last executing test programs: 8.769144929s ago: executing program 5 (id=955): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x201, 0xe4340000, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x81}, 0x800) socket$nl_netfilter(0x10, 0x3, 0xc) 8.576942399s ago: executing program 3 (id=957): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$inet6(0xa, 0x3, 0x7) ptrace(0x10, 0x0) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) getpgrp(0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000480), 0x1, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r3, 0xc4c85512, &(0x7f0000000780)={{0x3, 0x0, 0x1000000}, 0x0, [0x0, 0x2, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x2, 0x0, 0xfffffffffffffffd, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x4, 0x9, 0x0, 0x0, 0x1, 0x5, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd451, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0x0, 0x0, 0x3, 0x40800000000000, 0x0, 0x10000, 0x7785, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x80000000000, 0x0, 0xfffffffffffffffe, 0x0, 0xfffffffffffffffe, 0x0, 0x3, 0x10, 0xfffffffffffffffe, 0x0, 0x80000000, 0x4, 0x0, 0x0, 0x40, 0x0, 0x59ed, 0x1000000000000000, 0x0, 0x4001ff, 0x0, 0x0, 0x0, 0x3, 0xd, 0x100000000, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000000000000, 0x0, 0x8, 0x2, 0x0, 0x80000000000, 0x0, 0x3f92, 0x0, 0x0, 0xb4b, 0x1, 0x0, 0x80000000, 0x5, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001]}) 8.335112811s ago: executing program 5 (id=958): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write(r0, &(0x7f0000000280)="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", 0x213) 8.298271498s ago: executing program 0 (id=959): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) prlimit64(0x0, 0x6, &(0x7f0000000140)={0x0, 0x4}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) io_uring_enter(r0, 0x2219, 0x771e, 0x16, 0x0, 0x0) 8.216084195s ago: executing program 4 (id=960): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x24008840}, 0x0) connect$unix(r3, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) 7.825576539s ago: executing program 0 (id=962): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/urandom\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000001000)='./mnt/f1\x00', 0x42, 0x1ff) sendfile(r1, r0, 0x0, 0xc00) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000001100)='./mnt/f2\x00', 0x42, 0x1ff) sendfile(r2, r0, 0x0, 0xc00) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000001200)='./mnt/f3\x00', 0x42, 0x1ff) sendfile(r3, r0, 0x0, 0xc00) close(r3) openat(0xffffffffffffff9c, &(0x7f0000001300)='./mnt/f4\x00', 0x42, 0x1ff) sendfile(0xffffffffffffffff, r0, 0x0, 0xc00) close(0xffffffffffffffff) unlinkat(0xffffffffffffff9c, &(0x7f0000001000)='./mnt/f1\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000001100)='./mnt/f2\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000001300)='./mnt/f4\x00', 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./mnt/test2\x00', 0x42, 0x1ff) sendfile(r4, r0, 0x0, 0x20000) sendfile(r4, r0, 0x0, 0x20000) sendfile(r4, r0, 0x0, 0x20000) 7.584212584s ago: executing program 1 (id=963): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r0, @ANYBLOB="010000"], 0x40) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r1, &(0x7f0000000100), 0x0}, 0x20) 7.475724599s ago: executing program 3 (id=964): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$radio(0x0, 0x2, 0x2) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000034000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000480)={r3}, 0xc) connect$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, @none, 0x7f}, 0xa) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, 0x0, 0x0) stat(0x0, &(0x7f0000000040)) statx(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x100, 0x7ff, &(0x7f0000000100)) socket$kcm(0x2, 0xa, 0x2) ioprio_set$uid(0x3, 0x0, 0x0) 7.359396898s ago: executing program 1 (id=965): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/fcloop/ctl/add_local_port\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='wwnn=0x1111111111111111,wwpn=0x2222222222222222\x00', 0x2f) 4.976833036s ago: executing program 4 (id=966): r0 = memfd_create(&(0x7f0000000000)='syzkaller\x00', 0x0) ftruncate(r0, 0x10000) pwrite64(r0, &(0x7f0000001000)='\b\x00\x00\x00\n\x00\x00\x00\v\x00\x00\x00\f\x00\x00\x00\x00\x00', 0x12, 0x2008) pwrite64(r0, &(0x7f0000001020)="8000000080000000010000000010000000040000", 0x14, 0x2024) pwrite64(r0, &(0x7f0000001040)="00f0ffff00fcffff0c0000000a00000000000000000000000200000001000000", 0x20, 0x2048) pwrite64(r0, &(0x7f0000001060)="000800000000000000000000000400002000000002", 0x15, 0x2068) pwrite64(r0, &(0x7f000000107c)="389d267c", 0x4, 0x2084) pwrite64(r0, &(0x7f0000001090)="0d00000000040000000400000100000001000000010000000100000001000000800000", 0x23, 0x2098) pwrite64(r0, &(0x7f00000010d0)="0101010101010101010101010101", 0xe, 0x20cc) pwrite64(r0, &(0x7f00000010e0)="5419010054190100541901005419010054", 0x11, 0x2554) pwrite64(r0, &(0x7f00000010f0)='U', 0x1, 0x2804) pwrite64(r0, 0x0, 0x0, 0x2818) pwrite64(r0, 0x0, 0x0, 0x2828) pwrite64(r0, &(0x7f0000001130)="80000000a0000000c0000000e000000000", 0x11, 0x2854) pwrite64(r0, 0x0, 0x0, 0x28c0) pwrite64(r0, &(0x7f0000001150)="0000ffffffffffffff", 0x9, 0x28e0) pwrite64(r0, &(0x7f0000001160)="ed410200", 0x4, 0x2d00) pwrite64(r0, &(0x7f0000001170)="0002000000000000", 0x8, 0x2d08) pwrite64(r0, &(0x7f0000001180)='\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00\x00\f\x00\x00', 0x2f, 0x2d28) pwrite64(r0, &(0x7f0000001190)="020000000c0001002e00000002000000f40102002e2e00", 0x17, 0x3000) r1 = syz_open_dev$loop(&(0x7f0000002000), 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000003000)='./mnt\x00', 0x1ff) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000003000)='./mnt\x00', &(0x7f0000004000)='ufs\x00', 0x0, &(0x7f0000005000)='ufstype=sun\x00') openat(0xffffffffffffff9c, &(0x7f0000006000)='./mnt/file\x00', 0x42, 0x1ff) 4.974945893s ago: executing program 2 (id=967): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.955162559s ago: executing program 1 (id=968): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_rr_get_interval(r0, 0x0) 4.893589491s ago: executing program 3 (id=969): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x42, 0x1ff) fallocate(r1, 0x0, 0x0, 0x1000000) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r1) write(r0, &(0x7f0000000138)="0000000000000000008000000000000000000000000000007468696e2d706f6f6c00000000000000373a32303020373a32303120313238203000", 0x3a) ioctl(r0, 0xc138fd09, &(0x7f0000000000)="0400000000000000000000007201000038010000010000000000000000000000000000000000000000000000000000006d79706f6f6c00") 4.43523419s ago: executing program 2 (id=970): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f00)=ANY=[], 0x98}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, 0x0, 0x4004040) 4.427449621s ago: executing program 4 (id=971): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/subsystems/testnqn\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./config/nvmet/ports/1/addr_trtype\x00', 0x2, 0x0) write(r0, &(0x7f0000000c00)='tc', 0x2) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) 4.144355286s ago: executing program 2 (id=972): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, 0x0) getpgrp(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x200000, &(0x7f0000000600)={[{@block_validity}, {}, {@nombcache}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}, {@jqfmt_vfsold}, {@min_batch_time}]}, 0x3, 0x57b, &(0x7f0000000d80)="$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") renameat2(0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file3\x00', 0x4) 3.47930696s ago: executing program 4 (id=973): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r1}, 0x10) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000040)=0x1, 0x4) sendmsg$can_raw(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4092}, 0xd209f6d83486bb56) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) recvmmsg(r0, &(0x7f0000003d80)=[{{0x0, 0x0, 0x0}, 0x80}], 0x1, 0x80, 0x0) 1.685673995s ago: executing program 0 (id=974): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0x8, @loopback, 0xa8e}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois', 0x8) shutdown(r0, 0x1) 1.631401648s ago: executing program 5 (id=975): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x2383, @loopback}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x2383, @loopback}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0f000000040000"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xe, 0x2, &(0x7f0000000580)=ANY=[@ANYBLOB="b70000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xba) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000680)={@map=r1, r2, 0x5, 0x0, 0x0, @void, @value=0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r1, &(0x7f0000000340), &(0x7f0000000380)=@tcp=r0}, 0x20) write(r0, &(0x7f0000000700)='he', 0x2) 1.175680904s ago: executing program 0 (id=976): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000140), &(0x7f00000002c0)='%ps \x00'}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000b98cad95850000000100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 1.127299026s ago: executing program 2 (id=977): r0 = syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r0, @ANYBLOB="01000000000000000000010000001400020077673100000000000000000000000000f401088070"], 0x21c}, 0x1, 0x0, 0x0, 0x20040010}, 0x4008804) 963.472205ms ago: executing program 1 (id=978): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000180)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/target/core\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/target/core/rd_mcp_0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) write(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000580), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/functions\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/functions/tcm.0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/configs\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./config/target/usb_gadget\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/target/usb_gadget/naa.6001405123456789\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./config/target/usb_gadget/naa.6001405123456789/tpgt_1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./config/target/usb_gadget/naa.6001405123456789/tpgt_1/lun\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='./config/target/usb_gadget/naa.6001405123456789/tpgt_1/lun/lun_0\x00', 0x1ff) 951.820517ms ago: executing program 3 (id=979): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x201, 0xe4340000, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x81}, 0x800) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 860.448225ms ago: executing program 5 (id=980): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/fcloop/ctl/add_local_port\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='wwnn=0x1111111111111111,wwpn=0x2222222222222222\x00', 0x2f) 841.470589ms ago: executing program 0 (id=981): r0 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./config/target/usb_gadget/naa.6001405123456789/tpgt_1/nexus\x00', 0x2, 0x0) write(r0, &(0x7f0000000940)='naa.600140', 0xa) 637.751475ms ago: executing program 1 (id=982): socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 576.758017ms ago: executing program 4 (id=983): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/fcloop/ctl/add_local_port\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='wwnn=0x1111111111111111,wwpn=0x2222222222222222', 0x2f) openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/fcloop/ctl/add_remote_port\x00', 0x1, 0x0) write(0xffffffffffffffff, &(0x7f0000000a00)='transport=fc,traddr=nn-0x3333333333333333:pn-0x4444444444444444,host_traddr=nn-0x1111111111111111:pn-0x2222222222222222,nqn=nqn.2014-08.org.nvmexpress.discovery,ctrl_loss_tmo=1', 0xb0) 575.056864ms ago: executing program 3 (id=984): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f00)=ANY=[], 0x98}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r1, 0x0, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, 0x0, 0x4004040) 566.545549ms ago: executing program 2 (id=985): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_devices(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b2388a8", @ANYRES16=0x0, @ANYRES32=r3], 0xffdd) 501.889902ms ago: executing program 0 (id=986): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x42, 0x1ff) pwrite64(r1, &(0x7f0000000000)='\x00', 0x1, 0xffffff) r2 = syz_open_dev$loop(&(0x7f0000000200), 0x0, 0x2) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x42, 0x1ff) pwrite64(r3, 0x0, 0x0, 0xffffff) r4 = syz_open_dev$loop(&(0x7f0000000280), 0x1, 0x2) ioctl$LOOP_SET_FD(r4, 0x4c00, r3) ioctl(r0, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d79706f6f6c00") write(r0, &(0x7f0000000138)="000000000000000000800000000000000000000000000000746869", 0x1b) ioctl(r0, 0xc138fd09, &(0x7f0000000000)="0400000000000000000000006e01000038010000010000000000000000000000000000000000000000000000000000006d79706f6f6c00") ioctl(r0, 0xc138fd06, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d79706f6f6c00") ioctl(r0, 0xc138fd06, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d79706f6f6c00") 435.380509ms ago: executing program 5 (id=987): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write(r0, &(0x7f0000000280)="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", 0x213) 265.278734ms ago: executing program 1 (id=988): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0x8, @loopback, 0xa8e}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois', 0x8) shutdown(r0, 0x1) 220.579196ms ago: executing program 3 (id=989): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file0\x00', 0x8c0, &(0x7f0000000080)=ANY=[@ANYBLOB='acl,heartbeat=none,dir_resv_level=00003,coherency=full,coherency=full,localflocks,coherency=full,noacl,\x00'/119], 0x5, 0x445a, &(0x7f0000004480)="$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") syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000780)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2228018, 0x0, 0x1, 0x0, &(0x7f0000000000)) mkdir(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) creat(&(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x44) symlink(0x0, &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 159.382653ms ago: executing program 4 (id=990): mkdirat(0xffffffffffffff9c, &(0x7f0000000050)='./sys\x00', 0x1ed) mount(0x0, 0x0, &(0x7f0000000070)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/bus/platform/devices/pcspkr/driver_override\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='usbip-vudc\x00', 0xa) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000500)='./config\x00', &(0x7f0000000600)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1\x00', 0x1ed) r1 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r2, &(0x7f0000000b00)='0x01', 0x4) close(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000000d00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0x1ed) symlinkat(&(0x7f0000000e00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000f00)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/fs/h\x00') symlinkat(&(0x7f0000001000)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u/360p\x00', 0x1ed) symlinkat(&(0x7f0000001700)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001800)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/fs/h\x00') symlinkat(&(0x7f0000001b00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001d00)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ed) symlinkat(&(0x7f0000001e00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0xffffffffffffff9c, &(0x7f0000001f00)='./config/usb_gadget/g1/configs/c.1/uvc.usb0\x00') 39.187089ms ago: executing program 2 (id=991): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/urandom\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000001000)='./mnt/f1\x00', 0x42, 0x1ff) sendfile(r1, r0, 0x0, 0xc00) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000001100)='./mnt/f2\x00', 0x42, 0x1ff) sendfile(r2, r0, 0x0, 0xc00) 0s ago: executing program 5 (id=992): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x2383, @loopback}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x2383, @loopback}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0f000000040000000400"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xe, 0x2, &(0x7f0000000580)=ANY=[@ANYBLOB="b70000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xba) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000680)={@map=r1, r2, 0x5, 0x0, 0x0, @void, @value=0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r1, &(0x7f0000000340), &(0x7f0000000380)=@tcp=r0}, 0x20) write(r0, &(0x7f0000000700)='he', 0x2) kernel console output (not intermixed with test programs): n f2fs_grab_cache_folio of f2fs_write_data_summaries+0xd4/0x710 [ 109.783800][ T5632] ocfs2: Unmounting device (7,0) on (node local) [ 109.794775][ T5635] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.983198][ T6096] set_capacity_and_notify: 2 callbacks suppressed [ 109.986407][ T6096] loop3: detected capacity change from 0 to 4096 [ 110.048920][ T6099] loop4: detected capacity change from 0 to 8 [ 110.093489][ T6099] squashfs image failed sanity check [ 110.128843][ T6096] ntfs3(loop3): Failed to load $Extend (-22). [ 110.168594][ T6096] ntfs3(loop3): Failed to initialize $Extend. [ 110.590529][ T6110] netlink: 12 bytes leftover after parsing attributes in process `syz.3.74'. [ 110.627911][ T6110] netlink: 12 bytes leftover after parsing attributes in process `syz.3.74'. [ 110.762784][ T6113] nvmet: adding nsid 1 to subsystem testnqn [ 111.220632][ T6099] loop4: detected capacity change from 0 to 32768 [ 111.279755][ T6099] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 111.385141][ T6099] (syz.4.71,6099,1):ocfs2_check_set_options:1243 ERROR: Invalid heartbeat mount options [ 111.454435][ T6099] (syz.4.71,6099,1):ocfs2_check_set_options:1243 ERROR: Invalid heartbeat mount options [ 111.524173][ T6126] Zero length message leads to an empty skb [ 111.765279][ T5637] ocfs2: Unmounting device (7,4) on (node local) [ 111.867767][ T5760] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 112.058313][ T5760] usb 6-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 112.095697][ T5760] usb 6-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 112.109275][ T6120] loop0: detected capacity change from 0 to 32768 [ 112.124275][ T6141] loop2: detected capacity change from 0 to 2048 [ 112.127503][ T5760] usb 6-1: Product: syz [ 112.135420][ T5760] usb 6-1: SerialNumber: syz [ 112.159999][ T6120] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 112.189387][ T5760] usb 6-1: config 0 descriptor?? [ 112.210710][ T6120] JBD2: Ignoring recovery information on journal [ 112.222305][ T5760] hso 6-1:0.0: Not our interface [ 112.276075][ T6144] netlink: 4 bytes leftover after parsing attributes in process `syz.4.83'. [ 112.305085][ T6120] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 112.497315][ T6141] loop2: detected capacity change from 0 to 4096 [ 112.593859][ T6141] ntfs3(loop2): Failed to load $Extend (-22). [ 112.612852][ T6141] ntfs3(loop2): Failed to initialize $Extend. [ 112.685874][ T6148] smpboot: CPU 1 is now offline [ 112.755124][ T6149] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 113.011836][ T6153] loop2: detected capacity change from 0 to 64 [ 113.098633][ T5632] ocfs2: Unmounting device (7,0) on (node local) [ 113.314595][ T6159] netlink: 12 bytes leftover after parsing attributes in process `syz.2.93'. [ 113.339250][ T6159] netlink: 12 bytes leftover after parsing attributes in process `syz.2.93'. [ 113.657366][ T6166] loop0: detected capacity change from 0 to 8 [ 113.684925][ T6166] squashfs image failed sanity check [ 113.850519][ T6172] loop2: detected capacity change from 0 to 256 [ 114.098878][ T6161] loop4: detected capacity change from 0 to 32768 [ 114.137016][ T6161] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 114.235142][ T6189] netlink: 20 bytes leftover after parsing attributes in process `syz.2.101'. [ 114.291973][ T6161] XFS (loop4): Ending clean mount [ 114.381371][ T31] audit: type=1800 audit(1785924364.000:6): pid=6161 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.94" name="file1" dev="loop4" ino=9286 res=0 errno=0 [ 114.426659][ T6166] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 114.441908][ T6161] XFS (loop4): Metadata CRC error detected at xfs_rmapbt_read_verify+0x42/0xe0, xfs_rmapbt block 0x14 [ 114.479775][ T6166] (syz.0.95,6166,0):ocfs2_check_set_options:1243 ERROR: Invalid heartbeat mount options [ 114.485336][ T6161] XFS (loop4): Unmount and run xfs_repair [ 114.516643][ T6166] (syz.0.95,6166,1):ocfs2_check_set_options:1243 ERROR: Invalid heartbeat mount options [ 114.544106][ T6161] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 114.554995][ T6196] netlink: 80 bytes leftover after parsing attributes in process `syz.1.103'. [ 114.581185][ T6161] 00000000: 52 4d 42 33 00 00 00 0c ff ff ff ff ff ff ff ff RMB3............ [ 114.593612][ T30] usb 6-1: USB disconnect, device number 2 [ 114.595704][ T6161] 00000010: 00 a7 50 00 00 00 00 14 00 00 00 01 00 00 00 80 ..P............. [ 114.623611][ T6196] syz.1.103 uses obsolete (PF_INET,SOCK_PACKET) [ 114.638353][ T6161] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 114.666749][ T5632] ocfs2: Unmounting device (7,0) on (node local) [ 114.668927][ T6161] 00000030: 00 00 00 00 5b af 3b 1d 00 00 00 00 00 00 00 01 ....[.;......... [ 114.791786][ T6161] 00000040: ff ff ff ff ff ff ff fd 00 00 00 00 00 00 00 00 ................ [ 114.837329][ T6161] 00000050: 00 00 00 01 00 00 00 02 ff ff ff ff ff ff ff fb ................ [ 114.889171][ T6161] 00000060: 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 02 ................ [ 114.936214][ T6161] 00000070: ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00 ................ [ 114.980579][ T6161] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x2ae/0x4a0" at daddr 0x14 len 4 error 74 [ 115.026452][ T6161] XFS (loop4): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x47f/0x820 (fs/xfs/xfs_trans_buf.c:280). Shutting down filesystem. [ 115.045915][ T6161] XFS (loop4): Please unmount the filesystem and rectify the problem(s) [ 115.117800][ T6206] set_capacity_and_notify: 2 callbacks suppressed [ 115.117822][ T6206] loop0: detected capacity change from 0 to 1024 [ 115.166682][ T6206] EXT4-fs: Ignoring removed bh option [ 115.218487][ T5637] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 115.222622][ T6206] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.644527][ T5632] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.844706][ T6223] loop0: detected capacity change from 0 to 256 [ 116.177696][ T5041] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 116.264644][ T6236] loop3: detected capacity change from 0 to 64 [ 116.358025][ T5041] usb 5-1: Using ep0 maxpacket: 16 [ 116.377757][ T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 116.396034][ T5041] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.426299][ T5041] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.451547][ T5041] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 116.495165][ T5041] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 116.516071][ T5041] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.547158][ T5041] usb 5-1: config 0 descriptor?? [ 116.578088][ T10] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 116.596928][ T10] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 116.621072][ T10] usb 1-1: Product: syz [ 116.641126][ T10] usb 1-1: SerialNumber: syz [ 116.653399][ T6217] loop2: detected capacity change from 0 to 32768 [ 116.667207][ T10] usb 1-1: config 0 descriptor?? [ 116.691693][ T6217] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.111 (6217) [ 116.735909][ T10] hso 1-1:0.0: Not our interface [ 116.801548][ T6217] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 116.850578][ T6217] BTRFS info (device loop2): using crc32c checksum algorithm [ 116.878510][ T6252] netlink: 80 bytes leftover after parsing attributes in process `syz.1.125'. [ 116.950307][ T81] BTRFS warning (device loop2): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0xcee3a718 level 0 [ 117.023982][ T6217] BTRFS warning (device loop2): couldn't read tree root [ 117.041081][ T6217] BTRFS warning (device loop2): try to load backup roots slot 1 [ 117.065993][ T5809] BTRFS warning (device loop2): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0xe06dfc66 level 0 [ 117.095102][ T6217] BTRFS warning (device loop2): couldn't read tree root [ 117.110036][ T6217] BTRFS warning (device loop2): try to load backup roots slot 2 [ 117.120845][ T5809] BTRFS error (device loop2): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 117.131447][ T6217] BTRFS warning (device loop2): couldn't read tree root [ 117.140370][ T6217] BTRFS warning (device loop2): try to load backup roots slot 3 [ 117.172524][ T6217] BTRFS info (device loop2): checking UUID tree [ 117.182253][ T6217] BTRFS info (device loop2): setting nodatasum [ 117.196827][ T5041] usbhid 5-1:0.0: can't add hid device: -71 [ 117.205261][ T6217] BTRFS info (device loop2): enabling ssd optimizations [ 117.212725][ T5041] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 117.221562][ T6217] BTRFS info (device loop2): turning on flush-on-commit [ 117.231408][ T6217] BTRFS info (device loop2): turning on async discard [ 117.244640][ T5041] usb 5-1: USB disconnect, device number 2 [ 117.256418][ T6217] BTRFS info (device loop2): enabling free space tree [ 117.266907][ T6217] BTRFS info (device loop2): trying to use backup root at mount time [ 117.275209][ T6217] BTRFS info (device loop2): max_inline set to 0 [ 117.403661][ T5636] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 118.141920][ T6295] fuse: Bad value for 'fd' [ 118.815942][ T6308] loop4: detected capacity change from 0 to 32768 [ 118.837791][ T6308] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.138 (6308) [ 118.865523][ T6308] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 118.875866][ T6308] BTRFS info (device loop4): using crc32c checksum algorithm [ 118.948129][ T81] BTRFS warning (device loop4): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0xcee3a718 level 0 [ 118.984609][ T6308] BTRFS warning (device loop4): couldn't read tree root [ 118.997909][ T6308] BTRFS warning (device loop4): try to load backup roots slot 1 [ 119.036991][ T81] BTRFS warning (device loop4): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0xe06dfc66 level 0 [ 119.103635][ T6308] BTRFS warning (device loop4): couldn't read tree root [ 119.128226][ T6308] BTRFS warning (device loop4): try to load backup roots slot 2 [ 119.153369][ T5809] BTRFS error (device loop4): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 119.192543][ T6327] netlink: 80 bytes leftover after parsing attributes in process `syz.2.141'. [ 119.234544][ T6308] BTRFS warning (device loop4): couldn't read tree root [ 119.250426][ T6308] BTRFS warning (device loop4): try to load backup roots slot 3 [ 119.350590][ T30] usb 1-1: USB disconnect, device number 2 [ 119.353057][ T6308] BTRFS info (device loop4): checking UUID tree [ 119.395134][ T6308] BTRFS info (device loop4): setting nodatasum [ 119.432687][ T6308] BTRFS info (device loop4): enabling ssd optimizations [ 119.466012][ T6308] BTRFS info (device loop4): turning on flush-on-commit [ 119.512923][ T6308] BTRFS info (device loop4): turning on async discard [ 119.549902][ T6308] BTRFS info (device loop4): enabling free space tree [ 119.584622][ T6308] BTRFS info (device loop4): trying to use backup root at mount time [ 119.618502][ T6308] BTRFS info (device loop4): max_inline set to 0 [ 119.977815][ T5041] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 120.808046][ T5041] usb 3-1: Using ep0 maxpacket: 16 [ 120.828596][ T5041] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 18, changing to 8 [ 120.854029][ T5041] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 16565, setting to 1024 [ 120.877810][ T5041] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 120.891870][ T5041] usb 3-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 120.904769][ T5041] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.940544][ T5041] usb 3-1: config 0 descriptor?? [ 120.998881][ T5041] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input5 [ 121.113707][ T5637] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 121.219359][ T5041] usb 3-1: USB disconnect, device number 2 [ 121.222264][ T4971] pxrc 3-1:0.0: pxrc_open - usb_submit_urb failed, error: -19 [ 121.275009][ T4971] pxrc 3-1:0.0: pxrc_open - usb_submit_urb failed, error: -19 [ 121.877345][ T6348] loop0: detected capacity change from 0 to 32768 [ 122.284911][ T6371] loop2: detected capacity change from 0 to 64 [ 123.174869][ T6393] loop4: detected capacity change from 0 to 512 [ 123.201054][ T6393] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 123.253702][ T6393] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 123.292337][ T6393] EXT4-fs error (device loop4): ext4_orphan_get:1425: comm syz.4.163: bad orphan inode 131083 [ 123.308427][ T6393] loop4: lost filesystem error report for type 5 error -117 [ 123.369720][ T6393] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.470935][ T6393] syz.4.163 (pid 6393) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 123.494774][ T6396] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 123.519885][ T6396] block device autoloading is deprecated and will be removed. [ 123.600047][ T5637] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.666465][ T6391] loop5: detected capacity change from 0 to 32768 [ 123.736303][ T6391] ocfs2: Slot 0 on device (7,5) was already allocated to this node! [ 123.775879][ T6391] JBD2: Ignoring recovery information on journal [ 123.874218][ T6386] loop3: detected capacity change from 0 to 32768 [ 123.898307][ T6386] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.162 (6386) [ 123.932961][ T6391] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 123.984087][ T6404] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 124.017143][ T6404] block device autoloading is deprecated and will be removed. [ 124.032297][ T6386] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 124.070873][ T6386] BTRFS info (device loop3): using crc32c checksum algorithm [ 124.158512][ T1157] BTRFS warning (device loop3): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0xcee3a718 level 0 [ 124.273273][ T6386] BTRFS warning (device loop3): couldn't read tree root [ 124.297707][ T6386] BTRFS warning (device loop3): try to load backup roots slot 1 [ 124.314076][ T5816] BTRFS warning (device loop3): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0xe06dfc66 level 0 [ 124.394160][ T6386] BTRFS warning (device loop3): couldn't read tree root [ 124.412505][ T6386] BTRFS warning (device loop3): try to load backup roots slot 2 [ 124.446899][ T13] BTRFS error (device loop3): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 124.492589][ T6386] BTRFS warning (device loop3): couldn't read tree root [ 124.514620][ T6386] BTRFS warning (device loop3): try to load backup roots slot 3 [ 124.586814][ T6386] BTRFS info (device loop3): checking UUID tree [ 124.629515][ T6386] BTRFS info (device loop3): setting nodatasum [ 124.645611][ T6386] BTRFS info (device loop3): enabling ssd optimizations [ 124.667587][ T6386] BTRFS info (device loop3): turning on flush-on-commit [ 124.686666][ T5635] ocfs2: Unmounting device (7,5) on (node local) [ 124.701772][ T6386] BTRFS info (device loop3): turning on async discard [ 124.725199][ T6386] BTRFS info (device loop3): enabling free space tree [ 124.747574][ T6386] BTRFS info (device loop3): trying to use backup root at mount time [ 124.776292][ T6386] BTRFS info (device loop3): max_inline set to 0 [ 125.082889][ T6403] loop0: detected capacity change from 0 to 32768 [ 125.188688][ T5627] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 125.286046][ T6431] loop5: detected capacity change from 0 to 64 [ 126.061028][ T6451] loop3: detected capacity change from 0 to 8 [ 126.090731][ T6451] squashfs image failed sanity check [ 126.297340][ T6455] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 126.581728][ T6462] loop4: detected capacity change from 0 to 512 [ 126.653709][ T6462] EXT4-fs error (device loop4): ext4_expand_extra_isize_ea:2810: inode #11: comm syz.4.186: corrupted xattr block 95: invalid header [ 126.696110][ T6462] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 126.697453][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 126.713102][ C0] EXT4-fs (loop4): initial error at time 1785924376: ext4_expand_extra_isize_ea:2810: inode 11 [ 126.723504][ C0] EXT4-fs (loop4): last error at time 1785924376: ext4_expand_extra_isize_ea:2810: inode 11 [ 126.769561][ T6462] EXT4-fs (loop4): Remounting filesystem read-only [ 126.847835][ T6462] EXT4-fs warning (device loop4): ext4_evict_inode:270: couldn't mark inode dirty (err -30) [ 126.867948][ T6462] EXT4-fs (loop4): 1 orphan inode deleted [ 126.894344][ T6462] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 126.963196][ T6449] loop2: detected capacity change from 0 to 32768 [ 126.995327][ T6449] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 127.062949][ T6449] JBD2: Ignoring recovery information on journal [ 127.184847][ T6460] loop5: detected capacity change from 0 to 32768 [ 127.198785][ T6441] loop0: detected capacity change from 0 to 32768 [ 127.211927][ T6460] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.185 (6460) [ 127.256748][ T5637] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.285315][ T6449] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 127.348085][ T6441] JBD2: Ignoring recovery information on journal [ 127.450518][ T6451] loop3: detected capacity change from 0 to 32768 [ 127.471893][ T6460] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 127.512720][ T6451] debugfs: 'B1DE653C5FFC4D88B33B244AAB9EB3E9' already exists in 'ocfs2' [ 127.545497][ T6460] BTRFS info (device loop5): using crc32c checksum algorithm [ 127.545569][ T6441] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 127.622415][ T6451] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 127.656485][ T6477] loop4: detected capacity change from 0 to 2048 [ 127.724348][ T13] BTRFS warning (device loop5): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0xcee3a718 level 0 [ 127.745483][ T6489] (syz.3.173,6489,0):ocfs2_check_set_options:1243 ERROR: Invalid heartbeat mount options [ 127.795095][ T6460] BTRFS warning (device loop5): couldn't read tree root [ 127.825050][ T6451] (syz.3.173,6451,1):ocfs2_check_set_options:1243 ERROR: Invalid heartbeat mount options [ 127.849825][ T6460] BTRFS warning (device loop5): try to load backup roots slot 1 [ 127.893479][ T58] BTRFS warning (device loop5): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0xe06dfc66 level 0 [ 127.943565][ T6460] BTRFS warning (device loop5): couldn't read tree root [ 127.973614][ T6460] BTRFS warning (device loop5): try to load backup roots slot 2 [ 128.011332][ T13] BTRFS error (device loop5): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 128.056585][ T6460] BTRFS warning (device loop5): couldn't read tree root [ 128.082352][ T6460] BTRFS warning (device loop5): try to load backup roots slot 3 [ 128.184884][ T6460] BTRFS info (device loop5): checking UUID tree [ 128.200203][ T5636] ocfs2: Unmounting device (7,2) on (node local) [ 128.210229][ T5627] ocfs2: Unmounting device (7,3) on (node local) [ 128.220429][ T6460] BTRFS info (device loop5): setting nodatasum [ 128.236484][ T6477] loop4: detected capacity change from 0 to 4096 [ 128.243073][ T6460] BTRFS info (device loop5): enabling ssd optimizations [ 128.255747][ T5632] ocfs2: Unmounting device (7,0) on (node local) [ 128.285361][ T6460] BTRFS info (device loop5): turning on flush-on-commit [ 128.324325][ T6460] BTRFS info (device loop5): turning on async discard [ 128.363335][ T6460] BTRFS info (device loop5): enabling free space tree [ 128.400985][ T6460] BTRFS info (device loop5): trying to use backup root at mount time [ 128.427625][ T6477] ntfs3(loop4): Failed to load $Extend (-22). [ 128.443026][ T6460] BTRFS info (device loop5): max_inline set to 0 [ 128.470576][ T6477] ntfs3(loop4): Failed to initialize $Extend. [ 128.501776][ T6496] netlink: 4 bytes leftover after parsing attributes in process `syz.3.189'. [ 128.874746][ T5635] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 129.244619][ T6506] loop3: detected capacity change from 0 to 512 [ 129.292122][ T6506] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 129.362957][ T6506] EXT4-fs error (device loop3): ext4_orphan_get:1425: comm syz.3.195: bad orphan inode 131083 [ 129.465764][ T6506] loop3: lost filesystem error report for type 5 error -117 [ 129.467443][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 129.481293][ C1] EXT4-fs (loop3): initial error at time 1785924379: ext4_orphan_get:1425 [ 129.489871][ C1] EXT4-fs (loop3): last error at time 1785924379: ext4_orphan_get:1425 [ 129.526304][ T6506] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.570868][ T6520] netlink: 112 bytes leftover after parsing attributes in process `syz.4.199'. [ 129.792494][ T6524] loop0: detected capacity change from 0 to 8 [ 129.832339][ T6524] squashfs image failed sanity check [ 129.907828][ T5627] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.174058][ T6532] loop3: detected capacity change from 0 to 1024 [ 130.816715][ T6511] loop5: detected capacity change from 0 to 32768 [ 130.880615][ T6511] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 130.895932][ T6526] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.202 (6526) [ 130.931924][ T6526] BTRFS info (device loop2): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 130.974371][ T6511] XFS (loop5): Ending clean mount [ 130.979604][ T6526] BTRFS info (device loop2): using crc32c checksum algorithm [ 131.229932][ T6526] BTRFS info (device loop2): enabling ssd optimizations [ 131.264216][ T6526] BTRFS info (device loop2): turning on async discard [ 131.274429][ T6526] BTRFS info (device loop2): enabling free space tree [ 131.281294][ T5635] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 131.288514][ T6524] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 131.341336][ T6528] JBD2: Ignoring recovery information on journal [ 131.429926][ T6524] (syz.0.201,6524,1):ocfs2_check_set_options:1243 ERROR: Invalid heartbeat mount options [ 131.518037][ T6524] (syz.0.201,6524,1):ocfs2_check_set_options:1243 ERROR: Invalid heartbeat mount options [ 131.596954][ T6528] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 131.681272][ T6567] netlink: 16 bytes leftover after parsing attributes in process `syz.1.210'. [ 131.798191][ T6566] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.874197][ T5632] ocfs2: Unmounting device (7,0) on (node local) [ 131.981807][ T31] audit: type=1800 audit(1785924381.600:7): pid=6568 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.202" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 132.121863][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.132221][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.270171][ T5637] ocfs2: Unmounting device (7,4) on (node local) [ 132.375957][ T6577] syzkaller0: entered promiscuous mode [ 132.414677][ T6577] syzkaller0: entered allmulticast mode [ 132.444787][ T5636] BTRFS info (device loop2): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 132.768318][ T6590] netlink: 28 bytes leftover after parsing attributes in process `syz.5.216'. [ 132.832787][ T6590] netlink: 12 bytes leftover after parsing attributes in process `syz.5.216'. [ 132.851952][ T6590] netlink: 12 bytes leftover after parsing attributes in process `syz.5.216'. [ 133.505389][ T6607] size and base must be multiples of 4 kiB [ 133.537510][ T6607] CPU: 1 UID: 0 PID: 6607 Comm: syz.3.218 Not tainted syzkaller #0 PREEMPT(full) [ 133.537545][ T6607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 133.537560][ T6607] Call Trace: [ 133.537570][ T6607] [ 133.537580][ T6607] dump_stack_lvl+0xe8/0x150 [ 133.537624][ T6607] mtrr_add+0xd5/0x100 [ 133.537669][ T6607] mtrr_ioctl+0xc98/0x13b0 [ 133.537713][ T6607] ? __pfx_mtrr_ioctl+0x10/0x10 [ 133.537770][ T6607] ? __fget_files+0x2a/0x420 [ 133.537806][ T6607] ? __fget_files+0x3a2/0x420 [ 133.537842][ T6607] ? __fget_files+0x2a/0x420 [ 133.537877][ T6607] ? __pfx_mtrr_ioctl+0x10/0x10 [ 133.537915][ T6607] proc_reg_unlocked_ioctl+0x1d6/0x2c0 [ 133.537944][ T6607] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 133.537972][ T6607] __se_sys_ioctl+0xfc/0x170 [ 133.538003][ T6607] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.538032][ T6607] do_syscall_64+0x174/0x580 [ 133.538066][ T6607] ? trace_irq_disable+0x3b/0x140 [ 133.538107][ T6607] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.538132][ T6607] RIP: 0033:0x7fa5cb79e0d9 [ 133.538155][ T6607] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 133.538175][ T6607] RSP: 002b:00007fa5cc5ac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 133.538201][ T6607] RAX: ffffffffffffffda RBX: 00007fa5cba25fa0 RCX: 00007fa5cb79e0d9 [ 133.538228][ T6607] RDX: 0000200000000040 RSI: 0000000040104d01 RDI: 0000000000000004 [ 133.538244][ T6607] RBP: 00007fa5cb835024 R08: 0000000000000000 R09: 0000000000000000 [ 133.538260][ T6607] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 133.538274][ T6607] R13: 00007fa5cba26038 R14: 00007fa5cba25fa0 R15: 00007ffcd3695108 [ 133.538313][ T6607] [ 134.023934][ T6572] set_capacity_and_notify: 3 callbacks suppressed [ 134.023955][ T6572] loop0: detected capacity change from 0 to 32768 [ 134.687876][ T6595] loop2: detected capacity change from 0 to 40427 [ 134.719255][ T6595] F2FS-fs (loop2): build fault injection rate: 19 [ 134.739636][ T6595] F2FS-fs (loop2): build fault injection type: 0x3bfe8c [ 134.752913][ T5282] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 134.776255][ T6595] F2FS-fs (loop2): invalid crc value [ 134.862595][ T6595] F2FS-fs (loop2): inject page alloc in f2fs_grab_cache_folio of f2fs_build_free_nids+0xa00/0x18c0 [ 135.138270][ T6613] loop5: detected capacity change from 0 to 32768 [ 135.146029][ T6595] F2FS-fs (loop2): inject slab alloc in f2fs_kmem_cache_alloc of read_node_folio+0x21d/0x3d0 [ 135.197016][ T6613] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 135.242593][ T6595] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 135.279197][ T6595] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 135.355342][ T6595] F2FS-fs (loop2): inject page alloc in f2fs_grab_cache_folio of f2fs_get_dnode_of_data+0xa60/0x1ee0 [ 135.385272][ T6613] XFS (loop5): Ending clean mount [ 135.433278][ T6644] F2FS-fs (loop2): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x3a1/0xdc0 [ 135.519157][ T6595] syz.2.215: attempt to access beyond end of device [ 135.519157][ T6595] loop2: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 135.582615][ T6595] syz.2.215: attempt to access beyond end of device [ 135.582615][ T6595] loop2: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 135.642126][ T5635] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 135.774578][ T5636] F2FS-fs (loop2): inject inconsistent footer in f2fs_sanity_check_node_footer of __get_node_folio+0x8c1/0xdf0 [ 135.832275][ T5636] F2FS-fs (loop2): inconsistent node block, node_type:3, nid:11, node_footer[nid:11,ino:3,ofs:2041,cpver:0,blkaddr:0] [ 135.843914][ T6648] netlink: 8 bytes leftover after parsing attributes in process `syz.4.230'. [ 135.921938][ T6630] loop0: detected capacity change from 0 to 32768 [ 135.934899][ T5636] F2FS-fs (loop2): inject page alloc in f2fs_grab_cache_folio of write_normal_summaries+0x11f/0x3e0 [ 136.015432][ T6630] JBD2: Ignoring recovery information on journal [ 136.145796][ T6630] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 136.499413][ T6643] loop3: detected capacity change from 0 to 32768 [ 136.520301][ T6643] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.227 (6643) [ 136.613245][ T6643] BTRFS info (device loop3): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 136.654073][ T6643] BTRFS info (device loop3): using crc32c checksum algorithm [ 136.680590][ T6661] syzkaller0: entered promiscuous mode [ 136.704458][ T6661] syzkaller0: entered allmulticast mode [ 136.717068][ T5632] ocfs2: Unmounting device (7,0) on (node local) [ 136.801040][ T6661] tipc: Started in network mode [ 136.836374][ T6643] BTRFS info (device loop3): enabling ssd optimizations [ 136.867309][ T6661] tipc: Node identity ae5828ca7e43, cluster identity 4711 [ 136.899276][ T6643] BTRFS info (device loop3): turning on async discard [ 136.908413][ T6661] tipc: Enabled bearer , priority 0 [ 136.932279][ T6643] BTRFS info (device loop3): enabling free space tree [ 136.975871][ T6659] tipc: Resetting bearer [ 137.070896][ T6659] tipc: Disabling bearer [ 137.239154][ T5768] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.347778][ T6691] netlink: 8 bytes leftover after parsing attributes in process `syz.4.242'. [ 137.450340][ T31] audit: type=1800 audit(1785924387.070:8): pid=6690 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.227" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 137.846010][ T5627] BTRFS info (device loop3): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 138.023626][ T6705] warning: `syz.4.245' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 138.039803][ T5760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.288911][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.366434][ T5760] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 138.565800][ T6723] netlink: 20 bytes leftover after parsing attributes in process `syz.2.251'. [ 138.576493][ T5760] usb 4-1: Using ep0 maxpacket: 16 [ 138.597225][ T5760] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.626119][ T5760] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 138.642064][ T6723] vlan3: entered promiscuous mode [ 138.647378][ T5760] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 138.660906][ T6723] bridge0: entered promiscuous mode [ 138.661491][ T6703] loop0: detected capacity change from 0 to 32768 [ 138.684415][ T5760] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 138.717899][ T5760] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.765758][ T5760] usb 4-1: config 0 descriptor?? [ 139.078257][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.159599][ T5768] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.168423][ T5041] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.269234][ T6734] syzkaller0: entered promiscuous mode [ 139.290654][ T6734] syzkaller0: entered allmulticast mode [ 139.320279][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.332133][ T6734] tipc: Started in network mode [ 139.353733][ T6734] tipc: Node identity c2b2950f41f3, cluster identity 4711 [ 139.377379][ T6734] tipc: Enabled bearer , priority 0 [ 139.410297][ T5760] usbhid 4-1:0.0: can't add hid device: -71 [ 139.419094][ T6733] tipc: Resetting bearer [ 139.427894][ T5760] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 139.476207][ T5760] usb 4-1: USB disconnect, device number 2 [ 139.503303][ T6733] tipc: Disabling bearer [ 139.603981][ T6737] netlink: 48 bytes leftover after parsing attributes in process `syz.5.256'. [ 139.933432][ T6749] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.975179][ T6749] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.002988][ T6749] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.037992][ T6754] netlink: 8 bytes leftover after parsing attributes in process `syz.5.263'. [ 140.283474][ T5768] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 140.491762][ T5768] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 140.550030][ T5768] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.609443][ T5768] usb 5-1: Product: syz [ 140.629468][ T5768] usb 5-1: Manufacturer: syz [ 140.651674][ T5768] usb 5-1: SerialNumber: syz [ 140.687565][ T5768] usb 5-1: config 0 descriptor?? [ 140.734982][ T6781] loop5: detected capacity change from 0 to 8 [ 140.940351][ T6745] loop0: detected capacity change from 0 to 32768 [ 140.974361][ T6745] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.259 (6745) [ 141.001108][ T5768] usb 5-1: USB disconnect, device number 3 [ 141.030316][ T6745] BTRFS info (device loop0): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 141.054855][ T6745] BTRFS info (device loop0): using crc32c checksum algorithm [ 141.260902][ T6788] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input6 [ 141.290286][ T6773] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 141.366144][ T6745] BTRFS info (device loop0): enabling ssd optimizations [ 141.381410][ T5954] udevd[5954]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 141.397603][ T6745] BTRFS info (device loop0): turning on async discard [ 141.397627][ T6745] BTRFS info (device loop0): enabling free space tree [ 141.767370][ T6817] loop3: detected capacity change from 0 to 512 [ 141.810127][ T6817] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 141.823840][ T6821] netlink: 8 bytes leftover after parsing attributes in process `syz.4.274'. [ 141.868117][ T6817] EXT4-fs error (device loop3): ext4_orphan_get:1425: comm syz.3.273: bad orphan inode 131083 [ 141.942990][ T6817] loop3: lost filesystem error report for type 5 error -117 [ 141.982422][ T6817] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.035966][ T31] audit: type=1800 audit(1785924391.630:9): pid=6824 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.259" name="file1" dev="loop0" ino=260 res=0 errno=0 [ 142.322035][ T6836] net_ratelimit: 240 callbacks suppressed [ 142.322056][ T6836] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.337197][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.362441][ T5627] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.392866][ T5632] BTRFS info (device loop0): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 142.408980][ T6836] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.449188][ T5768] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.506867][ T6836] netlink: 'syz.1.280': attribute type 2 has an invalid length. [ 142.524014][ T5768] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.572665][ T6836] netlink: 'syz.1.280': attribute type 2 has an invalid length. [ 142.675519][ T6836] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.689671][ T5760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.744764][ T5760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.757785][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.770398][ T6836] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.293766][ T6832] loop2: detected capacity change from 0 to 32768 [ 143.363342][ T6832] JBD2: Ignoring recovery information on journal [ 143.478315][ T6857] netlink: 80 bytes leftover after parsing attributes in process `syz.1.288'. [ 143.511490][ T6834] loop4: detected capacity change from 0 to 40427 [ 143.538476][ T6834] F2FS-fs (loop4): build fault injection rate: 19 [ 143.561767][ T6834] F2FS-fs (loop4): build fault injection type: 0x3bfe8c [ 143.576691][ T6832] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 143.591010][ T6834] F2FS-fs (loop4): invalid crc value [ 143.607591][ T29] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 143.681302][ T6834] F2FS-fs (loop4): inject page alloc in f2fs_grab_cache_folio of f2fs_build_free_nids+0xa00/0x18c0 [ 143.815800][ T29] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 143.837697][ T29] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.853754][ T29] usb 4-1: Product: syz [ 143.859706][ T29] usb 4-1: Manufacturer: syz [ 143.864316][ T29] usb 4-1: SerialNumber: syz [ 143.873936][ T29] usb 4-1: config 0 descriptor?? [ 143.899900][ T5636] ocfs2: Unmounting device (7,2) on (node local) [ 144.036214][ T6834] F2FS-fs (loop4): inject slab alloc in f2fs_kmem_cache_alloc of read_node_folio+0x21d/0x3d0 [ 144.083293][ T6834] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 144.130104][ T5768] usb 4-1: USB disconnect, device number 3 [ 144.149607][ T6834] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 144.244518][ T6834] F2FS-fs (loop4): inject dquot initialize in f2fs_dquot_initialize of f2fs_new_inode+0x519/0xfd0 [ 144.530231][ T6851] loop0: detected capacity change from 0 to 32768 [ 144.574500][ T6864] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 144.589876][ T6851] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 144.774598][ T6851] XFS (loop0): Ending clean mount [ 144.956274][ T5632] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 145.925787][ T6916] netlink: 80 bytes leftover after parsing attributes in process `syz.5.304'. [ 146.487603][ T10] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 146.616341][ T6911] loop0: detected capacity change from 0 to 32768 [ 146.646380][ T6911] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.295 (6911) [ 146.671910][ T31] audit: type=1326 audit(1785924396.290:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6933 comm="syz.4.311" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60ef79e0d9 code=0x7ffc0000 [ 146.696649][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 146.707923][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 18, changing to 8 [ 146.728897][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 16565, setting to 1024 [ 146.762448][ T6911] BTRFS info (device loop0): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 146.796765][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 146.798474][ T31] audit: type=1326 audit(1785924396.290:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6933 comm="syz.4.311" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60ef79e0d9 code=0x7ffc0000 [ 146.844871][ T6911] BTRFS info (device loop0): using crc32c checksum algorithm [ 146.867189][ T10] usb 6-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 146.901494][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.907699][ T31] audit: type=1326 audit(1785924396.330:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6933 comm="syz.4.311" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60ef79e0d9 code=0x7ffc0000 [ 146.933497][ T10] usb 6-1: config 0 descriptor?? [ 146.945876][ T10] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input7 [ 146.960535][ T31] audit: type=1326 audit(1785924396.330:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6933 comm="syz.4.311" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60ef79e0d9 code=0x7ffc0000 [ 147.168322][ T31] audit: type=1326 audit(1785924396.340:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6933 comm="syz.4.311" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7f60ef79e0d9 code=0x7ffc0000 [ 147.194591][ T31] audit: type=1326 audit(1785924396.340:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6933 comm="syz.4.311" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60ef79e0d9 code=0x7ffc0000 [ 147.251445][ T6911] BTRFS info (device loop0): enabling ssd optimizations [ 147.267551][ T6911] BTRFS info (device loop0): turning on async discard [ 147.273890][ T6925] loop2: detected capacity change from 0 to 32768 [ 147.284545][ T6911] BTRFS info (device loop0): enabling free space tree [ 147.291665][ T31] audit: type=1326 audit(1785924396.340:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6933 comm="syz.4.311" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60ef79e0d9 code=0x7ffc0000 [ 147.297535][ T10] usb 6-1: USB disconnect, device number 3 [ 147.327548][ T5954] pxrc 6-1:0.0: pxrc_open - usb_submit_urb failed, error: -19 [ 147.368524][ T31] audit: type=1326 audit(1785924396.340:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6933 comm="syz.4.311" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f60ef79e0d9 code=0x7ffc0000 [ 147.396262][ T31] audit: type=1326 audit(1785924396.340:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6933 comm="syz.4.311" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f60ef79e0d9 code=0x7ffc0000 [ 147.422088][ T5761] net_ratelimit: 315 callbacks suppressed [ 147.422112][ T5761] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.437381][ T6925] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 147.451178][ T4971] pxrc 6-1:0.0: pxrc_open - usb_submit_urb failed, error: -19 [ 147.649238][ T5768] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.669003][ T6925] XFS (loop2): Ending clean mount [ 147.801099][ T5761] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.909268][ T6966] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.957022][ T6966] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.987658][ T5760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.014377][ T6966] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.021439][ T31] audit: type=1800 audit(1785924397.630:19): pid=6967 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.295" name="file1" dev="loop0" ino=270 res=0 errno=0 [ 148.052090][ T5761] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.063884][ T5636] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 148.065519][ T6968] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.197728][ T6968] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.421304][ T5632] BTRFS info (device loop0): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 148.835402][ T6949] loop4: detected capacity change from 0 to 32768 [ 148.955421][ T6949] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 149.053386][ T6949] XFS (loop4): Ending clean mount [ 149.139684][ T6990] syzkaller0: entered promiscuous mode [ 149.157884][ T6990] syzkaller0: entered allmulticast mode [ 149.607312][ T5637] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 149.903889][ T7008] netlink: 80 bytes leftover after parsing attributes in process `syz.1.332'. [ 150.385566][ T7002] loop0: detected capacity change from 0 to 32768 [ 150.475724][ T7002] JBD2: Ignoring recovery information on journal [ 150.576696][ T7002] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 150.732466][ T5632] ocfs2: Unmounting device (7,0) on (node local) [ 150.839532][ T7010] loop2: detected capacity change from 0 to 32768 [ 150.871820][ T7010] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.333 (7010) [ 150.942666][ T7010] BTRFS info (device loop2): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 150.987060][ T7010] BTRFS info (device loop2): using crc32c checksum algorithm [ 151.095253][ T7010] BTRFS info (device loop2): enabling ssd optimizations [ 151.132529][ T7010] BTRFS info (device loop2): turning on async discard [ 151.177364][ T7010] BTRFS info (device loop2): enabling free space tree [ 151.778525][ T31] audit: type=1800 audit(1785924401.390:20): pid=7061 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.333" name="file1" dev="loop2" ino=270 res=0 errno=0 [ 151.926119][ T7064] io-wq is not configured for unbound workers [ 152.146818][ T5636] BTRFS info (device loop2): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 152.343830][ T7075] netlink: 'syz.4.352': attribute type 2 has an invalid length. [ 152.382796][ T7075] netlink: 'syz.4.352': attribute type 2 has an invalid length. [ 152.424889][ T7078] netlink: 80 bytes leftover after parsing attributes in process `syz.5.354'. [ 152.440004][ T7079] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 152.487221][ T5041] net_ratelimit: 28 callbacks suppressed [ 152.487242][ T5041] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.487874][ T7079] CIFS: Attempting to mount //::1/share [ 152.496341][ T5760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.600360][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.601465][ T5761] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.637086][ T7079] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.646570][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.748449][ T7079] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.757170][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.779523][ T7079] CIFS: VFS: Error connecting to socket. Aborting operation. [ 152.836887][ T7079] CIFS: VFS: cifs_mount failed w/return code = -111 [ 152.847526][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.858361][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.919879][ T7086] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 152.928605][ T5768] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 152.950648][ T7086] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 153.118798][ T5768] usb 6-1: Using ep0 maxpacket: 16 [ 153.134236][ T7086] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 153.152668][ T5768] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 18, changing to 8 [ 153.192092][ T5768] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 16565, setting to 1024 [ 153.223138][ T7086] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 153.251027][ T5768] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 153.275221][ T7086] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 153.310891][ T5768] usb 6-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 153.347046][ T5768] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.112190][ T7086] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 154.181307][ T7086] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 154.192109][ T5768] usb 6-1: config 0 descriptor?? [ 154.206845][ T5768] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input8 [ 154.230619][ T7086] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 154.319989][ T7086] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 154.370987][ T7086] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 154.403675][ T7086] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 154.481372][ T7086] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 154.500863][ T30] usb 6-1: USB disconnect, device number 4 [ 154.550666][ T7086] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 154.572373][ T4971] pxrc 6-1:0.0: pxrc_open - usb_submit_urb failed, error: -19 [ 154.575634][ T7086] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 154.612959][ T7086] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 154.669711][ T7086] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 154.692572][ T7086] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 154.709183][ T7112] can: request_module (can-proto-0) failed. [ 154.737557][ T7086] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 154.774237][ T7117] batman_adv: batadv0: Adding interface: dummy0 [ 154.805551][ T7117] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 154.838282][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 154.872387][ T7117] batman_adv: batadv0: Interface activated: dummy0 [ 155.237728][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 155.351839][ T7134] loop4: detected capacity change from 0 to 512 [ 155.371797][ T7134] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 155.424380][ T7134] EXT4-fs error (device loop4): ext4_orphan_get:1425: comm syz.4.373: bad orphan inode 131083 [ 155.515875][ T7134] loop4: lost filesystem error report for type 5 error -117 [ 155.517438][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 155.531242][ C0] EXT4-fs (loop4): initial error at time 1785924405: ext4_orphan_get:1425 [ 155.539794][ C0] EXT4-fs (loop4): last error at time 1785924405: ext4_orphan_get:1425 [ 155.592835][ T7134] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 155.742721][ T5637] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.190961][ T7155] smpboot: CPU 1 is now offline [ 156.199130][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 156.389329][ T7158] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 156.441685][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 156.568273][ T7163] netlink: 80 bytes leftover after parsing attributes in process `syz.2.384'. [ 156.583461][ T7127] loop0: detected capacity change from 0 to 32768 [ 156.597683][ T51] Bluetooth: hci4: command 0x0c1a tx timeout [ 156.634890][ T7127] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 156.677614][ T51] Bluetooth: hci5: command 0x0c1a tx timeout [ 156.811120][ T7127] XFS (loop0): Ending clean mount [ 156.848369][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 157.319120][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 157.586460][ T5760] net_ratelimit: 60 callbacks suppressed [ 157.586481][ T5760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.601327][ T5041] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.663266][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.663278][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.683154][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.685250][ T802] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.692495][ T5768] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.709948][ T5756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.725068][ T81] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.726316][ T5738] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.784869][ T7191] loop5: detected capacity change from 0 to 512 [ 157.805995][ T7191] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 157.817487][ T5768] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 157.844133][ T7191] EXT4-fs error (device loop5): ext4_orphan_get:1425: comm syz.5.390: bad orphan inode 131083 [ 157.860152][ T7191] loop5: lost filesystem error report for type 5 error -117 [ 157.862670][ T7191] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.893757][ T7191] EXT4-fs error (device loop5): ext4_empty_dir:3125: inode #2: block 13: comm syz.5.390: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 158.183975][ T5632] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 158.214433][ T5768] usb 3-1: Using ep0 maxpacket: 16 [ 158.377793][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 158.451699][ T5768] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 18, changing to 8 [ 158.525573][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 158.677785][ T51] Bluetooth: hci4: command 0x0c1a tx timeout [ 158.864654][ T5635] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.889107][ T5642] Bluetooth: hci5: command 0x0c1a tx timeout [ 158.922459][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 158.972483][ T5768] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 16565, setting to 1024 [ 158.983918][ T5768] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 159.031094][ T5768] usb 3-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 159.108888][ T5768] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.177091][ T5768] usb 3-1: config 0 descriptor?? [ 159.230939][ T7217] tipc: Started in network mode [ 159.258114][ T7217] tipc: Node identity 52361a22683e, cluster identity 4711 [ 159.267170][ T5768] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input9 [ 159.274909][ T7217] tipc: Enabled bearer , priority 0 [ 159.330711][ T7223] syzkaller0: entered promiscuous mode [ 159.349831][ T7223] syzkaller0: entered allmulticast mode [ 159.398132][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 159.445170][ T7217] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 159.463396][ T802] usb 3-1: USB disconnect, device number 3 [ 159.572533][ T7228] sch_tbf: burst 8 is lower than device syzkaller0 mtu (1514) ! [ 159.612048][ T7217] tipc: Resetting bearer [ 159.658995][ T7215] tipc: Resetting bearer [ 159.733997][ T7215] tipc: Disabling bearer [ 160.487539][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 160.684861][ T5738] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 160.717693][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 160.869808][ T5738] usb 1-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 160.896465][ T5738] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.912517][ T5738] usb 1-1: Product: syz [ 160.923372][ T5642] Bluetooth: hci5: command 0x0c1a tx timeout [ 160.929536][ T51] Bluetooth: hci4: command 0x0c1a tx timeout [ 160.944766][ T5738] usb 1-1: Manufacturer: syz [ 160.960884][ T5738] usb 1-1: SerialNumber: syz [ 161.346236][ T7241] loop4: detected capacity change from 0 to 32768 [ 161.364753][ T7241] JBD2: Unrecognised features on journal [ 161.376174][ T7241] (syz.4.406,7241,0):ocfs2_journal_init:972 ERROR: Linux journal layer error [ 161.392151][ T7241] (syz.4.406,7241,0):ocfs2_check_volume:2344 ERROR: Could not initialize journal! [ 161.407543][ T7241] (syz.4.406,7241,1):ocfs2_check_volume:2429 ERROR: status = -22 [ 161.418676][ T5738] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 161.448370][ T7241] (syz.4.406,7241,1):ocfs2_mount_volume:1763 ERROR: status = -22 [ 161.500312][ T7241] (syz.4.406,7241,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 161.926045][ T7271] fuse: Bad value for 'fd' [ 162.174352][ T7277] netlink: 80 bytes leftover after parsing attributes in process `syz.4.422'. [ 162.230891][ T7257] loop5: detected capacity change from 0 to 32768 [ 162.252582][ T7257] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.414 (7257) [ 162.298800][ T7257] BTRFS info (device loop5): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 162.344371][ T7257] BTRFS info (device loop5): using crc32c checksum algorithm [ 162.414692][ T7265] loop2: detected capacity change from 0 to 32768 [ 162.432189][ T7265] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.417 (7265) [ 162.459618][ T7265] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 162.470104][ T7265] BTRFS info (device loop2): using crc32c checksum algorithm [ 162.483441][ T7257] BTRFS info (device loop5): enabling ssd optimizations [ 162.492898][ T7257] BTRFS info (device loop5): turning on async discard [ 162.500677][ T7257] BTRFS info (device loop5): enabling free space tree [ 162.601316][ T7265] BTRFS info (device loop2): enabling ssd optimizations [ 162.608592][ T7265] BTRFS info (device loop2): turning on flush-on-commit [ 162.615843][ T7265] BTRFS info (device loop2): enabling free space tree [ 162.623298][ T7265] BTRFS info (device loop2): enabling auto defrag [ 162.630259][ T7265] BTRFS info (device loop2): use lzo compression, level 1 [ 162.637827][ T7265] BTRFS info (device loop2): max_inline set to 4096 [ 162.659859][ T5738] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 162.700327][ T31] audit: type=1800 audit(1785924411.320:21): pid=7313 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.414" name="file1" dev="loop5" ino=270 res=0 errno=0 [ 162.783000][ T5636] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 162.830084][ T5738] usb 5-1: Using ep0 maxpacket: 16 [ 162.838782][ T24] net_ratelimit: 43 callbacks suppressed [ 162.838800][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.869451][ T5738] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 18, changing to 8 [ 162.934226][ T5738] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 16565, setting to 1024 [ 162.996545][ T5738] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 163.048037][ T802] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.070779][ T5738] usb 5-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 163.083572][ T5760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.127114][ T5738] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.145976][ T5760] usb 1-1: USB disconnect, device number 3 [ 163.182283][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.196692][ T5760] usblp0: removed [ 163.211419][ T5738] usb 5-1: config 0 descriptor?? [ 163.257145][ T5738] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input10 [ 163.372734][ T5635] BTRFS info (device loop5): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 163.484718][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.494459][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.515568][ T5738] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.682251][ T7189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.066872][ T5768] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.087251][ T5760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.102859][ T9] usb 5-1: USB disconnect, device number 4 [ 164.605056][ T7336] netlink: 12 bytes leftover after parsing attributes in process `syz.3.432'. [ 164.676649][ T7331] smpboot: CPU 1 is now offline [ 164.718317][ T7338] netlink: 12 bytes leftover after parsing attributes in process `syz.3.432'. [ 164.834964][ T7341] fuse: Bad value for 'fd' [ 164.863012][ T7338] netlink: 12 bytes leftover after parsing attributes in process `syz.3.432'. [ 165.065591][ T7335] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 165.266011][ T7350] loop4: detected capacity change from 0 to 64 [ 166.183592][ T7385] netlink: 80 bytes leftover after parsing attributes in process `syz.4.448'. [ 166.667739][ T5768] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 166.811961][ T7402] loop2: detected capacity change from 0 to 64 [ 166.837484][ T5768] usb 5-1: Using ep0 maxpacket: 16 [ 166.850256][ T5768] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 18, changing to 8 [ 166.889198][ T5768] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 16565, setting to 1024 [ 166.922281][ T5768] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 166.954740][ T7404] netlink: 12 bytes leftover after parsing attributes in process `syz.5.455'. [ 166.971827][ T5768] usb 5-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 166.996441][ T5768] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.009928][ T7406] netlink: 12 bytes leftover after parsing attributes in process `syz.5.455'. [ 167.012542][ T5768] usb 5-1: config 0 descriptor?? [ 167.030460][ T7406] netlink: 12 bytes leftover after parsing attributes in process `syz.5.455'. [ 167.099386][ T5768] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input11 [ 167.300092][ T5768] usb 5-1: USB disconnect, device number 5 [ 167.325041][ T4971] pxrc 5-1:0.0: pxrc_open - usb_submit_urb failed, error: -19 [ 167.849594][ T7419] loop5: detected capacity change from 0 to 32768 [ 167.864040][ T7419] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.460 (7419) [ 167.914263][ T7419] BTRFS info (device loop5): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 167.938758][ T7419] BTRFS info (device loop5): using crc32c checksum algorithm [ 167.962926][ T5760] net_ratelimit: 349 callbacks suppressed [ 167.962945][ T5760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.250281][ T7419] BTRFS info (device loop5): enabling ssd optimizations [ 168.260093][ T7419] BTRFS info (device loop5): turning on async discard [ 168.266948][ T7419] BTRFS info (device loop5): enabling free space tree [ 168.533523][ T7359] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 168.572422][ T5760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.672986][ T7427] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.845408][ T7427] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.978406][ T5768] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.980164][ T5760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.986867][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.004922][ T5738] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.169174][ T7452] loop3: detected capacity change from 0 to 64 [ 169.366863][ T31] audit: type=1800 audit(1785924417.980:22): pid=7455 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.460" name="file1" dev="loop5" ino=270 res=0 errno=0 [ 169.534496][ T81] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.544051][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.688844][ T5635] BTRFS info (device loop5): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 169.857529][ T24] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 170.067461][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 170.092665][ T24] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 170.121931][ T24] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 170.155757][ T24] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 170.188863][ T24] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 170.226832][ T24] usb 4-1: config 0 interface 0 has no altsetting 0 [ 170.267631][ T7480] syzkaller0: entered promiscuous mode [ 170.280195][ T24] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 170.291009][ T7480] syzkaller0: entered allmulticast mode [ 170.309790][ T24] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 170.333329][ T24] usb 4-1: Product: syz [ 170.346608][ T24] usb 4-1: Manufacturer: syz [ 170.360926][ T24] usb 4-1: SerialNumber: syz [ 170.388496][ T24] usb 4-1: config 0 descriptor?? [ 170.428284][ T24] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 170.615853][ T7484] process 'syz.5.479' launched './file2' with NULL argv: empty string added [ 170.702044][ T24] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 170.722251][ T24] usb 4-1: USB disconnect, device number 4 [ 170.748752][ T24] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 171.664033][ T7494] loop0: detected capacity change from 0 to 64 [ 172.901049][ T31] audit: type=1800 audit(1785924421.520:23): pid=7504 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.486" name="zoned" dev="configfs" ino=13376 res=0 errno=0 [ 172.957583][ T31] audit: type=1800 audit(1785924421.550:24): pid=7504 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.486" name="memory_backed" dev="configfs" ino=13377 res=0 errno=0 [ 173.112269][ T1045] net_ratelimit: 21 callbacks suppressed [ 173.112289][ T1045] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.128757][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.167654][ T5768] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.239882][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.321501][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.426163][ T7520] netlink: 80 bytes leftover after parsing attributes in process `syz.2.494'. [ 173.638672][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.647041][ T5760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.713927][ T7528] netlink: 12 bytes leftover after parsing attributes in process `syz.0.493'. [ 173.752911][ T802] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.763482][ T5738] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.216112][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.381923][ T7530] syzkaller0: entered promiscuous mode [ 174.391030][ T7530] syzkaller0: entered allmulticast mode [ 176.007579][ T5738] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 176.168469][ T5738] usb 3-1: Using ep0 maxpacket: 16 [ 176.181483][ T5738] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 18, changing to 8 [ 176.217767][ T5738] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 16565, setting to 1024 [ 176.260130][ T5738] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 176.319569][ T5738] usb 3-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 176.353331][ T5738] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.175128][ T5738] usb 3-1: config 0 descriptor?? [ 177.192190][ T5738] usb 3-1: can't set config #0, error -71 [ 177.211605][ T5738] usb 3-1: USB disconnect, device number 4 [ 178.274366][ T5738] net_ratelimit: 16 callbacks suppressed [ 178.274389][ T5738] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.366701][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.382822][ T5738] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.391201][ T802] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.518160][ T5738] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.614849][ T7557] loop5: detected capacity change from 0 to 40427 [ 178.651000][ T7557] F2FS-fs (loop5): build fault injection rate: 19 [ 178.679630][ T7557] F2FS-fs (loop5): build fault injection type: 0x3bfe8c [ 178.693482][ T7557] F2FS-fs (loop5): invalid crc value [ 178.719428][ T7557] F2FS-fs (loop5): inject page alloc in f2fs_grab_cache_folio of f2fs_build_free_nids+0xa00/0x18c0 [ 178.958142][ T7557] F2FS-fs (loop5): inject slab alloc in f2fs_kmem_cache_alloc of read_node_folio+0x21d/0x3d0 [ 179.031584][ T7557] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 179.101899][ T7557] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 179.155104][ T7609] netlink: 80 bytes leftover after parsing attributes in process `syz.0.523'. [ 179.355462][ T5738] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.398599][ T802] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.398599][ T5768] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.398760][ T802] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.423718][ T5760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.541264][ T7619] kAFS: unable to lookup cell 'ÿ' [ 179.697499][ T5760] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 179.713752][ T7621] netlink: 4 bytes leftover after parsing attributes in process `syz.4.528'. [ 179.867512][ T5760] usb 1-1: Using ep0 maxpacket: 16 [ 179.885316][ T5760] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 18, changing to 8 [ 179.916831][ T5760] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 16565, setting to 1024 [ 179.959645][ T5760] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 179.989158][ T7613] loop2: detected capacity change from 0 to 32768 [ 179.995731][ T5760] usb 1-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 180.041360][ T5760] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.076126][ T5760] usb 1-1: config 0 descriptor?? [ 180.081970][ T7613] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 180.096442][ T5760] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input12 [ 180.123511][ T7613] JBD2: Ignoring recovery information on journal [ 180.281879][ T7613] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 180.326623][ T5760] usb 1-1: USB disconnect, device number 4 [ 180.646375][ T5636] ocfs2: Unmounting device (7,2) on (node local) [ 180.771547][ T7642] kAFS: unable to lookup cell 'ÿ' [ 181.050893][ T7648] input: syz0 as /devices/virtual/input/input13 [ 181.989193][ T7683] netlink: 80 bytes leftover after parsing attributes in process `syz.1.554'. [ 182.324923][ T7666] loop5: detected capacity change from 0 to 32768 [ 182.362714][ T7666] ocfs2: Slot 0 on device (7,5) was already allocated to this node! [ 182.421175][ T7666] JBD2: Ignoring recovery information on journal [ 182.598839][ T7666] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 183.416513][ T5738] net_ratelimit: 25 callbacks suppressed [ 183.416532][ T5738] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.431063][ T802] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.457678][ T5760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.472599][ T5635] ocfs2: Unmounting device (7,5) on (node local) [ 183.506920][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.558920][ T5760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.637800][ T5760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.639081][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.524284][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.555161][ T7716] loop0: detected capacity change from 0 to 32768 [ 184.571596][ T7716] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.565 (7716) [ 184.616711][ T5760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.625377][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.702344][ T7716] BTRFS info (device loop0): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 184.733574][ T7716] BTRFS info (device loop0): using crc32c checksum algorithm [ 184.882372][ T7716] BTRFS info (device loop0): enabling ssd optimizations [ 184.936029][ T7716] BTRFS info (device loop0): turning on async discard [ 185.027572][ T7716] BTRFS info (device loop0): enabling free space tree [ 186.518059][ T5642] Bluetooth: hci5: command 0x0c1a tx timeout [ 187.320624][ T5632] BTRFS info (device loop0): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 188.082206][ T7779] kAFS: unable to lookup cell 'ÿ' [ 188.598331][ T10] net_ratelimit: 16 callbacks suppressed [ 188.598352][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.612400][ T5760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.635981][ T5738] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.644618][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.669742][ T802] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.687738][ T5642] Bluetooth: hci5: command 0x0c1a tx timeout [ 189.237589][ T5768] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.643818][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.653119][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.668339][ T802] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.723227][ T7816] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.055447][ T7825] kAFS: unable to lookup cell 'ÿ' [ 190.343203][ T7832] tipc: Started in network mode [ 190.353739][ T7832] tipc: Node identity 7e3af93d7a17, cluster identity 4711 [ 190.365008][ T7832] tipc: Enabled bearer , priority 0 [ 190.376168][ T7832] syzkaller0: entered promiscuous mode [ 190.381996][ T7832] syzkaller0: entered allmulticast mode [ 190.415514][ T7832] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 190.415534][ T7810] loop5: detected capacity change from 0 to 32768 [ 190.457253][ T7810] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.592 (7810) [ 190.509485][ T7810] BTRFS info (device loop5): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 190.516931][ T7832] tipc: Resetting bearer [ 190.552054][ T7810] BTRFS info (device loop5): using crc32c checksum algorithm [ 190.574009][ T7835] loop4: detected capacity change from 0 to 512 [ 190.583015][ T7831] tipc: Resetting bearer [ 190.733962][ T7831] tipc: Disabling bearer [ 190.743103][ T7835] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 190.789289][ T7810] BTRFS info (device loop5): enabling ssd optimizations [ 190.818160][ T7810] BTRFS info (device loop5): turning on async discard [ 190.837432][ T7810] BTRFS info (device loop5): enabling free space tree [ 190.856842][ T7835] EXT4-fs error (device loop4): ext4_orphan_get:1425: comm syz.4.603: bad orphan inode 131083 [ 190.940296][ T7835] loop4: lost filesystem error report for type 5 error -117 [ 190.965623][ T7835] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 191.035574][ T31] audit: type=1800 audit(1785924439.650:25): pid=7810 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.592" name="file1" dev="loop5" ino=271 res=0 errno=0 [ 191.076620][ T7835] EXT4-fs (loop4): shut down requested (2) [ 191.121753][ T7859] fuse: Bad value for 'fd' [ 191.227301][ T5637] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.306798][ T5635] BTRFS info (device loop5): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 191.931670][ T51] Bluetooth: hci5: unexpected event for opcode 0x2027 [ 193.047791][ T30] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 193.302530][ T51] Bluetooth: hci3: unexpected event for opcode 0x2027 [ 193.693076][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.724283][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.794398][ T7892] kAFS: unable to lookup cell 'ÿ' [ 194.095459][ T5768] net_ratelimit: 21 callbacks suppressed [ 194.095495][ T5768] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.117856][ T802] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.157139][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.272137][ T30] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 194.446261][ T5738] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.471457][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.991057][ T30] usb 4-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 195.000272][ T30] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.017672][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.030771][ T5738] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.039538][ T30] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 195.162333][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.193505][ T5738] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.224531][ T7910] overlayfs: missing 'lowerdir' [ 195.457020][ T7917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.463948][ T7918] kAFS: Can only specify source 'none' with -o dyn [ 195.709361][ T7928] jffs2: notice: (7928) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 195.932878][ T7907] loop2: detected capacity change from 0 to 32768 [ 195.963151][ T7907] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.622 (7907) [ 195.995111][ T7934] kAFS: unable to lookup cell 'ÿ' [ 196.036221][ T7907] BTRFS info (device loop2): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 196.064788][ T7907] BTRFS info (device loop2): using crc32c checksum algorithm [ 196.221563][ T7907] BTRFS info (device loop2): enabling ssd optimizations [ 196.280236][ T7907] BTRFS info (device loop2): turning on async discard [ 196.309333][ T7907] BTRFS info (device loop2): enabling free space tree [ 196.411814][ T30] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 196.452931][ T30] stv0680 4-1:4.0: last error: 86, command = 0x78 [ 196.476040][ T31] audit: type=1800 audit(1785924445.090:26): pid=7907 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.622" name="file1" dev="loop2" ino=271 res=0 errno=0 [ 196.476440][ T7957] overlayfs: missing 'lowerdir' [ 196.512009][ T30] usb 4-1: USB disconnect, device number 5 [ 196.696602][ T7959] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 196.728977][ T5636] BTRFS info (device loop2): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 198.193489][ T7959] Process accounting resumed [ 199.112734][ T7994] loop5: detected capacity change from 0 to 64 [ 199.131814][ T7963] loop4: detected capacity change from 0 to 32768 [ 199.252599][ T7963] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 199.496198][ T10] net_ratelimit: 30 callbacks suppressed [ 199.496219][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.878231][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.974510][ T8009] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.982996][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.158172][ T8005] kAFS: unable to lookup cell 'ÿ' [ 200.382478][ T7963] XFS (loop4): Ending clean mount [ 200.488474][ T5738] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.496799][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.503045][ T8009] netlink: 'syz.1.655': attribute type 2 has an invalid length. [ 200.505402][ T802] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.521361][ T5760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.567030][ T8009] netlink: 'syz.1.655': attribute type 2 has an invalid length. [ 200.618034][ T5637] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 201.115104][ T8036] syz_tun: entered allmulticast mode [ 201.664437][ T8020] syz_tun: left allmulticast mode [ 201.728919][ T5760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.737188][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.749379][ T8070] loop5: detected capacity change from 0 to 64 [ 204.751076][ T5760] net_ratelimit: 16 callbacks suppressed [ 204.751099][ T5760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.765569][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.774155][ T5041] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.784463][ T5738] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.842830][ T5760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.877736][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.083156][ T5760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.146686][ T8087] kAFS: unable to lookup cell 'ÿ' [ 205.856082][ T5760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.865847][ T8090] kAFS: unable to lookup cell 'ÿ' [ 205.872029][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.888775][ T5738] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 207.366607][ T8114] netlink: 8 bytes leftover after parsing attributes in process `syz.5.688'. [ 208.728165][ T8126] kAFS: unable to lookup cell 'ÿ' [ 209.710600][ T8138] kAFS: unable to lookup cell 'ÿ' [ 210.517957][ T30] net_ratelimit: 24 callbacks suppressed [ 210.517979][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.565929][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.608954][ T5760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.648529][ T5738] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.895082][ T5760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.963259][ T802] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.974251][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 211.561412][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 211.669173][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 211.681345][ T5738] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 211.772608][ T8158] netlink: 8 bytes leftover after parsing attributes in process `syz.1.704'. [ 211.808299][ T8160] loop2: detected capacity change from 0 to 64 [ 212.361687][ T8173] netlink: 4 bytes leftover after parsing attributes in process `syz.2.710'. [ 212.401345][ T8177] netlink: 12 bytes leftover after parsing attributes in process `syz.2.710'. [ 213.102770][ T8177] netlink: 12 bytes leftover after parsing attributes in process `syz.2.710'. [ 213.683961][ T8152] loop3: detected capacity change from 0 to 40427 [ 213.723662][ T8152] F2FS-fs (loop3): build fault injection rate: 19 [ 213.750878][ T8152] F2FS-fs (loop3): build fault injection type: 0x3bfe8c [ 213.792120][ T8197] netlink: 8 bytes leftover after parsing attributes in process `syz.5.720'. [ 213.802492][ T8152] F2FS-fs (loop3): invalid crc value [ 213.862640][ T8152] F2FS-fs (loop3): inject page alloc in f2fs_grab_cache_folio of f2fs_build_free_nids+0xa00/0x18c0 [ 214.110248][ T8152] F2FS-fs (loop3): inject slab alloc in f2fs_kmem_cache_alloc of read_node_folio+0x21d/0x3d0 [ 214.177124][ T8152] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 214.346397][ T8213] netlink: 'syz.1.726': attribute type 8 has an invalid length. [ 214.383059][ T8213] netlink: 4 bytes leftover after parsing attributes in process `syz.1.726'. [ 214.424050][ T8218] netlink: 4 bytes leftover after parsing attributes in process `syz.1.726'. [ 214.475909][ T8213] bond0: entered promiscuous mode [ 214.501477][ T8213] bond_slave_0: entered promiscuous mode [ 214.526655][ T8213] bond_slave_1: entered promiscuous mode [ 214.554583][ T8213] gretap0: entered promiscuous mode [ 214.581841][ T8213] team0: entered promiscuous mode [ 214.599350][ T8213] team_slave_0: entered promiscuous mode [ 214.609725][ T8213] team_slave_1: entered promiscuous mode [ 214.621494][ T8213] hsr1: entered promiscuous mode [ 214.753635][ T8218] team_slave_0 (unregistering): left promiscuous mode [ 214.783714][ T8218] team0: Port device team_slave_0 removed [ 214.880524][ T8228] tipc: Enabled bearer , priority 0 [ 214.942606][ T8229] syzkaller0: entered promiscuous mode [ 214.976386][ T8229] syzkaller0: entered allmulticast mode [ 215.008532][ T8228] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 215.174277][ T8228] tipc: Resetting bearer [ 215.231978][ T8227] tipc: Resetting bearer [ 215.482748][ T8243] netlink: 72 bytes leftover after parsing attributes in process `syz.0.735'. [ 215.591225][ T8227] tipc: Disabling bearer [ 216.121529][ T5738] net_ratelimit: 37 callbacks suppressed [ 216.121550][ T5738] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.358502][ T5768] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.358531][ T5738] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.375808][ T802] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.765628][ T8271] netlink: 80 bytes leftover after parsing attributes in process `syz.0.749'. [ 217.017082][ T5738] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 217.078158][ T5738] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 217.248905][ T5768] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 217.398281][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 217.398298][ T5738] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 217.398470][ T5738] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 217.427577][ T5768] usb 1-1: Using ep0 maxpacket: 16 [ 217.443823][ T5768] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 18, changing to 8 [ 217.454845][ T8269] loop4: detected capacity change from 0 to 32768 [ 217.477838][ T5768] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 16565, setting to 1024 [ 217.489494][ T5768] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 217.519301][ T8269] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 217.520209][ T5768] usb 1-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 217.551994][ T8263] loop2: detected capacity change from 0 to 40427 [ 217.556226][ T5768] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.589450][ T5768] usb 1-1: config 0 descriptor?? [ 217.606055][ T8263] F2FS-fs (loop2): build fault injection rate: 19 [ 217.616427][ T5768] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input14 [ 217.672006][ T8263] F2FS-fs (loop2): build fault injection type: 0x3bfe8c [ 217.711129][ T8263] F2FS-fs (loop2): invalid crc value [ 217.745019][ T8269] XFS (loop4): Ending clean mount [ 217.779641][ T8263] F2FS-fs (loop2): inject page alloc in f2fs_grab_cache_folio of f2fs_build_free_nids+0xa00/0x18c0 [ 217.831200][ T5768] usb 1-1: USB disconnect, device number 5 [ 217.856745][ T31] audit: type=1800 audit(1785924722.465:27): pid=8269 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.748" name="file1" dev="loop4" ino=9286 res=0 errno=0 [ 217.893981][ T8303] batadv_slave_1: entered promiscuous mode [ 217.906068][ T8269] XFS (loop4): Metadata CRC error detected at xfs_rmapbt_read_verify+0x42/0xe0, xfs_rmapbt block 0x14 [ 217.920130][ T8301] batadv_slave_1: left promiscuous mode [ 217.948760][ T8269] XFS (loop4): Unmount and run xfs_repair [ 217.995948][ T8269] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 218.039031][ T8269] 00000000: 52 4d 42 33 00 00 00 0c ff ff ff ff ff ff ff ff RMB3............ [ 218.078836][ T8269] 00000010: 00 a7 50 00 00 00 00 14 00 00 00 01 00 00 00 80 ..P............. [ 218.103431][ T8269] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 218.113326][ T8269] 00000030: 00 00 00 00 5b af 3b 1d 00 00 00 00 00 00 00 01 ....[.;......... [ 218.122624][ T8269] 00000040: ff ff ff ff ff ff ff fd 00 00 00 00 00 00 00 00 ................ [ 218.125895][ T8263] F2FS-fs (loop2): inject slab alloc in f2fs_kmem_cache_alloc of read_node_folio+0x21d/0x3d0 [ 218.142389][ T8269] 00000050: 00 00 00 01 00 00 00 02 ff ff ff ff ff ff ff fb ................ [ 218.162684][ T8269] 00000060: 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 02 ................ [ 218.186599][ T8269] 00000070: ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00 ................ [ 218.190229][ T8263] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 218.204609][ T8269] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x2ae/0x4a0" at daddr 0x14 len 4 error 74 [ 218.211621][ T8269] XFS (loop4): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x47f/0x820 (fs/xfs/xfs_trans_buf.c:280). Shutting down filesystem. [ 218.255942][ T8269] XFS (loop4): Please unmount the filesystem and rectify the problem(s) [ 218.269113][ T8263] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 218.333773][ T8263] F2FS-fs (loop2): inject page alloc in f2fs_grab_cache_folio of f2fs_get_dnode_of_data+0xa60/0x1ee0 [ 218.379236][ T5637] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 218.409976][ T8310] F2FS-fs (loop2): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x3a1/0xdc0 [ 218.444489][ T5738] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.481547][ T8263] syz.2.745: attempt to access beyond end of device [ 218.481547][ T8263] loop2: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 218.498379][ T8263] syz.2.745: attempt to access beyond end of device [ 218.498379][ T8263] loop2: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 218.587776][ T8263] F2FS-fs (loop2): inject inconsistent footer in f2fs_sanity_check_node_footer of __get_node_folio+0x8c1/0xdf0 [ 218.623061][ T8263] F2FS-fs (loop2): inconsistent node block, node_type:1, nid:3, node_footer[nid:3,ino:3,ofs:0,cpver:1219692001,blkaddr:4098] [ 218.800023][ T5636] F2FS-fs (loop2): inject page alloc in f2fs_grab_cache_folio of f2fs_write_data_summaries+0xd4/0x710 [ 218.854903][ T31] audit: type=1800 audit(1785924723.475:28): pid=8321 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.764" name="ipv4_address" dev="configfs" ino=16442 res=0 errno=0 [ 218.908689][ T31] audit: type=1800 audit(1785924723.485:29): pid=8321 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.764" name="ipv4_port" dev="configfs" ino=16443 res=0 errno=0 [ 218.937583][ T31] audit: type=1800 audit(1785924723.485:30): pid=8321 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.764" name="num" dev="configfs" ino=16444 res=0 errno=0 [ 218.957696][ T31] audit: type=1800 audit(1785924723.495:31): pid=8321 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.764" name="local" dev="configfs" ino=16445 res=0 errno=0 [ 218.981358][ T31] audit: type=1800 audit(1785924723.565:32): pid=8321 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.764" name="block_bytes" dev="configfs" ino=15452 res=0 errno=0 [ 219.004240][ T31] audit: type=1800 audit(1785924723.565:33): pid=8321 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.764" name="blocks" dev="configfs" ino=15455 res=0 errno=0 [ 219.024661][ T31] audit: type=1800 audit(1785924723.585:34): pid=8321 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.764" name="start_block" dev="configfs" ino=15457 res=0 errno=0 [ 219.052456][ T31] audit: type=1800 audit(1785924723.675:35): pid=8323 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.764" name="dev" dev="configfs" ino=16447 res=0 errno=0 [ 219.191382][ T8325] syzkaller0: entered promiscuous mode [ 219.198319][ T8325] syzkaller0: entered allmulticast mode [ 219.354062][ T31] audit: type=1800 audit(1785924723.955:36): pid=8329 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.767" name="zoned" dev="configfs" ino=16470 res=0 errno=0 [ 219.644645][ T8338] netlink: 277 bytes leftover after parsing attributes in process `syz.0.771'. [ 219.959247][ T8347] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 221.243200][ T8352] Process accounting resumed [ 221.337221][ T8365] kAFS: unable to lookup cell 'ÿ' [ 221.693216][ T5738] net_ratelimit: 15 callbacks suppressed [ 221.693238][ T5738] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.877993][ T5768] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.878004][ T5760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 222.199915][ T5738] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 222.208573][ T802] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 222.514992][ T8340] loop5: detected capacity change from 0 to 32768 [ 222.586907][ T8340] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 222.759866][ T5738] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 222.779048][ T8340] XFS (loop5): Ending clean mount [ 222.858302][ T5635] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 222.935540][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 222.935641][ T5738] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.351030][ T8390] netlink: 4 bytes leftover after parsing attributes in process `syz.0.788'. [ 223.397634][ T5738] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.486451][ T8392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.812071][ T8402] Process accounting resumed [ 223.835184][ T8407] netlink: 112 bytes leftover after parsing attributes in process `syz.0.795'. [ 224.197574][ T30] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 224.399322][ T30] usb 5-1: Using ep0 maxpacket: 16 [ 224.413863][ T30] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 18, changing to 8 [ 224.438446][ T30] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 16565, setting to 1024 [ 224.473583][ T30] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 224.507437][ T30] usb 5-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 224.534742][ T30] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.572052][ T8409] loop2: detected capacity change from 0 to 32768 [ 224.588586][ T30] usb 5-1: config 0 descriptor?? [ 224.616611][ T8409] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 224.616941][ T30] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input15 [ 224.803579][ T8409] XFS (loop2): Ending clean mount [ 224.937096][ T31] kauditd_printk_skb: 1 callbacks suppressed [ 224.937117][ T31] audit: type=1800 audit(1785924729.555:38): pid=8409 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.796" name="file1" dev="loop2" ino=9286 res=0 errno=0 [ 224.939291][ T30] usb 5-1: USB disconnect, device number 6 [ 224.986381][ T5954] pxrc 5-1:0.0: pxrc_open - usb_submit_urb failed, error: -19 [ 225.009302][ T8409] XFS (loop2): Metadata CRC error detected at xfs_rmapbt_read_verify+0x42/0xe0, xfs_rmapbt block 0x14 [ 225.056330][ T8409] XFS (loop2): Unmount and run xfs_repair [ 225.067505][ T4971] pxrc 5-1:0.0: pxrc_open - usb_submit_urb failed, error: -19 [ 225.129203][ T8409] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 225.174717][ T8409] 00000000: 52 4d 42 33 00 00 00 0c ff ff ff ff ff ff ff ff RMB3............ [ 225.198227][ T8409] 00000010: 00 a7 50 00 00 00 00 14 00 00 00 01 00 00 00 80 ..P............. [ 225.230374][ T8409] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 225.414696][ T8409] 00000030: 00 00 00 00 5b af 3b 1d 00 00 00 00 00 00 00 01 ....[.;......... [ 225.666260][ T8409] 00000040: ff ff ff ff ff ff ff fd 00 00 00 00 00 00 00 00 ................ [ 225.825876][ T8409] 00000050: 00 00 00 01 00 00 00 02 ff ff ff ff ff ff ff fb ................ [ 226.021888][ T8409] 00000060: 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 02 ................ [ 226.175483][ T8409] 00000070: ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00 ................ [ 226.276126][ T8440] netlink: 4 bytes leftover after parsing attributes in process `syz.1.803'. [ 226.287922][ T8409] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x2ae/0x4a0" at daddr 0x14 len 4 error 74 [ 226.327797][ T8409] XFS (loop2): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x47f/0x820 (fs/xfs/xfs_trans_buf.c:280). Shutting down filesystem. [ 226.344994][ T8409] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 226.532233][ T5636] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 226.724893][ T8456] netlink: 'syz.3.808': attribute type 2 has an invalid length. [ 226.742070][ T8453] Process accounting resumed [ 226.748073][ T8456] netlink: 'syz.3.808': attribute type 2 has an invalid length. [ 227.318001][ T5761] net_ratelimit: 21 callbacks suppressed [ 227.318023][ T5761] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.658597][ T5738] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.666995][ T5738] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.677716][ T802] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.832639][ T8465] netlink: 64 bytes leftover after parsing attributes in process `syz.1.816'. [ 228.025539][ T51] Bluetooth: hci0: unexpected cc 0x0c05 length: 4 > 1 [ 228.032845][ T51] Bluetooth: hci0: unexpected event for opcode 0x0c05 [ 228.199859][ T8478] netlink: 4 bytes leftover after parsing attributes in process `syz.4.820'. [ 228.214603][ T8475] netlink: 112 bytes leftover after parsing attributes in process `syz.2.810'. [ 228.277829][ T5738] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.286162][ T5760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.335589][ T8481] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.359362][ T5761] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.375126][ T8481] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.387575][ T802] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 228.396043][ T8481] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.590582][ T8489] Process accounting resumed [ 228.610353][ T802] usb 4-1: Using ep0 maxpacket: 16 [ 228.641203][ T802] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 18, changing to 8 [ 228.684826][ T802] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 16565, setting to 1024 [ 228.704558][ T8496] netlink: 'syz.5.829': attribute type 2 has an invalid length. [ 228.724448][ T802] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 228.731709][ T8496] netlink: 'syz.5.829': attribute type 2 has an invalid length. [ 228.740784][ T802] usb 4-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 228.765900][ T5738] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 228.779940][ T5760] IPVS: starting estimator thread 0... [ 228.788120][ T802] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.813172][ T802] usb 4-1: config 0 descriptor?? [ 228.833379][ T802] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input16 [ 228.887485][ T8500] IPVS: using max 30 ests per chain, 72000 per kthread [ 229.058509][ T802] usb 4-1: USB disconnect, device number 6 [ 231.243304][ T8553] fuse: fd is not a fuse device [ 231.607458][ T802] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 231.682908][ T8565] kAFS: unable to lookup cell 'ÿ' [ 232.218592][ T24] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 232.366404][ T5041] net_ratelimit: 46 callbacks suppressed [ 232.366425][ T5041] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.380771][ T5738] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.527733][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.536156][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 232.556485][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 18, changing to 8 [ 232.617012][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 16565, setting to 1024 [ 232.681652][ T24] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 232.699389][ T5738] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.709192][ T802] usb 6-1: device descriptor read/64, error -71 [ 232.747025][ T24] usb 1-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 232.886034][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.471422][ T5760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.480291][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.492276][ T24] usb 1-1: config 0 descriptor?? [ 233.553754][ T24] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input17 [ 233.566821][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.588718][ T802] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 233.640911][ T8588] kAFS: unable to lookup cell 'ÿ' [ 233.718955][ T5760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.734966][ T802] usb 6-1: device descriptor read/64, error -71 [ 233.795182][ T24] usb 1-1: USB disconnect, device number 6 [ 233.809718][ T4971] pxrc 1-1:0.0: pxrc_open - usb_submit_urb failed, error: -19 [ 233.868459][ T802] usb usb6-port1: attempt power cycle [ 233.946543][ T8597] fuse: Unknown parameter 'grou00000000000000000000' [ 233.988565][ T8592] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found [ 234.228475][ T802] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 234.245347][ T8603] netlink: 24 bytes leftover after parsing attributes in process `syz.3.874'. [ 234.258387][ T802] usb 6-1: device descriptor read/8, error -71 [ 234.358448][ T5760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.488763][ T8610] kAFS: unable to lookup cell 'ÿ' [ 234.524191][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.664964][ T8590] loop2: detected capacity change from 0 to 32768 [ 234.734293][ T8615] netlink: 8 bytes leftover after parsing attributes in process `syz.0.879'. [ 235.233816][ T8616] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 235.248893][ T8616] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 235.268486][ T8616] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 235.333781][ T8616] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 235.460943][ T8616] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 236.083477][ T8590] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 236.129437][ T8635] netlink: 108 bytes leftover after parsing attributes in process `syz.3.885'. [ 236.233215][ T8590] XFS (loop2): Ending clean mount [ 236.608360][ T30] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 236.856285][ T30] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 236.879407][ T30] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 236.904653][ T30] usb 4-1: Product: syz [ 236.917531][ T30] usb 4-1: SerialNumber: syz [ 236.944002][ T30] usb 4-1: config 0 descriptor?? [ 237.127111][ T5636] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 237.181505][ T30] hso 4-1:0.0: Failed to find BULK eps [ 237.387880][ T5041] usb 4-1: USB disconnect, device number 7 [ 237.564853][ T5760] net_ratelimit: 19 callbacks suppressed [ 237.564879][ T5760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.579777][ T802] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.718101][ T802] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.758971][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.851522][ T5041] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.851780][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.867912][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.868283][ T5760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.104645][ T8663] kAFS: unable to lookup cell 'ÿ' [ 239.110181][ T5760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.118843][ T5041] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.197526][ T24] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 239.273758][ T8672] kAFS: unable to lookup cell 'ÿ' [ 239.727522][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 239.849298][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 18, changing to 8 [ 239.861022][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 16565, setting to 1024 [ 239.872298][ T24] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 239.893191][ T24] usb 3-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 239.902406][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.914213][ T24] usb 3-1: config 0 descriptor?? [ 239.925813][ T24] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input18 [ 240.033489][ T31] audit: type=1800 audit(1785924744.635:39): pid=8679 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.899" name="ipv4_address" dev="configfs" ino=16909 res=0 errno=0 [ 240.139376][ T31] audit: type=1800 audit(1785924744.685:40): pid=8679 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.899" name="ipv4_port" dev="configfs" ino=16910 res=0 errno=0 [ 240.217077][ T31] audit: type=1800 audit(1785924744.705:41): pid=8679 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.899" name="num" dev="configfs" ino=16911 res=0 errno=0 [ 240.220822][ T24] usb 3-1: USB disconnect, device number 5 [ 240.246607][ T4971] pxrc 3-1:0.0: pxrc_open - usb_submit_urb failed, error: -19 [ 240.338310][ T8683] netlink: 12 bytes leftover after parsing attributes in process `syz.5.901'. [ 240.379585][ T31] audit: type=1800 audit(1785924744.705:42): pid=8679 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.899" name="local" dev="configfs" ino=16912 res=0 errno=0 [ 240.397651][ T8683] netlink: 12 bytes leftover after parsing attributes in process `syz.5.901'. [ 240.421014][ T31] audit: type=1800 audit(1785924744.715:43): pid=8679 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.899" name="block_bytes" dev="configfs" ino=16913 res=0 errno=0 [ 240.451782][ T31] audit: type=1800 audit(1785924744.715:44): pid=8679 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.899" name="blocks" dev="configfs" ino=16914 res=0 errno=0 [ 240.628709][ T31] audit: type=1800 audit(1785924744.725:45): pid=8679 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.899" name="start_block" dev="configfs" ino=16915 res=0 errno=0 [ 240.650797][ T5761] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 241.338174][ T5761] usb 4-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 241.348376][ T5761] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.356393][ T5761] usb 4-1: Product: syz [ 241.361624][ T5761] usb 4-1: Manufacturer: syz [ 241.366292][ T5761] usb 4-1: SerialNumber: syz [ 241.607893][ T8701] jffs2: notice: (8701) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 241.842740][ T5761] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 8 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 242.573075][ T8723] kAFS: unable to lookup cell 'ÿ' [ 243.329317][ T802] net_ratelimit: 27 callbacks suppressed [ 243.329336][ T802] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.354335][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.354519][ T5760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.444544][ T8725] loop0: detected capacity change from 0 to 2048 [ 243.494984][ T802] usb 4-1: USB disconnect, device number 8 [ 243.557774][ T802] usblp0: removed [ 243.580676][ T8727] syzkaller0: entered promiscuous mode [ 243.613481][ T8727] syzkaller0: entered allmulticast mode [ 243.674960][ T8727] tipc: Enabled bearer , priority 0 [ 243.718584][ T5760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.726943][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.742697][ T8726] tipc: Resetting bearer [ 243.838819][ T8726] tipc: Disabling bearer [ 244.118448][ T5760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 244.237671][ T802] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 244.265925][ T8715] loop2: detected capacity change from 0 to 32768 [ 244.312600][ T8715] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.910 (8715) [ 244.362770][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 244.402438][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 244.411854][ T5760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 244.438877][ T8715] BTRFS info (device loop2): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 244.448047][ T802] usb 4-1: Using ep0 maxpacket: 16 [ 244.478575][ T802] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 18, changing to 8 [ 244.485635][ T8715] BTRFS info (device loop2): using crc32c checksum algorithm [ 244.497278][ T802] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 16565, setting to 1024 [ 244.523189][ T802] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 244.553926][ T802] usb 4-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 244.599114][ T802] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.700240][ T802] usb 4-1: config 0 descriptor?? [ 244.732632][ T8715] BTRFS info (device loop2): enabling ssd optimizations [ 244.748381][ T8715] BTRFS info (device loop2): turning on async discard [ 244.757810][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 244.806247][ T8715] BTRFS info (device loop2): enabling free space tree [ 244.815713][ T802] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input19 [ 245.010556][ T802] usb 4-1: USB disconnect, device number 9 [ 245.016687][ T5954] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -19 [ 245.052039][ T31] audit: type=1800 audit(1785924749.675:46): pid=8715 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.910" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 245.100165][ T4971] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -19 [ 245.116256][ T4971] pxrc 4-1:0.0: pxrc_open - usb_submit_urb failed, error: -19 [ 245.266847][ T5636] BTRFS info (device loop2): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 245.318453][ T5760] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 245.467502][ T5760] usb 1-1: device descriptor read/64, error -71 [ 245.877600][ T5760] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 246.548792][ T5760] usb 1-1: device descriptor read/64, error -71 [ 246.690373][ T5760] usb usb1-port1: attempt power cycle [ 246.929873][ T8791] kAFS: unable to lookup cell 'ÿ' [ 247.087611][ T5760] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 247.267102][ T5760] usb 1-1: device descriptor read/8, error -71 [ 247.880929][ T5760] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 247.919642][ T5760] usb 1-1: device descriptor read/8, error -71 [ 248.633107][ T5738] net_ratelimit: 14 callbacks suppressed [ 248.633125][ T5738] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.647500][ T802] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.657519][ T5760] usb usb1-port1: unable to enumerate USB device [ 248.674579][ T5738] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.690902][ T5738] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.767761][ T5761] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.791135][ T5760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 249.173226][ T8809] loop0: detected capacity change from 0 to 256 [ 249.199573][ T8809] exfat: Deprecated parameter 'namecase' [ 249.226591][ T8809] exfat: Deprecated parameter 'namecase' [ 249.317794][ T8809] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 249.446243][ T31] audit: type=1800 audit(1785924754.065:47): pid=8809 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.936" name="file1" dev="loop0" ino=1048619 res=0 errno=0 [ 249.529202][ T8820] smpboot: CPU 1 is now offline [ 249.718852][ T5760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 249.777612][ T802] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 249.822448][ T5760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 249.833491][ T5738] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.038082][ T9] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 250.367441][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 252.349525][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 18, changing to 8 [ 252.558185][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 16565, setting to 1024 [ 252.593024][ T8836] netlink: 80 bytes leftover after parsing attributes in process `syz.2.947'. [ 252.699284][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 252.846054][ T9] usb 6-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 252.937518][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.059087][ T9] usb 6-1: config 0 descriptor?? [ 253.107133][ T9] usb 6-1: can't set config #0, error -71 [ 253.186336][ T9] usb 6-1: USB disconnect, device number 9 [ 253.193372][ T8851] netlink: 28 bytes leftover after parsing attributes in process `syz.1.951'. [ 253.241306][ T31] audit: type=1800 audit(1785924757.855:48): pid=8853 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.953" name="ipv4_address" dev="configfs" ino=17177 res=0 errno=0 [ 253.334772][ T8851] netlink: 12 bytes leftover after parsing attributes in process `syz.1.951'. [ 253.430139][ T8851] netlink: 12 bytes leftover after parsing attributes in process `syz.1.951'. [ 253.439233][ T5738] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 253.474579][ T31] audit: type=1800 audit(1785924757.945:49): pid=8853 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.953" name="ipv4_port" dev="configfs" ino=17180 res=0 errno=0 [ 253.657650][ T5738] usb 3-1: Using ep0 maxpacket: 16 [ 253.694211][ T31] audit: type=1800 audit(1785924757.945:50): pid=8853 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.953" name="num" dev="configfs" ino=17185 res=0 errno=0 [ 253.722672][ T5738] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 18, changing to 8 [ 253.742016][ T8865] net_ratelimit: 12 callbacks suppressed [ 253.742030][ T8865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.804431][ T5738] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 16565, setting to 1024 [ 253.844465][ T31] audit: type=1800 audit(1785924757.975:51): pid=8853 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.953" name="local" dev="configfs" ino=17187 res=0 errno=0 [ 253.844510][ T31] audit: type=1800 audit(1785924757.975:52): pid=8853 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.953" name="block_bytes" dev="configfs" ino=17188 res=0 errno=0 [ 253.844549][ T31] audit: type=1800 audit(1785924757.985:53): pid=8853 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.953" name="blocks" dev="configfs" ino=17189 res=0 errno=0 [ 253.844586][ T31] audit: type=1800 audit(1785924757.985:54): pid=8853 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.953" name="start_block" dev="configfs" ino=17190 res=0 errno=0 [ 253.844624][ T31] audit: type=1800 audit(1785924758.075:55): pid=8858 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.953" name="dev" dev="configfs" ino=17197 res=0 errno=0 [ 253.876298][ T5738] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 253.876342][ T5738] usb 3-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 253.876363][ T5738] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.879976][ T8865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.888211][ T5738] usb 3-1: config 0 descriptor?? [ 253.903914][ T8865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.922751][ T5738] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input20 [ 253.927947][ T8862] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.939803][ T8862] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.992379][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.992487][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 253.992579][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 254.114611][ T9] usb 3-1: USB disconnect, device number 6 [ 254.302603][ T8876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 254.302749][ T8876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 254.326753][ T8877] jffs2: notice: (8877) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 255.007224][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.007296][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.149760][ T8891] loop0: detected capacity change from 0 to 128 [ 259.586464][ T5738] net_ratelimit: 21 callbacks suppressed [ 259.586481][ T5738] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 259.723453][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.002596][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.201360][ T802] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.250341][ T8907] loop2: detected capacity change from 0 to 1024 [ 260.302078][ T8907] EXT4-fs: Ignoring removed orlov option [ 260.501375][ T8907] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 260.593200][ T8915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.624030][ T5738] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.715885][ T8915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.760225][ T5738] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.811235][ T8915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.874446][ T5636] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.905964][ T8917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.703945][ T8940] loop0: detected capacity change from 0 to 32768 [ 262.165554][ T8953] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000016: 0000 [#1] SMP KASAN NOPTI [ 262.177642][ T8953] KASAN: null-ptr-deref in range [0x00000000000000b0-0x00000000000000b7] [ 262.186035][ T8953] CPU: 0 UID: 0 PID: 8953 Comm: syz.4.990 Not tainted syzkaller #0 PREEMPT(full) [ 262.195213][ T8953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 262.205274][ T8953] RIP: 0010:configfs_symlink+0x5fc/0x1030 [ 262.211009][ T8953] Code: 03 42 80 3c 20 00 74 08 48 89 df e8 0e db bd ff 41 bc b0 00 00 00 4c 03 23 4c 89 e0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 4c 89 e7 e8 e6 da bd ff 4d 8b 2c 24 4c 89 ef e8 [ 262.230597][ T8953] RSP: 0018:ffffc90005557c80 EFLAGS: 00010212 [ 262.236675][ T8953] RAX: 0000000000000016 RBX: ffff88802b54db48 RCX: dffffc0000000000 [ 262.244625][ T8953] RDX: 0000000000000000 RSI: ffffffff8c4bdd60 RDI: 00000000ffffffff [ 262.252576][ T8953] RBP: ffffc90005557d88 R08: ffffffff90579e37 R09: 1ffffffff20af3c6 [ 262.260529][ T8953] R10: dffffc0000000000 R11: fffffbfff20af3c7 R12: 00000000000000b0 [ 262.268478][ T8953] R13: 0000000000000000 R14: ffffffff8cb3bb48 R15: 1ffff92000aaafa0 [ 262.276430][ T8953] FS: 00007f60f06d26c0(0000) GS:ffff888124f4b000(0000) knlGS:0000000000000000 [ 262.285340][ T8953] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 262.291901][ T8953] CR2: 00007f60f06d1ff8 CR3: 00000000358e9000 CR4: 0000000000350ef0 [ 262.299888][ T8953] Call Trace: [ 262.303147][ T8953] [ 262.306062][ T8953] ? lookup_one_qstr_excl+0x1d4/0x360 [ 262.311428][ T8953] ? srso_alias_return_thunk+0x5/0xfbef5 [ 262.317046][ T8953] ? make_vfsuid+0x49/0xa0 [ 262.321451][ T8953] ? __pfx_configfs_symlink+0x10/0x10 [ 262.326809][ T8953] ? srso_alias_return_thunk+0x5/0xfbef5 [ 262.332429][ T8953] ? srso_alias_return_thunk+0x5/0xfbef5 [ 262.338048][ T8953] ? srso_alias_return_thunk+0x5/0xfbef5 [ 262.343668][ T8953] vfs_symlink+0x18b/0x330 [ 262.348074][ T8953] ? security_path_symlink+0xfd/0x360 [ 262.353433][ T8953] filename_symlinkat+0x1cd/0x410 [ 262.358448][ T8953] ? __pfx_filename_symlinkat+0x10/0x10 [ 262.363980][ T8953] ? srso_alias_return_thunk+0x5/0xfbef5 [ 262.369596][ T8953] ? do_getname+0x151/0x250 [ 262.374086][ T8953] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.380134][ T8953] __se_sys_symlinkat+0x4e/0x2b0 [ 262.385058][ T8953] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.391105][ T8953] do_syscall_64+0x174/0x580 [ 262.395683][ T8953] ? trace_irq_disable+0x3b/0x140 [ 262.400698][ T8953] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.406573][ T8953] RIP: 0033:0x7f60ef79e0d9 [ 262.410971][ T8953] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 262.430589][ T8953] RSP: 002b:00007f60f06d2028 EFLAGS: 00000246 ORIG_RAX: 000000000000010a [ 262.438985][ T8953] RAX: ffffffffffffffda RBX: 00007f60efa26090 RCX: 00007f60ef79e0d9 [ 262.446967][ T8953] RDX: 0000200000000f00 RSI: ffffffffffffff9c RDI: 0000200000000e00 [ 262.454945][ T8953] RBP: 00007f60ef835024 R08: 0000000000000000 R09: 0000000000000000 [ 262.462903][ T8953] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 262.470894][ T8953] R13: 00007f60efa26128 R14: 00007f60efa26090 R15: 00007ffde1f1de48 [ 262.478857][ T8953] [ 262.481860][ T8953] Modules linked in: [ 262.487385][ T8953] ---[ end trace 0000000000000000 ]--- [ 262.518604][ T8954] jffs2: notice: (8954) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 262.625167][ T8940] device-mapper: table: 248:0: thi: unknown target type [ 262.646972][ T8940] device-mapper: ioctl: error adding target to table [ 262.788783][ T8949] loop3: detected capacity change from 0 to 32768 [ 262.880750][ T8949] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 262.929514][ T8949] JBD2: Ignoring recovery information on journal [ 262.984697][ T8949] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 263.027216][ T5627] ocfs2: Unmounting device (7,3) on (node local) [ 263.080833][ T8953] RIP: 0010:configfs_symlink+0x5fc/0x1030 [ 263.093338][ T8953] Code: 03 42 80 3c 20 00 74 08 48 89 df e8 0e db bd ff 41 bc b0 00 00 00 4c 03 23 4c 89 e0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 4c 89 e7 e8 e6 da bd ff 4d 8b 2c 24 4c 89 ef e8 [ 263.137600][ T8953] RSP: 0018:ffffc90005557c80 EFLAGS: 00010212 [ 263.150322][ T8953] RAX: 0000000000000016 RBX: ffff88802b54db48 RCX: dffffc0000000000 [ 263.168805][ T8953] RDX: 0000000000000000 RSI: ffffffff8c4bdd60 RDI: 00000000ffffffff [ 263.185612][ T8953] RBP: ffffc90005557d88 R08: ffffffff90579e37 R09: 1ffffffff20af3c6 [ 263.204062][ T8953] R10: dffffc0000000000 R11: fffffbfff20af3c7 R12: 00000000000000b0 [ 263.219513][ T8953] R13: 0000000000000000 R14: ffffffff8cb3bb48 R15: 1ffff92000aaafa0 [ 263.228178][ T8953] FS: 00007f60f06d26c0(0000) GS:ffff888124f4b000(0000) knlGS:0000000000000000 [ 263.237239][ T8953] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 263.248938][ T8953] CR2: 00007fa5cb9ef2f8 CR3: 00000000358e9000 CR4: 0000000000350ef0 [ 263.257087][ T8953] Kernel panic - not syncing: Fatal exception [ 263.263205][ T8953] Kernel Offset: disabled [ 263.267510][ T8953] Rebooting in 86400 seconds..