans+0x29d/0x970 [ 866.821647][T21142] ocfs2_acquire_dquot+0x563/0xb00 [ 866.827298][T21142] dqget+0x693/0x1180 [ 866.831806][T21142] dquot_set_dqblk+0x2b/0x1290 [ 866.837096][T21142] quota_setquota+0x4c4/0x5e0 [ 866.842325][T21142] do_quotactl+0xaf6/0x13d0 [ 866.847389][T21142] __x64_sys_quotactl+0x1b3/0x440 [ 866.852973][T21142] do_syscall_64+0xcd/0xfa0 [ 866.858036][T21142] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 866.864459][T21142] [ 866.864459][T21142] -> #1 (&ocfs2_quota_ip_alloc_sem_key){++++}-{4:4}: [ 866.873434][T21142] down_write+0x92/0x200 [ 866.878235][T21142] ocfs2_create_local_dquot+0x157/0xb30 [ 866.884312][T21142] ocfs2_acquire_dquot+0x626/0xb00 [ 866.890029][T21142] dqget+0x693/0x1180 [ 866.894544][T21142] dquot_set_dqblk+0x2b/0x1290 [ 866.899840][T21142] quota_setquota+0x4c4/0x5e0 [ 866.905059][T21142] do_quotactl+0xaf6/0x13d0 [ 866.910100][T21142] __x64_sys_quotactl+0x1b3/0x440 [ 866.915668][T21142] do_syscall_64+0xcd/0xfa0 [ 866.920705][T21142] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 866.927122][T21142] [ 866.927122][T21142] -> #0 (&dquot->dq_lock){+.+.}-{4:4}: [ 866.934783][T21142] __lock_acquire+0x126f/0x1c90 [ 866.940179][T21142] lock_acquire+0x179/0x350 [ 866.945204][T21142] __mutex_lock+0x193/0x1060 [ 866.950328][T21142] dqget+0x5f1/0x1180 [ 866.954835][T21142] dquot_transfer+0x3a8/0x6a0 [ 866.960040][T21142] ext4_setattr+0x885/0x2ae0 [ 866.965162][T21142] notify_change+0x6d2/0x12a0 [ 866.970372][T21142] chown_common+0x54e/0x680 [ 866.975397][T21142] do_fchownat+0x1a7/0x200 [ 866.980334][T21142] __x64_sys_chown+0x7b/0xc0 [ 866.985448][T21142] do_syscall_64+0xcd/0xfa0 [ 866.990483][T21142] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 866.996898][T21142] [ 866.996898][T21142] other info that might help us debug this: [ 866.996898][T21142] [ 867.007118][T21142] Chain exists of: [ 867.007118][T21142] &dquot->dq_lock --> jbd2_handle --> &ei->xattr_sem [ 867.007118][T21142] [ 867.019836][T21142] Possible unsafe locking scenario: [ 867.019836][T21142] [ 867.027272][T21142] CPU0 CPU1 [ 867.032623][T21142] ---- ---- [ 867.037978][T21142] rlock(&ei->xattr_sem); [ 867.042393][T21142] lock(jbd2_handle); [ 867.048984][T21142] lock(&ei->xattr_sem); [ 867.055832][T21142] lock(&dquot->dq_lock); [ 867.060250][T21142] [ 867.060250][T21142] *** DEADLOCK *** [ 867.060250][T21142] [ 867.068377][T21142] 3 locks held by syz.6.6305/21142: [ 867.073649][T21142] #0: ffff88802a34c420 (sb_writers#4){.+.+}-{0:0}, at: do_fchownat+0x117/0x200 [ 867.082754][T21142] #1: ffff8880544b03e0 (&type->i_mutex_dir_key#3){++++}-{4:4}, at: chown_common+0x335/0x680 [ 867.092984][T21142] #2: ffff8880544b00c8 (&ei->xattr_sem){++++}-{4:4}, at: ext4_setattr+0x875/0x2ae0 [ 867.102435][T21142] [ 867.102435][T21142] stack backtrace: [ 867.108317][T21142] CPU: 1 UID: 0 PID: 21142 Comm: syz.6.6305 Not tainted syzkaller #0 PREEMPT(full) [ 867.108357][T21142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 867.108378][T21142] Call Trace: [ 867.108390][T21142] [ 867.108401][T21142] dump_stack_lvl+0x116/0x1f0 [ 867.108447][T21142] print_circular_bug+0x275/0x350 [ 867.108504][T21142] check_noncircular+0x14c/0x170 [ 867.108566][T21142] __lock_acquire+0x126f/0x1c90 [ 867.108628][T21142] lock_acquire+0x179/0x350 [ 867.108663][T21142] ? dqget+0x5f1/0x1180 [ 867.108700][T21142] ? __pfx___might_resched+0x10/0x10 [ 867.108743][T21142] ? srso_alias_return_thunk+0x5/0xfbef5 [ 867.108784][T21142] ? map_id_range_up+0x2ce/0x3b0 [ 867.108830][T21142] ? dqget+0x5f1/0x1180 [ 867.108862][T21142] __mutex_lock+0x193/0x1060 [ 867.108908][T21142] ? dqget+0x5f1/0x1180 [ 867.108942][T21142] ? srso_alias_return_thunk+0x5/0xfbef5 [ 867.108981][T21142] ? __lock_acquire+0xb8a/0x1c90 [ 867.109038][T21142] ? __pfx___mutex_lock+0x10/0x10 [ 867.109084][T21142] ? __pfx_from_kuid+0x10/0x10 [ 867.109125][T21142] ? srso_alias_return_thunk+0x5/0xfbef5 [ 867.109169][T21142] ? srso_alias_return_thunk+0x5/0xfbef5 [ 867.109209][T21142] ? find_held_lock+0x2b/0x80 [ 867.109251][T21142] ? srso_alias_return_thunk+0x5/0xfbef5 [ 867.109296][T21142] ? dqget+0x5f1/0x1180 [ 867.109328][T21142] ? srso_alias_return_thunk+0x5/0xfbef5 [ 867.109368][T21142] dqget+0x5f1/0x1180 [ 867.109407][T21142] ? __pfx_dqget+0x10/0x10 [ 867.109442][T21142] ? srso_alias_return_thunk+0x5/0xfbef5 [ 867.109487][T21142] dquot_transfer+0x3a8/0x6a0 [ 867.109530][T21142] ? __pfx_dquot_transfer+0x10/0x10 [ 867.109573][T21142] ? ext4_journal_check_start+0x22b/0x340 [ 867.109615][T21142] ? srso_alias_return_thunk+0x5/0xfbef5 [ 867.109660][T21142] ? __ext4_journal_start_sb+0x19e/0x690 [ 867.109699][T21142] ? ext4_setattr+0x83c/0x2ae0 [ 867.109746][T21142] ext4_setattr+0x885/0x2ae0 [ 867.109791][T21142] ? srso_alias_return_thunk+0x5/0xfbef5 [ 867.109831][T21142] ? srso_alias_return_thunk+0x5/0xfbef5 [ 867.109872][T21142] ? evm_verify_current_integrity+0x85/0xe0 [ 867.109928][T21142] ? srso_alias_return_thunk+0x5/0xfbef5 [ 867.109968][T21142] ? evm_inode_setattr+0x65/0x680 [ 867.110023][T21142] ? __pfx_ext4_setattr+0x10/0x10 [ 867.110070][T21142] notify_change+0x6d2/0x12a0 [ 867.110124][T21142] chown_common+0x54e/0x680 [ 867.110167][T21142] ? __pfx_chown_common+0x10/0x10 [ 867.110205][T21142] ? srso_alias_return_thunk+0x5/0xfbef5 [ 867.110257][T21142] ? srso_alias_return_thunk+0x5/0xfbef5 [ 867.110297][T21142] ? srso_alias_return_thunk+0x5/0xfbef5 [ 867.110338][T21142] ? mnt_get_write_access+0x1e9/0x2f0 [ 867.110382][T21142] do_fchownat+0x1a7/0x200 [ 867.110416][T21142] ? __pfx_do_fchownat+0x10/0x10 [ 867.110456][T21142] __x64_sys_chown+0x7b/0xc0 [ 867.110489][T21142] ? lockdep_hardirqs_on+0x7c/0x110 [ 867.110533][T21142] do_syscall_64+0xcd/0xfa0 [ 867.110577][T21142] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 867.110611][T21142] RIP: 0033:0x7f5218f8f749 [ 867.110640][T21142] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 867.110674][T21142] RSP: 002b:00007f5219e0a038 EFLAGS: 00000246 ORIG_RAX: 000000000000005c [ 867.110705][T21142] RAX: ffffffffffffffda RBX: 00007f52191e5fa0 RCX: 00007f5218f8f749 [ 867.110728][T21142] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000000c0 [ 867.110749][T21142] RBP: 00007f5219013f91 R08: 0000000000000000 R09: 0000000000000000 [ 867.110771][T21142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 867.110792][T21142] R13: 00007f52191e6038 R14: 00007f52191e5fa0 R15: 00007ffc3a62cc28 [ 867.110827][T21142] [ 867.545386][T21142] Quota error (device loop6): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0 [ 867.585244][T21142] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0 [ 867.634219][T21142] EXT4-fs error (device loop6): ext4_acquire_dquot:6943: comm syz.6.6305: Failed to acquire dquot type 0 [ 867.725932][T18691] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0007-000000000000.