last executing test programs: 24.381877878s ago: executing program 3 (id=3991): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {0x1, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x2, 0x20000}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240448e0}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r4, &(0x7f0000000280)='0', 0x1, 0x40000, &(0x7f0000000340)={0x11, 0x6, r3, 0x1, 0x2, 0x6, @local}, 0x14) 20.098431442s ago: executing program 0 (id=4000): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000240)='./bus\x00', 0xa04080, &(0x7f0000000000)={[{@block_validity}, {@test_dummy_encryption_v1}]}, 0x4, 0xbac, &(0x7f00000017c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0xffffffffffffffff}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unshare(0x22020600) unshare(0x20000400) r3 = socket(0x2, 0x3, 0x81) setsockopt(r3, 0xff, 0x1, 0x0, 0x26) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) 16.801619563s ago: executing program 0 (id=4003): ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a7565aba55a87d2a251c295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507a0592c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd106926acb583ad63a4e7e1ca17c1b6aac63fefa9dcbe429d00"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x24}, 0x94) socket(0x22, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x7) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000bc0)=@bridge_newneigh={0x2c, 0x1c, 0x1, 0x70bd29, 0x25dfdbfe, {0x7, 0x0, 0x0, r2, 0x80, 0xff, 0xa}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}, @NDA_FDB_EXT_ATTRS={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000890}, 0x4040000) 12.012035939s ago: executing program 0 (id=4012): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) capset(0x0, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) setsockopt$inet6_int(r2, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) recvmmsg(r2, &(0x7f0000000800), 0x62, 0x12141, 0x0) r3 = socket(0xb, 0x5, 0x0) bind$inet(r3, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet(r3, 0x0, 0x40) getsockopt(r3, 0x200000000114, 0x2715, &(0x7f0000000580)=""/102393, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r4, 0x6, 0x12, 0x0, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000001c0)=ANY=[], 0x24}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB="2400000001040101220000000000000005000000050001000166ba00060006"], 0x24}, 0x1, 0x0, 0x0, 0x35}, 0x6000880c) socket$netlink(0x10, 0x3, 0x0) semctl$IPC_SET(0x0, 0x0, 0x13, &(0x7f00000001c0)={{0x0, 0x0, 0x0, 0xee00, 0x0, 0x18, 0x2}, 0x457, 0x6, 0x0, 0x0, 0x0, 0x0, 0x5}) socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'vlan1\x00', &(0x7f0000000040)=@ethtool_regs={0x4, 0x6}}) socket$alg(0x26, 0x5, 0x0) 11.96311828s ago: executing program 3 (id=4013): sched_setscheduler(0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) migrate_pages(0x0, 0x5, &(0x7f00000000c0)=0x3, &(0x7f0000000180)=0x4) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="66617374626f6f742c71756f7461000018bbdecde39739fcd1df176dde746ec834120600000000003b814e50a959736d6572462abc30ef5b65c70f73ecea54b5e5bea9836c319f653557e79a002208ce996dda659bd5ba0f4ce5c2080002223dc60000000000000044cd0a1e3686873600000000005493b4b874cd601d5b9fa9b40fe4d76afc3a989c6d60044e89eb96e44d01a1034e3797ffa86870b82939f41ffa0f3d726f085663c29cbdc4c766a7eb77cc36160191acf5ae7469c82ab4145b595b987d75912a0fcd1c061835294cc0c618aba204f8adaa20c80108d356cd88cc86177056b06e7068c40f807d9e539f8f5b64a8ee0725aa8d00000000007cb6020d90ea79b8027cf75964dd86c2ed2b5e75779677aa8c76b848dd03dab190b5f02ec52830a17b01eaae1c3df076000000000000000000000000000083a48a6b926c668b9b90195018ea3619f9d80a0b894e212178e1a19909d764666264fa29e2c055fd7f8e67c2acfb75f0a8d41692f4542a575ee42ed94a0014fba44985cca9df12fe93bfaccf0122a6e7e593613ac0111701b125cc6799224883d08ce470220a6decad26f0378072a571da000000b1a6bdf03fd56697e348b5b494f6fddb9f56142a47a40ef81690a7eca421bd0ad198afa58ce69d61c29deaa93c0efea0df04f20020ee84075b4e1a2ad43d1be1138de4668e7b6137545708790c501f1ed7f6a571d5000000000000007d2bee8ed5acba62b8ce6eee44e813220ebc37ad7d422bb972c33e626d4d13827d303ee15e254c75ee569a56fa9e"], 0x25, 0x55a8, &(0x7f00000014c0)="$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") r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000700), &(0x7f0000000740)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) symlink(&(0x7f0000000100)='.\x02/file1\x00', &(0x7f0000000000)='./file0\x00') syz_mount_image$exfat(0x0, &(0x7f0000002000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x104000, 0x0, 0x1, 0x0, &(0x7f0000001fc0)) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) 9.676421485s ago: executing program 1 (id=4015): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00') pwritev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)='0', 0x1}], 0x1, 0x1, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="00020c0000000c00020e8b27c1ab74bbba2504c3b1bd9f4f04878284908d792818fde124a3a35a8f1cf57fc7b9059d0f93ffc7f13e8a38d1bf5fdde65cb8f3776da802f4594fc7124e"], 0x0, 0x0, 0x0}, 0x0) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xc) syz_emit_ethernet(0x66, &(0x7f0000000040)={@random="84b3bda829bc", @random="6487a2bed3d6", @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x806}}}}}}, 0x0) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xd) syz_usb_control_io$hid(r1, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_usb_control_io(r1, 0x0, &(0x7f00000006c0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000300), 0x80800) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x10, 0x3f4, 0x2, 0x70bd2b, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x10}, 0x40) recvmmsg(r2, &(0x7f0000004900)=[{{&(0x7f0000000440)=@tipc, 0x80, &(0x7f0000000a40)=[{0x0}, {0x0}], 0x2}, 0xf}, {{0x0, 0x0, &(0x7f0000002d40)}, 0xfffffff7}, {{0x0, 0x0, 0x0}, 0xeaa1}, {{0x0, 0x0, &(0x7f0000004400), 0x0, &(0x7f0000004440)=""/30, 0x1e}, 0x5}, {{&(0x7f0000004480)=@caif=@rfm, 0x80, &(0x7f0000004800)=[{&(0x7f00000045c0)=""/173, 0xad}, {&(0x7f0000004680)=""/22, 0x16}, {&(0x7f00000046c0)=""/26, 0x1a}, {&(0x7f0000004700)=""/247, 0xf7}], 0x4, &(0x7f0000004880)=""/126, 0x7e}, 0xffff}], 0x5, 0x40, 0x0) 8.725421338s ago: executing program 3 (id=4016): mkdirat(0xffffffffffffff9c, &(0x7f0000003000)='./mnt\x00', 0x1ff) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000003000)='./mnt\x00', 0x0, 0x0, &(0x7f0000005000)='ufstype=44bsd\x00') 7.579690836s ago: executing program 0 (id=4017): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000180), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0xc0045543, &(0x7f0000000080)=0xfdfdfffd) write(r0, &(0x7f0000000140)='add oosyz ', 0xb) userfaultfd(0x80001) socket(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) syz_usb_connect$hid(0xb, 0x36, &(0x7f0000000080)=ANY=[@ANYRESOCT=0x0], 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000080)=0x8) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000006b80)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x0, @remote, 0x101}, 0x1c, 0x0}}], 0x1, 0x0) connect$inet6(r4, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @remote, 0x7}, 0x70) r5 = dup(r3) syz_ublk_setup_queues(r5, 0x0, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0x1, 0x2f6}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x8d}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x1000, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff, 0x0, r5}}], 0x1, 0x0, 0x0) 7.481533999s ago: executing program 2 (id=4018): ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000440)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000140)={'vcan0\x00'}) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000080)=0x1a) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x121a02, 0x0) ioctl$TIOCGICOUNT(r3, 0x545d, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r4 = syz_io_uring_setup(0x1895, 0x0, &(0x7f0000000100), &(0x7f00000001c0), &(0x7f0000000180)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x1) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x6, &(0x7f0000000240)=ANY=[@ANYRES32=r5, @ANYBLOB="0000000000000000c30000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x43}, 0x94) io_uring_enter(r4, 0x1, 0x1, 0x1, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/acpi/devices/PNP0C0F:00/status\x00', 0x0, 0x0) read(r6, &(0x7f00000002c0)=""/10, 0x5b) 7.342324462s ago: executing program 3 (id=4019): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x4000000001, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) setpriority(0x1, 0xffffffffffffffff, 0x3) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) creat(&(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x113) r1 = socket$inet6(0xa, 0x3, 0xf94) setsockopt$inet6_int(r1, 0x29, 0x4b, 0x0, 0x0) bind$inet6(r1, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0) syz_open_dev$vim2m(&(0x7f0000000100), 0x80000000000000, 0x2) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r2 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) r3 = socket$inet(0x2, 0x3, 0x8d) fcntl$lock(r3, 0x24, &(0x7f0000000040)={0x1, 0x4, 0x10001, 0x5}) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r3, 0x8982, 0x0) open(0x0, 0x400002, 0x20) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000180)) select(0x40, &(0x7f0000000080)={0x8, 0x62dc, 0x5, 0x0, 0x800, 0x8000000000000000, 0x6, 0x1ff}, 0x0, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x890) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) close(r4) socket$kcm(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) ioctl$SIOCSIFHWADDR(r4, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) 7.324236122s ago: executing program 1 (id=4020): ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a7565aba55a87d2a251c295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507a0592c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd106926acb583ad63a4e7e1ca17c1b6aac63fefa9dcbe429d00"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x24}, 0x94) socket(0x22, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x7) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000bc0)=@bridge_newneigh={0x2c, 0x1c, 0x1, 0x70bd29, 0x25dfdbfe, {0x7, 0x0, 0x0, r2, 0x80, 0xff, 0xa}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}, @NDA_FDB_EXT_ATTRS={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000890}, 0x4040000) 6.133398561s ago: executing program 2 (id=4021): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x4000000001, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) setpriority(0x1, 0xffffffffffffffff, 0x3) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) creat(&(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x113) r1 = socket$inet6(0xa, 0x3, 0xf94) setsockopt$inet6_int(r1, 0x29, 0x4b, 0x0, 0x0) bind$inet6(r1, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0) syz_open_dev$vim2m(&(0x7f0000000100), 0x80000000000000, 0x2) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r2 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, 0x0) r3 = socket$inet(0x2, 0x3, 0x8d) fcntl$lock(r3, 0x24, &(0x7f0000000040)={0x1, 0x4, 0x10001, 0x5}) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r3, 0x8982, 0x0) open(0x0, 0x400002, 0x20) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000180)) select(0x40, &(0x7f0000000080)={0x8, 0x62dc, 0x5, 0x0, 0x800, 0x8000000000000000, 0x6, 0x1ff}, 0x0, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x890) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) close(r4) socket$kcm(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) ioctl$SIOCSIFHWADDR(r4, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) 6.088730152s ago: executing program 0 (id=4022): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) io_uring_setup(0x66a5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0xa, 0x3, 0xff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r5, 0x2000009) sendfile(r0, r5, 0x0, 0x7ffff004) 6.001659944s ago: executing program 3 (id=4023): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000240)='./bus\x00', 0xa04080, &(0x7f0000000000)={[{@block_validity}, {@test_dummy_encryption_v1}]}, 0x4, 0xbac, &(0x7f00000017c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0xffffffffffffffff}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unshare(0x22020600) unshare(0x20000400) r2 = socket(0x2, 0x3, 0x81) setsockopt(r2, 0xff, 0x1, 0x0, 0x26) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) 5.961066375s ago: executing program 1 (id=4024): openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) socket$nl_route(0x10, 0x3, 0x0) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@xino_on}]}) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x14a0, &(0x7f0000000200)=ANY=[], 0x1, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x660042, 0x0, 0x1, 0x0, &(0x7f0000000d40)) 3.483044915s ago: executing program 0 (id=4025): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) capset(0x0, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) setsockopt$inet6_int(r2, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) recvmmsg(r2, &(0x7f0000000800), 0x62, 0x12141, 0x0) r3 = socket(0xb, 0x5, 0x0) bind$inet(r3, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet(r3, 0x0, 0x40) getsockopt(r3, 0x200000000114, 0x2715, &(0x7f0000000580)=""/102393, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r4, 0x6, 0x12, 0x0, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000001c0)=ANY=[], 0x24}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB="2400000001040101220000000000000005000000050001000166ba00060006"], 0x24}, 0x1, 0x0, 0x0, 0x35}, 0x6000880c) socket$netlink(0x10, 0x3, 0x0) semctl$IPC_SET(0x0, 0x0, 0x13, &(0x7f00000001c0)={{0x0, 0x0, 0x0, 0xee00, 0x0, 0x18, 0x2}, 0x457, 0x6, 0x0, 0x0, 0x0, 0x0, 0x5}) socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'vlan1\x00', &(0x7f0000000040)=@ethtool_regs={0x4, 0x6}}) socket$alg(0x26, 0x5, 0x0) 3.409743677s ago: executing program 2 (id=4026): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x78}, 0x1, 0x0, 0x0, 0x48000}, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="040e0c01"], 0xf) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @ipv4={'\x00', '\xff\xff', @local}, 0x4}, 0x1c) socket$inet6(0xa, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000000)={0x34}, 0x8) bpf$MAP_CREATE(0x0, 0x0, 0x50) setregid(0x0, 0xee00) syz_clone3(0x0, 0x0) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffff7]}, 0x8, 0x80000) read$FUSE(r2, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='task\x00') fchdir(r3) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBENT(r4, 0x4b46, &(0x7f00000000c0)={0x1, 0xb, 0x2}) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='wchan\x00') pread64(r5, 0x0, 0x0, 0x4) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r6, 0x0, 0xe, 0x0, &(0x7f0000000080)="c1dfb080cd21d308098e00008100", 0x0, 0x8006, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setuid(0xee01) syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r7 = timerfd_create(0x9, 0x80000) timerfd_settime(r7, 0x3, &(0x7f0000000080)={{}, {0x0, 0x3938700}}, 0x0) timerfd_gettime(r7, 0x0) 3.29854813s ago: executing program 1 (id=4027): sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x48011) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) r3 = socket$nl_audit(0x10, 0x3, 0x9) connect$netlink(r3, &(0x7f0000000080)=@proc={0x10, 0x0, 0x25dfdbff, 0x1}, 0xc) r4 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) r5 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r5, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_DONE(r5, 0x29, 0xc9, 0x12, 0x0) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000001a00)=ANY=[@ANYBLOB="03000000000000000a004e2300000010ff010000000000000000000000000001f8ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b0000000a004e2000000008fe8000000000000000000000000000aa05000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000010000000c0000000000000000000000000000000104000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ad94e2100000073fe8000"], 0x610) r6 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2a, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xfffffffe}}, {{0xa, 0x4e08, 0x4a3, @private2, 0x4f0}}}, 0x108) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x71228}, [@IFLA_MTU={0x8, 0x4, 0x81}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x4004090) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_PREPARE(0xffffffffffffffff, 0x4140, 0x0) 2.47831416s ago: executing program 3 (id=4028): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00') pwritev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)='0', 0x1}], 0x1, 0x1, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="00020c0000000c00020e8b27c1ab74bbba2504c3b1bd9f4f04878284908d792818fde124a3a35a8f1cf57fc7b9059d0f93ffc7f13e8a38d1bf5fdde65cb8f3776da802f4594fc7124e"], 0x0, 0x0, 0x0}, 0x0) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xc) syz_emit_ethernet(0x66, &(0x7f0000000040)={@random="84b3bda829bc", @random="6487a2bed3d6", @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x806}}}}}}, 0x0) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xd) syz_usb_control_io$hid(r1, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_usb_control_io(r1, 0x0, &(0x7f00000006c0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000300), 0x80800) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x10, 0x3f4, 0x2, 0x70bd2b, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x10}, 0x40) recvmmsg(r2, &(0x7f0000004900)=[{{&(0x7f0000000440)=@tipc, 0x80, &(0x7f0000000a40)=[{0x0}, {0x0}], 0x2}, 0xf}, {{0x0, 0x0, &(0x7f0000002d40)}, 0xfffffff7}, {{0x0, 0x0, 0x0}, 0xeaa1}, {{0x0, 0x0, &(0x7f0000004400), 0x0, &(0x7f0000004440)=""/30, 0x1e}, 0x5}, {{&(0x7f0000004480)=@caif=@rfm, 0x80, &(0x7f0000004800)=[{&(0x7f00000045c0)=""/173, 0xad}, {&(0x7f0000004680)=""/22, 0x16}, {&(0x7f00000046c0)=""/26, 0x1a}, {&(0x7f0000004700)=""/247, 0xf7}], 0x4, &(0x7f0000004880)=""/126, 0x7e}, 0xffff}], 0x5, 0x40, 0x0) 2.160959508s ago: executing program 2 (id=4029): syz_mount_image$exfat(&(0x7f0000002bc0), &(0x7f0000000880)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x1004002, &(0x7f0000000240)=ANY=[@ANYBLOB='utf8,utf8,gid=', @ANYRESHEX=0x0, @ANYBLOB=',fmask=00000000000000000000377,dmask=00000000000000000000357,discard,iocharset=cp437,errors=continue,discard,\x00'], 0x1, 0x1533, &(0x7f0000006800)="$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") syz_emit_ethernet(0x46, &(0x7f0000000340)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x88}}}}}}, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f00000001a0), 0x0, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000c00)={0xe9, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x3], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffdfff, 0xffffffff, 0xffffffff]], '\x00', [{0xd, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x4, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r0, 0x40084146, 0x0) ioctl$SNDRV_PCM_IOCTL_DELAY(r0, 0x80084121, &(0x7f00000000c0)) 2.027444181s ago: executing program 1 (id=4030): ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000440)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000140)={'vcan0\x00'}) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000080)=0x1a) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x121a02, 0x0) ioctl$TIOCGICOUNT(r3, 0x545d, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r4 = syz_io_uring_setup(0x1895, 0x0, &(0x7f0000000100), &(0x7f00000001c0), &(0x7f0000000180)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x1) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x6, &(0x7f0000000240)=ANY=[@ANYRES32=r5, @ANYBLOB="0000000000000000c30000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x43}, 0x94) io_uring_enter(r4, 0x1, 0x1, 0x1, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/acpi/devices/PNP0C0F:00/status\x00', 0x0, 0x0) read(r6, &(0x7f00000002c0)=""/10, 0x5b) 1.030039025s ago: executing program 2 (id=4031): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x4000000001, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) setpriority(0x1, 0xffffffffffffffff, 0x3) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) creat(&(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x113) r1 = socket$inet6(0xa, 0x3, 0xf94) setsockopt$inet6_int(r1, 0x29, 0x4b, 0x0, 0x0) bind$inet6(r1, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0) syz_open_dev$vim2m(&(0x7f0000000100), 0x80000000000000, 0x2) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r2 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) r3 = socket$inet(0x2, 0x3, 0x8d) fcntl$lock(r3, 0x24, &(0x7f0000000040)={0x1, 0x4, 0x10001, 0x5}) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r3, 0x8982, 0x0) open(0x0, 0x400002, 0x20) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000180)) select(0x40, &(0x7f0000000080)={0x8, 0x62dc, 0x5, 0x0, 0x800, 0x8000000000000000, 0x6, 0x1ff}, 0x0, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x890) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) close(r4) socket$kcm(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) ioctl$SIOCSIFHWADDR(r4, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) 943.843227ms ago: executing program 1 (id=4032): ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a7565aba55a87d2a251c295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507a0592c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd106926acb583ad63a4e7e1ca17c1b6aac63fefa9dcbe429d00"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x24}, 0x94) socket(0x22, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x7) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000bc0)=@bridge_newneigh={0x2c, 0x1c, 0x1, 0x70bd29, 0x25dfdbfe, {0x7, 0x0, 0x0, r2, 0x80, 0xff, 0xa}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}, @NDA_FDB_EXT_ATTRS={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000890}, 0x4040000) 0s ago: executing program 2 (id=4033): openat$rtc(0xffffffffffffff9c, 0x0, 0x2980, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x15) syz_open_dev$vbi(&(0x7f00000000c0), 0x2, 0x2) socket(0x10, 0x803, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat(0xffffffffffffff9c, &(0x7f0000000e00)='.\x00', 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x9, 0x8000000000000002, 0xfffffffffffffffd, 0x1}, 0x0, &(0x7f0000000100)={0x1ff, 0x0, 0x4, 0x4, 0x0, 0x1136f858, 0x0, 0xffffffffffffffff}, 0x0, 0x0) kernel console output (not intermixed with test programs): = 48b305e5 [ 1608.997492][T18166] jffs2: notice: (18166) jffs2_build_xattr_subsystem: complete building xattr subsystem, 63 of xdatum (0 unchecked, 63 orphan) and 63 of xref (14 dead, 49 orphan) found. [ 1609.027815][T18166] overlayfs: workdir and upperdir must reside under the same mount [ 1609.091250][T14980] syz-executor: attempt to access beyond end of device [ 1609.091250][T14980] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1609.162691][T14980] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 1609.199056][T18169] syz.2.3181: attempt to access beyond end of device [ 1609.199056][T18169] loop2: rw=0, sector=16, nr_sectors = 1 limit=0 [ 1609.311551][T18171] syzkaller0: entered promiscuous mode [ 1609.327279][T18171] syzkaller0: entered allmulticast mode [ 1609.412996][ T28] audit: type=1326 audit(1787229698.075:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18172 comm="syz.2.3183" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbdfd19e0d9 code=0x0 [ 1612.232440][ T28] audit: type=1326 audit(1787229700.895:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18188 comm="syz.3.3180" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f57fc79e0d9 code=0x0 [ 1612.576016][T18192] bridge3: entered promiscuous mode [ 1612.594606][T18192] bridge3: entered allmulticast mode [ 1612.826532][ T28] audit: type=1800 audit(1787229701.485:279): pid=18198 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3190" name="attr_allow_any_host" dev="configfs" ino=47427 res=0 errno=0 [ 1613.173525][T18208] jffs2: notice: (18208) jffs2_build_xattr_subsystem: complete building xattr subsystem, 63 of xdatum (0 unchecked, 63 orphan) and 63 of xref (14 dead, 49 orphan) found. [ 1613.204091][T18208] overlayfs: workdir and upperdir must reside under the same mount [ 1615.107043][T18238] loop0: detected capacity change from 0 to 128 [ 1615.137288][T18239] [U]  [ 1615.140726][T18239] [U] K{‘ [ 1615.145254][T18239] [U] ät Ž1ÊàŠªFìÇÄfËŠî`GÊJç˜Ügö毹¬¡—þÈoÕñ/ümCç [ 1615.156870][T18239] [U] tžØ–/,~ˆÄœ­‹jõÿÊ}8îÊþ'o1Ü"™7-î‚JQœK—¤Wºïqé5c%"¬H12–¦Y“„‰ž€ÊXÍ`ˆ‚íè¼`+³û(·â¿!(éûéz'àtXln»I®gÅj– °üÝ­·på~÷7í!‘Õò"ø¨Î ¾ª(È5ˆObü¤‡ÍƒJÖ [ 1615.179424][T18238] affs: Invalid blocksize (512, 1024, 2048, 4096 allowed) [ 1615.186598][T18238] affs: Error parsing options [ 1615.241303][T18239] [U] ±k\&—}6£6œXîHX ¥ôµ„Ìþ.`¸a“$Û40|϶¿9°øÞ¨„¯À ÏU‚ò4ôä®VbzÃð}ÌwÔM”TºŽíQŸýΦr’ 4”ÿ [ 1615.274072][T18239] [U] ".h6øÞ"Ökã‡[›‰¤ŒJá4çØIn¨™[Z(•„C|Të]z{â3Ÿc=»¨xîôžë…î4ßw‰)\T‘XJøSH{q;ì¹¢…ötÔÇ+‹¦÷gíèÿ®d„.Ë‚³>yž÷éwUh„fN—ŽÇhl]SÔ2ŠÇÙ\g%ŠO¼&z)µðš'¨pul‚_<㠢ذ‰ò®Ôå`Ò±TÔÁþœÐËþ;_ô"(‘u{7jœ¿2X ‘/€'ÝÙcÑÌõIº©ÀÏH¿cÕ³žV¦=‘AiÇ%w¼Esž RšŸjŠîœƒÚ”gÂ÷rÁ¹í¡hI˜¢œaïì6-úDúV¨á i"øånæ¨ þÚAsc~4Áª¹8cø*­OO5/ÿœJš~º§¡w—vK+¬®‰Œ3èÇY)Ž¹M°¸æv¶Ìyqæ½€DTr¯Otpem%f×ÊejÍA5æÔT_-X~ ^aaÛ‚ò˜½qÖå [ 1615.328636][T18239] [U] +w‰G?]£Ó'a: »Ú)Õïó™“' B>t¢ ¡f/™÷<'èUÓ'–¼h§ié.+]eŸ.½-É¿ÿ¿Ò%÷è>2`¶^Uÿ8F.Š6¤Å3ÓØ+ËA¾Â««„°g3ÓpÂó6:^0Àtéèv÷'Eõt¼€ûâYC‰n¾þrÏ©ÞnèPj× ;æZ†êôñû‘8!¯È\ù…¸AØÊ–2Á£$ðµ™Â­wi.Íç#ŠÈ/Bai¼Ä`ðá4j’ôdîy@Óz„ügW÷5Ë¿BÄ µÙœ Nóy"vI2ûÌ [ 1615.448257][T18239] [U] ôT¦_K5¸t¬YJÐþÎ9ðÕcÊ$brŸLúNul ¶ü9wÈýÍ|žGå"ʃÆ%Çú¶êCªØ°¶ºqîÙ ŸÇ3‹Æq¯ôN^HP*½Ü$ µ.Î7yÓ±œ2³ [ 1615.480998][T18239] [U] ½?©ÿ hüä*ÙÁ”Î3í7Üé¾^#Q"0~‡ ‚ð(éoïX LŒb£,'vîÓ=‹ÝëCÌS«…’G‚S¶Þ0•Ö‚‹Ù`˜›žÙ‡Ÿ†=1(÷î¾™÷p#ò2DO*Ƀ [ 1615.496148][T18239] [U] ©s¹“gžµ²¶“˜GuÐÔd-{¸™â|&“®ŸŸñ2µ›LÞc_©œ!`¨ÍozÖ¥¢B¶³%>êrñ¶öwï‡ýŽSsÂH"£yA4£O.šYÙÛä„RTÔ¶ŒBÚ[+/<>—¡{q¢Ú×_²ÕLX8ÊU„ÇØî{ðZ³íø)ÿÒ7?ËrR;ÿcßr hײڣỨè1Å>)©Măâ‰Ït§²Ú(ìÇaÏ„}9·Ú¥ãJ*MÑœ¥Ä¡«'L¹£q ìDWŸòø¸=ؽ|q¬ ÏÆ™W;5æÙŽª!ñdB¸x`é§ö/÷ÂE`ƦM¢Xîâ"ä\ [ 1615.812761][T18239] [U] {;Ž õ¥ÂÙ˜_ˆo2«Ñ)îo®›.2ÐW2겨ðyùÃãx_ HPϱœSªD­¦ø:]‚{Ë©ÔÝæè½ [ 1615.858496][ T28] audit: type=1800 audit(1787229704.515:280): pid=18252 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3201" name="attr_allow_any_host" dev="configfs" ino=47511 res=0 errno=0 [ 1615.888007][T18239] [U] I,Ç>Çó¤ îÙ51ñ÷^1òN4¯oǶþ'0ý?Ö’iÙ9w.ï_.¶WŠa¼ŠVˆ±`)ÑZ¬ïæc6GiÓ¹²a»¬XL[¢›½¡Fü*ÀñO‰W)+‡Ç'\nÆ[K@ÑëÄü2çǬ–®¡p"^`Á‰í øß [ 1615.938986][T18239] [U] 22½“Æ©Ðû©x?0;3u± [ 1615.946218][T18239] [U] ÞœÕæósObx 8”Wˆ4á‘(ð~/§¿íKÇUžãÔ–oQËe+·G®-yµgY_•>v¢ÜÈë—3.hÁÓ™]Í„²2‘”)™DË, ‘Ä þD~×d©£¡+Ãw; A\˜FPÉþȘ|$ºø)KØI³éÐÉ¿kñYT^RÍüù癵“ËA=±#–Üœ ÝíßËae©tå1·Îݯ4K¯.e"RÚS|ðŸÀsÖ’Á:•ù>p ™…rÐ"z‰ú­ûúé#P!˜KY"›}ÃÆF¿N84ü³ƒÅhÞ±£o•Èsߙ̫%DlwÙmæ²Ç [ 1615.999718][T18239] [U] [ª['xn€'²÷ á¿Ü,mr¦«/žšœâ1D=!DŽx91Bùwç»R—lf…ƒÆKì¤Zõê# `ì‘ lØ›§Ëœ»×b~åmÒÔÖ [ 1616.009675][T18239] [U] ™LÖ>ñd+ˆd¯§—®Ì"5Žêh3<ª¨ÅiR=F^”fnõóÜÀ‰¿û­vÛ÷œDÁOIOÚ:Uö>ÖYâ [ 1616.025661][T18239] [U] 'B—6vý20³ä·çž¥·×Œï"t8Ñ{9ÆFW]ôÊäì© [ 1616.039420][T18239] [U] ù72þ‰ïÂÃuþC6™îüÔÏ„I]8cª£tÛ¨QSkYÞîIÒÀâ¹ ¿|V'ÛTV/ùÅg•$[â 9kh`ú"ü‘úõ}€ñ[^=ˆú0á]½ã%ÆÌ‚T“Šž¹ØFì_vö4C¸òÅ [ 1616.065840][T18239] [U] ¹ ec [ 1616.069045][T18239] [U] —”|‚Êì<äî:^ü3$7nK~Ø-™@÷¦?Ÿ–/mtl·Û¾©Iˆwè¬@g~tØ{êÜPß+Æ$ªjp|µ ŽçIÛRiópmð õ·YÓ ú”8ìtÉÐÞVžÙÿÆë,îlâ,Õ [ 1616.098982][T18239] [U] ˆKÌúÛõ‰)0ÄÄÝ~ü³ÊªÁiP'ífóòœzÚÞr¬™ÿ @BÓ]Â5ÝÊ{­©Ê¼ô'à8åÆ¥F‡¹UTqUdÇ©¤K;7íª0c[„ãy–¼ÈYC¦¶»Ø°mª™Lò8’T…ÍšÎ5³ýýrx™¶ðWí x¤²óoQhVi'8œ¥Î…Lµ [ 1616.305801][T18242] loop1: detected capacity change from 0 to 32768 [ 1616.351874][T18242] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 1618.085901][T18242] ocfs2: Unmounting device (7,1) on (node local) [ 1618.171819][T17763] Bluetooth: hci4: unexpected event for opcode 0x0010 [ 1619.392737][T18298] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 1619.688704][ T28] audit: type=1800 audit(1787229708.355:281): pid=18309 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3212" name="attr_allow_any_host" dev="configfs" ino=47602 res=0 errno=0 [ 1619.740397][T18311] jffs2: notice: (18311) jffs2_build_xattr_subsystem: complete building xattr subsystem, 63 of xdatum (0 unchecked, 63 orphan) and 63 of xref (14 dead, 49 orphan) found. [ 1619.904351][T18320] loop2: detected capacity change from 0 to 128 [ 1619.913518][T18320] affs: Invalid blocksize (512, 1024, 2048, 4096 allowed) [ 1619.934455][T18320] affs: Error parsing options [ 1620.352578][T18327] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3219'. [ 1620.760541][ T28] audit: type=1326 audit(1787229709.425:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18328 comm="syz.3.3220" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f57fc79e0d9 code=0x0 [ 1621.412642][T18324] loop1: detected capacity change from 0 to 32768 [ 1621.477025][T18345] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3222'. [ 1621.491881][T18345] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3222'. [ 1621.540577][T18345] loop0: detected capacity change from 0 to 164 [ 1622.285340][T18324] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1622.418953][T18324] XFS (loop1): Ending clean mount [ 1622.592764][T17763] Bluetooth: hci1: unexpected event for opcode 0x0010 [ 1622.616851][ T28] audit: type=1800 audit(1787229711.255:283): pid=18364 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3227" name="attr_allow_any_host" dev="configfs" ino=47672 res=0 errno=0 [ 1622.693215][T15244] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1624.287253][T18378] loop2: detected capacity change from 0 to 128 [ 1624.305221][T18378] affs: Invalid blocksize (512, 1024, 2048, 4096 allowed) [ 1624.327540][T18378] affs: Error parsing options [ 1624.523197][T18381] loop0: detected capacity change from 0 to 1024 [ 1624.541736][T18381] hfsplus: unable to parse mount options [ 1625.631061][T17763] Bluetooth: hci1: unexpected event for opcode 0x0010 [ 1625.794880][ T28] audit: type=1800 audit(1787229714.455:284): pid=18401 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3239" name="attr_allow_any_host" dev="configfs" ino=47047 res=0 errno=0 [ 1625.959148][T17763] Bluetooth: hci3: Malformed HCI Event [ 1626.940209][T18406] loop2: detected capacity change from 0 to 32768 [ 1628.518694][T18385] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1628.539256][ T28] audit: type=1326 audit(1787229717.205:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18398 comm="syz.3.3233" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f57fc79e0d9 code=0x0 [ 1629.931789][ T28] audit: type=1800 audit(1787229718.505:286): pid=18403 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3240" name="file1" dev="loop2" ino=65 res=0 errno=0 [ 1630.174086][T18423] loop2: detected capacity change from 0 to 128 [ 1630.211992][T18423] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1630.221090][T18422] loop0: detected capacity change from 0 to 128 [ 1630.245607][T18423] hpfs: filesystem error: improperly stopped [ 1630.258174][T18423] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1630.280378][T18422] affs: Invalid blocksize (512, 1024, 2048, 4096 allowed) [ 1630.287590][T18422] affs: Error parsing options [ 1630.296808][T18423] hpfs: You really don't want any checks? You are crazy... [ 1630.309176][T18423] hpfs: Code page index out of array [ 1630.314530][T18423] hpfs: code page support is disabled [ 1630.354312][ T5790] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1630.364304][T18423] hpfs: hpfs_map_4sectors(): unaligned read [ 1630.374267][T18423] hpfs: hpfs_map_4sectors(): unaligned read [ 1630.404712][T18423] hpfs: filesystem error: unable to find root dir [ 1630.792994][T17763] Bluetooth: hci3: unexpected event for opcode 0x0010 [ 1631.111576][ T28] audit: type=1800 audit(1787229719.775:287): pid=18439 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3249" name="attr_allow_any_host" dev="configfs" ino=47777 res=0 errno=0 [ 1631.709813][ T28] audit: type=1326 audit(1787229720.375:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18448 comm="syz.3.3251" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f57fc79e0d9 code=0x0 [ 1633.130804][T18464] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3254'. [ 1634.273852][T18442] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1634.565425][T17763] Bluetooth: hci1: unexpected event for opcode 0x0010 [ 1634.612891][T18473] jffs2: notice: (18473) jffs2_build_xattr_subsystem: complete building xattr subsystem, 63 of xdatum (0 unchecked, 63 orphan) and 63 of xref (14 dead, 49 orphan) found. [ 1634.884942][ T28] audit: type=1800 audit(1787229723.545:289): pid=18480 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3261" name="attr_allow_any_host" dev="configfs" ino=47825 res=0 errno=0 [ 1635.749338][T18488] loop0: detected capacity change from 0 to 64 [ 1636.749570][ T28] audit: type=1326 audit(1787229725.415:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18485 comm="syz.2.3263" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbdfd19e0d9 code=0x0 [ 1638.171647][T18501] loop0: detected capacity change from 0 to 128 [ 1638.182437][T18502] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3269'. [ 1638.268061][T18501] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1638.374705][T18501] hpfs: filesystem error: improperly stopped [ 1638.398210][T18501] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1638.419231][T18501] hpfs: You really don't want any checks? You are crazy... [ 1638.426518][T18501] hpfs: Code page index out of array [ 1638.458021][T18501] hpfs: code page support is disabled [ 1638.463936][T18501] hpfs: hpfs_map_4sectors(): unaligned read [ 1638.532727][T18501] hpfs: hpfs_map_4sectors(): unaligned read [ 1638.562706][T18501] hpfs: filesystem error: unable to find root dir [ 1639.460015][ T28] audit: type=1800 audit(1787229728.105:291): pid=18511 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3272" name="attr_allow_any_host" dev="configfs" ino=47878 res=0 errno=0 [ 1639.740292][T18514] jffs2: notice: (18514) jffs2_build_xattr_subsystem: complete building xattr subsystem, 63 of xdatum (0 unchecked, 63 orphan) and 63 of xref (14 dead, 49 orphan) found. [ 1639.769978][T18516] loop2: detected capacity change from 0 to 256 [ 1639.799016][T18516] exfat: Deprecated parameter 'utf8' [ 1639.804501][T18516] exfat: Deprecated parameter 'utf8' [ 1639.894074][T18516] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 1641.156782][T18526] loop0: detected capacity change from 0 to 256 [ 1641.403019][T18526] FAT-fs (loop0): Directory bread(block 64) failed [ 1641.420488][T18533] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 1641.436669][T18526] FAT-fs (loop0): Directory bread(block 65) failed [ 1641.478448][T18526] FAT-fs (loop0): Directory bread(block 66) failed [ 1641.485083][T18526] FAT-fs (loop0): Directory bread(block 67) failed [ 1641.547478][T18526] FAT-fs (loop0): Directory bread(block 68) failed [ 1641.631978][T18526] FAT-fs (loop0): Directory bread(block 69) failed [ 1641.699992][T18526] FAT-fs (loop0): Directory bread(block 70) failed [ 1641.839499][T18526] FAT-fs (loop0): Directory bread(block 71) failed [ 1641.947488][T18526] FAT-fs (loop0): Directory bread(block 72) failed [ 1642.034570][T18526] FAT-fs (loop0): Directory bread(block 73) failed [ 1642.430349][T18539] loop1: detected capacity change from 0 to 128 [ 1642.528609][T18539] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1642.570615][T18539] hpfs: filesystem error: improperly stopped [ 1642.576846][T18539] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1642.585406][T18539] hpfs: You really don't want any checks? You are crazy... [ 1642.593558][T18539] hpfs: Code page index out of array [ 1642.610582][T18539] hpfs: code page support is disabled [ 1642.630776][T18539] hpfs: hpfs_map_4sectors(): unaligned read [ 1642.685585][T18541] jffs2: notice: (18541) jffs2_build_xattr_subsystem: complete building xattr subsystem, 63 of xdatum (0 unchecked, 63 orphan) and 63 of xref (14 dead, 49 orphan) found. [ 1642.702961][T18539] hpfs: hpfs_map_4sectors(): unaligned read [ 1642.709436][T18539] hpfs: filesystem error: unable to find root dir [ 1643.878925][T18545] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3284'. [ 1645.081386][T18556] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 1645.170848][T18558] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3291'. [ 1645.357471][T18564] overlayfs: missing 'lowerdir' [ 1645.430692][T18562] loop3: detected capacity change from 0 to 2048 [ 1645.504430][T18562] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1646.698234][T18567] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 1647.472384][T18577] jffs2: notice: (18577) jffs2_build_xattr_subsystem: complete building xattr subsystem, 63 of xdatum (0 unchecked, 63 orphan) and 63 of xref (14 dead, 49 orphan) found. [ 1647.959978][T14980] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1650.197488][T18597] jffs2: notice: (18597) jffs2_build_xattr_subsystem: complete building xattr subsystem, 63 of xdatum (0 unchecked, 63 orphan) and 63 of xref (14 dead, 49 orphan) found. [ 1650.314622][T18597] overlayfs: upper fs does not support tmpfile. [ 1650.321502][T18597] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1650.328852][T18597] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 1650.638716][T18602] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3302'. [ 1652.860812][T15156] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 1652.898167][T17763] Bluetooth: hci1: command 0x0406 tx timeout [ 1653.110042][T15156] usb 1-1: config 0 interface 0 altsetting 254 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1653.887985][T15156] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1653.894715][T15156] usb 1-1: New USB device found, idVendor=05ac, idProduct=025a, bcdDevice= 0.00 [ 1653.903876][T15156] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1653.914509][T15156] usb 1-1: config 0 descriptor?? [ 1653.939081][T15156] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input10 [ 1654.101282][T18625] loop3: detected capacity change from 0 to 64 [ 1654.206353][ T5124] bcm5974 1-1:0.0: could not read from device [ 1654.258295][ T5124] bcm5974 1-1:0.0: could not read from device [ 1654.322075][T15156] usb 1-1: USB disconnect, device number 50 [ 1654.340841][ T5124] bcm5974 1-1:0.0: could not read from device [ 1654.481519][ T5790] udevd[5790]: Error opening device "/dev/input/event4": No such file or directory [ 1654.519063][ T5790] udevd[5790]: Unable to EVIOCGABS device "/dev/input/event4" [ 1654.526785][T18632] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3312'. [ 1654.556379][ T5790] udevd[5790]: Unable to EVIOCGABS device "/dev/input/event4" [ 1654.578203][ T5790] udevd[5790]: Unable to EVIOCGABS device "/dev/input/event4" [ 1654.585862][ T5790] udevd[5790]: Unable to EVIOCGABS device "/dev/input/event4" [ 1654.839946][T18637] jffs2: notice: (18637) jffs2_build_xattr_subsystem: complete building xattr subsystem, 67 of xdatum (0 unchecked, 67 orphan) and 67 of xref (15 dead, 52 orphan) found. [ 1656.443552][T18637] overlayfs: upper fs does not support tmpfile. [ 1656.450303][T18637] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1656.457547][T18637] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 1657.117942][T18651] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1658.103323][T18656] loop0: detected capacity change from 0 to 128 [ 1658.148928][T18656] EXT4-fs: Ignoring removed i_version option [ 1658.154997][T18656] EXT4-fs: Ignoring removed oldalloc option [ 1658.389808][T18656] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1659.171360][T18656] ext4 filesystem being mounted at /196/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1659.577407][T18669] EXT4-fs error (device loop0): dx_make_map:1328: inode #2: block 33: comm syz.0.3320: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 1659.894840][T18669] EXT4-fs error (device loop0) in do_split:2095: Corrupt filesystem [ 1660.020678][ T28] audit: type=1804 audit(1787229748.175:292): pid=18668 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.3320" name="/newroot/196/file0/file0" dev="loop0" ino=13 res=1 errno=0 [ 1660.093452][T18124] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 1660.154233][ T28] audit: type=1800 audit(1787229748.755:293): pid=18670 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3320" name="file2" dev="loop0" ino=16 res=0 errno=0 [ 1660.318014][T18124] usb 4-1: Using ep0 maxpacket: 32 [ 1660.331138][T18124] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1660.391487][T18124] usb 4-1: config 14 has an invalid interface number: 57 but max is 1 [ 1660.431378][T15767] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1660.440561][T18124] usb 4-1: config 14 has an invalid interface number: 228 but max is 1 [ 1660.468646][T18124] usb 4-1: config 14 has no interface number 0 [ 1660.490042][T18124] usb 4-1: config 14 has no interface number 1 [ 1660.511386][T18124] usb 4-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1660.552321][T18672] futex_wake_op: syz.2.3324 tries to shift op by -1; fix this program [ 1660.587926][T18124] usb 4-1: config 14 interface 228 altsetting 5 has an invalid endpoint with address 0xD1, skipping [ 1660.722062][T18124] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 1660.733998][T18124] usb 4-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1660.873043][T18124] usb 4-1: config 14 interface 57 has no altsetting 0 [ 1660.880221][T18124] usb 4-1: config 14 interface 228 has no altsetting 0 [ 1660.906791][T18124] usb 4-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1660.945013][T18124] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1660.953464][T18124] usb 4-1: Product: syz [ 1660.958397][T18124] usb 4-1: Manufacturer: syz [ 1660.963234][T18124] usb 4-1: SerialNumber: syz [ 1661.745278][T18124] legousbtower 4-1:14.57: interrupt endpoints not found [ 1663.333561][T18690] loop1: detected capacity change from 0 to 128 [ 1663.384081][T18690] affs: Invalid blocksize (512, 1024, 2048, 4096 allowed) [ 1663.415022][T18690] affs: Error parsing options [ 1663.876471][T18124] legousbtower 4-1:14.228: interrupt endpoints not found [ 1663.920912][T18124] usb 4-1: USB disconnect, device number 63 [ 1666.762867][T18711] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3334'. [ 1668.088726][T18722] loop3: detected capacity change from 0 to 128 [ 1668.096345][T18722] affs: Invalid blocksize (512, 1024, 2048, 4096 allowed) [ 1668.123541][T18722] affs: Error parsing options [ 1669.078934][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1669.085438][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1669.194714][ T28] audit: type=1800 audit(1787229757.855:294): pid=18730 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3340" name="attr_allow_any_host" dev="configfs" ino=48708 res=0 errno=0 [ 1672.310054][T18739] Bluetooth: hci0: invalid length 0, exp 2 for type 7 [ 1672.559588][ T28] audit: type=1326 audit(1787229761.225:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18745 comm="syz.2.3346" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbdfd19e0d9 code=0x0 [ 1673.036333][T18757] loop1: detected capacity change from 0 to 1024 [ 1673.043860][T18757] EXT4-fs: Ignoring removed orlov option [ 1673.049668][T18757] EXT4-fs: Ignoring removed i_version option [ 1674.594199][T18757] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1674.767298][T18764] loop0: detected capacity change from 0 to 512 [ 1674.777239][T18764] EXT4-fs (loop0): Test dummy encryption mode enabled [ 1674.868144][T18764] EXT4-fs error (device loop0): ext4_orphan_get:1404: inode #15: comm syz.0.3342: inode has both inline data and extents flags [ 1674.901238][T15244] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1674.920986][T18764] EXT4-fs error (device loop0): ext4_orphan_get:1409: comm syz.0.3342: couldn't read orphan inode 15 (err -117) [ 1674.989480][T18764] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1675.267455][T18773] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 1675.296605][T18773] CIFS: Attempting to mount //127.0.0.1/share [ 1675.359884][T18773] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1675.367817][T18773] CIFS: VFS: cifs_mount failed w/return code = -111 [ 1676.194462][T18764] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 1676.595565][ T28] audit: type=1800 audit(1787229765.255:296): pid=18786 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3352" name="attr_allow_any_host" dev="configfs" ino=48773 res=0 errno=0 [ 1677.456992][T18764] fscrypt (loop0): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 1677.542228][T18797] jffs2: notice: (18797) jffs2_build_xattr_subsystem: complete building xattr subsystem, 72 of xdatum (0 unchecked, 72 orphan) and 72 of xref (16 dead, 56 orphan) found. [ 1677.591806][T15767] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1677.882052][ T28] audit: type=1326 audit(1787229766.545:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18812 comm="syz.0.3357" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f23a339e0d9 code=0x0 [ 1678.118434][T18124] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 1678.318668][T18124] usb 2-1: Using ep0 maxpacket: 8 [ 1678.331087][T18124] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 1678.347012][T18124] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1678.357733][T18124] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1678.369076][T18124] usb 2-1: Product: syz [ 1678.373401][T18124] usb 2-1: Manufacturer: syz [ 1678.380588][T18124] usb 2-1: SerialNumber: syz [ 1678.391104][T18124] usb 2-1: config 0 descriptor?? [ 1678.410563][T18124] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1678.421431][T18124] usb 2-1: setting power ON [ 1678.426129][T18124] dvb-usb: bulk message failed: -22 (2/0) [ 1678.450129][T18124] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1678.464605][T18124] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1678.479313][T18124] usb 2-1: media controller created [ 1678.521997][T18124] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1678.558475][T18124] usb 2-1: selecting invalid altsetting 6 [ 1678.564495][T18124] usb 2-1: digital interface selection failed (-22) [ 1678.575277][T18124] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1678.602417][T18124] usb 2-1: setting power OFF [ 1678.612849][T18124] dvb-usb: bulk message failed: -22 (2/0) [ 1678.633528][T18814] dvb-usb: bulk message failed: -22 (3/0) [ 1678.639653][T18124] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1678.655741][T18814] dvb-usb: bulk message failed: -22 (6/0) [ 1678.666320][T18124] (NULL device *): no alternate interface [ 1678.812379][T18124] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1678.897306][T18822] program syz.0.3363 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1678.920730][T18124] usb 2-1: USB disconnect, device number 67 [ 1679.378663][T18838] jffs2: notice: (18838) jffs2_build_xattr_subsystem: complete building xattr subsystem, 72 of xdatum (0 unchecked, 72 orphan) and 72 of xref (16 dead, 56 orphan) found. [ 1679.596940][T18842] loop1: detected capacity change from 0 to 512 [ 1679.612470][T18842] EXT4-fs: Ignoring removed i_version option [ 1679.636415][T18842] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 1679.699773][T18825] loop3: detected capacity change from 0 to 40427 [ 1679.785617][T18842] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 1679.809583][T18825] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 1679.846969][T18842] Quota error (device loop1): write_blk: dquota write failed [ 1679.847658][T18852] CIFS: Attempting to mount //127.0.0.1/sø:e[1ý2harefµDŽr=root [ 1679.867928][T18825] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1679.876263][T18842] Quota error (device loop1): find_free_dqentry: Can't write quota data block 5 [ 1679.886123][T18825] F2FS-fs (loop3): invalid crc value [ 1679.897066][T18842] Quota error (device loop1): write_blk: dquota write failed [ 1679.926088][T18842] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 1679.959878][T18825] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1679.981975][T18842] EXT4-fs error (device loop1): ext4_acquire_dquot:6953: comm syz.1.3368: Failed to acquire dquot type 1 [ 1680.037345][T18857] CIFS: VFS: \\127.0.0.1 SMB response too short (0 bytes) [ 1680.053841][T18842] EXT4-fs (loop1): 1 truncate cleaned up [ 1680.068325][T18842] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1680.078548][T18825] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 1680.102075][T18825] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1680.149584][T18842] Quota error (device loop1): write_blk: dquota write failed [ 1680.210589][T18842] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 1680.243047][T18842] EXT4-fs error (device loop1): ext4_acquire_dquot:6953: comm syz.1.3368: Failed to acquire dquot type 1 [ 1680.281574][ T28] audit: type=1326 audit(1787229768.945:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18863 comm="syz.2.3372" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbdfd19e0d9 code=0x0 [ 1680.395501][T18852] CIFS: VFS: cifs_mount failed w/return code = -112 [ 1680.415979][T15244] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1680.671852][T18871] loop0: detected capacity change from 0 to 256 [ 1680.687438][T18871] exFAT-fs (loop0): bogus number of FAT structure [ 1680.707598][T18871] exFAT-fs (loop0): failed to read boot sector [ 1680.714666][T18871] exFAT-fs (loop0): failed to recognize exfat type [ 1681.021913][T18877] jffs2: notice: (18877) jffs2_build_xattr_subsystem: complete building xattr subsystem, 72 of xdatum (0 unchecked, 72 orphan) and 72 of xref (16 dead, 56 orphan) found. [ 1681.239491][T18884] loop3: detected capacity change from 0 to 128 [ 1681.255560][T18884] affs: Invalid blocksize (512, 1024, 2048, 4096 allowed) [ 1681.272948][T18884] affs: Error parsing options [ 1681.815496][T17763] Bluetooth: hci1: unexpected event for opcode 0x2003 [ 1683.419007][T18899] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3385'. [ 1683.668177][T18905] jffs2: notice: (18905) jffs2_build_xattr_subsystem: complete building xattr subsystem, 72 of xdatum (0 unchecked, 72 orphan) and 72 of xref (16 dead, 56 orphan) found. [ 1683.705026][T18905] overlayfs: upper fs does not support tmpfile. [ 1683.728793][T18905] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1683.749274][T18905] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 1683.815822][T18892] loop2: detected capacity change from 0 to 32768 [ 1683.858602][ T28] audit: type=1326 audit(1787229772.525:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18908 comm="syz.0.3388" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f23a339e0d9 code=0x0 [ 1684.485180][T18914] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3389'. [ 1684.853192][T18917] jffs2: notice: (18917) jffs2_build_xattr_subsystem: complete building xattr subsystem, 76 of xdatum (0 unchecked, 76 orphan) and 76 of xref (17 dead, 59 orphan) found. [ 1685.337839][T18928] loop2: detected capacity change from 0 to 1024 [ 1685.699851][T18931] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3394'. [ 1686.106306][T18935] loop0: detected capacity change from 0 to 128 [ 1686.173095][T18935] affs: Invalid blocksize (512, 1024, 2048, 4096 allowed) [ 1686.348990][T18935] affs: Error parsing options [ 1687.296561][T18949] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3398'. [ 1687.356864][T18950] jffs2: notice: (18950) jffs2_build_xattr_subsystem: complete building xattr subsystem, 76 of xdatum (0 unchecked, 76 orphan) and 76 of xref (17 dead, 59 orphan) found. [ 1687.420027][T18950] overlayfs: upper fs does not support tmpfile. [ 1687.427103][T18950] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1687.435425][T18950] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 1687.602961][ T28] audit: type=1326 audit(1787229776.265:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18954 comm="syz.2.3400" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbdfd19e0d9 code=0x0 [ 1687.673768][T18957] jffs2: notice: (18957) jffs2_build_xattr_subsystem: complete building xattr subsystem, 81 of xdatum (0 unchecked, 81 orphan) and 81 of xref (18 dead, 63 orphan) found. [ 1687.838714][T18122] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 1688.057364][T18122] usb 4-1: Using ep0 maxpacket: 16 [ 1688.076419][T18122] usb 4-1: config index 0 descriptor too short (expected 51443, got 18) [ 1688.104250][T18122] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1688.119387][T18122] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1688.138079][T18122] usb 4-1: Product: syz [ 1688.142980][T18122] usb 4-1: Manufacturer: syz [ 1688.149220][T18122] usb 4-1: SerialNumber: syz [ 1688.161567][T18122] r8152-cfgselector 4-1: config 0 descriptor?? [ 1690.440692][T18122] r8152-cfgselector 4-1: Unknown version 0x0000 [ 1690.478793][T18122] r8152-cfgselector 4-1: USB disconnect, device number 64 [ 1690.517708][T18972] loop0: detected capacity change from 0 to 128 [ 1690.570764][T18972] affs: Invalid blocksize (512, 1024, 2048, 4096 allowed) [ 1690.578644][T17763] Bluetooth: hci3: unexpected event for opcode 0x0010 [ 1690.639458][T18972] affs: Error parsing options [ 1691.345184][T18983] loop2: detected capacity change from 0 to 32768 [ 1692.442304][T18983] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1692.550597][T18997] jffs2: notice: (18997) jffs2_build_xattr_subsystem: complete building xattr subsystem, 81 of xdatum (0 unchecked, 81 orphan) and 81 of xref (18 dead, 63 orphan) found. [ 1692.573166][T18999] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3411'. [ 1692.628492][T18991] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 1692.713704][T18983] XFS (loop2): Ending clean mount [ 1693.656646][T15542] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1694.242097][T14982] Bluetooth: hci4: unexpected event for opcode 0x0010 [ 1695.268906][ T28] audit: type=1326 audit(1787229783.925:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19017 comm="syz.2.3415" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbdfd19e0d9 code=0x0 [ 1695.652992][T19026] loop2: detected capacity change from 0 to 256 [ 1695.685266][T19004] loop0: detected capacity change from 0 to 40427 [ 1695.712555][T19004] F2FS-fs (loop0): invalid crc value [ 1695.721741][T19028] loop3: detected capacity change from 0 to 128 [ 1695.749407][T19028] affs: Invalid blocksize (512, 1024, 2048, 4096 allowed) [ 1695.756607][T19028] affs: Error parsing options [ 1695.773143][T19004] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1695.782570][T19026] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x5d6de3ec, utbl_chksum : 0xe619d30d) [ 1696.337344][T19004] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1697.105458][T19039] jffs2: notice: (19039) jffs2_build_xattr_subsystem: complete building xattr subsystem, 81 of xdatum (0 unchecked, 81 orphan) and 81 of xref (18 dead, 63 orphan) found. [ 1697.137468][T19039] overlayfs: upper fs does not support tmpfile. [ 1697.144685][T19039] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1697.152152][T19039] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 1697.173267][T19042] hsr0 speed is unknown, defaulting to 1000 [ 1697.198221][T19042] hsr0 speed is unknown, defaulting to 1000 [ 1697.219320][T19042] hsr0 speed is unknown, defaulting to 1000 [ 1697.277225][T19042] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 1697.328677][T19042] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1697.457743][T19042] hsr0 speed is unknown, defaulting to 1000 [ 1697.474666][T19042] hsr0 speed is unknown, defaulting to 1000 [ 1697.486288][T19042] hsr0 speed is unknown, defaulting to 1000 [ 1697.501798][T19042] hsr0 speed is unknown, defaulting to 1000 [ 1699.374233][T14982] Bluetooth: hci3: unexpected event for opcode 0x0010 [ 1699.401826][ T28] audit: type=1326 audit(1787229788.065:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19066 comm="syz.1.3429" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1c8a19e0d9 code=0x0 [ 1699.547751][T19073] loop3: detected capacity change from 0 to 128 [ 1699.590941][T19073] affs: Invalid blocksize (512, 1024, 2048, 4096 allowed) [ 1699.621669][T19073] affs: Error parsing options [ 1699.951415][T19078] jffs2: notice: (19078) jffs2_build_xattr_subsystem: complete building xattr subsystem, 86 of xdatum (0 unchecked, 86 orphan) and 86 of xref (19 dead, 67 orphan) found. [ 1699.989462][T19078] overlayfs: upper fs does not support tmpfile. [ 1699.996820][T19078] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1700.004268][T19078] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 1701.846218][ T28] audit: type=1326 audit(1787229790.505:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19085 comm="syz.2.3436" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdfd19e0d9 code=0x7ffc0000 [ 1701.897007][ T28] audit: type=1326 audit(1787229790.505:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19085 comm="syz.2.3436" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdfd19e0d9 code=0x7ffc0000 [ 1701.951570][ T28] audit: type=1326 audit(1787229790.505:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19085 comm="syz.2.3436" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdfd19e0d9 code=0x7ffc0000 [ 1702.035762][ T28] audit: type=1326 audit(1787229790.505:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19085 comm="syz.2.3436" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdfd19e0d9 code=0x7ffc0000 [ 1702.878621][ T28] audit: type=1326 audit(1787229790.545:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19085 comm="syz.2.3436" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=104 compat=0 ip=0x7fbdfd19e0d9 code=0x7ffc0000 [ 1702.908864][T19098] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3439'. [ 1703.221353][ T28] audit: type=1326 audit(1787229790.545:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19085 comm="syz.2.3436" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdfd19e0d9 code=0x7ffc0000 [ 1703.548254][ T28] audit: type=1326 audit(1787229790.545:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19085 comm="syz.2.3436" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdfd19e0d9 code=0x7ffc0000 [ 1703.628030][ T28] audit: type=1326 audit(1787229790.545:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19085 comm="syz.2.3436" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fbdfd19e0d9 code=0x7ffc0000 [ 1703.635538][T14982] Bluetooth: hci1: unexpected event for opcode 0x0010 [ 1703.677259][ T28] audit: type=1326 audit(1787229790.545:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19085 comm="syz.2.3436" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fbdfd19e0d9 code=0x7ffc0000 [ 1703.706998][ T28] audit: type=1326 audit(1787229792.325:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19104 comm="syz.1.3443" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1c8a19e0d9 code=0x0 [ 1703.759544][T19109] jffs2: notice: (19109) jffs2_build_xattr_subsystem: complete building xattr subsystem, 91 of xdatum (0 unchecked, 91 orphan) and 91 of xref (20 dead, 71 orphan) found. [ 1703.795801][T19109] overlayfs: upper fs does not support tmpfile. [ 1703.803279][T19109] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1703.812106][T19109] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 1703.997599][T19113] loop0: detected capacity change from 0 to 128 [ 1704.032402][T19113] affs: Invalid blocksize (512, 1024, 2048, 4096 allowed) [ 1704.041731][T19113] affs: Error parsing options [ 1704.222212][T19116] loop3: detected capacity change from 0 to 128 [ 1704.239073][T19116] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1704.292045][T19116] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1704.316105][T19116] ext4 filesystem being mounted at /261/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1708.866452][ T28] audit: type=1326 audit(1787229797.525:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19122 comm="syz.0.3447" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f23a339e0d9 code=0x0 [ 1708.911085][T19116] fscrypt (loop3): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 1709.258218][T19120] fscrypt (loop3): Error allocating 'xts(aes)' transform: -4 [ 1711.539761][T14980] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1711.648651][T19155] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3442'. [ 1711.740938][T19159] loop2: detected capacity change from 0 to 128 [ 1711.750540][T19159] affs: Invalid blocksize (512, 1024, 2048, 4096 allowed) [ 1711.757749][T19159] affs: Error parsing options [ 1711.861358][T14982] Bluetooth: hci4: unexpected event for opcode 0x0010 [ 1713.711620][T19162] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3454'. [ 1713.852863][ T28] audit: type=1800 audit(1787229802.515:314): pid=19169 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3456" name="memory_backed" dev="configfs" ino=49665 res=0 errno=0 [ 1713.998667][ T28] audit: type=1800 audit(1787229802.665:315): pid=19172 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3456" name="power" dev="configfs" ino=49670 res=0 errno=0 [ 1714.129135][T19172] null_blk: disk my_zoned_dev created [ 1714.208014][T18124] usb 4-1: new low-speed USB device number 65 using dummy_hcd [ 1714.410799][T18124] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1714.429579][T18124] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0xA has invalid maxpacket 64, setting to 8 [ 1714.448212][T18124] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0xE is Bulk; changing to Interrupt [ 1714.474692][T18124] usb 4-1: string descriptor 0 read error: -22 [ 1714.485848][T18124] usb 4-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice= 0.40 [ 1714.501068][T18124] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1714.516120][T19171] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1714.524140][T19171] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1714.551497][T18124] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 1716.014236][T18124] usb 4-1: USB disconnect, device number 65 [ 1716.964328][T19195] loop0: detected capacity change from 0 to 256 [ 1717.068043][T19195] exfat: Unknown parameter 'zero_size_dir' [ 1718.340517][T14982] Bluetooth: hci4: unexpected event for opcode 0x0010 [ 1718.383609][T19207] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3467'. [ 1718.504284][ T28] audit: type=1800 audit(1787229807.165:316): pid=19209 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3469" name="attr_allow_any_host" dev="configfs" ino=49785 res=0 errno=0 [ 1718.634328][T19213] loop1: detected capacity change from 0 to 512 [ 1718.654474][ T28] audit: type=1326 audit(1787229807.315:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19211 comm="syz.3.3470" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f57fc79e0d9 code=0x0 [ 1718.709729][T19213] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1718.722396][T19213] ext4 filesystem being mounted at /240/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1718.743014][T19213] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 1718.779576][T15244] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1718.851887][T19220] Bluetooth: MGMT ver 1.22 [ 1719.053610][T19226] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 1721.817398][T19238] loop3: detected capacity change from 0 to 512 [ 1721.865371][T19238] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1721.925679][T19238] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 1721.939034][T19238] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1721.996329][T19238] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2855: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 1722.019734][T19238] EXT4-fs (loop3): 1 truncate cleaned up [ 1722.026800][T19238] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1722.229978][T19245] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 1723.221242][T14980] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1723.701130][ T28] audit: type=1800 audit(1787229812.355:318): pid=19254 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3486" name="memory_backed" dev="configfs" ino=49861 res=0 errno=0 [ 1723.723839][T19256] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3485'. [ 1723.745000][T19256] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3485'. [ 1723.835998][ T28] audit: type=1800 audit(1787229812.495:319): pid=19260 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3486" name="power" dev="configfs" ino=49866 res=0 errno=0 [ 1723.887191][T19262] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3479'. [ 1725.596301][ T28] audit: type=1326 audit(1787229814.255:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19271 comm="syz.1.3488" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1c8a19e0d9 code=0x0 [ 1725.895512][T14982] Bluetooth: hci1: unexpected event for opcode 0x0010 [ 1725.920349][T19282] loop3: detected capacity change from 0 to 256 [ 1725.934451][T19282] exfat: Unknown parameter 'zero_size_dir' [ 1726.010346][T19286] loop1: detected capacity change from 0 to 8 [ 1726.078872][T19286] SQUASHFS error: zlib decompression failed, data probably corrupt [ 1726.127744][T19286] SQUASHFS error: Failed to read block 0x9b: -5 [ 1726.164913][T19286] SQUASHFS error: Unable to read metadata cache entry [99] [ 1726.203023][T19286] SQUASHFS error: Unable to read inode 0x127 [ 1726.246301][T19289] loop0: detected capacity change from 0 to 64 [ 1727.111688][T19292] loop2: detected capacity change from 0 to 1024 [ 1727.153590][T19292] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 1727.179273][T19298] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3496'. [ 1728.244346][ T28] audit: type=1326 audit(1787229816.895:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19299 comm="syz.2.3501" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbdfd19e0d9 code=0x0 [ 1729.152437][T19314] loop2: detected capacity change from 0 to 512 [ 1729.177047][T14982] Bluetooth: hci4: unexpected event for opcode 0x0010 [ 1729.196152][T19314] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1729.240944][T19314] ext4 filesystem being mounted at /277/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1729.328258][T18124] usb 2-1: new low-speed USB device number 68 using dummy_hcd [ 1729.375983][T19322] loop0: detected capacity change from 0 to 1024 [ 1729.592962][T18124] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1729.946128][T18124] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0xA has invalid maxpacket 64, setting to 8 [ 1730.090503][T18124] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0xE is Bulk; changing to Interrupt [ 1730.154501][T18124] usb 2-1: string descriptor 0 read error: -22 [ 1730.178383][T18124] usb 2-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice= 0.40 [ 1730.210809][T18124] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1730.247233][T15542] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1730.281165][T19308] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1730.310423][T19308] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1730.362005][T18124] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 1730.371985][ T9] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 1730.501902][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.508513][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1730.577952][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 1731.100902][T19334] loop2: detected capacity change from 0 to 256 [ 1731.140403][ T9] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 1731.224704][T19334] exfat: Unknown parameter 'zero_size_dir' [ 1731.647914][ T9] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1731.664540][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1731.681630][ T9] usb 1-1: config 1 has no interface number 0 [ 1731.688379][ T9] usb 1-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 17 [ 1731.701926][ T9] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1731.711116][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1732.235494][ T9] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 1732.405377][ T9] snd_usb_pod 1-1:1.1: set_interface failed [ 1732.436511][ T9] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 1732.455519][ T28] audit: type=1326 audit(1787229821.115:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19338 comm="syz.3.3511" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f57fc79e0d9 code=0x0 [ 1732.498226][ T9] snd_usb_pod: probe of 1-1:1.1 failed with error -71 [ 1732.498587][T19342] fuse: Unknown parameter 'user_i00000000000000000000' [ 1732.535046][ T9] usb 1-1: USB disconnect, device number 51 [ 1732.666685][T19347] loop2: detected capacity change from 0 to 512 [ 1732.676243][T19347] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1732.685388][T19347] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1732.725679][T19347] EXT4-fs (loop2): 1 truncate cleaned up [ 1732.741648][T18124] usb 2-1: USB disconnect, device number 68 [ 1732.749189][T19347] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1733.703320][T15542] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1733.932649][T19360] loop3: detected capacity change from 0 to 1024 [ 1733.976986][T19360] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 1734.432711][T19369] loop1: detected capacity change from 0 to 256 [ 1734.492916][T19369] exfat: Unknown parameter 'zero_size_dir' [ 1737.470351][ T28] audit: type=1800 audit(1787229826.135:323): pid=19384 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3524" name="attr_allow_any_host" dev="configfs" ino=50658 res=0 errno=0 [ 1737.717955][T18122] usb 1-1: new low-speed USB device number 52 using dummy_hcd [ 1737.910179][T18122] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1737.927190][T18122] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0xA has invalid maxpacket 64, setting to 8 [ 1737.940481][T18122] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0xE is Bulk; changing to Interrupt [ 1737.964310][T18122] usb 1-1: string descriptor 0 read error: -22 [ 1737.973167][T18122] usb 1-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice= 0.40 [ 1737.985342][T18122] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1738.007349][T19383] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1738.021584][T19383] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1738.078072][T18122] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 1738.566587][T18122] usb 1-1: USB disconnect, device number 52 [ 1740.696855][T19411] loop2: detected capacity change from 0 to 256 [ 1740.704777][T19411] exfat: Unknown parameter 'zero_size_dir' [ 1741.791157][ T28] audit: type=1800 audit(1787229830.455:324): pid=19421 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3536" name="attr_allow_any_host" dev="configfs" ino=50738 res=0 errno=0 [ 1742.139088][T19419] netlink: 'syz.2.3535': attribute type 1 has an invalid length. [ 1742.147056][T19419] netlink: 'syz.2.3535': attribute type 2 has an invalid length. [ 1742.513839][T19429] fuse: Unknown parameter 'user_i00000000000000000000' [ 1743.064671][T19446] loop0: detected capacity change from 0 to 512 [ 1743.162981][T19446] EXT4-fs (loop0): Test dummy encryption mode enabled [ 1743.175835][T19446] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1743.242187][T19446] EXT4-fs (loop0): 1 truncate cleaned up [ 1744.298236][T19446] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1748.445845][T15767] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1748.516150][ T28] audit: type=1800 audit(1787229837.155:325): pid=19464 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3546" name="attr_allow_any_host" dev="configfs" ino=50803 res=0 errno=0 [ 1749.832919][T17763] Bluetooth: hci3: unexpected event for opcode 0x0010 [ 1749.893823][T19485] loop0: detected capacity change from 0 to 1024 [ 1749.933531][T19480] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3551'. [ 1749.964792][T19485] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 1750.304502][T19491] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 1750.507922][T17763] Bluetooth: hci1: command 0x0406 tx timeout [ 1751.241696][ T28] audit: type=1800 audit(1787229839.905:326): pid=19504 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3560" name="attr_allow_any_host" dev="configfs" ino=50171 res=0 errno=0 [ 1751.784502][T19509] loop2: detected capacity change from 0 to 128 [ 1751.998541][T19509] affs: Invalid blocksize (512, 1024, 2048, 4096 allowed) [ 1752.185467][T19509] affs: Error parsing options [ 1753.465271][T19519] loop0: detected capacity change from 0 to 64 [ 1753.589384][T19523] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3563'. [ 1753.997430][T19532] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 1754.289832][T19534] loop2: detected capacity change from 0 to 1024 [ 1754.347192][T19534] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 1754.470167][T19521] loop3: detected capacity change from 0 to 32768 [ 1754.542084][T19521] o2cb: This node has not been configured. [ 1754.595988][T19521] o2cb: Cluster check failed. Fix errors before retrying. [ 1754.643915][T19521] (syz.3.3564,19521,1):ocfs2_dlm_init:3375 ERROR: status = -22 [ 1754.679716][T19521] (syz.3.3564,19521,1):ocfs2_mount_volume:1791 ERROR: status = -22 [ 1754.819299][T19521] (syz.3.3564,19521,1):ocfs2_fill_super:1178 ERROR: status = -22 [ 1755.507948][ T28] audit: type=1800 audit(1787229844.165:327): pid=19545 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3572" name="attr_allow_any_host" dev="configfs" ino=50903 res=0 errno=0 [ 1755.563493][T19547] loop0: detected capacity change from 0 to 128 [ 1755.599632][T19547] affs: Invalid blocksize (512, 1024, 2048, 4096 allowed) [ 1755.607077][T19547] affs: Error parsing options [ 1755.828740][T18725] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1756.668290][T19557] loop0: detected capacity change from 0 to 128 [ 1756.675852][T19557] affs: Invalid blocksize (512, 1024, 2048, 4096 allowed) [ 1756.683162][T19557] affs: Error parsing options [ 1757.687106][T19560] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3576'. [ 1758.963471][T19578] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 1759.364691][ T28] audit: type=1800 audit(1787229848.025:328): pid=19589 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3584" name="attr_allow_any_host" dev="configfs" ino=51320 res=0 errno=0 [ 1759.454360][T17763] Bluetooth: hci1: unexpected event for opcode 0x0010 [ 1759.765312][T19598] netlink: 'syz.0.3587': attribute type 1 has an invalid length. [ 1759.776622][T19598] netlink: 'syz.0.3587': attribute type 2 has an invalid length. [ 1760.739942][T19587] loop2: detected capacity change from 0 to 32768 [ 1760.772914][T19610] loop1: detected capacity change from 0 to 64 [ 1760.838166][T19587] o2cb: This node has not been configured. [ 1760.846733][T19587] o2cb: Cluster check failed. Fix errors before retrying. [ 1760.884997][T19587] (syz.2.3581,19587,1):ocfs2_dlm_init:3375 ERROR: status = -22 [ 1760.897639][T19587] (syz.2.3581,19587,1):ocfs2_mount_volume:1791 ERROR: status = -22 [ 1760.940507][T19587] (syz.2.3581,19587,1):ocfs2_fill_super:1178 ERROR: status = -22 [ 1761.674980][T17763] Bluetooth: hci3: unexpected event for opcode 0x0010 [ 1763.752424][T19628] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3597'. [ 1763.769800][ T28] audit: type=1800 audit(1787229851.095:329): pid=19634 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3598" name="attr_allow_any_host" dev="configfs" ino=51056 res=0 errno=0 [ 1764.090281][T19643] fuse: Unknown parameter 'user_i00000000000000000000' [ 1764.397602][T19647] netlink: 'syz.3.3603': attribute type 1 has an invalid length. [ 1764.406980][T19647] netlink: 'syz.3.3603': attribute type 2 has an invalid length. [ 1767.429055][T19661] jffs2: notice: (19661) jffs2_build_xattr_subsystem: complete building xattr subsystem, 96 of xdatum (0 unchecked, 96 orphan) and 96 of xref (21 dead, 75 orphan) found. [ 1767.642162][ T28] audit: type=1800 audit(1787229856.305:330): pid=19664 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3611" name="attr_allow_any_host" dev="configfs" ino=51111 res=0 errno=0 [ 1768.364726][T19670] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3612'. [ 1769.673402][T19686] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 1771.126748][T19694] loop2: detected capacity change from 0 to 512 [ 1771.134265][T19694] EXT4-fs: Ignoring removed i_version option [ 1771.170363][T19694] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 1771.206421][T19694] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 1771.221250][T19694] Quota error (device loop2): write_blk: dquota write failed [ 1771.228761][T19694] Quota error (device loop2): find_free_dqentry: Can't write quota data block 5 [ 1771.237999][T19694] Quota error (device loop2): write_blk: dquota write failed [ 1771.245546][T19694] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 1771.255548][T19694] EXT4-fs error (device loop2): ext4_acquire_dquot:6953: comm syz.2.3619: Failed to acquire dquot type 1 [ 1771.269546][T19694] EXT4-fs (loop2): 1 truncate cleaned up [ 1771.276883][T19694] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1771.306679][T19698] loop3: detected capacity change from 0 to 256 [ 1771.321012][T19698] exfat: Unknown parameter 'zero_size_dir' [ 1771.389405][T18818] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1771.406305][T15542] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1772.683185][T19705] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3622'. [ 1773.638240][T19709] fuse: Unknown parameter 'user_i00000000000000000000' [ 1773.669357][T19712] futex_wake_op: syz.3.3623 tries to shift op by -1; fix this program [ 1773.953912][T19716] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3623'. [ 1774.848393][T17763] Bluetooth: hci1: unexpected event for opcode 0x0010 [ 1775.999769][ T28] audit: type=1326 audit(1787229864.655:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19726 comm="syz.1.3618" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1c8a19e0d9 code=0x0 [ 1777.081108][T19732] loop0: detected capacity change from 0 to 32768 [ 1777.121947][T19732] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1777.180678][T19743] jffs2: notice: (19743) jffs2_build_xattr_subsystem: complete building xattr subsystem, 96 of xdatum (0 unchecked, 96 orphan) and 96 of xref (21 dead, 75 orphan) found. [ 1777.227267][T19732] XFS (loop0): Ending clean mount [ 1777.236413][T19732] XFS (loop0): Quotacheck needed: Please wait. [ 1777.268890][T19743] overlayfs: workdir and upperdir must reside under the same mount [ 1777.394333][T19732] XFS (loop0): Quotacheck: Done. [ 1777.621362][T19746] loop3: detected capacity change from 0 to 1024 [ 1777.725775][T19746] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 1777.748538][ T28] audit: type=1800 audit(1787229866.405:332): pid=19747 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3627" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop0" ino=4428 res=0 errno=0 [ 1778.009930][T15767] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1778.348240][T17763] Bluetooth: hci3: unexpected event for opcode 0x0010 [ 1779.693032][T19776] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3632'. [ 1780.634858][ T28] audit: type=1326 audit(1787229869.295:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19772 comm="syz.2.3637" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbdfd19e0d9 code=0x0 [ 1780.995440][T19774] jffs2: notice: (19774) jffs2_build_xattr_subsystem: complete building xattr subsystem, 96 of xdatum (0 unchecked, 96 orphan) and 96 of xref (21 dead, 75 orphan) found. [ 1781.040346][T19784] fuse: Unknown parameter 'user_i00000000000000000000' [ 1781.090549][T19785] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 1781.299704][T19790] loop2: detected capacity change from 0 to 1024 [ 1781.390471][T19790] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 1781.574435][T19788] loop3: detected capacity change from 0 to 32768 [ 1781.667674][T19788] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1781.748848][T19788] XFS (loop3): Ending clean mount [ 1781.771810][T19788] XFS (loop3): Quotacheck needed: Please wait. [ 1781.962090][T19788] XFS (loop3): Quotacheck: Done. [ 1782.297673][ T28] audit: type=1800 audit(1787229870.955:334): pid=19810 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3641" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=4428 res=0 errno=0 [ 1782.550690][T14980] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1782.634778][ T28] audit: type=1326 audit(1787229871.295:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19812 comm="syz.0.3648" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f23a339e0d9 code=0x0 [ 1783.782063][T19820] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3649'. [ 1784.872066][T19826] loop3: detected capacity change from 0 to 64 [ 1784.936665][T19828] fuse: Unknown parameter 'user_i00000000000000000000' [ 1785.205112][T19830] jffs2: notice: (19830) jffs2_build_xattr_subsystem: complete building xattr subsystem, 96 of xdatum (0 unchecked, 96 orphan) and 96 of xref (21 dead, 75 orphan) found. [ 1785.273731][T19830] overlayfs: workdir and upperdir must reside under the same mount [ 1785.441851][T19839] loop3: detected capacity change from 0 to 1024 [ 1785.494586][T19839] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 1786.867629][T19850] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3659'. [ 1788.014525][T19860] loop2: detected capacity change from 0 to 64 [ 1789.500722][T19873] jffs2: notice: (19873) jffs2_build_xattr_subsystem: complete building xattr subsystem, 96 of xdatum (0 unchecked, 96 orphan) and 96 of xref (21 dead, 75 orphan) found. [ 1790.930212][T19883] loop2: detected capacity change from 0 to 40427 [ 1790.978556][T19883] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 1790.986421][T19883] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1790.998478][T19883] F2FS-fs (loop2): invalid crc value [ 1791.014605][T19883] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1791.067766][T19883] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 1791.074978][T19883] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1791.143062][T19880] loop0: detected capacity change from 0 to 4096 [ 1791.839117][T19880] EXT4-fs (loop0): Test dummy encryption mode enabled [ 1791.939292][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.945919][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1792.422394][T19880] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1793.485077][T15767] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1793.505385][ T28] audit: type=1800 audit(1787229882.165:336): pid=19903 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3673" name="attr_allow_any_host" dev="configfs" ino=52379 res=0 errno=0 [ 1794.475210][T19913] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3670'. [ 1797.114468][T19922] loop3: detected capacity change from 0 to 40427 [ 1797.152813][T19922] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 1797.160656][T19922] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1797.276947][T19922] F2FS-fs (loop3): invalid crc value [ 1797.529111][T19922] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1797.631905][T19922] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 1797.639118][T19922] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1798.800908][T19920] loop1: detected capacity change from 0 to 16 [ 1798.811828][T19920] erofs: (device loop1): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 143300) [ 1798.888154][T18818] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1799.527741][T19937] loop1: detected capacity change from 0 to 256 [ 1799.575355][T19937] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 1799.584265][T19937] FAT-fs (loop1): Filesystem has been set read-only [ 1799.591358][T19937] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 1799.600190][T19937] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 1799.628582][T19937] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 1799.637971][T19937] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 1799.647223][T19937] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 1799.656269][T19937] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 1799.665557][T19937] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 1799.674731][T19937] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 1799.683962][T19937] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 1799.755383][T19937] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 1799.814504][ T28] audit: type=1800 audit(1787229888.365:337): pid=19937 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3682" name="file1" dev="loop1" ino=1049134 res=0 errno=0 [ 1802.315845][T19952] jffs2: notice: (19952) jffs2_build_xattr_subsystem: complete building xattr subsystem, 96 of xdatum (0 unchecked, 96 orphan) and 96 of xref (21 dead, 75 orphan) found. [ 1803.924877][ T28] audit: type=1800 audit(1787229892.585:338): pid=19965 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3688" name="attr_allow_any_host" dev="configfs" ino=51756 res=0 errno=0 [ 1804.714133][T19969] syz.3.3690: attempt to access beyond end of device [ 1804.714133][T19969] loop3: rw=0, sector=16, nr_sectors = 1 limit=0 [ 1805.034216][T19963] loop0: detected capacity change from 0 to 40427 [ 1805.071642][T19971] loop1: detected capacity change from 0 to 40427 [ 1805.079948][T19971] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 1805.087749][T19971] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1805.098240][T19971] F2FS-fs (loop1): invalid crc value [ 1805.196039][T19971] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1805.245535][T19963] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x7ffff [ 1805.311176][T19963] F2FS-fs (loop0): Image doesn't support compression [ 1805.319423][T19971] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 1805.326701][T19971] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1805.397032][T19963] F2FS-fs (loop0): Image doesn't support compression [ 1805.531218][T19963] F2FS-fs (loop0): invalid crc value [ 1806.175872][T19963] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1808.439000][T19993] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3687'. [ 1809.357856][ T28] audit: type=1326 audit(1787229897.245:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19995 comm="syz.3.3694" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f57fc79e0d9 code=0x0 [ 1810.748044][T20004] loop3: detected capacity change from 0 to 256 [ 1810.755393][T20004] exfat: Unknown parameter 'zero_size_dir' [ 1811.879136][ T28] audit: type=1800 audit(1787229900.545:340): pid=20008 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3698" name="attr_allow_any_host" dev="configfs" ino=51793 res=0 errno=0 [ 1812.239319][ T28] audit: type=1326 audit(1787229900.905:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20014 comm="syz.1.3700" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1c8a19e0d9 code=0x0 [ 1812.725485][T20019] fuse: Unknown parameter 'user_i00000000000000000000' [ 1814.390271][ T28] audit: type=1326 audit(1787229903.045:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20031 comm="syz.1.3704" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1c8a19e0d9 code=0x0 [ 1817.538982][T20047] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3707'. [ 1817.643946][T20050] loop1: detected capacity change from 0 to 1024 [ 1817.654683][T20050] hfsplus: unable to parse mount options [ 1820.968122][ T28] audit: type=1800 audit(1787229909.625:343): pid=20078 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3717" name="attr_allow_any_host" dev="configfs" ino=52590 res=0 errno=0 [ 1821.145496][ T28] audit: type=1326 audit(1787229909.805:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20083 comm="syz.3.3722" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f57fc79e0d9 code=0x0 [ 1821.471291][T17763] Bluetooth: hci1: unexpected event for opcode 0x0010 [ 1821.661042][T20091] jffs2: notice: (20091) jffs2_build_xattr_subsystem: complete building xattr subsystem, 96 of xdatum (0 unchecked, 96 orphan) and 96 of xref (21 dead, 75 orphan) found. [ 1821.952740][T20093] loop0: detected capacity change from 0 to 32768 [ 1821.988580][T20093] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1822.087051][ T28] audit: type=1800 audit(1787229910.745:345): pid=20104 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3734" name="attr_allow_any_host" dev="configfs" ino=52621 res=0 errno=0 [ 1822.142923][T20093] XFS (loop0): Ending clean mount [ 1823.275707][T15767] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1823.414885][T17763] Bluetooth: hci4: unexpected event for opcode 0x0010 [ 1823.511486][T20116] loop1: detected capacity change from 0 to 4096 [ 1823.582000][T20116] EXT4-fs (loop1): Test dummy encryption mode enabled [ 1823.619382][T20116] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1824.523945][T20122] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3727'. [ 1825.306947][T15244] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1825.528667][T17763] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 1825.537699][T17763] Bluetooth: hci1: Injecting HCI hardware error event [ 1825.549095][T14982] Bluetooth: hci1: hardware error 0x00 [ 1825.590047][T20132] jffs2: notice: (20132) jffs2_build_xattr_subsystem: complete building xattr subsystem, 96 of xdatum (0 unchecked, 96 orphan) and 96 of xref (21 dead, 75 orphan) found. [ 1826.020907][T20144] loop3: detected capacity change from 0 to 1024 [ 1826.048623][T20144] hfsplus: unable to parse mount options [ 1826.148394][T19185] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1826.765409][ T28] audit: type=1800 audit(1787229915.425:346): pid=20150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3740" name="attr_allow_any_host" dev="configfs" ino=52013 res=0 errno=0 [ 1827.036019][T17763] Bluetooth: hci1: unexpected event for opcode 0x0010 [ 1827.245626][T20158] loop3: detected capacity change from 0 to 4096 [ 1827.272836][T20158] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1827.324572][T20158] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1827.478202][T17763] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 1827.487174][T17763] Bluetooth: hci4: Injecting HCI hardware error event [ 1827.500346][T17763] Bluetooth: hci4: hardware error 0x00 [ 1827.617981][T14982] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 1828.233722][T20173] jffs2: notice: (20173) jffs2_build_xattr_subsystem: complete building xattr subsystem, 96 of xdatum (0 unchecked, 96 orphan) and 96 of xref (21 dead, 75 orphan) found. [ 1828.394342][T14980] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1828.595827][T20179] syzkaller0: entered promiscuous mode [ 1828.601554][T20179] syzkaller0: entered allmulticast mode [ 1828.889943][T20186] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3738'. [ 1828.901370][T20186] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3738'. [ 1828.943922][T20186] loop2: detected capacity change from 0 to 164 [ 1829.538177][T17763] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1832.183271][T20206] jffs2: notice: (20206) jffs2_build_xattr_subsystem: complete building xattr subsystem, 96 of xdatum (0 unchecked, 96 orphan) and 96 of xref (21 dead, 75 orphan) found. [ 1832.277256][ T28] audit: type=1800 audit(1787229920.935:347): pid=20209 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3754" name="attr_allow_any_host" dev="configfs" ino=52070 res=0 errno=0 [ 1833.266107][T20219] loop1: detected capacity change from 0 to 256 [ 1833.372573][T20219] FAT-fs (loop1): Directory bread(block 64) failed [ 1833.391142][T20225] syzkaller0: entered promiscuous mode [ 1833.396683][T20225] syzkaller0: entered allmulticast mode [ 1833.398912][T20219] FAT-fs (loop1): Directory bread(block 65) failed [ 1833.416409][T20219] FAT-fs (loop1): Directory bread(block 66) failed [ 1833.423638][T20219] FAT-fs (loop1): Directory bread(block 67) failed [ 1833.444488][T20219] FAT-fs (loop1): Directory bread(block 68) failed [ 1833.456501][T20219] FAT-fs (loop1): Directory bread(block 69) failed [ 1833.463771][T20219] FAT-fs (loop1): Directory bread(block 70) failed [ 1833.473908][T20219] FAT-fs (loop1): Directory bread(block 71) failed [ 1833.492491][T20219] FAT-fs (loop1): Directory bread(block 72) failed [ 1833.507982][T20219] FAT-fs (loop1): Directory bread(block 73) failed [ 1835.895074][T20245] jffs2: notice: (20245) jffs2_build_xattr_subsystem: complete building xattr subsystem, 96 of xdatum (0 unchecked, 96 orphan) and 96 of xref (21 dead, 75 orphan) found. [ 1836.083716][ T28] audit: type=1800 audit(1787229924.745:348): pid=20255 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3769" name="attr_allow_any_host" dev="configfs" ino=52123 res=0 errno=0 [ 1836.381906][T20232] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3763'. [ 1836.745450][T20264] syzkaller0: entered promiscuous mode [ 1836.757867][T20264] syzkaller0: entered allmulticast mode [ 1838.604789][T20268] hsr0 speed is unknown, defaulting to 1000 [ 1838.719519][T20286] jffs2: notice: (20286) jffs2_build_xattr_subsystem: complete building xattr subsystem, 96 of xdatum (0 unchecked, 96 orphan) and 96 of xref (21 dead, 75 orphan) found. [ 1838.738206][T20288] overlayfs: missing 'lowerdir' [ 1838.958328][T20266] loop0: detected capacity change from 0 to 32768 [ 1839.179531][T20266] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 1840.319723][T20305] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3782'. [ 1840.465480][T20266] ocfs2: Unmounting device (7,0) on (node local) [ 1841.208005][ T28] audit: type=1326 audit(1787229929.855:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20311 comm="syz.0.3786" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f23a339e0d9 code=0x0 [ 1844.096782][ T28] audit: type=1800 audit(1787229932.755:350): pid=20341 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3794" name="attr_allow_any_host" dev="configfs" ino=52974 res=0 errno=0 [ 1845.715558][T20354] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3798'. [ 1846.539719][ T5836] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 1846.899660][ T5836] usb 2-1: config 0 interface 0 altsetting 254 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1846.988150][ T5836] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1847.041225][ T5836] usb 2-1: New USB device found, idVendor=05ac, idProduct=025a, bcdDevice= 0.00 [ 1847.110037][ T5836] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1847.368635][ T5836] usb 2-1: config 0 descriptor?? [ 1847.393116][ T5836] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input11 [ 1847.618407][T20351] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1847.633324][T20351] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1847.643615][T17763] Bluetooth: hci3: unexpected event for opcode 0x0010 [ 1847.842803][T20363] hsr0 speed is unknown, defaulting to 1000 [ 1850.032038][ T5124] bcm5974 2-1:0.0: could not read from device [ 1850.125753][ T5836] usb 2-1: USB disconnect, device number 69 [ 1850.150800][ T5124] bcm5974 2-1:0.0: could not read from device [ 1850.260370][T19185] udevd[19185]: Error opening device "/dev/input/event4": No such file or directory [ 1850.283101][T19185] udevd[19185]: Unable to EVIOCGABS device "/dev/input/event4" [ 1850.291086][T19185] udevd[19185]: Unable to EVIOCGABS device "/dev/input/event4" [ 1850.308083][T19185] udevd[19185]: Unable to EVIOCGABS device "/dev/input/event4" [ 1850.316246][T19185] udevd[19185]: Unable to EVIOCGABS device "/dev/input/event4" [ 1852.188355][T20389] loop0: detected capacity change from 0 to 512 [ 1852.238277][T20389] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 1852.246272][T20389] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 1852.269811][T20389] System zones: 0-1, 15-15, 18-18, 34-34 [ 1852.278399][T20389] EXT4-fs (loop0): orphan cleanup on readonly fs [ 1852.284892][T20389] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=0 [ 1852.314701][ T28] audit: type=1800 audit(1787229940.975:351): pid=20392 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3809" name="attr_allow_any_host" dev="configfs" ino=53075 res=0 errno=0 [ 1852.329419][T20389] EXT4-fs warning (device loop0): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1852.392905][T20389] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 1852.406234][T20389] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.3815: bg 0: block 40: padding at end of block bitmap is not set [ 1852.432840][T20389] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 1852.443949][T20389] EXT4-fs (loop0): 1 truncate cleaned up [ 1852.451373][T20389] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1852.576034][T15767] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1852.759766][T20387] loop3: detected capacity change from 0 to 32768 [ 1852.794934][T20387] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 1852.972069][T20398] jffs2: notice: (20398) jffs2_build_xattr_subsystem: complete building xattr subsystem, 96 of xdatum (0 unchecked, 96 orphan) and 96 of xref (21 dead, 75 orphan) found. [ 1853.081703][T20398] overlayfs: upper fs does not support tmpfile. [ 1853.088615][T20398] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1853.095966][T20398] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 1853.119889][T20398] overlay: filesystem on ./file0 not supported as upperdir [ 1853.259733][T20403] overlayfs: missing 'lowerdir' [ 1853.373520][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.380056][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1853.508745][T17763] Bluetooth: hci3: unexpected event for opcode 0x0010 [ 1853.591145][T20413] futex_wake_op: syz.0.3816 tries to shift op by -1; fix this program [ 1853.868028][T20165] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 1854.188235][T20165] usb 2-1: Using ep0 maxpacket: 32 [ 1854.285962][T20165] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1854.533652][T20165] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1854.598650][T20165] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1854.608634][T20165] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1854.617025][T20165] usb 2-1: Product: syz [ 1854.628413][T20165] usb 2-1: Manufacturer: syz [ 1854.649043][T20165] hub 2-1:4.0: USB hub found [ 1854.736867][ T28] audit: type=1800 audit(1787229943.395:352): pid=20423 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3821" name="attr_allow_any_host" dev="configfs" ino=53375 res=0 errno=0 [ 1854.802508][T20387] ocfs2: Unmounting device (7,3) on (node local) [ 1855.022844][T20165] hub 2-1:4.0: 2 ports detected [ 1856.668904][T20165] hub 2-1:4.0: hub_hub_status failed (err = -71) [ 1856.675684][T20165] hub 2-1:4.0: config failed, can't get hub status (err -71) [ 1856.969045][T20165] usb 2-1: USB disconnect, device number 70 [ 1857.022629][T20433] loop0: detected capacity change from 0 to 512 [ 1857.079280][T20433] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 1857.087563][T20433] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 1857.108060][T20433] System zones: 0-1, 15-15, 18-18, 34-34 [ 1857.124496][T20433] EXT4-fs (loop0): orphan cleanup on readonly fs [ 1857.148225][T20433] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=0 [ 1857.166415][T20433] EXT4-fs warning (device loop0): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1857.181853][T20433] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 1857.190418][T20433] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.3824: bg 0: block 40: padding at end of block bitmap is not set [ 1857.249555][T20433] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 1857.278273][T20433] EXT4-fs (loop0): 1 truncate cleaned up [ 1857.284923][T20433] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1857.466032][T15767] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1859.315252][T20449] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3823'. [ 1860.236777][T20453] jffs2: notice: (20453) jffs2_build_xattr_subsystem: complete building xattr subsystem, 100 of xdatum (0 unchecked, 100 orphan) and 100 of xref (22 dead, 78 orphan) found. [ 1860.254908][T20436] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1860.319762][T20453] overlayfs: upper fs does not support tmpfile. [ 1860.326535][T20453] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1860.333889][T20453] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 1860.355722][T20457] overlayfs: missing 'lowerdir' [ 1860.808413][ T28] audit: type=1800 audit(1787229949.445:353): pid=20464 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3833" name="attr_allow_any_host" dev="configfs" ino=53417 res=0 errno=0 [ 1862.262590][T20463] loop0: detected capacity change from 0 to 4096 [ 1862.298695][T20463] EXT4-fs (loop0): Test dummy encryption mode enabled [ 1862.366508][T20463] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1863.332297][T15767] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1863.397910][ T5836] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 1863.612185][ T5836] usb 2-1: Using ep0 maxpacket: 32 [ 1863.630389][ T5836] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1863.643884][ T5836] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1863.661517][ T5836] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1863.674643][ T5836] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1863.686927][ T5836] usb 2-1: Product: syz [ 1863.691526][ T5836] usb 2-1: Manufacturer: syz [ 1863.709307][ T5836] hub 2-1:4.0: USB hub found [ 1863.910485][ T5836] hub 2-1:4.0: 2 ports detected [ 1864.121463][ T5836] hub 2-1:4.0: hub_hub_status failed (err = -71) [ 1864.128206][ T5836] hub 2-1:4.0: config failed, can't get hub status (err -71) [ 1864.179393][ T5836] usb 2-1: USB disconnect, device number 71 [ 1865.123087][T20489] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3839'. [ 1866.159060][ T28] audit: type=1800 audit(1787229954.805:354): pid=20500 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3843" name="attr_allow_any_host" dev="configfs" ino=53226 res=0 errno=0 [ 1866.227296][T20501] jffs2: notice: (20501) jffs2_build_xattr_subsystem: complete building xattr subsystem, 104 of xdatum (0 unchecked, 104 orphan) and 104 of xref (23 dead, 81 orphan) found. [ 1866.278213][T20501] overlayfs: upper fs does not support tmpfile. [ 1866.284917][T20501] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1866.292385][T20501] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 1868.705036][T20522] loop2: detected capacity change from 0 to 40427 [ 1868.717225][T20522] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 1868.725138][T20522] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1868.742750][T20522] F2FS-fs (loop2): invalid crc value [ 1868.761520][T20522] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1868.803266][T20522] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 1868.810438][T20522] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1870.357969][ T9910] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 1870.558285][ T9910] usb 2-1: Using ep0 maxpacket: 32 [ 1870.578775][ T9910] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1870.604493][ T9910] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1870.661855][ T9910] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1870.714678][ T9910] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1870.733667][ T9910] usb 2-1: Product: syz [ 1870.740520][ T9910] usb 2-1: Manufacturer: syz [ 1870.770598][ T9910] hub 2-1:4.0: USB hub found [ 1871.542815][T20544] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3850'. [ 1872.530178][ T9910] hub 2-1:4.0: 2 ports detected [ 1872.738527][ T9910] hub 2-1:4.0: hub_hub_status failed (err = -71) [ 1872.752550][ T9910] hub 2-1:4.0: config failed, can't get hub status (err -71) [ 1872.830761][ T9910] usb 2-1: USB disconnect, device number 72 [ 1875.418079][ T9910] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 1875.607926][ T9910] usb 4-1: Using ep0 maxpacket: 32 [ 1875.619816][ T9910] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1875.658697][ T9910] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1875.684851][ T28] audit: type=1800 audit(1787229964.335:355): pid=20556 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3857" name="attr_allow_any_host" dev="configfs" ino=54310 res=0 errno=0 [ 1875.693794][ T9910] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1875.742037][ T9910] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1875.752491][ T9910] usb 4-1: Product: syz [ 1875.756797][ T9910] usb 4-1: Manufacturer: syz [ 1875.799724][ T9910] hub 4-1:4.0: USB hub found [ 1876.010357][ T9910] hub 4-1:4.0: 2 ports detected [ 1876.055714][T20567] overlayfs: failed to resolve './bus': -2 [ 1876.075154][T20566] jffs2: notice: (20566) jffs2_build_xattr_subsystem: complete building xattr subsystem, 109 of xdatum (0 unchecked, 109 orphan) and 109 of xref (24 dead, 85 orphan) found. [ 1876.240328][ T9910] hub 4-1:4.0: hub_hub_status failed (err = -71) [ 1876.246775][ T9910] hub 4-1:4.0: config failed, can't get hub status (err -71) [ 1876.324494][ T9910] usb 4-1: USB disconnect, device number 66 [ 1877.601624][T20580] jffs2: notice: (20580) jffs2_build_xattr_subsystem: complete building xattr subsystem, 109 of xdatum (0 unchecked, 109 orphan) and 109 of xref (24 dead, 85 orphan) found. [ 1878.553560][T20586] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3862'. [ 1879.283576][T20585] loop0: detected capacity change from 0 to 512 [ 1879.447135][T20585] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 1879.553456][T20585] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 1879.676710][T20585] System zones: 0-1, 15-15, 18-18, 34-34 [ 1879.752589][T20585] EXT4-fs (loop0): orphan cleanup on readonly fs [ 1879.800408][T20585] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=0 [ 1879.892551][T20585] EXT4-fs warning (device loop0): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1880.017282][T20585] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 1880.146862][T20585] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.3864: bg 0: block 40: padding at end of block bitmap is not set [ 1880.313638][T20585] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 1880.367996][T20585] EXT4-fs (loop0): 1 truncate cleaned up [ 1880.375137][T20585] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1880.694374][T20596] loop2: detected capacity change from 0 to 40427 [ 1880.702609][T20596] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 1880.710488][T20596] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1880.720672][T20596] F2FS-fs (loop2): invalid crc value [ 1880.748248][T20596] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1880.831849][T20596] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 1880.839098][T20596] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1881.089741][T15767] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1881.750226][T20605] jffs2: notice: (20605) jffs2_build_xattr_subsystem: complete building xattr subsystem, 109 of xdatum (0 unchecked, 109 orphan) and 109 of xref (24 dead, 85 orphan) found. [ 1881.828504][T20606] overlayfs: failed to resolve './bus': -2 [ 1882.818312][ T5836] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 1883.018053][ T5836] usb 3-1: Using ep0 maxpacket: 32 [ 1883.030102][ T5836] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1883.060562][ T5836] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1883.106656][ T5836] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1883.126266][ T5836] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1883.163031][ T5836] usb 3-1: Product: syz [ 1883.167467][ T5836] usb 3-1: Manufacturer: syz [ 1883.204002][ T5836] hub 3-1:4.0: USB hub found [ 1883.399815][ T5836] hub 3-1:4.0: 2 ports detected [ 1883.614646][ T5836] hub 3-1:4.0: hub_hub_status failed (err = -71) [ 1883.632700][ T5836] hub 3-1:4.0: config failed, can't get hub status (err -71) [ 1883.843298][ T5836] usb 3-1: USB disconnect, device number 65 [ 1884.788474][T17763] Bluetooth: hci3: unexpected event for opcode 0x0010 [ 1885.020348][T20638] loop2: detected capacity change from 0 to 512 [ 1885.062136][T20638] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 1885.091350][T20638] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 1885.131788][T20638] System zones: 0-1, 15-15, 18-18, 34-34 [ 1885.143095][T20638] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1885.166464][T20638] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0 [ 1885.179520][T20639] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3876'. [ 1885.208755][T20638] EXT4-fs warning (device loop2): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1885.234577][T20638] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 1885.245424][T20638] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz.2.3878: bg 0: block 40: padding at end of block bitmap is not set [ 1885.319277][T20638] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 1885.356471][T20638] EXT4-fs (loop2): 1 truncate cleaned up [ 1885.394444][T20638] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1885.505100][T15542] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1885.793650][T20614] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1886.165699][T20650] overlayfs: failed to resolve './bus': -2 [ 1886.230851][T20649] jffs2: notice: (20649) jffs2_build_xattr_subsystem: complete building xattr subsystem, 109 of xdatum (0 unchecked, 109 orphan) and 109 of xref (24 dead, 85 orphan) found. [ 1886.610017][T20655] loop1: detected capacity change from 0 to 256 [ 1886.656800][T20655] exFAT-fs (loop1): bogus number of FAT structure [ 1886.663384][T20655] exFAT-fs (loop1): failed to read boot sector [ 1886.690794][T20655] exFAT-fs (loop1): failed to recognize exfat type [ 1887.228097][T17763] Bluetooth: hci3: unexpected event for opcode 0x2003 [ 1887.920035][T20673] loop1: detected capacity change from 0 to 512 [ 1887.995982][T20673] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 1888.057747][T20673] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 1888.105928][T20673] System zones: 0-1, 15-15, 18-18, 34-34 [ 1888.149837][T20673] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1888.156349][T20673] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=0 [ 1888.234161][T20673] EXT4-fs warning (device loop1): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1888.336728][T20676] loop2: detected capacity change from 0 to 512 [ 1888.347962][T20673] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 1888.372422][T20676] EXT4-fs: Ignoring removed i_version option [ 1888.395703][T20673] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.3889: bg 0: block 40: padding at end of block bitmap is not set [ 1888.442016][T20676] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 1888.458238][T20673] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 1888.492635][T20673] EXT4-fs (loop1): 1 truncate cleaned up [ 1888.519341][T20676] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 1888.548860][T20673] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1888.626505][T20676] Quota error (device loop2): write_blk: dquota write failed [ 1888.682425][T20676] Quota error (device loop2): find_free_dqentry: Can't write quota data block 5 [ 1888.783394][T20676] Quota error (device loop2): write_blk: dquota write failed [ 1888.837431][T15244] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1888.868721][T20676] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 1888.906003][T20676] EXT4-fs error (device loop2): ext4_acquire_dquot:6953: comm syz.2.3890: Failed to acquire dquot type 1 [ 1889.042565][T20676] EXT4-fs (loop2): 1 truncate cleaned up [ 1889.066529][T20676] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1889.189190][T20676] Quota error (device loop2): write_blk: dquota write failed [ 1889.196677][T20676] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 1889.281437][T20676] EXT4-fs error (device loop2): ext4_acquire_dquot:6953: comm syz.2.3890: Failed to acquire dquot type 1 [ 1889.518009][T15542] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1889.946196][T20688] jffs2: notice: (20688) jffs2_build_xattr_subsystem: complete building xattr subsystem, 109 of xdatum (0 unchecked, 109 orphan) and 109 of xref (24 dead, 85 orphan) found. [ 1890.068667][T16475] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 1890.082817][T20688] overlayfs: upper fs does not support tmpfile. [ 1890.089710][T20688] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1890.096903][T20688] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 1890.299228][T16475] usb 3-1: Using ep0 maxpacket: 8 [ 1890.329364][T16475] usb 3-1: config index 0 descriptor too short (expected 30, got 18) [ 1890.340731][T16475] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1890.359877][T16475] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1890.386171][T16475] usb 3-1: Product: syz [ 1890.419062][T16475] usb 3-1: Manufacturer: syz [ 1890.428010][T16475] usb 3-1: SerialNumber: syz [ 1890.439752][T16475] usb 3-1: config 0 descriptor?? [ 1890.453124][T16475] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1890.466286][T20690] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3891'. [ 1890.486324][T16475] usb 3-1: setting power ON [ 1890.515958][T16475] dvb-usb: bulk message failed: -22 (2/0) [ 1890.539634][T16475] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1890.565794][T20693] overlayfs: failed to resolve './bus': -2 [ 1890.579373][T16475] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1890.609595][T16475] usb 3-1: media controller created [ 1890.694884][T20686] dvb-usb: bulk message failed: -22 (3/0) [ 1890.744976][T20686] dvb-usb: bulk message failed: -22 (6/0) [ 1890.755643][T16475] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1890.840553][T16475] usb 3-1: selecting invalid altsetting 6 [ 1890.868824][T16475] usb 3-1: digital interface selection failed (-22) [ 1890.875521][T16475] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1890.898741][T16475] usb 3-1: setting power OFF [ 1890.904900][T16475] dvb-usb: bulk message failed: -22 (2/0) [ 1890.937852][T16475] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1890.958065][T16475] (NULL device *): no alternate interface [ 1891.085890][T16475] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1891.142365][T16475] usb 3-1: USB disconnect, device number 66 [ 1891.505172][ T28] audit: type=1800 audit(1787229980.165:356): pid=20701 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3897" name="attr_allow_any_host" dev="configfs" ino=53759 res=0 errno=0 [ 1894.127478][T20714] loop2: detected capacity change from 0 to 40427 [ 1894.194941][T20714] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 1894.202822][T20714] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1894.219056][T20714] F2FS-fs (loop2): invalid crc value [ 1894.246526][T20714] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1894.292518][T20714] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 1894.300337][T20714] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1895.789372][T20726] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1895.892331][T20726] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 1897.183917][T20730] jffs2: notice: (20730) jffs2_build_xattr_subsystem: complete building xattr subsystem, 108 of xdatum (0 unchecked, 108 orphan) and 109 of xref (25 dead, 84 orphan) found. [ 1897.251123][T20730] overlayfs: failed to resolve './bus': -2 [ 1897.267036][T20728] loop0: detected capacity change from 0 to 32768 [ 1901.817961][T20745] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3908'. [ 1904.838272][T20763] jffs2: notice: (20763) jffs2_build_xattr_subsystem: complete building xattr subsystem, 108 of xdatum (0 unchecked, 108 orphan) and 109 of xref (25 dead, 84 orphan) found. [ 1904.883379][T20763] overlayfs: failed to resolve './bus': -2 [ 1907.548370][T20785] loop2: detected capacity change from 0 to 40427 [ 1907.583420][T20785] F2FS-fs (loop2): invalid crc value [ 1907.604008][T20785] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1907.736403][T20793] loop3: detected capacity change from 0 to 1024 [ 1907.756531][T20785] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1907.998250][T20165] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 1908.218088][T20165] usb 2-1: Using ep0 maxpacket: 32 [ 1908.229713][T20799] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3912'. [ 1908.232820][T20165] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1908.296501][T20165] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1908.362215][T20165] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1908.372864][T20165] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1908.381385][T20165] usb 2-1: Product: syz [ 1908.386055][T20165] usb 2-1: Manufacturer: syz [ 1908.923950][T20165] hub 2-1:4.0: USB hub found [ 1910.390656][T20165] hub 2-1:4.0: 2 ports detected [ 1910.505451][T20165] hub 2-1:4.0: hub_hub_status failed (err = -71) [ 1910.527885][T20165] hub 2-1:4.0: config failed, can't get hub status (err -71) [ 1910.588926][T20165] usb 2-1: USB disconnect, device number 73 [ 1912.155055][ T28] audit: type=1800 audit(1787230000.815:357): pid=20816 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3929" name="attr_allow_any_host" dev="configfs" ino=54605 res=0 errno=0 [ 1914.812168][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1914.818683][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1917.198286][T20163] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 1917.476043][T20841] loop0: detected capacity change from 0 to 512 [ 1917.498166][T20163] usb 4-1: Using ep0 maxpacket: 32 [ 1917.519700][T20163] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1917.546426][T20163] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1917.572527][T20163] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1917.583663][T20163] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1917.588454][T20841] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 1917.620658][T20841] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 1917.624326][T20163] usb 4-1: Product: syz [ 1917.629340][T20841] System zones: 0-1, 15-15, 18-18, 34-34 [ 1917.639388][T20841] EXT4-fs (loop0): orphan cleanup on readonly fs [ 1917.645987][T20841] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=0 [ 1917.655501][T20841] EXT4-fs warning (device loop0): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1917.656468][T20163] usb 4-1: Manufacturer: syz [ 1917.688230][T20841] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 1917.696828][T20841] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.3931: bg 0: block 40: padding at end of block bitmap is not set [ 1917.739647][T20163] hub 4-1:4.0: USB hub found [ 1917.758308][T20841] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 1917.786377][T20841] EXT4-fs (loop0): 1 truncate cleaned up [ 1917.811182][T20841] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1917.948762][T20163] hub 4-1:4.0: 2 ports detected [ 1917.976004][T15767] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1918.191457][T20163] hub 4-1:4.0: hub_hub_status failed (err = -71) [ 1918.265859][T20163] hub 4-1:4.0: config failed, can't get hub status (err -71) [ 1918.589206][T20163] usb 4-1: USB disconnect, device number 67 [ 1918.752087][T20848] jffs2: notice: (20848) jffs2_build_xattr_subsystem: complete building xattr subsystem, 108 of xdatum (0 unchecked, 108 orphan) and 109 of xref (25 dead, 84 orphan) found. [ 1918.777422][T20848] overlayfs: failed to resolve './bus': -2 [ 1921.604821][T20862] loop0: detected capacity change from 0 to 4096 [ 1921.619529][T20862] EXT4-fs (loop0): Test dummy encryption mode enabled [ 1921.739442][T20862] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1924.204571][T20872] loop2: detected capacity change from 0 to 40427 [ 1924.244139][T20872] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 1924.252342][T20872] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1924.264834][T20872] F2FS-fs (loop2): invalid crc value [ 1924.283007][T15767] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1924.294960][T20872] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1924.379796][T20872] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 1924.386918][T20872] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1925.366462][ T28] audit: type=1800 audit(1787230014.025:358): pid=20883 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3941" name="attr_allow_any_host" dev="configfs" ino=54005 res=0 errno=0 [ 1927.163169][T20894] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1927.184698][T20894] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 1927.621656][ T9910] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 1929.661687][ T9910] usb 2-1: Using ep0 maxpacket: 32 [ 1929.673698][ T9910] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1929.705305][ T9910] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1929.737843][ T9910] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1929.766920][T20909] loop3: detected capacity change from 0 to 4096 [ 1929.773575][ T9910] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1929.787903][ T9910] usb 2-1: Product: syz [ 1929.792434][ T9910] usb 2-1: Manufacturer: syz [ 1929.798868][T20909] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1929.843766][ T9910] hub 2-1:4.0: USB hub found [ 1929.862551][T20909] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1930.045949][ T9910] hub 2-1:4.0: 2 ports detected [ 1930.293534][ T9910] hub 2-1:4.0: hub_hub_status failed (err = -71) [ 1930.386387][ T9910] hub 2-1:4.0: config failed, can't get hub status (err -71) [ 1930.752191][T14980] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1930.783182][ T9910] usb 2-1: USB disconnect, device number 74 [ 1931.379793][T20916] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3956'. [ 1932.723800][T20923] jffs2: notice: (20923) jffs2_build_xattr_subsystem: complete building xattr subsystem, 108 of xdatum (0 unchecked, 108 orphan) and 109 of xref (25 dead, 84 orphan) found. [ 1932.750857][T20924] overlayfs: missing 'workdir' [ 1933.171355][T20932] jffs2: notice: (20932) jffs2_build_xattr_subsystem: complete building xattr subsystem, 108 of xdatum (0 unchecked, 108 orphan) and 109 of xref (25 dead, 84 orphan) found. [ 1933.263499][T20939] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1933.275903][T20939] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 1933.289458][T20932] overlayfs: upper fs does not support tmpfile. [ 1933.296170][T20932] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1933.303458][T20932] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 1936.849220][T20957] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3966'. [ 1937.976784][T20163] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 1938.007871][ T28] audit: type=1800 audit(1787230026.665:359): pid=20961 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3958" name="attr_allow_any_host" dev="configfs" ino=54113 res=0 errno=0 [ 1938.218090][T20163] usb 2-1: Using ep0 maxpacket: 32 [ 1938.225695][T20163] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1938.257057][T20163] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1938.279775][T20163] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1938.297855][T20163] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1938.321097][T20163] usb 2-1: Product: syz [ 1938.325377][T20163] usb 2-1: Manufacturer: syz [ 1938.348211][T20163] hub 2-1:4.0: USB hub found [ 1938.555336][T20163] hub 2-1:4.0: 2 ports detected [ 1938.763673][T20163] hub 2-1:4.0: hub_hub_status failed (err = -71) [ 1938.785038][T20163] hub 2-1:4.0: config failed, can't get hub status (err -71) [ 1938.853399][T20163] usb 2-1: USB disconnect, device number 75 [ 1940.853302][T20976] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1940.913283][T20976] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 1941.346045][T20979] loop0: detected capacity change from 0 to 40427 [ 1941.371483][T20979] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 1941.381509][T20979] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 1941.400439][T20979] F2FS-fs (loop0): invalid crc value [ 1941.457189][T20979] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1941.558137][T20979] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 1941.565482][T20979] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1946.002709][T20996] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3976'. [ 1947.622389][T21000] jffs2: notice: (21000) jffs2_build_xattr_subsystem: complete building xattr subsystem, 112 of xdatum (0 unchecked, 112 orphan) and 113 of xref (26 dead, 87 orphan) found. [ 1947.652548][T21000] overlayfs: upper fs does not support tmpfile. [ 1947.659401][T21000] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1947.666692][T21000] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 1948.359162][T21008] loop1: detected capacity change from 0 to 512 [ 1948.825486][T21008] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 1948.871147][T21008] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 1948.911409][T21008] System zones: 0-1, 15-15, 18-18, 34-34 [ 1948.917616][T21008] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1948.954710][T21008] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=0 [ 1948.970158][T21008] EXT4-fs warning (device loop1): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1948.985495][T21008] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 1950.479177][T21008] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.3975: bg 0: block 40: padding at end of block bitmap is not set [ 1950.582498][T21008] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 1950.628473][T21008] EXT4-fs (loop1): 1 truncate cleaned up [ 1950.644787][T21008] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1950.713103][T21018] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1950.765833][T21018] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 1950.808068][T15244] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1955.170814][T21042] loop0: detected capacity change from 0 to 4096 [ 1955.221479][T21042] EXT4-fs (loop0): Test dummy encryption mode enabled [ 1955.457683][T21044] loop3: detected capacity change from 0 to 40427 [ 1955.498734][T21044] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 1955.506511][T21044] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1955.545451][T21044] F2FS-fs (loop3): invalid crc value [ 1955.556779][T21044] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1955.599543][T21042] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1955.650896][T21044] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 1955.658042][T21044] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1957.032089][T15767] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1957.043801][T21057] loop1: detected capacity change from 0 to 512 [ 1957.153798][T21057] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 1957.210225][T21057] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 1957.218599][T21057] System zones: 0-1, 15-15, 18-18, 34-34 [ 1957.224613][T21057] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1957.231344][T21057] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=0 [ 1957.244240][T21057] EXT4-fs warning (device loop1): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1957.262265][T21057] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 1957.282658][T21057] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.3990: bg 0: block 40: padding at end of block bitmap is not set [ 1957.315280][T21057] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 1957.334736][T21057] EXT4-fs (loop1): 1 truncate cleaned up [ 1957.349432][T21057] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1957.517087][T15244] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1960.440883][T21073] jffs2: notice: (21073) jffs2_build_xattr_subsystem: complete building xattr subsystem, 117 of xdatum (0 unchecked, 117 orphan) and 118 of xref (27 dead, 91 orphan) found. [ 1960.486455][T21074] overlayfs: failed to resolve './bus': -2 [ 1960.617672][T21076] syzkaller0: entered promiscuous mode [ 1960.632733][T21076] syzkaller0: entered allmulticast mode [ 1961.452248][T21085] loop0: detected capacity change from 0 to 4096 [ 1962.328385][T21085] EXT4-fs (loop0): Test dummy encryption mode enabled [ 1962.405649][T21085] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1964.518815][T15767] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1965.659971][T21103] loop2: detected capacity change from 0 to 512 [ 1965.726164][T21103] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 1965.749928][T21103] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 1965.760361][T21103] System zones: 0-1, 15-15, 18-18, 34-34 [ 1965.766486][T21103] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1965.778803][T21103] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0 [ 1965.793178][ T5836] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 1965.801649][T21103] EXT4-fs warning (device loop2): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1965.822860][T21103] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 1965.830443][T21103] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz.2.4002: bg 0: block 40: padding at end of block bitmap is not set [ 1965.846917][T21103] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 1965.856367][T21103] EXT4-fs (loop2): 1 truncate cleaned up [ 1965.863722][T21103] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1965.986886][T15542] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1965.997869][ T5836] usb 2-1: Using ep0 maxpacket: 32 [ 1966.005712][ T5836] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1966.018390][ T5836] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1966.042053][ T5836] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1966.057942][ T5836] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1966.066435][ T5836] usb 2-1: Product: syz [ 1966.072264][ T5836] usb 2-1: Manufacturer: syz [ 1966.118220][ T5836] hub 2-1:4.0: USB hub found [ 1966.188016][T17763] Bluetooth: hci3: unexpected event for opcode 0x0010 [ 1966.341314][ T5836] hub 2-1:4.0: 2 ports detected [ 1966.576160][ T5836] hub 2-1:4.0: hub_hub_status failed (err = -71) [ 1967.234890][ T5836] hub 2-1:4.0: config failed, can't get hub status (err -71) [ 1967.268766][ T5836] usb 2-1: USB disconnect, device number 76 [ 1967.990630][T21117] jffs2: notice: (21117) jffs2_build_xattr_subsystem: complete building xattr subsystem, 117 of xdatum (0 unchecked, 117 orphan) and 118 of xref (27 dead, 91 orphan) found. [ 1968.026356][T21117] overlayfs: failed to resolve './bus': -2 [ 1969.162390][T21099] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1969.174538][T21099] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 1971.035957][T21126] loop1: detected capacity change from 0 to 4096 [ 1971.059299][T21126] EXT4-fs (loop1): Test dummy encryption mode enabled [ 1971.081445][T21126] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1971.540645][T21133] loop3: detected capacity change from 0 to 40427 [ 1971.555262][T21133] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 1971.563187][T21133] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1971.628515][T21133] F2FS-fs (loop3): invalid crc value [ 1971.651994][T15244] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1971.674719][T21133] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1971.742551][T21133] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 1971.749812][T21133] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1972.608399][ T5836] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 1972.798164][ T5836] usb 2-1: Using ep0 maxpacket: 32 [ 1972.811815][ T5836] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1972.830098][ T5836] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1972.843417][ T5836] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1972.856740][ T5836] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1972.866624][ T5836] usb 2-1: Product: syz [ 1972.871438][ T5836] usb 2-1: Manufacturer: syz [ 1972.908720][ T5836] hub 2-1:4.0: USB hub found [ 1973.142679][ T5836] hub 2-1:4.0: 2 ports detected [ 1973.374407][ T5836] hub 2-1:4.0: hub_hub_status failed (err = -71) [ 1973.406278][ T5836] hub 2-1:4.0: config failed, can't get hub status (err -71) [ 1973.469568][ T5836] usb 2-1: USB disconnect, device number 77 [ 1973.694386][T17763] Bluetooth: hci3: unexpected event for opcode 0x0010 [ 1977.750032][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1977.756422][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1977.846441][T21176] jffs2: notice: (21176) jffs2_build_xattr_subsystem: complete building xattr subsystem, 117 of xdatum (0 unchecked, 117 orphan) and 118 of xref (27 dead, 91 orphan) found. [ 1977.873221][T21176] overlayfs: workdir and upperdir must reside under the same mount [ 1977.907252][T21171] loop3: detected capacity change from 0 to 4096 [ 1977.925531][T21171] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1977.937043][T21171] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1978.257449][T17763] Bluetooth: hci3: unexpected event for opcode 0x0010 [ 1978.918825][T14980] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1979.262224][T21190] loop2: detected capacity change from 0 to 256 [ 1979.429315][T21190] exfat: Deprecated parameter 'utf8' [ 1979.434695][T21190] exfat: Deprecated parameter 'utf8' [ 1979.564267][T21190] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 1980.497852][T20165] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 1981.371490][T21202] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1981.383792][T21202] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 1981.512028][T20165] usb 4-1: Using ep0 maxpacket: 32 [ 1982.261081][ T2941] ------------[ cut here ]------------ [ 1982.267414][ T2941] WARNING: CPU: 1 PID: 2941 at io_uring/io_uring.c:3214 io_ring_exit_work+0x3b9/0x830 [ 1982.277315][ T2941] Modules linked in: [ 1982.281332][ T2941] CPU: 1 PID: 2941 Comm: kworker/u4:6 Not tainted syzkaller #0 [ 1982.289012][ T2941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1982.299224][ T2941] Workqueue: iou_exit io_ring_exit_work [ 1982.304876][ T2941] RIP: 0010:io_ring_exit_work+0x3b9/0x830 [ 1982.310715][ T2941] Code: fd 48 8b 7c 24 40 48 8b 74 24 10 e8 e1 00 11 00 48 85 c0 41 bf 00 20 00 00 75 1d e8 01 a1 00 f7 e9 b1 fd ff ff e8 f7 a0 00 f7 <0f> 0b b8 70 17 00 00 48 89 44 24 10 eb c1 c7 84 24 90 00 00 00 00 [ 1982.331301][ T2941] RSP: 0018:ffffc9000bc2fa40 EFLAGS: 00010293 [ 1982.337447][ T2941] RAX: ffffffff8a86d179 RBX: ffff8880632de000 RCX: ffff88802bd49e00 [ 1982.345559][ T2941] RDX: 0000000000000000 RSI: ffffffffffffffcb RDI: 0000000000000000 [ 1982.353660][ T2941] RBP: ffffc9000bc2fbb0 R08: ffffc9000bc2f9c7 R09: 1ffff92001785f38 [ 1982.361752][ T2941] R10: dffffc0000000000 R11: fffff52001785f39 R12: dffffc0000000000 [ 1982.369890][ T2941] R13: 0000000100029024 R14: 0000000100029059 R15: ffff8880632de510 [ 1982.378031][ T2941] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1982.387062][ T2941] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1982.393751][ T2941] CR2: 0000200000004000 CR3: 0000000031edc000 CR4: 00000000003506e0 [ 1982.401859][ T2941] Call Trace: [ 1982.405185][ T2941] [ 1982.408339][ T2941] ? io_ring_ctx_wait_and_kill+0x2b0/0x2b0 [ 1982.414284][ T2941] ? _raw_spin_unlock_irq+0x23/0x50 [ 1982.419668][ T2941] ? process_scheduled_works+0x975/0x1600 [ 1982.425871][ T2941] ? process_scheduled_works+0x975/0x1600 [ 1982.432052][ T2941] process_scheduled_works+0xa60/0x1600 [ 1982.437879][ T2941] ? worker_attach_to_pool+0x370/0x370 [ 1982.443603][ T2941] ? assign_work+0x3cc/0x5d0 [ 1982.448403][ T2941] worker_thread+0xa5e/0xfe0 [ 1982.453170][ T2941] kthread+0x2fa/0x390 [ 1982.457381][ T2941] ? pr_cont_work+0x550/0x550 [ 1982.462252][ T2941] ? kthread_blkcg+0xd0/0xd0 [ 1982.466987][ T2941] ret_from_fork+0x48/0x80 [ 1982.471565][ T2941] ? kthread_blkcg+0xd0/0xd0 [ 1982.476300][ T2941] ret_from_fork_asm+0x11/0x20 [ 1982.481320][ T2941] [ 1982.484447][ T2941] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1982.491770][ T2941] CPU: 1 PID: 2941 Comm: kworker/u4:6 Not tainted syzkaller #0 [ 1982.499359][ T2941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1982.509463][ T2941] Workqueue: iou_exit io_ring_exit_work [ 1982.515082][ T2941] Call Trace: [ 1982.518422][ T2941] [ 1982.521390][ T2941] dump_stack_lvl+0x18c/0x250 [ 1982.526122][ T2941] ? show_regs_print_info+0x20/0x20 [ 1982.531378][ T2941] ? load_image+0x420/0x420 [ 1982.535936][ T2941] panic+0x2ca/0x720 [ 1982.539891][ T2941] ? bpf_jit_dump+0xd0/0xd0 [ 1982.544463][ T2941] ? ret_from_fork_asm+0x11/0x20 [ 1982.549466][ T2941] __warn+0x2e0/0x470 [ 1982.553936][ T2941] ? io_ring_exit_work+0x3b9/0x830 [ 1982.559103][ T2941] ? io_ring_exit_work+0x3b9/0x830 [ 1982.564267][ T2941] report_bug+0x2be/0x4f0 [ 1982.568661][ T2941] ? io_ring_exit_work+0x3b9/0x830 [ 1982.573830][ T2941] ? io_ring_exit_work+0x3b9/0x830 [ 1982.579040][ T2941] ? io_ring_exit_work+0x3bb/0x830 [ 1982.584382][ T2941] handle_bug+0xcf/0x120 [ 1982.588716][ T2941] exc_invalid_op+0x1a/0x50 [ 1982.593579][ T2941] asm_exc_invalid_op+0x1a/0x20 [ 1982.598507][ T2941] RIP: 0010:io_ring_exit_work+0x3b9/0x830 [ 1982.604405][ T2941] Code: fd 48 8b 7c 24 40 48 8b 74 24 10 e8 e1 00 11 00 48 85 c0 41 bf 00 20 00 00 75 1d e8 01 a1 00 f7 e9 b1 fd ff ff e8 f7 a0 00 f7 <0f> 0b b8 70 17 00 00 48 89 44 24 10 eb c1 c7 84 24 90 00 00 00 00 [ 1982.624562][ T2941] RSP: 0018:ffffc9000bc2fa40 EFLAGS: 00010293 [ 1982.630747][ T2941] RAX: ffffffff8a86d179 RBX: ffff8880632de000 RCX: ffff88802bd49e00 [ 1982.638759][ T2941] RDX: 0000000000000000 RSI: ffffffffffffffcb RDI: 0000000000000000 [ 1982.646761][ T2941] RBP: ffffc9000bc2fbb0 R08: ffffc9000bc2f9c7 R09: 1ffff92001785f38 [ 1982.654767][ T2941] R10: dffffc0000000000 R11: fffff52001785f39 R12: dffffc0000000000 [ 1982.662852][ T2941] R13: 0000000100029024 R14: 0000000100029059 R15: ffff8880632de510 [ 1982.670874][ T2941] ? io_ring_exit_work+0x3b9/0x830 [ 1982.676063][ T2941] ? io_ring_ctx_wait_and_kill+0x2b0/0x2b0 [ 1982.681931][ T2941] ? _raw_spin_unlock_irq+0x23/0x50 [ 1982.687189][ T2941] ? process_scheduled_works+0x975/0x1600 [ 1982.692949][ T2941] ? process_scheduled_works+0x975/0x1600 [ 1982.698702][ T2941] process_scheduled_works+0xa60/0x1600 [ 1982.704302][ T2941] ? worker_attach_to_pool+0x370/0x370 [ 1982.709801][ T2941] ? assign_work+0x3cc/0x5d0 [ 1982.714424][ T2941] worker_thread+0xa5e/0xfe0 [ 1982.719067][ T2941] kthread+0x2fa/0x390 [ 1982.723158][ T2941] ? pr_cont_work+0x550/0x550 [ 1982.727955][ T2941] ? kthread_blkcg+0xd0/0xd0 [ 1982.732574][ T2941] ret_from_fork+0x48/0x80 [ 1982.737054][ T2941] ? kthread_blkcg+0xd0/0xd0 [ 1982.741669][ T2941] ret_from_fork_asm+0x11/0x20 [ 1982.746477][ T2941] [ 1982.750115][ T2941] Kernel Offset: disabled [ 1982.754587][ T2941] Rebooting in 86400 seconds..