last executing test programs: 5m24.277357785s ago: executing program 0 (id=18451): r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000cc0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_bnep_BNEPCONNADD(r0, 0x400442c8, &(0x7f0000000d00)={r1, 0x101, 0x10}) 5m24.063484858s ago: executing program 0 (id=18453): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}}, 0x0) 5m23.876102714s ago: executing program 0 (id=18456): syz_mount_image$hfs(&(0x7f0000000180), &(0x7f00000000c0)='./file1\x00', 0x1000812, &(0x7f0000001800)=ANY=[@ANYBLOB="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"/396, @ANYRESOCT, @ANYRES8=0x0, @ANYBLOB="eb4df9aa36400f1596263ee4e2ba950c3777a4ec31bc2dc78cd48b646ae82f0508a43d2064587fb0b58769e71fc7b7c8e93fa8ec644b9889e92afb0c6a178d5f85790c4047947250a43c67c7b897debc120c19d2b9c218c8a1205fae81bb140f9e9a69c60fd20d07ac3643e470a4bbe559f8b777749dd02b1336813ff11343d09bebc37a1ed9bb9ced4e3264a2ead14b4350c271", @ANYRESHEX=0x0, @ANYBLOB="0affd5ece651e2a4648f9b279d8dc44bc4bd6acc0aa01a3ab56e469d3c338a26ff996b57afbe65c4eb94f6fd4cfbda2af6c85c6e135955ca0640546a2aac7bb02432e45e6d333181ee921f9f26a8ef000000000800000000000000000000000000000000000000000000000000004de9f91aeab66cc8b2197d3c00068324c7b7bd"], 0x1, 0x305, &(0x7f0000000340)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 5m23.443893514s ago: executing program 0 (id=18461): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@noauto_da_alloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@dioread_lock}, {@norecovery}, {@discard}, {@lazytime}, {@noload}, {@usrquota}, {@noauto_da_alloc}]}, 0xfe, 0x54d, &(0x7f0000000400)="$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") mkdir(&(0x7f0000000640)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@userxattr}]}) 5m23.235368857s ago: executing program 0 (id=18463): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1018e58, &(0x7f00000005c0)={[{@barrier}, {@noblock_validity}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@nodiscard}, {@stripe={'stripe', 0x3d, 0x4}}, {@noauto_da_alloc}]}, 0x6, 0x61f, &(0x7f0000000b00)="$eJzs3c9rXNUeAPDvncmkSZv30j4ej9fyHi/wFi1I00wtVt3Y1oVdFCzYhYiLhiapodMfNCmYWGgKLhQURNyKdOM/4F66dyeCunMtVJGKikpH7syddDKZSdIkM9Pmfj5wM/ece2fO+c6dM/fce3PmBpBbY+mfQsT+iAfnk4jRpmUjUV84lq13/6ebF9IpiWr1lR+TSLK8xvpJ9rgnSwxFxJenIv5RXF3u3MLipclKte5WxJH5y9eOzC0sHp69PHlx+uL0lfLRZ48dn3iufKy8LXHuyR5Pn3n5P++//cYzM19VDidxIs6V3pqKlji2y1iMxYMsxOb8gYg4ns60eV+eNDsghFwrZp/HUkT8K0ajWEvVjcbse32tHNBV1WJEFcipRPuHnGr0AxrH9hs7Dj7X5V5J79w7WT8AWh3/QP3cSAzVjo1230+ajowGauc29m5D+WkZf9488HE6xYrzEL8ub52BbSink6XbEfHvdvEntbrtrUWaxl9YUY8kIiYiYjCr34tbqEPSNN+N8zBr2Wz8hYg4kT2m+ac2Wf5YS7rX8QOQT3dPZjvypTT1cP+X9j0a/Z9Y1f+pXxtq3XdtRr/3f537f439/VDtHHmhpR+W9lnOtn/JUmvGd++e/rBT+c39v3RKy2/0BXvh3u2IAy3xv5MGm/V/0viTNts/XeX8iY2V8dLXP5zutKzf8VfvRBxse/zzsFeazrVenxzOlpWPlY/MzFamJ+p/25bx+Revf9qp/H7Hn27/3R3ib9r+hdbnpe/JtQ2W8dnZO5c7LRtZN/7C94NJ/XhzMMt5c3J+/no5YjA5k61Sv5BVyz+6dl0a6zReI43/0P/bt/8Vn//bK19nuPGVuQHXXr10v9OyzWz/povJD6obrEMnafxT62//Ve0/zftgOXVrzTJ+ee3GfzstWyv+4S3GBgAAAAAAAHlTqF2DTQrjy/OFwvh4fbzsP2N3oXJ1bv6pmas3rkxFHKr9P2Sp0LjSPVpPJ2m6nP0/bCN9tCX9dETsi4iPisO19PiFq5WpfgcPAAAAAAAAAAAAAAAAAAAAj4k92fj/xn2qfy7Wx/8DOdHNG8wBjzftH/Kr1v5X3eIJyAP7f8gv7R/yS/uH/NL+Ib+0f8gv7R/yS/uH/NL+AQAAAGBH2ve/u98mEbH0/HBtSg1my4wIgp2t1O8KAH1T7HcFgL5ZvvSvsw+5s6H+/+/ZjwN2vzpAHyTtMmudg+rajf9u22cCAAAAAAAAAAAAAF1wcH/78f+JscGw4xn2B/m1hfH/fjoAnnB++h/yyzE+sN4o/qFOC4z/BwAAAAAAAAAAAICeGalNSWE8Gws8EoXC+HjE3yJib5SSmdnK9ERE/D0ivimWdqXpcr8rDQAAAAAAAAAAAAAAAAAAADvM3MLipclKZfp688wfq3J29kzjLqg9KOuFeMRnRdL7t2U4IpZzShGPWufuzezKPrZbeZ2BuYXF5LdqTRKxFI9PgFuKa5tn1v3qGOzqFxMAAAAAAAAAAAAAAAAAAORQ09jj9g580uMaAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDvPbz/f/dm+h0jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBk+isAAP//GjM9YA==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x80000, 0x0) fsync(r0) 5m22.208139349s ago: executing program 0 (id=18474): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="c4000000190001000000000000000000ff0200000000000000000000000000010000000000000000000000000000000080000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="002bb7000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000010000000000000000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000a00100001"], 0xc4}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0xa00, &(0x7f0000000080)={&(0x7f0000000040)=@flushpolicy={0x1c, 0x1d, 0x1, 0x0, 0x0, "", [@policy_type={0xa, 0x10, {0x1}}]}, 0x1c}}, 0x0) 5m21.684097569s ago: executing program 32 (id=18474): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="c4000000190001000000000000000000ff0200000000000000000000000000010000000000000000000000000000000080000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="002bb7000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000010000000000000000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000a00100001"], 0xc4}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0xa00, &(0x7f0000000080)={&(0x7f0000000040)=@flushpolicy={0x1c, 0x1d, 0x1, 0x0, 0x0, "", [@policy_type={0xa, 0x10, {0x1}}]}, 0x1c}}, 0x0) 4m9.003160722s ago: executing program 5 (id=19458): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x20000) ioctl$SG_BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000340)={'\x00', 0x1ff, 0x3, 0x80, 0x100, 0x100000001}) ioctl$SG_BLKTRACESTART(r0, 0x1274, 0x0) 4m8.69203014s ago: executing program 5 (id=19465): connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4006, &(0x7f0000000c00)=0xc, 0x6, 0x2) 4m8.347250784s ago: executing program 5 (id=19473): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x4, 0x8}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0c00000004000000040000000900000000000000", @ANYRES32=r0], 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000001f00)={0x0, 0x0, 0x0, 0x0, 0x1, r1, 0x4}, 0x38) 4m8.122001522s ago: executing program 5 (id=19488): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) readv(r0, &(0x7f0000000140)=[{0x0, 0x2f}, {&(0x7f0000000940)=""/101, 0x65}], 0x2) write$evdev(r0, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) 4m7.837875373s ago: executing program 5 (id=19479): syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x1080c, &(0x7f0000000180)=ANY=[], 0x3, 0xa53, &(0x7f0000000bc0)="$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") r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) 4m7.474385523s ago: executing program 5 (id=19482): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x14, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xb}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc) 3m51.276149442s ago: executing program 33 (id=19482): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x14, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xb}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc) 1m59.156124988s ago: executing program 3 (id=20929): capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e2, 0x0) 1m59.039169129s ago: executing program 3 (id=20930): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000200)='./file1\x00', 0x2800088, &(0x7f0000000240)=ANY=[@ANYBLOB='shortname=lower,shortname=win95,rodir,iocharset=default,uni_xlate=0,nonumtail=1,utf8=0,flush,rodir,shortname=win95,shortname=winnt,shortname=win95,showexec,uni_xlate=0,utf8=0,utf8=0,uni_xlate=0,shortname=mixed,\x00'], 0x93, 0x2d2, &(0x7f0000000680)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x12800, 0x120) getdents(r0, &(0x7f0000002440)=""/4074, 0xfea) 1m58.763915386s ago: executing program 3 (id=20935): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000540)={{0xb, 0x6, 0x0, 0x2, 'syz0\x00', 0x281d}, 0x0, [0x1, 0x4ea3, 0x9, 0x56cd, 0x7, 0x6, 0x0, 0x80000001, 0x201, 0x1, 0x3fb, 0x1, 0x9, 0x7, 0x4, 0x10000, 0x43, 0x81, 0x80, 0xe8de, 0xfffffffffffffff9, 0x9, 0x201, 0x9, 0x1, 0x8, 0x1, 0x4, 0x0, 0x8000, 0x8, 0xa36, 0x57bf4b04, 0x4, 0x40000000000001, 0x6, 0x8, 0x100000000, 0x8, 0x7ff, 0x6, 0x401, 0x5, 0x8, 0x1ff, 0x10000, 0x2, 0xb7, 0x0, 0x5, 0xbe5, 0xa0000000000, 0x0, 0x1, 0x8, 0x8000000000000003, 0xd3d, 0xbbeb, 0x1, 0x6, 0x4, 0x6, 0x8001, 0x3, 0x1, 0xec7, 0x646, 0xc58e, 0x5, 0x11ad, 0x5, 0x6, 0x8000, 0x100080, 0x7f, 0x9, 0x1, 0x5, 0x8000000000000000, 0x2, 0x7, 0xa5, 0x1b13, 0x4, 0x85, 0x8, 0x3, 0xf75, 0x9, 0xb, 0xffffffffffff66e3, 0xfffffffffffffff9, 0x851a, 0x5e997b8e, 0x0, 0x7, 0x6, 0x4, 0x100, 0x1000000004, 0x3ff, 0x6, 0x0, 0xffffffffffffff95, 0xa, 0x108000001, 0xcc7e, 0x8, 0x0, 0x6, 0x800000000006, 0xfffffffffffffd96, 0x3f3, 0x1, 0x4, 0x0, 0x7, 0x5, 0x6, 0x1, 0xe1, 0xec2, 0x1, 0x5, 0xfff, 0x0, 0x80]}) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000004000000000000000000000000f083f6d3fdd7809efe8000000000000000000000000000bb000000000000000002"], 0xfc}}, 0x0) 1m58.396025748s ago: executing program 3 (id=20941): symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mount$9p_unix(&(0x7f00000000c0)='./file0/file0/..\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x12d7498, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x0) 1m58.133731716s ago: executing program 3 (id=20946): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1, 0x2000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000725e850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r1, r0}, 0xc) 1m57.523701868s ago: executing program 3 (id=20953): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x88ce359bdb00143c, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) 1m57.039177603s ago: executing program 34 (id=20953): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x88ce359bdb00143c, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) 3.171237262s ago: executing program 1 (id=22085): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000340)={[{@test_dummy_encryption}, {@nodioread_nolock}, {@norecovery}]}, 0x3, 0x470, &(0x7f0000000dc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, 0x0) 2.523296248s ago: executing program 8 (id=22092): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r0, 0x3b87, &(0x7f0000000080)={0x18, 0x1, 0x0, 0x0, r1, 0x1}) 2.508221017s ago: executing program 4 (id=22093): syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00') r0 = syz_open_dev$video(&(0x7f0000000000), 0x8, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0x980000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x98f90b, 0x9, '\x00', @p_u16=&(0x7f0000000040)}}) 2.292835878s ago: executing program 1 (id=22095): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), r0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d300000000000000800200000000000080012000307ff0008001100ff070000080010000000020008000f"], 0x54}}, 0x0) 2.212017628s ago: executing program 6 (id=22096): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000b00), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002400)={&(0x7f0000002440)={0x44, r1, 0x1, 0x70bd29, 0x2, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x14, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}, {0xfffffffffffffccc}]}]}]}, 0x44}}, 0x40) 2.154109411s ago: executing program 4 (id=22098): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002880), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002800), &(0x7f0000002840)='./file0\x00', 0x4002, &(0x7f00000006c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}}, 0x1, 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x86, &(0x7f0000000340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x1, 0x0, 0x0) 2.145833171s ago: executing program 8 (id=22099): r0 = socket$netlink(0x10, 0x3, 0x15) writev(r0, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) close(0x3) 1.955826824s ago: executing program 6 (id=22101): socketpair$unix(0x1, 0x2, 0x0, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x9}) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x6000, 0x0) 1.910730572s ago: executing program 1 (id=22102): setns(0xc9, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000000210"], 0x18}}, 0x0) 1.882564579s ago: executing program 8 (id=22103): syz_mount_image$hfs(&(0x7f0000000280), &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1210080, &(0x7f0000000100)={[{@uid={'uid', 0x3d, 0xee01}}, {@codepage={'codepage', 0x3d, 'macromanian'}}, {@gid}, {@dir_umask={'dir_umask', 0x3d, 0x4}}, {@iocharset={'iocharset', 0x3d, 'cp936'}}, {@umask}, {@gid}]}, 0x41, 0x333, &(0x7f0000000500)="$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") r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x50009404, &(0x7f00000004c0)={0x0, 0x0, 0x3a}) 1.801626592s ago: executing program 4 (id=22104): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fcntl$lock(r0, 0x25, &(0x7f0000000000)={0x0, 0x2, 0x22e7}) fcntl$lock(r0, 0x24, &(0x7f0000000180)={0x1, 0x2, 0x40005, 0x73e7}) 1.760691708s ago: executing program 2 (id=22105): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000002080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) connect$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x83, @none}, 0xe) 1.66450827s ago: executing program 7 (id=22106): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r2, 0x2, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0xffffffffffffffff}]) 1.65731033s ago: executing program 6 (id=22107): r0 = syz_open_procfs(0x0, &(0x7f0000000480)='ns\x00') getdents64(r0, &(0x7f0000001f40)=""/4123, 0x101b) getdents64(r0, 0x0, 0x0) 1.467721719s ago: executing program 1 (id=22108): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r0) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x20, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x4, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x24008044}, 0x0) 1.397352351s ago: executing program 2 (id=22109): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x1, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000003c0)={'pcl812\x00', [0x140, 0x2, 0x3, 0x2, 0x3, 0x10000, 0x7fff, 0x6, 0x1007, 0xc72d, 0x4, 0xf, 0x2009, 0x8, 0x4ce, 0x9e9b, 0x101, 0xed, 0x6, 0x2000007, 0x4, 0x0, 0xa, 0x9, 0xffd, 0x200000, 0xaf, 0x0, 0x9, 0x10000, 0x4]}) 1.393763901s ago: executing program 4 (id=22110): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=@bridge_newneigh={0x28, 0x1c, 0x401, 0x70bd2b, 0x25dfdbff, {0x7, 0x0, 0x0, r1, 0x80, 0x1e6, 0x5}, [@NDA_LLADDR={0xa, 0x2, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x40408d0) 1.344372029s ago: executing program 6 (id=22111): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="5400000013000500020000000000000007000000", @ANYRES32=r1, @ANYBLOB="000000000000000034001a80300004802c000680080001000100000008000200e8030000080003000300000008000400a0860100080005"], 0x54}}, 0x0) 1.343630208s ago: executing program 8 (id=22112): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000100)={0x28, 0x0, 0x0, @host}, 0x10) listen(r0, 0x0) 1.253656129s ago: executing program 7 (id=22113): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) sendmmsg$inet6(r0, &(0x7f0000004400)=[{{&(0x7f0000002080)={0xa, 0x4e1f, 0x2, @rand_addr=' \x01\x00', 0xd1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000100)="d5", 0x1}], 0x1}}], 0x1, 0x20002845) 1.186236957s ago: executing program 1 (id=22114): mkdir(&(0x7f0000000300)='./file0\x00', 0xffffffffffffffef) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000002a40)='hugetlbfs\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x20029, &(0x7f0000000080)=ANY=[@ANYBLOB="6e725f696e6f6465733d01"]) 1.155754591s ago: executing program 4 (id=22115): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) r0 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r0, 0x84, 0x25, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) 1.061597129s ago: executing program 2 (id=22116): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000b40)={0x54, 0x2004, 0x2, {0x4, 0x1}, {0x60, 0x2}, @const={0x7, {0xfff8, 0x3, 0xe73f, 0x400}}}) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) 1.060781347s ago: executing program 8 (id=22117): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000640)=[@rdma_dest={0x18, 0x114, 0x2, {0x6, 0x6}}, @mask_fadd={0x58, 0x114, 0x8, {{0x5, 0x5}, 0x0, 0x0, 0x4, 0x80, 0x2, 0x0, 0x11, 0x5}}], 0x70}, 0x0) 976.081116ms ago: executing program 6 (id=22118): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)={0x44, r1, 0x1, 0x4, 0x1, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40c1}, 0x800) 961.155627ms ago: executing program 7 (id=22119): syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB="e706f2ff011f391e7dd7a2d786dd609907a600302c03cb697a653e336f000000500000000000ff02000000000000000000000000000102009078"], 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x80000000, 0x3, 0x3ff, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, 0x2, 0x0, 0x0, 0x0, 0xf5b1, 0xffffffff, 0x10000000, 0x99, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x2, 0x1], [0x3, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0xedc0, 0x0, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fc, 0x2, 0x5, 0x2000079, 0x400, 0x0, 0x0, 0x10000, 0x40000, 0x0, 0xc0800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4771], [0xc35, 0x7f, 0x0, 0x0, 0x3, 0xfffffffd, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0xefffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4], [0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x2, 0x0, 0x0, 0x3, 0xfffffffc, 0x4, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffc01, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x5, 0xfffffffd, 0xfffffffe, 0x0, 0x100000, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0x0, 0x2, 0x0, 0xffffe]}, 0x45c) syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB="e706f2ffff1f391e7dd7a2d786dd609907a600302c03cb697a653e336f000000500000000000ff020000000000000000000000000001020090"], 0x0) 899.385064ms ago: executing program 4 (id=22120): syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000200)={[{@grpjquota}, {@i_version}, {@discard}, {@noload}, {@resuid}]}, 0x3, 0x4fe, &(0x7f0000000dc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) 816.768761ms ago: executing program 1 (id=22121): syz_mount_image$f2fs(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x1, 0x5531, &(0x7f0000000b00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x129042, 0x15) pwrite64(r0, &(0x7f0000000200)='\x00', 0x1, 0x2e7a) 732.06346ms ago: executing program 2 (id=22122): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000000)=0x40000001, 0x4) sendmmsg$inet6(r0, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0) 714.907205ms ago: executing program 6 (id=22123): syz_mount_image$btrfs(&(0x7f0000000200), &(0x7f0000005600)='./file0\x00', 0x800, &(0x7f0000000240), 0x0, 0x559e, &(0x7f0000005680)="$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") chdir(&(0x7f0000000000)='./file0\x00') link(&(0x7f0000000400)='./file1\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 703.619597ms ago: executing program 8 (id=22124): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/249, 0x101d0}], 0x1}, 0x40000000) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0x0) 699.061659ms ago: executing program 7 (id=22125): r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) ftruncate(r0, 0x6000000) copy_file_range(r0, 0x0, r0, 0x0, 0x9, 0x0) 319.060479ms ago: executing program 7 (id=22126): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), r0) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000004c0)={0x44, r1, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macsec0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x400c085}, 0x0) 317.86563ms ago: executing program 2 (id=22138): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2818082, &(0x7f0000000500)={[{@utf8}, {@utf8}, {@shortname_winnt}, {@utf8no}, {@fat=@codepage={'codepage', 0x3d, '1251'}}, {@shortname_winnt}, {@fat=@debug}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'cp869'}}, {@uni_xlate}, {@shortname_win95}, {@uni_xlateno}, {@shortname_winnt}, {@shortname_winnt}]}, 0x7f, 0x2bd, &(0x7f0000000240)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 133.721393ms ago: executing program 2 (id=22127): syz_mount_image$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x50, 0x0, 0x1, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000480)='./file0/../file0\x00', &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f0000000a40)={{}, {0x1, 0x1}, [], {0x4, 0x4}, [], {}, {0x20, 0x3}}, 0x24, 0x0) llistxattr(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000140)=""/23, 0x17) 0s ago: executing program 7 (id=22128): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82803, 0x8e) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e040a0404"], 0x7) listen(0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): ontrol_msg() failed=-71 [ 1661.009671][ T6007] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1661.021654][ T6007] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1661.039019][T18556] fido_id[18556]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1661.155501][ T6007] usb 2-1: USB disconnect, device number 125 [ 1661.373370][T18571] vlan2: entered promiscuous mode [ 1661.378611][T18571] bridge0: entered promiscuous mode [ 1661.863761][T18591] vlan2: entered allmulticast mode [ 1661.870880][T18591] macsec0: entered allmulticast mode [ 1662.090438][T23503] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1662.274462][T23503] usb 4-1: Using ep0 maxpacket: 16 [ 1662.298792][T23503] usb 4-1: New USB device found, idVendor=046d, idProduct=c227, bcdDevice= 0.00 [ 1662.326198][T23503] usb 4-1: too many endpoints for config 0 interface 0 altsetting 16: 254, using maximum allowed: 30 [ 1662.351827][T23503] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 1662.383826][T23503] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1662.398981][T23503] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1662.428614][T23503] usb 4-1: config 0 descriptor?? [ 1662.583899][T18606] loop7: detected capacity change from 0 to 512 [ 1662.644662][T18606] EXT4-fs error (device loop7): ext4_orphan_get:1425: comm syz.7.20817: bad orphan inode 17 [ 1662.703248][T18606] loop7: lost filesystem error report for type 5 error -117 [ 1662.703586][T18606] ext4_test_bit(bit=16, block=4) = 1 [ 1662.711005][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 1662.711038][ C0] EXT4-fs (loop7): initial error at time 1584: ext4_orphan_get:1425 [ 1662.711080][ C0] EXT4-fs (loop7): last error at time 1584: ext4_orphan_get:1425 [ 1662.837758][T18606] is_bad_inode(inode)=0 [ 1662.851975][T18606] NEXT_ORPHAN(inode)=0 [ 1662.866823][T18606] max_ino=32 [ 1662.875927][T18606] i_nlink=1 [ 1662.885456][T18606] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1662.910328][T23503] lg-g15 0003:046D:C227.0029: ignoring exceeding usage max [ 1662.942749][T23503] lg-g15 0003:046D:C227.0029: hidraw0: USB HID v0.01 Device [HID 046d:c227] on usb-dummy_hcd.3-1/input0 [ 1662.951086][T18606] EXT4-fs warning (device loop7): ext4_resize_begin:71: won't resize using backup superblock at 1 [ 1663.050083][T15884] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1663.225610][T23530] usb 4-1: USB disconnect, device number 16 [ 1663.276432][T23528] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 1663.436198][T23528] usb 5-1: Using ep0 maxpacket: 32 [ 1663.445293][T23528] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 1663.461831][T23528] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1663.472877][T23528] usb 5-1: config 0 has no interface number 0 [ 1663.484284][T23528] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1663.493032][T23528] usb 5-1: Product: syz [ 1663.497230][T23528] usb 5-1: Manufacturer: syz [ 1663.502460][T23528] usb 5-1: SerialNumber: syz [ 1663.511752][T23528] usb 5-1: config 0 descriptor?? [ 1663.533404][T23528] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1663.546034][T23528] usb 5-1: selecting invalid altsetting 1 [ 1663.552263][T23528] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1663.568403][T23528] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1663.581585][T23528] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1663.591416][T23528] usb 5-1: media controller created [ 1663.598138][T23503] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 1663.613754][T23528] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1663.780681][T23503] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1663.811981][T23503] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1663.826892][T23503] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1663.846824][T23503] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1663.894352][T23503] usb 3-1: config 0 descriptor?? [ 1663.919714][T23503] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1663.954333][T23503] dvb-usb: bulk message failed: -22 (3/0) [ 1663.987423][T23503] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1664.008590][T23503] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1664.033712][T23503] usb 3-1: media controller created [ 1664.060924][T23503] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1664.101212][T23503] dvb-usb: bulk message failed: -22 (6/0) [ 1664.129159][T23503] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1664.143226][T18640] macvlan2: entered allmulticast mode [ 1664.148723][T18640] bridge0: entered allmulticast mode [ 1664.155397][T18640] bridge0: entered promiscuous mode [ 1664.157143][T23503] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input152 [ 1664.180153][T18640] bridge0: port 3(macvlan2) entered blocking state [ 1664.200173][T18640] bridge0: port 3(macvlan2) entered disabled state [ 1664.209136][T18642] netlink: 4 bytes leftover after parsing attributes in process `syz.3.20833'. [ 1664.220396][T23503] dvb-usb: schedule remote query interval to 150 msecs. [ 1664.228838][T23503] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1664.231420][T18640] bridge0: left allmulticast mode [ 1664.237141][T18642] netlink: 4 bytes leftover after parsing attributes in process `syz.3.20833'. [ 1664.323327][T16044] usb 2-1: new full-speed USB device number 126 using dummy_hcd [ 1664.336747][T23530] bridge0: left promiscuous mode [ 1664.402336][T23503] dvb-usb: bulk message failed: -22 (1/0) [ 1664.410850][T23503] dvb-usb: error while querying for an remote control event. [ 1664.494737][T16044] usb 2-1: New USB device found, idVendor=054c, idProduct=0374, bcdDevice= 0.00 [ 1664.505934][T16044] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1664.517560][T16044] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1664.541352][T16044] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1664.551980][T16044] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1664.574810][T16044] usb 2-1: config 0 descriptor?? [ 1664.585835][T18639] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 1664.602453][T23503] dvb-usb: bulk message failed: -22 (1/0) [ 1664.655101][T23503] dvb-usb: error while querying for an remote control event. [ 1664.776572][T18650] netlink: 'syz.7.20837': attribute type 39 has an invalid length. [ 1664.793727][T23528] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 1664.806302][T23528] zl10353_read_register: readreg error (reg=127, ret==-110) [ 1664.825757][T18618] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 1664.840863][T18622] usb 5-1: dvb_usb_ce6230: I2C read not implemented [ 1664.901190][ T6007] dvb-usb: bulk message failed: -22 (1/0) [ 1664.917154][ T6007] dvb-usb: error while querying for an remote control event. [ 1664.967873][T13055] usb 3-1: USB disconnect, device number 18 [ 1664.987627][T23528] usb 5-1: USB disconnect, device number 8 [ 1665.070401][T16044] sony 0003:054C:0374.002A: item fetching failed at offset 5/7 [ 1665.108602][T16044] sony 0003:054C:0374.002A: parse failed [ 1665.123712][T16044] sony 0003:054C:0374.002A: probe with driver sony failed with error -22 [ 1665.133305][T13055] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1665.334155][T23528] usb 2-1: USB disconnect, device number 126 [ 1665.839899][T18674] tipc: Enabling of bearer rejected, failed to enable media [ 1666.370420][T18691] netlink: 8 bytes leftover after parsing attributes in process `syz.3.20857'. [ 1666.407979][T18691] netlink: 4 bytes leftover after parsing attributes in process `syz.3.20857'. [ 1666.429884][T18691] netlink: 'syz.3.20857': attribute type 12 has an invalid length. [ 1666.482296][T18699] macvlan1: entered allmulticast mode [ 1666.495219][T18699] bridge0: entered allmulticast mode [ 1666.509944][T18699] bridge0: port 2(macvlan1) entered blocking state [ 1666.525591][T18699] bridge0: port 2(macvlan1) entered disabled state [ 1666.548784][T18699] bridge0: left allmulticast mode [ 1666.745780][T18705] loop7: detected capacity change from 0 to 128 [ 1666.818973][T18705] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1667.076579][T15884] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1667.292239][T18728] loop7: detected capacity change from 0 to 1764 [ 1667.405754][T18728] iso9660: Corrupted directory entry in block 14 of inode 1920 [ 1667.539723][T23528] usb 2-1: new full-speed USB device number 127 using dummy_hcd [ 1667.722193][T23528] usb 2-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 1667.748257][T23528] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1667.776168][T23528] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1667.810050][T23528] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1667.837645][T23528] usb 2-1: config 0 descriptor?? [ 1667.865364][T18749] xt_l2tp: v2 sid > 0xffff: 1114112 [ 1667.926643][T23533] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 1668.097357][T23533] usb 5-1: Using ep0 maxpacket: 32 [ 1668.112204][T23533] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2c24, bcdDevice= 0.00 [ 1668.134529][T23533] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1668.161181][T23533] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1668.185565][T23533] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 1668.199172][T23533] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1668.214744][T23533] usb 5-1: config 0 descriptor?? [ 1668.298548][T23528] hid_parser_main: 39 callbacks suppressed [ 1668.298671][T23528] isku 0003:1E7D:319C.002B: unknown main item tag 0x0 [ 1668.315828][T23528] isku 0003:1E7D:319C.002B: unknown main item tag 0x0 [ 1668.333496][T23528] isku 0003:1E7D:319C.002B: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.1-1/input0 [ 1668.511257][T23528] isku 0003:1E7D:319C.002B: couldn't init struct isku_device [ 1668.525307][T23528] isku 0003:1E7D:319C.002B: couldn't install keyboard [ 1668.549463][T23528] isku 0003:1E7D:319C.002B: probe with driver isku failed with error -71 [ 1668.564793][T23528] usb 2-1: USB disconnect, device number 127 [ 1668.681575][T23533] pyra 0003:1E7D:2C24.002C: hidraw0: USB HID v0.00 Device [HID 1e7d:2c24] on usb-dummy_hcd.4-1/input0 [ 1668.926097][T23528] usb 5-1: USB disconnect, device number 9 [ 1669.451661][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 1669.451687][ T30] audit: type=1326 audit(1590.401:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18799 comm="syz.2.20907" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe408d9e0d9 code=0x7ffc0000 [ 1669.491617][ T30] audit: type=1326 audit(1590.401:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18799 comm="syz.2.20907" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe408d9e0d9 code=0x7ffc0000 [ 1669.518982][ T30] audit: type=1326 audit(1590.448:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18799 comm="syz.2.20907" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe408d9e0d9 code=0x7ffc0000 [ 1669.544913][ T30] audit: type=1326 audit(1590.448:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18799 comm="syz.2.20907" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe408d9e0d9 code=0x7ffc0000 [ 1669.654758][ T30] audit: type=1326 audit(1590.448:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18799 comm="syz.2.20907" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=326 compat=0 ip=0x7fe408d9e0d9 code=0x7ffc0000 [ 1669.732399][ T30] audit: type=1326 audit(1590.448:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18799 comm="syz.2.20907" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe408d9e0d9 code=0x7ffc0000 [ 1669.847691][ T30] audit: type=1326 audit(1590.448:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18799 comm="syz.2.20907" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe408d9e0d9 code=0x7ffc0000 [ 1669.943705][ T30] audit: type=1326 audit(1590.448:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18799 comm="syz.2.20907" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fe408d9e0d9 code=0x7ffc0000 [ 1670.014074][ T30] audit: type=1326 audit(1590.448:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18799 comm="syz.2.20907" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fe408d9e0d9 code=0x7ffc0000 [ 1670.055851][T23528] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1670.222867][T23528] usb 3-1: Using ep0 maxpacket: 32 [ 1670.247260][T23528] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 1670.289419][T23528] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1670.314771][T23528] usb 3-1: config 0 has no interface number 0 [ 1670.338385][T23528] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1670.361768][T23528] usb 3-1: Product: syz [ 1670.366133][T23528] usb 3-1: Manufacturer: syz [ 1670.370774][T23528] usb 3-1: SerialNumber: syz [ 1670.380958][T18828] loop7: detected capacity change from 0 to 2048 [ 1670.384343][T23528] usb 3-1: config 0 descriptor?? [ 1670.407078][T23528] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1670.437389][T18828] UDF-fs: error (device loop7): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1670.440332][T23528] usb 3-1: selecting invalid altsetting 1 [ 1670.471413][T23528] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1670.490429][T23528] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1670.498546][T18828] UDF-fs: error (device loop7): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 1670.530318][T23528] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1670.554042][T23528] usb 3-1: media controller created [ 1670.573889][T18828] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1670.625465][T23528] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1671.200325][T18854] netlink: 60 bytes leftover after parsing attributes in process `syz.3.20935'. [ 1671.361072][T18858] loop6: detected capacity change from 0 to 1024 [ 1671.413884][T18862] netlink: 'syz.4.20939': attribute type 1 has an invalid length. [ 1671.450768][T18862] netlink: 212 bytes leftover after parsing attributes in process `syz.4.20939'. [ 1671.726408][T18810] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 1671.783767][T23528] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1671.812317][T23528] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1671.852466][T23528] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1671.991105][T23528] usb 3-1: USB disconnect, device number 19 [ 1672.039466][T23533] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 1672.091189][ T5764] bond0: (slave syz_tun): Releasing backup interface [ 1672.143005][ T5764] syz_tun (unregistering): left allmulticast mode [ 1672.259165][T23533] usb 2-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 1672.319509][T23533] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1672.345424][T23533] usb 2-1: Product: syz [ 1672.364841][T23533] usb 2-1: Manufacturer: syz [ 1672.383236][T23533] usb 2-1: SerialNumber: syz [ 1672.414496][T23533] usb 2-1: config 0 descriptor?? [ 1672.420191][T18886] netlink: 8 bytes leftover after parsing attributes in process `syz.6.20949'. [ 1672.444765][T18886] netlink: 'syz.6.20949': attribute type 1 has an invalid length. [ 1672.463610][T23533] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 1672.475595][T18886] nbd: error processing sock list [ 1672.880366][T18890] netlink: 8 bytes leftover after parsing attributes in process `syz.6.20955'. [ 1672.952135][T18896] netlink: 12 bytes leftover after parsing attributes in process `syz.7.20958'. [ 1672.980361][T18896] openvswitch: netlink: Missing key (keys=c0, expected=40300) [ 1673.113981][T23533] gspca_sq905c: sq905c_command: usb_control_msg failed (-71) [ 1673.146008][T23533] sq905c 2-1:0.0: probe with driver sq905c failed with error -71 [ 1673.195277][T23533] usb 2-1: USB disconnect, device number 2 [ 1673.229230][T18899] netlink: 104 bytes leftover after parsing attributes in process `syz.6.20959'. [ 1673.271825][T18899] netlink: 4 bytes leftover after parsing attributes in process `syz.6.20959'. [ 1673.343614][T18904] loop7: detected capacity change from 0 to 64 [ 1673.343732][T14787] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1673.363962][T14787] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1673.373398][T14787] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1673.390324][T14787] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1673.399912][T14787] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1673.768823][T18904] Trying to free block not in datazone [ 1674.149120][T28670] dvmrp0: left allmulticast mode [ 1675.089583][ T30] audit: type=1326 audit(1595.690:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18949 comm="syz.2.20973" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe408d9e0d9 code=0x0 [ 1675.142921][T28670] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1675.153074][T28670] bond_slave_0: left allmulticast mode [ 1675.162698][T28670] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1675.175734][T28670] bond_slave_1: left allmulticast mode [ 1675.184517][T28670] bond0 (unregistering): Released all slaves [ 1675.199630][T28670] bond1 (unregistering): Released all slaves [ 1675.218441][T28670] bond2 (unregistering): Released all slaves [ 1675.241212][T28670] bond3 (unregistering): Released all slaves [ 1675.267228][T28670] bond4 (unregistering): Released all slaves [ 1675.290504][T28670] bond5 (unregistering): Released all slaves [ 1675.310894][T28670] bond6 (unregistering): Released all slaves [ 1675.339106][T18923] pimreg3: entered allmulticast mode [ 1675.375754][ T5271] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1675.662440][ T4926] Bluetooth: hci3: command tx timeout [ 1677.379901][T18902] bridge0: port 1(bridge_slave_0) entered blocking state [ 1677.408315][T18902] bridge0: port 1(bridge_slave_0) entered disabled state [ 1677.421894][T18902] bridge_slave_0: entered allmulticast mode [ 1677.451615][T18902] bridge_slave_0: entered promiscuous mode [ 1677.516721][T18902] bridge0: port 2(bridge_slave_1) entered blocking state [ 1677.538523][T18902] bridge0: port 2(bridge_slave_1) entered disabled state [ 1677.572035][T18902] bridge_slave_1: entered allmulticast mode [ 1677.613134][T18902] bridge_slave_1: entered promiscuous mode [ 1677.813610][ T5271] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1677.880538][T18902] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1678.189874][T19037] netlink: 220 bytes leftover after parsing attributes in process `syz.7.21000'. [ 1678.921797][T28670] hsr_slave_0: left promiscuous mode [ 1678.928092][T28670] hsr_slave_1: left promiscuous mode [ 1679.648980][T19049] netlink: 67 bytes leftover after parsing attributes in process `syz.7.21005'. [ 1680.113084][T28670] team0 (unregistering): Port device team_slave_1 removed [ 1680.172287][T28670] team0 (unregistering): Port device team_slave_0 removed [ 1680.212574][T23528] hid-generic 0000:0000:0004.002D: unknown main item tag 0x0 [ 1680.230924][T23528] hid-generic 0000:0000:0004.002D: unknown main item tag 0x0 [ 1680.244122][T23528] hid-generic 0000:0000:0004.002D: unknown main item tag 0x0 [ 1680.262657][T23528] hid-generic 0000:0000:0004.002D: unknown main item tag 0x0 [ 1680.275469][T23528] hid-generic 0000:0000:0004.002D: unknown main item tag 0x0 [ 1680.294420][T23528] hid-generic 0000:0000:0004.002D: unknown main item tag 0x0 [ 1680.316437][T23528] hid-generic 0000:0000:0004.002D: unknown main item tag 0x0 [ 1680.336464][T23528] hid-generic 0000:0000:0004.002D: unknown main item tag 0x0 [ 1680.351382][T23528] hid-generic 0000:0000:0004.002D: unknown main item tag 0x0 [ 1680.362518][T23528] hid-generic 0000:0000:0004.002D: unknown main item tag 0x0 [ 1680.428384][T23528] hid-generic 0000:0000:0004.002D: hidraw0: HID v0.03 Device [syz1] on syz0 [ 1680.631270][T19071] fido_id[19071]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1680.662839][T19075] loop7: detected capacity change from 0 to 64 [ 1680.819849][T18902] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1680.896735][T23560] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 1681.026508][T18902] team0: Port device team_slave_0 added [ 1681.053887][T18902] team0: Port device team_slave_1 added [ 1681.138087][T23560] usb 5-1: New USB device found, idVendor=046d, idProduct=c262, bcdDevice= 0.00 [ 1681.176446][T23560] usb 5-1: config 0 has an invalid interface number: 128 but max is 0 [ 1681.192978][T23560] usb 5-1: config 0 has no interface number 0 [ 1681.201696][T18902] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1681.218826][T23560] usb 5-1: config 0 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1681.240805][T18902] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1681.287841][T23560] usb 5-1: config 0 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1681.310464][T23560] usb 5-1: config 0 interface 128 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1681.332382][T18902] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1681.369781][T23560] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1681.391909][T18902] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1681.431096][T23560] usb 5-1: config 0 descriptor?? [ 1681.443112][T18902] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1681.542874][T18902] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1681.945105][T23560] logitech-hidpp-device 0003:046D:C262.002E: unbalanced collection at end of report description [ 1681.992034][T28670] IPVS: stop unused estimator thread 0... [ 1681.998920][T23560] logitech-hidpp-device 0003:046D:C262.002E: hidpp_probe:parse failed [ 1682.028809][T18902] hsr_slave_0: entered promiscuous mode [ 1682.038227][T23560] logitech-hidpp-device 0003:046D:C262.002E: probe with driver logitech-hidpp-device failed with error -22 [ 1682.060121][T18902] hsr_slave_1: entered promiscuous mode [ 1682.110310][T19104] loop7: detected capacity change from 0 to 256 [ 1682.117320][T18902] debugfs: 'hsr0' already exists in 'hsr' [ 1682.157785][T18902] Cannot create hsr debugfs directory [ 1682.272727][T23528] usb 5-1: USB disconnect, device number 10 [ 1682.348284][T19109] binder_alloc: binder_alloc_mmap_handler: 19108 2000000a0000-2000000a2000 already mapped failed -16 [ 1682.726828][T19121] tipc: Enabled bearer , priority 10 [ 1683.055722][T19128] loop6: detected capacity change from 0 to 128 [ 1683.372434][T18902] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1683.443732][T18902] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1683.469217][T18902] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1683.562808][T18902] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1683.585145][T18902] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1683.624010][T18902] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1683.646853][ T5271] 8021q: adding VLAN 0 to HW filter on device eth11 [ 1683.662757][T18902] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1683.698226][T18902] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1683.809528][T19142] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1684.196325][T18902] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1684.278004][T18902] 8021q: adding VLAN 0 to HW filter on device team0 [ 1684.324624][T19048] bridge0: port 1(bridge_slave_0) entered blocking state [ 1684.331869][T19048] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1684.373774][T19169] bridge0: port 1(gretap0) entered blocking state [ 1684.388210][T19169] bridge0: port 1(gretap0) entered disabled state [ 1684.401579][T19169] gretap0: entered allmulticast mode [ 1684.433000][T19169] gretap0: entered promiscuous mode [ 1684.495303][T19048] bridge0: port 2(bridge_slave_1) entered blocking state [ 1684.502533][T19048] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1685.738903][T19216] netlink: 12 bytes leftover after parsing attributes in process `syz.2.21062'. [ 1685.852985][ T5271] 8021q: adding VLAN 0 to HW filter on device eth12 [ 1686.152845][T16044] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 1686.337611][T16044] usb 2-1: Using ep0 maxpacket: 16 [ 1686.363606][T16044] usb 2-1: New USB device found, idVendor=22d4, idProduct=1503, bcdDevice= 0.00 [ 1686.382115][T18902] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1686.391120][T16044] usb 2-1: too many endpoints for config 0 interface 0 altsetting 16: 254, using maximum allowed: 30 [ 1686.410733][T16044] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 1686.440003][T16044] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1686.456599][T16044] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1686.487347][T16044] usb 2-1: config 0 descriptor?? [ 1687.005933][T16044] hid_parser_main: 91 callbacks suppressed [ 1687.005966][T16044] glorious 0003:22D4:1503.002F: unknown main item tag 0x0 [ 1687.067706][T16044] glorious 0003:22D4:1503.002F: unknown main item tag 0x0 [ 1687.109516][T16044] glorious 0003:22D4:1503.002F: unknown main item tag 0x0 [ 1687.144386][T16044] glorious 0003:22D4:1503.002F: unknown main item tag 0x0 [ 1687.173735][T16044] glorious 0003:22D4:1503.002F: unknown main item tag 0x0 [ 1687.196469][T16044] glorious 0003:22D4:1503.002F: unknown main item tag 0x0 [ 1687.219212][T16044] glorious 0003:22D4:1503.002F: unknown main item tag 0x0 [ 1687.260314][T16044] glorious 0003:22D4:1503.002F: unknown main item tag 0x0 [ 1687.293133][T16044] glorious 0003:22D4:1503.002F: unknown main item tag 0x0 [ 1687.325594][T16044] glorious 0003:22D4:1503.002F: unknown main item tag 0x0 [ 1687.401669][T16044] glorious 0003:22D4:1503.002F: hidraw0: USB HID v0.01 Device [Glorious Model I] on usb-dummy_hcd.1-1/input0 [ 1687.465654][T16044] usb 2-1: USB disconnect, device number 3 [ 1687.645254][T18902] veth0_vlan: entered promiscuous mode [ 1687.700471][T19278] netlink: 4 bytes leftover after parsing attributes in process `syz.2.21091'. [ 1687.738664][T19272] fido_id[19272]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1687.745811][T18902] veth1_vlan: entered promiscuous mode [ 1687.965100][T18902] veth0_macvtap: entered promiscuous mode [ 1688.009690][T18902] veth1_macvtap: entered promiscuous mode [ 1688.099896][T18902] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1688.189787][T18902] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1688.262961][T19285] loop7: detected capacity change from 0 to 4096 [ 1688.338570][T19285] ntfs3(loop7): Different NTFS sector size (4096) and media sector size (512). [ 1688.392729][T28664] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1688.557701][ T47] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1688.607887][ T47] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1688.729340][T28659] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1688.780827][T28659] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1688.817693][T28659] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1688.989067][T19301] netlink: 220 bytes leftover after parsing attributes in process `syz.1.21087'. [ 1689.064823][T28659] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1689.108945][T28659] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1689.451720][T19321] macsec1: entered promiscuous mode [ 1689.970976][T19333] netlink: 5 bytes leftover after parsing attributes in process `syz.4.21101'. [ 1690.386777][T19351] [U] ¿ [ 1690.555268][T19355] loop8: detected capacity change from 0 to 256 [ 1690.573966][T19357] loop7: detected capacity change from 0 to 256 [ 1690.619352][T19357] exfat: Deprecated parameter 'utf8' [ 1690.660383][T19357] exfat: Deprecated parameter 'utf8' [ 1690.817459][T19357] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x30348f56, utbl_chksum : 0xe619d30d) [ 1690.998049][T19357] exFAT-fs (loop7): error, in sector 160, dentry 12 should be unused, but 0x85 [ 1691.184868][ T30] audit: type=1326 audit(1610.749:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19374 comm="syz.8.21115" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0bce59e0d9 code=0x0 [ 1691.240864][T19373] loop6: detected capacity change from 0 to 4096 [ 1691.365402][T19386] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1691.422653][T23530] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 1691.544664][ T30] audit: type=1800 audit(1611.086:436): pid=19373 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.21113" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 1691.619702][T23530] usb 3-1: New USB device found, idVendor=17ef, idProduct=6062, bcdDevice= 0.00 [ 1691.669919][T23530] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 1691.737727][T23530] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1691.758998][T23530] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1691.819759][T23530] usb 3-1: config 0 descriptor?? [ 1691.851322][T19379] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1692.366481][T23530] hid_parser_main: 30 callbacks suppressed [ 1692.366514][T23530] lenovo 0003:17EF:6062.0030: unknown main item tag 0x2 [ 1692.447471][T23530] lenovo 0003:17EF:6062.0030: unknown main item tag 0x3 [ 1692.480037][T23530] lenovo 0003:17EF:6062.0030: unknown main item tag 0x1 [ 1692.506112][T23530] lenovo 0003:17EF:6062.0030: unknown main item tag 0x2 [ 1692.543367][T23530] lenovo 0003:17EF:6062.0030: hidraw0: USB HID v0.01 Device [HID 17ef:6062] on usb-dummy_hcd.2-1/input0 [ 1692.618192][T23530] usb 3-1: USB disconnect, device number 20 [ 1692.724305][T16044] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 1692.915645][T19422] fido_id[19422]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1692.948683][T16044] usb 5-1: not running at top speed; connect to a high speed hub [ 1692.971770][T19430] netlink: 68 bytes leftover after parsing attributes in process `syz.8.21133'. [ 1692.975880][T16044] usb 5-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00 [ 1693.047970][T16044] usb 5-1: config 1 interface 1 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 1693.085616][T16044] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1693.175355][T19439] overlayfs: regular lower layers cannot follow data lower layers [ 1693.186833][T16044] gspca_main: spca501-2.14.0 probing 0000:0000 [ 1693.288000][T19441] loop8: detected capacity change from 0 to 512 [ 1693.320450][T19441] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 1693.373710][T19441] EXT4-fs error (device loop8): ext4_orphan_get:1425: comm syz.8.21137: bad orphan inode 131083 [ 1693.446040][T19441] loop8: lost filesystem error report for type 5 error -117 [ 1693.449143][T19441] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1693.518140][T19441] EXT4-fs: Can't set or change test_dummy_encryption on remount [ 1693.768312][T18902] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1693.886019][T19456] macsec1: entered promiscuous mode [ 1693.963542][T16044] gspca_spca501: reg write: error -110 [ 1693.983282][T16044] spca501 5-1:1.0: Reg write failed for 0x02,0xa048,0x00 [ 1694.009790][T16044] spca501 5-1:1.0: probe with driver spca501 failed with error -22 [ 1694.063817][T16044] uvcvideo 5-1:1.0: Found UVC 1.00 device (0000:0000) [ 1694.086506][T16044] uvcvideo 5-1:1.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 1694.121328][T16044] uvcvideo 5-1:1.1: Failed to query (GET_CUR) UVC probe control : -32 (exp. 26). [ 1694.170839][T16044] uvcvideo 5-1:1.1: Failed to initialize the device (-5). [ 1694.185686][T19458] loop8: detected capacity change from 0 to 4096 [ 1694.228445][T16044] uvcvideo 5-1:1.0: probe with driver uvcvideo failed with error -5 [ 1694.343890][T19458] ntfs3(loop8): Mark volume as dirty due to NTFS errors [ 1694.543871][T14787] Bluetooth: hci6: command 0x0406 tx timeout [ 1694.598616][T19468] bridge0: port 3(gretap0) entered blocking state [ 1694.682889][T19468] bridge0: port 3(gretap0) entered disabled state [ 1694.743597][T19468] gretap0: entered allmulticast mode [ 1694.752441][T16044] usb 5-1: USB disconnect, device number 11 [ 1694.856138][T19468] gretap0: entered promiscuous mode [ 1694.873742][T19468] bridge0: port 3(gretap0) entered blocking state [ 1694.880345][T19468] bridge0: port 3(gretap0) entered forwarding state [ 1694.923005][T19473] bridge0: port 4(erspan0) entered blocking state [ 1694.944194][T19473] bridge0: port 4(erspan0) entered disabled state [ 1694.966220][T19473] erspan0: entered allmulticast mode [ 1695.006086][T19473] erspan0: entered promiscuous mode [ 1695.029422][ T196] ntfs3(loop8): ino=9, ntfs3_write_inode failed, -22. [ 1695.038405][T19473] bridge0: port 4(erspan0) entered blocking state [ 1695.045062][T19473] bridge0: port 4(erspan0) entered forwarding state [ 1695.047450][T18902] ntfs3(loop8): ino=9, ntfs_sync_fs failed, -22. [ 1695.412436][T19489] loop8: detected capacity change from 0 to 1024 [ 1695.624333][T19498] loop6: detected capacity change from 0 to 16 [ 1695.685372][T19498] erofs (device loop6): mounted with root inode @ nid 36. [ 1695.740813][T19498] erofs (device loop6): inline data across blocks @ nid 86 [ 1695.759320][ T5914] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 1695.842718][T19498] erofs (device loop6): inline data across blocks @ nid 86 [ 1695.950647][ T5914] usb 3-1: Using ep0 maxpacket: 8 [ 1695.967432][ T5914] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1695.995363][ T5914] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1696.013823][ T5914] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1696.040329][ T5914] usb 3-1: config 0 descriptor?? [ 1696.087205][ T5914] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1696.273998][T15086] hid-generic 0000:0000:000E.0031: unknown main item tag 0x0 [ 1696.296892][T15086] hid-generic 0000:0000:000E.0031: unknown main item tag 0x0 [ 1696.311851][T15086] hid-generic 0000:0000:000E.0031: unknown main item tag 0x0 [ 1696.343734][T15086] hid-generic 0000:0000:000E.0031: unknown main item tag 0x0 [ 1696.372354][T15086] hid-generic 0000:0000:000E.0031: unknown main item tag 0x0 [ 1696.400309][T15086] hid-generic 0000:0000:000E.0031: unknown main item tag 0x0 [ 1696.471595][T19521] bridge0: port 3(gretap0) entered blocking state [ 1696.479355][T15086] hid-generic 0000:0000:000E.0031: hidraw0: HID v0.00 Device [syz0] on syz0 [ 1696.498549][T19521] bridge0: port 3(gretap0) entered disabled state [ 1696.523758][T19521] gretap0: entered allmulticast mode [ 1696.536604][ T5914] gspca_vc032x: reg_w err -71 [ 1696.556009][T19523] netlink: 68 bytes leftover after parsing attributes in process `syz.1.21167'. [ 1696.565721][ T5914] vc032x 3-1:0.0: probe with driver vc032x failed with error -71 [ 1696.571180][T19521] gretap0: entered promiscuous mode [ 1696.608259][T19521] bridge0: port 3(gretap0) entered blocking state [ 1696.611240][ T5914] usb 3-1: USB disconnect, device number 21 [ 1696.614853][T19521] bridge0: port 3(gretap0) entered forwarding state [ 1696.684035][T19524] bridge0: port 4(erspan0) entered blocking state [ 1696.722294][T19524] bridge0: port 4(erspan0) entered disabled state [ 1696.737708][T19524] erspan0: entered allmulticast mode [ 1696.780278][T19524] erspan0: entered promiscuous mode [ 1696.793781][T19524] bridge0: port 4(erspan0) entered blocking state [ 1696.800484][T19524] bridge0: port 4(erspan0) entered forwarding state [ 1696.824864][T19527] fido_id[19527]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1698.386174][T19573] loop6: detected capacity change from 0 to 8192 [ 1698.438694][T19573] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1698.795781][T23560] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1698.989293][T23560] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1699.025149][T23560] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1699.054613][T23560] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1699.121314][T23560] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1699.173577][T23560] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1699.212419][T23560] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1699.257642][T23560] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1699.282996][T23560] usb 3-1: Product: syz [ 1699.297430][T23560] usb 3-1: Manufacturer: syz [ 1699.340408][T23560] cdc_wdm 3-1:1.0: skipping garbage [ 1699.367918][T23560] cdc_wdm 3-1:1.0: skipping garbage [ 1699.398534][T23560] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 1699.435962][T23560] cdc_wdm 3-1:1.0: Unknown control protocol [ 1699.487784][T19606] loop8: detected capacity change from 0 to 4096 [ 1699.548467][T19606] NILFS (loop8): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1699.595225][T19606] NILFS (loop8): mounting unchecked fs [ 1699.617266][T19606] NILFS (loop8): recovery required for readonly filesystem [ 1699.661912][T19606] NILFS (loop8): write access will be enabled during recovery [ 1699.788525][T17099] udevd[17099]: incorrect nilfs2 checksum on /dev/loop8 [ 1699.812807][T19606] NILFS (loop8): norecovery option specified, skipping roll-forward recovery [ 1699.925583][T23560] usb 3-1: USB disconnect, device number 22 [ 1700.029501][T18057] udevd[18057]: incorrect nilfs2 checksum on /dev/loop8 [ 1700.067575][T19627] loop6: detected capacity change from 0 to 256 [ 1700.140775][T19627] exfat: Deprecated parameter 'utf8' [ 1700.152828][T19627] exfat: Deprecated parameter 'utf8' [ 1700.172859][T19627] exfat: Deprecated parameter 'utf8' [ 1700.197851][T19627] exfat: Deprecated parameter 'namecase' [ 1700.262826][T19627] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 1703.079230][T19721] sch_fq: defrate 1015 ignored. [ 1703.185894][T19722] macsec1: entered promiscuous mode [ 1703.787491][T19744] loop7: detected capacity change from 0 to 16 [ 1703.869659][T19744] erofs (device loop7): mounted with root inode @ nid 36. [ 1703.907798][T19744] erofs (device loop7): inline data across blocks @ nid 86 [ 1703.941845][T19744] erofs (device loop7): inline data across blocks @ nid 86 [ 1703.953475][T23504] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1704.147459][T23504] usb 9-1: Using ep0 maxpacket: 16 [ 1704.162588][T23504] usb 9-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1704.194433][T23504] usb 9-1: config 0 has an invalid interface number: 8 but max is 0 [ 1704.229498][T23504] usb 9-1: config 0 has no interface number 0 [ 1704.252548][T23504] usb 9-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1704.293694][T23504] usb 9-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1704.337847][T23504] usb 9-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1704.369142][T23504] usb 9-1: Product: syz [ 1704.390760][T23504] usb 9-1: SerialNumber: syz [ 1704.409476][T23504] usb 9-1: config 0 descriptor?? [ 1704.431544][T23504] cm109 9-1:0.8: invalid payload size 0, expected 4 [ 1704.461436][T23504] input: CM109 USB driver as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.8/input/input153 [ 1704.769959][ C1] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1704.777961][ C1] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1704.785325][ C1] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1704.793242][ C1] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1704.801341][ C1] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1704.808531][ C1] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1704.815690][ C1] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1704.824361][ C1] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1704.831624][ C1] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1704.838819][ C1] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1704.847772][T23504] usb 5-1: new low-speed USB device number 12 using dummy_hcd [ 1704.868598][T23560] usb 9-1: USB disconnect, device number 2 [ 1704.874551][ C1] cm109 9-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1704.891755][T23560] cm109 9-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1705.045481][T23504] usb 5-1: New USB device found, idVendor=28bd, idProduct=0935, bcdDevice= 0.00 [ 1705.087780][T23504] usb 5-1: config 0 interface 0 altsetting 31 endpoint 0x81 has invalid maxpacket 512, setting to 8 [ 1705.110480][T23504] usb 5-1: config 0 interface 0 altsetting 31 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1705.153461][T23504] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1705.162655][T23504] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1705.186766][T23504] usb 5-1: config 0 descriptor?? [ 1705.200574][T19762] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1705.659998][T23504] hid (null): unknown global tag 0xe [ 1705.701308][T23504] input: HID 28bd:0935 Mouse as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:28BD:0935.0032/input/input154 [ 1705.750731][T19802] loop8: detected capacity change from 0 to 512 [ 1705.798116][T19802] EXT4-fs error (device loop8): ext4_orphan_get:1425: comm syz.8.21266: bad orphan inode 15 [ 1705.809899][T19802] loop8: lost filesystem error report for type 5 error -117 [ 1705.811814][T19802] ext4_test_bit(bit=14, block=5) = 0 [ 1705.819189][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 1705.819225][ C1] EXT4-fs (loop8): initial error at time 1624: ext4_orphan_get:1425 [ 1705.819269][ C1] EXT4-fs (loop8): last error at time 1624: ext4_orphan_get:1425 [ 1705.852590][T19802] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1705.866956][T13055] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 1705.890477][T23504] uclogic 0003:28BD:0935.0032: input,hidraw0: USB HID v1.63 Mouse [HID 28bd:0935] on usb-dummy_hcd.4-1/input0 [ 1705.935966][T23504] usb 5-1: USB disconnect, device number 12 [ 1705.968222][T19802] EXT4-fs: Ignoring removed bh option [ 1706.093156][T13055] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1706.124366][T13055] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1706.152729][T19806] fido_id[19806]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 1706.157924][T13055] usb 2-1: config 0 descriptor?? [ 1706.227961][T18902] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1706.441536][T13055] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1706.669993][T13055] [drm:udl_init] *ERROR* Selecting channel failed [ 1706.752247][T13055] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 1 [ 1706.777445][T13055] [drm] Initialized udl on minor 1 [ 1706.827409][T13055] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1706.868316][T13055] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 1706.878950][ T5914] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1706.941283][T13055] usb 2-1: USB disconnect, device number 4 [ 1706.958250][ T5914] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 1707.007276][ T5914] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 1708.961159][T19892] netlink: 'syz.1.21296': attribute type 1 has an invalid length. [ 1709.000078][T19892] netlink: 244 bytes leftover after parsing attributes in process `syz.1.21296'. [ 1709.992105][T19919] loop8: detected capacity change from 0 to 1024 [ 1710.051860][T19919] EXT4-fs: Ignoring removed orlov option [ 1710.168900][T19919] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1710.252842][T19919] EXT4-fs error (device loop8): __ext4_new_inode:1286: comm syz.8.21305: failed to insert inode 12: doubly allocated? [ 1710.269603][T14787] Bluetooth: hci3: command 0x040f tx timeout [ 1710.895562][T18902] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1711.860473][T13055] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1711.991343][T19973] loop2: detected capacity change from 0 to 4096 [ 1712.052486][T13055] usb 9-1: Using ep0 maxpacket: 8 [ 1712.117095][T13055] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1712.135445][T13055] usb 9-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1712.181938][T13055] usb 9-1: config 4 interface 0 has no altsetting 0 [ 1712.249736][T13055] usb 9-1: string descriptor 0 read error: -22 [ 1712.283630][T13055] usb 9-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 1712.401894][T13055] usb 9-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1712.483456][T13055] usb 9-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1712.494393][ T4926] Bluetooth: hci3: command 0x040f tx timeout [ 1712.522814][T13055] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1712.530122][T13055] usb 9-1: media controller created [ 1712.559854][T13055] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1712.802366][T13055] zl10353_read_register: readreg error (reg=127, ret==0) [ 1712.963487][T19995] loop1: detected capacity change from 0 to 136 [ 1713.022954][T13055] usb 9-1: USB disconnect, device number 3 [ 1713.068148][T19995] Attempt to read inode for relocated directory [ 1713.411006][T20004] loop7: detected capacity change from 0 to 256 [ 1713.435265][T20001] loop6: detected capacity change from 0 to 4096 [ 1713.553822][T20008] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1713.918193][T20014] loop7: detected capacity change from 0 to 2048 [ 1714.036637][T20014] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1714.066185][T19980] loop4: detected capacity change from 0 to 40427 [ 1714.107645][T19980] F2FS-fs (loop4): build fault injection rate: 174 [ 1714.117196][T20020] loop1: detected capacity change from 0 to 1024 [ 1714.159603][T19980] F2FS-fs (loop4): build fault injection type: 0x3bfe8c [ 1714.230583][T19980] F2FS-fs (loop4): invalid crc value [ 1714.383833][T15884] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1714.405973][T20028] loop2: detected capacity change from 0 to 512 [ 1714.655587][T19980] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1714.716686][ T4926] Bluetooth: hci3: command 0x040f tx timeout [ 1714.720938][T19980] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1715.098990][T16044] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 1715.291811][T16044] usb 3-1: Using ep0 maxpacket: 8 [ 1715.304883][T16044] usb 3-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00 [ 1715.335604][T16044] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1715.355098][T16044] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1715.403652][T16044] usb 3-1: config 0 descriptor?? [ 1715.597005][T20048] loop7: detected capacity change from 0 to 4096 [ 1715.704272][T20051] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1715.893818][T16044] hid (null): usage index exceeded [ 1715.943212][T16044] cypress 0003:04B4:07B1.0033: ignoring exceeding usage max [ 1715.985598][T16044] cypress 0003:04B4:07B1.0033: ignoring exceeding usage max [ 1715.992927][T16044] cypress 0003:04B4:07B1.0033: usage index exceeded [ 1716.037590][T16044] cypress 0003:04B4:07B1.0033: item 0 4 2 2 parsing failed [ 1716.063968][T16044] cypress 0003:04B4:07B1.0033: parse failed [ 1716.086688][T16044] cypress 0003:04B4:07B1.0033: probe with driver cypress failed with error -22 [ 1716.146567][T16044] usb 3-1: USB disconnect, device number 23 [ 1716.577442][T20071] sock: sock_timestamping_bind_phc: sock not bind to device [ 1716.945817][ T4926] Bluetooth: hci3: command 0x040f tx timeout [ 1717.031873][T13055] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 1717.105612][T20094] loop7: detected capacity change from 0 to 512 [ 1717.176737][T20094] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1717.214053][T13055] usb 2-1: Using ep0 maxpacket: 32 [ 1717.251019][T13055] usb 2-1: New USB device found, idVendor=12ba, idProduct=0100, bcdDevice= 0.00 [ 1717.317950][T13055] usb 2-1: too many endpoints for config 0 interface 0 altsetting 5: 255, using maximum allowed: 30 [ 1717.342749][T20101] loop2: detected capacity change from 0 to 512 [ 1717.361854][T20094] EXT4-fs error (device loop7): ext4_readdir:263: inode #2: block 3: comm syz.7.21379: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1 [ 1717.402178][T13055] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1717.453723][T13055] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1717.472588][T20101] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1717.478181][T13055] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 1717.497918][T13055] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1717.505215][T13055] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1717.528088][T13055] usb 2-1: config 0 descriptor?? [ 1717.554626][T20094] EXT4-fs error (device loop7): ext4_readdir:263: inode #2: block 12: comm syz.7.21379: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=5066064, rec_len=65536, size=2048 fake=0 [ 1717.601162][T20101] EXT4-fs error (device loop2): swap_inode_boot_loader:387: inode #5: comm syz.2.21380: iget: checksum invalid [ 1717.674134][T20094] EXT4-fs error (device loop7): ext4_readdir:263: inode #2: block 13: comm syz.7.21379: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=3653246737, rec_len=65536, size=2048 fake=0 [ 1717.770638][T20094] EXT4-fs error (device loop7): ext4_readdir:263: inode #2: block 16: comm syz.7.21379: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=3653245223, rec_len=65536, size=2048 fake=0 [ 1717.821776][T20094] EXT4-fs error (device loop7): ext4_map_blocks:791: inode #2: block 18: comm syz.7.21379: lblock 23 mapped to illegal pblock 18 (length 1) [ 1717.872247][ T5763] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1718.026416][T13055] input: HID 12ba:0100 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:12BA:0100.0034/input/input155 [ 1718.161529][T13055] sony 0003:12BA:0100.0034: input,hidraw0: USB HID v0.00 Joystick [HID 12ba:0100] on usb-dummy_hcd.1-1/input0 [ 1718.242619][T13055] usb 2-1: USB disconnect, device number 5 [ 1718.523440][T15884] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1718.660167][T20128] fido_id[20128]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1718.828690][T20138] loop9: detected capacity change from 0 to 7 [ 1718.872064][T20138] Buffer I/O error on dev loop9, logical block 0, async page read [ 1718.921191][T20138] Buffer I/O error on dev loop9, logical block 0, async page read [ 1718.959581][T20138] Buffer I/O error on dev loop9, logical block 0, async page read [ 1719.008781][T20138] Buffer I/O error on dev loop9, logical block 0, async page read [ 1719.045785][T20138] Buffer I/O error on dev loop9, logical block 0, async page read [ 1719.081315][T20138] Buffer I/O error on dev loop9, logical block 0, async page read [ 1719.127667][T20138] Buffer I/O error on dev loop9, logical block 0, async page read [ 1719.169508][T20138] ldm_validate_partition_table(): Disk read failed. [ 1719.198734][T20138] Buffer I/O error on dev loop9, logical block 0, async page read [ 1719.235817][T20138] Buffer I/O error on dev loop9, logical block 0, async page read [ 1719.272553][T20138] Buffer I/O error on dev loop9, logical block 0, async page read [ 1719.296622][T20138] Dev loop9: unable to read RDB block 0 [ 1719.346362][T20138] loop9: unable to read partition table [ 1719.383309][T20138] loop9: partition table beyond EOD, truncated [ 1719.428410][T20138] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 1719.428410][T20138] ) failed (rc=-5) [ 1719.458932][T20153] ALSA: mixer_oss: invalid OSS volume 'DIGITAL1re' [ 1719.497907][T20153] ALSA: mixer_oss: invalid index 80000 [ 1720.154783][T20180] bpf: Bad value for 'gid' [ 1720.169207][T20178] loop1: detected capacity change from 0 to 512 [ 1720.170513][T20179] loop4: detected capacity change from 0 to 128 [ 1720.242822][T20178] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1720.329919][T20179] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 1720.425582][ T5762] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1720.550718][T20191] loop2: detected capacity change from 0 to 1024 [ 1721.221842][ T30] audit: type=1800 audit(1638.864:437): pid=20179 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.21412" name="file1" dev="loop4" ino=94 res=0 errno=0 [ 1721.500858][T20217] binder: 20216:20217 ioctl c0306201 200000000480 returned -11 [ 1721.923789][T20232] netlink: 8 bytes leftover after parsing attributes in process `syz.6.21435'. [ 1722.131574][T20231] loop8: detected capacity change from 0 to 4096 [ 1722.280307][T20243] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1722.287096][ T30] audit: type=1326 audit(1639.856:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20239 comm="syz.4.21439" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f22a1f9e0d9 code=0x0 [ 1722.352784][T20247] loop6: detected capacity change from 0 to 8 [ 1722.672222][T20231] NILFS (loop8): DAT doesn't have a block to manage vblocknr = 648518346341351424 [ 1722.739602][T20231] NILFS error (device loop8): nilfs_bmap_truncate: broken bmap (inode number=12) [ 1722.829434][T20231] Remounting filesystem read-only [ 1722.877614][T20231] NILFS (loop8): error -5 truncating bmap (ino=12) [ 1723.069069][T18902] NILFS (loop8): disposed unprocessed dirty file(s) when detaching log writer [ 1723.213467][T20263] loop1: detected capacity change from 0 to 4096 [ 1723.346213][T20271] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1723.649209][T20277] loop4: detected capacity change from 0 to 4096 [ 1723.739811][T20278] loop8: detected capacity change from 0 to 4096 [ 1723.762009][T20284] netlink: 32 bytes leftover after parsing attributes in process `syz.2.21453'. [ 1723.771335][T20287] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1723.788896][T20281] bridge0: entered promiscuous mode [ 1723.797448][T20278] ntfs3(loop8): Different NTFS sector size (4096) and media sector size (512). [ 1723.823840][T20281] bridge0: entered allmulticast mode [ 1723.949239][T20278] ntfs3(loop8): Failed to initialize $Extend/$Reparse. [ 1724.052215][T13055] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 1724.244233][T13055] usb 2-1: Using ep0 maxpacket: 16 [ 1724.272175][T13055] usb 2-1: New USB device found, idVendor=1038, idProduct=12c2, bcdDevice= 0.00 [ 1724.312485][T13055] usb 2-1: config 0 interface 0 altsetting 11 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1724.367054][T13055] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1724.398071][T13055] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1724.456968][T13055] usb 2-1: config 0 descriptor?? [ 1724.994833][T13055] steelseries 0003:1038:12C2.0035: ignoring exceeding usage max [ 1725.029612][T13055] hid_parser_main: 10 callbacks suppressed [ 1725.029641][T13055] steelseries 0003:1038:12C2.0035: unknown main item tag 0x1 [ 1725.138839][T20318] loop6: detected capacity change from 0 to 4096 [ 1725.201731][T20318] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1725.246702][T13055] usb 2-1: USB disconnect, device number 6 [ 1725.369131][T20318] EXT4-fs (loop6): Online resizing not supported with bigalloc [ 1725.439859][T13133] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1725.650172][T23530] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 1725.815712][T23530] usb 5-1: Using ep0 maxpacket: 16 [ 1725.844554][T23530] usb 5-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 1725.907668][T23530] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1725.930274][T23530] usb 5-1: Product: syz [ 1725.944635][T23530] usb 5-1: Manufacturer: syz [ 1725.955040][T23530] usb 5-1: SerialNumber: syz [ 1725.992755][T23530] usb 5-1: config 0 descriptor?? [ 1725.997086][T20333] loop6: detected capacity change from 0 to 256 [ 1726.023257][T23530] ssu100 5-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 1726.051596][T20333] exfat: Deprecated parameter 'utf8' [ 1726.089964][T20333] exfat: Deprecated parameter 'utf8' [ 1726.114081][T20336] loop2: detected capacity change from 0 to 4096 [ 1726.151110][T20333] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 1726.184116][T20341] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1726.419868][T20340] loop1: detected capacity change from 0 to 4096 [ 1726.545624][T20344] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1726.677844][T23530] ssu100 5-1:0.0: probe with driver ssu100 failed with error -71 [ 1726.733830][T23530] usb 5-1: USB disconnect, device number 13 [ 1726.927165][T20340] NILFS (loop1): nilfs_sufile_do_free: segment 9 is already clean [ 1727.579251][T20372] netlink: 8 bytes leftover after parsing attributes in process `syz.4.21478'. [ 1727.623054][T20372] netlink: 4 bytes leftover after parsing attributes in process `syz.4.21478'. [ 1727.656150][T20372] netlink: 'syz.4.21478': attribute type 13 has an invalid length. [ 1728.358763][T20392] loop1: detected capacity change from 0 to 2048 [ 1728.470431][T20392] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1728.504418][T20374] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1728.548122][T20374] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 1728.638062][T20374] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1728.657353][T20374] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1728.679540][T20392] EXT4-fs error (device loop1): ext4_ext_precache:631: inode #2: comm syz.1.21488: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 1728.744614][T20401] EXT4-fs error (device loop1): ext4_validate_block_bitmap:431: comm ext4lazyinit: bg 0: block 2: invalid block bitmap [ 1728.748975][T20374] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1728.848173][ T5762] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1729.282874][T20418] loop4: detected capacity change from 0 to 128 [ 1729.321611][T20422] loop6: detected capacity change from 0 to 128 [ 1729.345461][T20418] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1729.424207][T20418] hpfs: filesystem error: improperly stopped [ 1729.454874][T20418] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1729.489603][T20418] hpfs: You really don't want any checks? You are crazy... [ 1729.526666][T20418] hpfs: hpfs_map_sector(): read error [ 1729.559261][T20418] hpfs: code page support is disabled [ 1729.616722][T20418] hpfs: hpfs_map_4sectors(): unaligned read [ 1729.663953][T20418] hpfs: hpfs_map_4sectors(): unaligned read [ 1729.697346][T20418] hpfs: filesystem error: unable to find root dir [ 1729.787263][T20418] hpfs: hpfs_map_4sectors(): unaligned read [ 1729.850960][T20418] hpfs: hpfs_map_sector(): read error [ 1729.921566][T20435] loop6: detected capacity change from 0 to 1764 [ 1729.928266][ T4926] Bluetooth: hci6: command 0x0406 tx timeout [ 1730.091281][T20442] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1730.316103][T20446] loop8: detected capacity change from 0 to 256 [ 1730.340427][T20446] exfat: Deprecated parameter 'utf8' [ 1730.384748][T20446] exfat: Deprecated parameter 'namecase' [ 1730.420097][T20446] exfat: Deprecated parameter 'namecase' [ 1730.466996][T20446] exfat: Deprecated parameter 'utf8' [ 1730.553261][T20446] exFAT-fs (loop8): failed to load upcase table (idx : 0x00012153, chksum : 0x6a70c931, utbl_chksum : 0xe619d30d) [ 1730.617009][T20446] exFAT-fs (loop8): failed to test first cluster bit of root dir(5) [ 1730.661089][T20456] atm:do_vcc_ioctl: ATM_SETSC is obsolete; used by syz.1.21510:20456 [ 1730.782830][ T4926] Bluetooth: hci3: command 0x040f tx timeout [ 1731.069969][T20469] loop1: detected capacity change from 0 to 512 [ 1731.119510][T20469] EXT4-fs: Ignoring removed mblk_io_submit option [ 1731.132802][T20423] loop7: detected capacity change from 0 to 40427 [ 1731.179060][T20423] F2FS-fs (loop7): build fault injection rate: 174 [ 1731.202128][T20469] EXT4-fs error (device loop1): ext4_iget_extra_inode:5179: inode #15: comm syz.1.21513: corrupted in-inode xattr: e_value size too large [ 1731.256256][T20423] F2FS-fs (loop7): build fault injection type: 0x3bfe8c [ 1731.275870][T20469] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1731.278407][T20469] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.21513: couldn't read orphan inode 15 (err -117) [ 1731.287613][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 1731.287646][ C1] EXT4-fs (loop1): initial error at time 1648: ext4_iget_extra_inode:5179: inode 15 [ 1731.287706][ C1] EXT4-fs (loop1): last error at time 1648: ext4_iget_extra_inode:5179: inode 15 [ 1731.366825][T20469] loop1: lost filesystem error report for type 5 error -117 [ 1731.367574][T20423] F2FS-fs (loop7): invalid crc value [ 1731.369899][T20469] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1731.703958][ T5762] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1731.791249][T20489] netlink: 8 bytes leftover after parsing attributes in process `syz.2.21520'. [ 1731.882921][T20423] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1732.049078][T20423] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 1732.126976][T20499] loop4: detected capacity change from 0 to 128 [ 1732.150576][ T4926] Bluetooth: hci6: command 0x0406 tx timeout [ 1732.200627][T20499] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 1732.242193][T20499] System zones: 1-3, 19-19, 35-36 [ 1732.260798][T20503] Bluetooth: MGMT ver 1.23 [ 1732.307009][T20499] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 1732.388958][T20499] EXT4-fs warning (device loop4): verify_group_input:136: Cannot add at group 3391 (only 1 groups) [ 1732.889850][T23504] usb 3-1: new low-speed USB device number 24 using dummy_hcd [ 1733.005354][ T4926] Bluetooth: hci3: command 0x040f tx timeout [ 1733.064259][T23504] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1733.096750][T23504] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1733.131038][T23504] usb 3-1: config 0 has no interface number 0 [ 1733.149124][T23504] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1733.216774][T23504] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1733.233655][ T5765] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1733.255307][T23504] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1733.339185][T23504] usb 3-1: config 0 descriptor?? [ 1733.348652][T20517] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1733.383745][T23504] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1733.523991][T20530] 9pnet_fd: p9_fd_create_tcp (20530): problem binding to privport [ 1733.715883][T23530] usb 3-1: USB disconnect, device number 24 [ 1734.118767][T23530] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1734.709212][T20560] loop4: detected capacity change from 0 to 256 [ 1734.713529][T20556] loop8: detected capacity change from 0 to 128 [ 1734.740645][T20560] exfat: Deprecated parameter 'utf8' [ 1734.776300][T20560] exfat: Deprecated parameter 'utf8' [ 1734.794174][T20556] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1734.809464][T20560] exfat: Deprecated parameter 'namecase' [ 1734.839189][T20560] exfat: Deprecated parameter 'namecase' [ 1734.866435][T20556] hpfs: filesystem error: improperly stopped [ 1734.906219][T20556] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1734.911008][T20560] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xf0f4daa6, utbl_chksum : 0xe619d30d) [ 1734.954145][T20556] hpfs: You really don't want any checks? You are crazy... [ 1735.010037][T20556] hpfs: hpfs_map_sector(): read error [ 1735.051330][T20556] hpfs: code page support is disabled [ 1735.080815][T20556] hpfs: hpfs_map_4sectors(): unaligned read [ 1735.116866][T20556] hpfs: hpfs_map_4sectors(): unaligned read [ 1735.149088][T20556] hpfs: filesystem error: unable to find root dir [ 1735.219915][T20556] hpfs: hpfs_map_4sectors(): unaligned read [ 1735.227771][ T4926] Bluetooth: hci3: command 0x040f tx timeout [ 1735.234345][T16044] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1735.252540][T20556] hpfs: hpfs_map_sector(): read error [ 1735.324959][T23504] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1735.350993][T20576] netlink: 4 bytes leftover after parsing attributes in process `syz.7.21550'. [ 1735.462588][T23530] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 1735.662705][T23530] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1735.708977][T23530] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1735.740590][T23530] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1735.775160][T23530] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1735.809844][T20592] loop8: detected capacity change from 0 to 256 [ 1735.819572][T23530] usb 3-1: config 0 descriptor?? [ 1735.848624][T20592] FAT-fs (loop8): Directory bread(block 1285) failed [ 1735.867114][T20592] FAT-fs (loop8): Directory bread(block 1286) failed [ 1735.891435][T23530] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1735.908710][T20592] FAT-fs (loop8): Directory bread(block 1287) failed [ 1735.925273][T23530] dvb-usb: bulk message failed: -22 (3/0) [ 1735.939739][T20592] FAT-fs (loop8): Directory bread(block 1288) failed [ 1735.964016][T23530] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1736.009844][T23530] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1736.022056][T20592] FAT-fs (loop8): FAT read failed (blocknr 1281) [ 1736.038449][T23530] usb 3-1: media controller created [ 1736.079003][T23530] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1736.097338][T20573] dibusb: i2c wr: len=61 is too big! [ 1736.097338][T20573] [ 1736.155049][T23530] dvb-usb: bulk message failed: -22 (6/0) [ 1736.177053][T23530] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1736.224261][T23530] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input156 [ 1736.278437][T23530] dvb-usb: schedule remote query interval to 150 msecs. [ 1736.303074][T23530] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1736.343770][T16044] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1736.369358][T23530] usb 3-1: USB disconnect, device number 25 [ 1736.524671][T23530] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1736.777621][T20615] loop6: detected capacity change from 0 to 1024 [ 1737.251320][T20631] netlink: 'syz.1.21574': attribute type 178 has an invalid length. [ 1737.450690][T23530] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1737.614876][T20646] loop1: detected capacity change from 0 to 22 [ 1737.636973][T20646] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 1737.683632][T20646] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 1738.169958][T20667] netlink: 'syz.6.21592': attribute type 1 has an invalid length. [ 1738.211719][T20667] netlink: 232 bytes leftover after parsing attributes in process `syz.6.21592'. [ 1738.269857][T20667] netlink: 'syz.6.21592': attribute type 1 has an invalid length. [ 1738.389582][T20677] loop1: detected capacity change from 0 to 256 [ 1738.426910][T20677] FAT-fs (loop1): Directory bread(block 1285) failed [ 1738.452158][T20677] FAT-fs (loop1): Directory bread(block 1286) failed [ 1738.485129][T20677] FAT-fs (loop1): Directory bread(block 1287) failed [ 1738.519685][T20677] FAT-fs (loop1): Directory bread(block 1288) failed [ 1738.538103][T20681] netlink: 16 bytes leftover after parsing attributes in process `syz.8.21599'. [ 1738.571904][T23530] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1738.580015][T23530] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1738.587159][T20677] FAT-fs (loop1): Directory bread(block 1285) failed [ 1738.604488][T20681] netlink: 16 bytes leftover after parsing attributes in process `syz.8.21599'. [ 1738.639093][T20681] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Info Ack ret = -22) [ 1738.654276][T20677] FAT-fs (loop1): Directory bread(block 1286) failed [ 1738.681006][T20677] FAT-fs (loop1): Directory bread(block 1287) failed [ 1738.732462][T20677] FAT-fs (loop1): Directory bread(block 1288) failed [ 1738.814216][T20677] FAT-fs (loop1): FAT read failed (blocknr 1281) [ 1738.902218][T20687] FAT-fs (loop1): Directory bread(block 1285) failed [ 1739.178027][T20693] loop8: detected capacity change from 0 to 2048 [ 1739.221203][T20693] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1739.287041][T20703] netlink: 'syz.1.21609': attribute type 7 has an invalid length. [ 1739.673665][T23530] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1739.983376][T23504] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 1740.177029][T23504] usb 3-1: Using ep0 maxpacket: 32 [ 1740.193426][T23504] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0a53, bcdDevice= 0.00 [ 1740.221355][T23504] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 64, changing to 10 [ 1740.247723][T23504] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1740.290471][T23504] usb 3-1: config 0 descriptor?? [ 1740.382409][T20737] loop4: detected capacity change from 0 to 256 [ 1740.439069][T20737] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 1740.758017][T23504] hid-corsair-void 0003:1B1C:0A53.0036: unknown main item tag 0x0 [ 1740.785261][T23530] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1740.796316][T23504] hid-corsair-void 0003:1B1C:0A53.0036: unknown main item tag 0x6 [ 1740.846260][T23504] hid-corsair-void 0003:1B1C:0A53.0036: hidraw0: USB HID v2.05 Device [HID 1b1c:0a53] on usb-dummy_hcd.2-1/input0 [ 1741.048017][T23503] hid-corsair-void 0003:1B1C:0A53.0036: failed to request battery (reason: -71) [ 1741.061099][T23504] hid-corsair-void 0003:1B1C:0A53.0036: failed to request firmware (reason: -71) [ 1741.097287][T23504] usb 3-1: USB disconnect, device number 26 [ 1741.555582][T23504] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1741.814538][T23504] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1741.830869][T20772] openvswitch: netlink: Encap mask attribute is set for non-VLAN frame. [ 1741.897888][T13055] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1741.937451][T23530] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 1741.944882][T20764] loop1: detected capacity change from 0 to 32768 [ 1742.017827][T20764] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 1742.127621][T23530] usb 9-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1742.179756][T23530] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1742.216419][T23530] usb 9-1: Product: syz [ 1742.224629][ T30] audit: type=1800 audit(1658.518:439): pid=20764 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.21636" name="file1" dev="loop1" ino=17058 res=0 errno=0 [ 1742.229955][T20782] loop4: detected capacity change from 0 to 256 [ 1742.253189][T23530] usb 9-1: Manufacturer: syz [ 1742.265068][T23530] usb 9-1: SerialNumber: syz [ 1742.288201][T23530] usb 9-1: config 0 descriptor?? [ 1742.309217][T20782] exfat: Deprecated parameter 'namecase' [ 1742.336033][T23530] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 1742.364247][T20782] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0x8114471f, utbl_chksum : 0xe619d30d) [ 1742.392509][T23530] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1742.423095][T23530] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 1742.445349][T23530] usb 9-1: media controller created [ 1742.470560][T23530] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1742.551968][ T5762] ocfs2: Unmounting device (7,1) on (node local) [ 1742.570166][T20768] dvb-usb: bulk message failed: -22 (7/0) [ 1742.703673][T23530] DVB: Unable to find symbol mt352_attach() [ 1742.826540][T23530] DVB: Unable to find symbol nxt6000_attach() [ 1742.845388][T23530] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 1742.861380][T23530] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.8/usb9/9-1/input/input157 [ 1742.893183][T23530] dvb-usb: schedule remote query interval to 1000 msecs. [ 1742.908619][T23530] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 1742.933830][T23530] dvb-usb: bulk message failed: -22 (7/0) [ 1742.954028][T20795] loop2: detected capacity change from 0 to 2048 [ 1742.962117][T23530] dvb-usb: bulk message failed: -22 (7/0) [ 1742.989882][T23530] usb 9-1: USB disconnect, device number 4 [ 1743.011777][T16044] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1743.034344][T20796] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1743.238776][T23530] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 1743.451312][T20804] loop1: detected capacity change from 0 to 512 [ 1743.536614][T20804] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1743.610507][T20812] loop6: detected capacity change from 0 to 256 [ 1743.677837][T20804] EXT4-fs error (device loop1): ext4_ext_check_inode:521: inode #2: comm syz.1.21651: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 1743.704945][T20815] loop7: detected capacity change from 0 to 256 [ 1743.723119][T20812] exfat: Deprecated parameter 'utf8' [ 1743.752330][T20812] exfat: Deprecated parameter 'namecase' [ 1743.837529][T20812] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001fe89, chksum : 0x0232f1a3, utbl_chksum : 0xe619d30d) [ 1744.048693][ T5762] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1744.123661][T23530] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1744.358518][T20832] netlink: 4 bytes leftover after parsing attributes in process `syz.7.21661'. [ 1744.771672][T20843] devpts: Bad value for 'max' [ 1745.054095][T20852] netlink: 'syz.2.21672': attribute type 10 has an invalid length. [ 1745.080702][T23503] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1745.098262][T20852] netlink: 40 bytes leftover after parsing attributes in process `syz.2.21672'. [ 1745.205894][T20852] team_slave_1: entered promiscuous mode [ 1745.228706][T20852] team_slave_1: entered allmulticast mode [ 1745.234649][T16044] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1745.279695][T20852] team0: Port device team_slave_1 removed [ 1745.320059][T20852] A link change request failed with some changes committed already. Interface team_slave_1 may have been left with an inconsistent configuration, please check. [ 1745.759017][T20874] sch_tbf: burst 0 is lower than device lo mtu (851990) ! [ 1745.821401][T20876] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 1745.856417][T20876] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1745.906556][T20878] loop8: detected capacity change from 0 to 64 [ 1745.962426][T20878] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. Mounting read-only. [ 1746.402257][T20893] loop7: detected capacity change from 0 to 256 [ 1746.433117][T20891] ALSA: seq fatal error: cannot create timer (-22) [ 1746.448520][T20893] exfat: Deprecated parameter 'utf8' [ 1746.498032][T20893] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x72bddf51, utbl_chksum : 0xe619d30d) [ 1746.924001][T20904] netlink: 'syz.8.21695': attribute type 25 has an invalid length. [ 1747.022435][T20906] netlink: 8 bytes leftover after parsing attributes in process `syz.7.21696'. [ 1747.183286][T20911] netlink: 28 bytes leftover after parsing attributes in process `syz.4.21699'. [ 1747.323321][T20885] loop6: detected capacity change from 0 to 32768 [ 1747.367922][T20885] ocfs2: Slot 0 on device (7,6) was already allocated to this node! [ 1747.411734][T20885] JBD2: Ignoring recovery information on journal [ 1747.456301][T16044] net_ratelimit: 1 callbacks suppressed [ 1747.456324][T16044] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1747.544195][T20885] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 1748.169120][T13133] ocfs2: Unmounting device (7,6) on (node local) [ 1748.305781][T23503] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1748.564312][T16044] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1749.545877][T20940] loop4: detected capacity change from 0 to 32768 [ 1749.594734][T20940] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.21714 (20940) [ 1749.675173][T16044] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1749.681245][T20940] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1749.703005][T20940] BTRFS info (device loop4): using sha256 checksum algorithm [ 1749.762015][T20982] loop6: detected capacity change from 0 to 128 [ 1749.808779][T20982] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1749.887656][T23530] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 1749.908838][T20982] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1749.948908][T20940] BTRFS info (device loop4): enabling ssd optimizations [ 1749.991635][T20940] BTRFS info (device loop4): turning on async discard [ 1750.026964][T20940] BTRFS info (device loop4): enabling free space tree [ 1750.111648][T23530] usb 9-1: Using ep0 maxpacket: 16 [ 1750.143298][T23530] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1750.177678][T23530] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1750.220986][T23530] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1750.270400][T23530] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1750.314831][T23530] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1750.351809][T23530] usb 9-1: config 0 descriptor?? [ 1750.363595][T20999] openvswitch: netlink: Missing key (keys=40, expected=100) [ 1750.385059][ T5765] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1750.448549][T20973] loop2: detected capacity change from 0 to 32768 [ 1750.572287][T20973] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 1750.662801][T20973] JBD2: Ignoring recovery information on journal [ 1750.784604][T13055] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1750.821389][T23530] microsoft 0003:045E:07DA.0037: item 0 4 0 9 parsing failed [ 1750.851506][T23530] microsoft 0003:045E:07DA.0037: parse failed [ 1750.878504][T23530] microsoft 0003:045E:07DA.0037: probe with driver microsoft failed with error -22 [ 1750.896287][T20973] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 1751.057714][T13055] usb 9-1: USB disconnect, device number 5 [ 1751.133549][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1751.402947][ T5763] ocfs2: Unmounting device (7,2) on (node local) [ 1751.556944][T23560] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1751.789101][T13055] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 1751.812330][T23560] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1751.826418][T23503] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1751.962903][T13055] usb 2-1: Using ep0 maxpacket: 8 [ 1751.975448][T13055] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1751.977560][T21011] loop4: detected capacity change from 0 to 32768 [ 1752.008241][T13055] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1752.035247][T21011] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.21732 (21011) [ 1752.044701][T13055] usb 2-1: Product: syz [ 1752.074322][T13055] usb 2-1: Manufacturer: syz [ 1752.084948][T13055] usb 2-1: SerialNumber: syz [ 1752.088734][T21027] loop8: detected capacity change from 0 to 64 [ 1752.117706][T13055] usb 2-1: config 0 descriptor?? [ 1752.160436][T21011] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1752.174188][T13055] gspca_main: se401-2.14.0 probing 047d:5003 [ 1752.218604][T21011] BTRFS info (device loop4): using crc32c checksum algorithm [ 1752.435602][T21041] loop2: detected capacity change from 0 to 1024 [ 1752.501725][T21011] BTRFS info (device loop4): enabling ssd optimizations [ 1752.561810][T21011] BTRFS info (device loop4): turning on flush-on-commit [ 1752.587714][T21011] BTRFS info (device loop4): enabling free space tree [ 1752.596979][T13055] gspca_se401: Wrong descriptor type [ 1752.609621][T21011] BTRFS info (device loop4): enabling auto defrag [ 1752.646006][T21011] BTRFS info (device loop4): use lzo compression, level 1 [ 1752.684668][T21011] BTRFS info (device loop4): max_inline set to 0 [ 1752.870345][T21058] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge_slave_0, syncid = 1, id = 0 [ 1752.915389][T23503] usb 2-1: USB disconnect, device number 7 [ 1753.007442][T13055] net_ratelimit: 1 callbacks suppressed [ 1753.007468][T13055] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1753.040978][ T5765] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1753.800959][T21077] loop6: detected capacity change from 0 to 2048 [ 1753.885954][T21077] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1754.091436][T13133] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1754.119912][T23530] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1754.491311][T21062] loop8: detected capacity change from 0 to 32768 [ 1754.507012][T21097] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge_slave_0, syncid = 1, id = 0 [ 1754.570074][T21062] ocfs2: Slot 0 on device (7,8) was already allocated to this node! [ 1754.648049][T21062] JBD2: Ignoring recovery information on journal [ 1754.661240][T21068] loop2: detected capacity change from 0 to 32768 [ 1754.804775][T23503] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1754.852453][T21062] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode. [ 1755.207542][T21111] loop7: detected capacity change from 0 to 64 [ 1755.229583][T23530] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1755.237744][T23503] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1755.252454][T21111] hfs: unable to locate alternate MDB [ 1755.281392][T21111] hfs: continuing without an alternate MDB [ 1755.344426][T18902] ocfs2: Unmounting device (7,8) on (node local) [ 1755.445397][T21118] vim2m vim2m.0: vidioc_s_fmt queue busy [ 1755.784232][T21122] loop6: detected capacity change from 0 to 512 [ 1755.810979][T21127] netlink: 'syz.2.21776': attribute type 8 has an invalid length. [ 1755.855563][T21127] netlink: 4 bytes leftover after parsing attributes in process `syz.2.21776'. [ 1755.927219][T21127] netlink: 8 bytes leftover after parsing attributes in process `syz.2.21776'. [ 1755.968754][T21122] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1756.178951][T21122] EXT4-fs error (device loop6): ext4_ext_check_inode:521: inode #2: comm syz.6.21772: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 1756.340982][T16044] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1756.493900][T13133] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1757.296438][T21172] loop2: detected capacity change from 0 to 2048 [ 1757.346090][T21172] Dev loop2: unable to read partition block 23055453 [ 1757.385052][T21172] loop2: RDSK (1311599104) unable to read partition table [ 1757.423913][T21179] loop8: detected capacity change from 0 to 512 [ 1757.433662][T21172] loop2: partition table beyond EOD, truncated [ 1757.439910][T21172] loop_reread_partitions: partition scan of loop2 () failed (rc=-5) [ 1757.452429][T16044] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1757.696585][T21179] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1758.062701][T21185] loop2: detected capacity change from 0 to 32768 [ 1758.099424][T21185] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 1758.108412][T21185] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 1758.136416][T21185] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 1758.194811][T21185] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 1758.262548][ T30] audit: type=1800 audit(1673.521:440): pid=21194 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.21801" name="addr_trsvcid" dev="configfs" ino=162692 res=0 errno=0 [ 1758.474540][T18902] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1758.498825][T23503] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1758.565971][T13055] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1759.334325][T23560] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1759.675227][T13055] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1759.696099][T21227] loop8: detected capacity change from 0 to 512 [ 1759.733865][T21227] EXT4-fs warning (device loop8): dx_probe:800: inode #2: comm syz.8.21815: Unrecognised inode hash code 255 [ 1759.786898][T21227] EXT4-fs warning (device loop8): dx_probe:933: inode #2: comm syz.8.21815: Corrupt directory, running e2fsck is recommended [ 1759.993850][T21227] EXT4-fs (loop8): Cannot turn on journaled quota: type 1: error -2 [ 1760.044077][T21227] EXT4-fs error (device loop8): ext4_iget_extra_inode:5179: inode #15: comm syz.8.21815: corrupted in-inode xattr: invalid ea_ino [ 1760.127645][T21227] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1760.131329][T21227] EXT4-fs error (device loop8): ext4_orphan_get:1402: comm syz.8.21815: couldn't read orphan inode 15 (err -117) [ 1760.140578][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 1760.140612][ C1] EXT4-fs (loop8): initial error at time 1675: ext4_iget_extra_inode:5179: inode 15 [ 1760.140668][ C1] EXT4-fs (loop8): last error at time 1675: ext4_iget_extra_inode:5179: inode 15 [ 1760.260283][T21227] loop8: lost filesystem error report for type 5 error -117 [ 1760.272131][T21227] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1760.354075][T21248] loop7: detected capacity change from 0 to 64 [ 1760.443544][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1760.533414][T18902] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1760.785516][T13055] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1761.107765][T21241] loop1: detected capacity change from 0 to 32768 [ 1761.728596][T23560] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1761.803711][T21282] loop2: detected capacity change from 0 to 256 [ 1761.838084][T21282] exfat: Deprecated parameter 'namecase' [ 1761.841259][T21284] [U]  [ 1761.896642][T23530] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1761.924245][T21282] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xf168f48e, utbl_chksum : 0xe619d30d) [ 1762.226292][T21286] loop8: detected capacity change from 0 to 2048 [ 1762.353895][T21286] Dev loop8: unable to read partition block 23055453 [ 1762.386350][T21286] loop8: RDSK (1311599104) unable to read partition table [ 1762.408980][T21286] loop8: partition table beyond EOD, truncated [ 1762.440878][T21286] loop_reread_partitions: partition scan of loop8 () failed (rc=-5) [ 1762.493734][T21302] sctp: [Deprecated]: syz.1.21848 (pid 21302) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1762.493734][T21302] Use struct sctp_sack_info instead [ 1762.555775][T21304] netlink: 8 bytes leftover after parsing attributes in process `syz.2.21850'. [ 1762.585680][T21304] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 1762.599967][T21304] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 1762.623912][T21304] netlink: 152 bytes leftover after parsing attributes in process `syz.2.21850'. [ 1763.030683][T13055] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1763.061068][T23530] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 1763.245850][T23530] usb 3-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 1763.267663][T23530] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1763.292707][T23530] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1763.321742][T23530] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1763.343841][T23530] usb 3-1: config 0 descriptor?? [ 1763.457480][T21317] loop8: detected capacity change from 0 to 32768 [ 1763.487804][T21317] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.21856 (21317) [ 1763.532541][T21317] BTRFS info (device loop8): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 1763.559736][T21317] BTRFS info (device loop8): using sha256 checksum algorithm [ 1763.686805][T21317] BTRFS info (device loop8): enabling ssd optimizations [ 1763.739408][T21317] BTRFS info (device loop8): turning on async discard [ 1763.789345][T21317] BTRFS info (device loop8): enabling free space tree [ 1763.808645][T23530] input: HID 1020:0006 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:1020:0006.0038/input/input159 [ 1763.858965][T23530] belkin 0003:1020:0006.0038: input,hidraw0: USB HID v0.00 Joystick [HID 1020:0006] on usb-dummy_hcd.2-1/input0 [ 1764.144527][T13055] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1764.161827][T23530] usb 3-1: USB disconnect, device number 27 [ 1764.189750][T18902] BTRFS info (device loop8): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 1764.218230][T21349] loop1: detected capacity change from 0 to 2048 [ 1764.240175][T21347] fido_id[21347]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 1764.409202][T21349] Dev loop1: unable to read partition block 23055453 [ 1764.467928][T21349] loop1: RDSK (1311599104) unable to read partition table [ 1764.566170][T21349] loop1: partition table beyond EOD, truncated [ 1764.646971][T21349] loop_reread_partitions: partition scan of loop1 () failed (rc=-5) [ 1764.751528][ T4976] Dev loop1: unable to read partition block 23055453 [ 1764.794438][ T4976] loop1: RDSK (1311599104) unable to read partition table [ 1764.833112][ T4976] loop1: partition table beyond EOD, truncated [ 1764.999878][T23560] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1765.230777][ T5914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1765.310208][T21370] bridge0: port 3(gretap0) entered disabled state [ 1765.389942][T21370] bridge0: port 4(erspan0) entered disabled state [ 1765.559947][T21386] loop1: detected capacity change from 0 to 64 [ 1765.583694][T21370] bridge0: port 2(bridge_slave_1) entered disabled state [ 1765.594043][T21370] bridge0: port 1(bridge_slave_0) entered disabled state [ 1765.616335][T21370] tipc: Resetting bearer [ 1765.678527][T21388] loop7: detected capacity change from 0 to 256 [ 1766.046884][T21394] loop2: detected capacity change from 0 to 512 [ 1766.137550][T21394] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1766.170727][T16044] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1766.303089][T21394] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #15: comm syz.2.21883: corrupted xattr block 33: invalid header [ 1766.315818][T21370] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1766.348929][T16044] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1766.407726][T21370] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1766.526479][ T5763] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1766.559015][T21370] tipc: Resetting bearer [ 1766.760633][T21370] netdevsim netdevsim6 netdevsim0: left promiscuous mode [ 1766.844722][ T47] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1766.920254][T28670] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1766.944221][T28670] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1766.960599][T28670] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1767.160487][T21415] loop6: detected capacity change from 0 to 512 [ 1767.227343][T21415] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 1767.262771][T21415] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 1767.316380][T21415] System zones: 0-1, 15-15, 18-18, 34-34 [ 1767.322695][T21415] EXT4-fs (loop6): orphan cleanup on readonly fs [ 1767.330451][T21415] Quota error (device loop6): v2_read_header: Failed header read: expected=8 got=0 [ 1767.340226][T21415] EXT4-fs warning (device loop6): ext4_enable_quotas:7272: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1767.355183][T21415] EXT4-fs (loop6): Cannot turn on quotas: error -22 [ 1767.369861][T21415] EXT4-fs error (device loop6): ext4_validate_block_bitmap:440: comm syz.6.21892: bg 0: block 40: padding at end of block bitmap is not set [ 1767.384567][T21415] loop6: lost filesystem error report for type 5 error -117 [ 1767.384903][T21415] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 1767.392267][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 1767.392300][ C0] EXT4-fs (loop6): initial error at time 1682: ext4_validate_block_bitmap:440 [ 1767.392348][ C0] EXT4-fs (loop6): last error at time 1682: ext4_validate_block_bitmap:440 [ 1767.452943][T23530] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1767.480673][T21415] loop6: lost filesystem error report for type 5 error -117 [ 1767.490290][T21415] EXT4-fs (loop6): 1 truncate cleaned up [ 1767.609697][T21415] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1767.679967][T21428] netlink: 'syz.2.21898': attribute type 2 has an invalid length. [ 1767.740499][T21415] EXT4-fs error (device loop6): ext4_encrypted_get_link:46: inode #16: comm syz.6.21892: bad symlink. [ 1767.847825][T23530] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 1767.904786][T13133] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1768.018908][T23530] usb 2-1: Using ep0 maxpacket: 16 [ 1768.047542][T23530] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1768.071957][T23530] usb 2-1: New USB device found, idVendor=2304, idProduct=022e, bcdDevice=32.6b [ 1768.108243][T23530] usb 2-1: config 5 has an invalid interface number: 248 but max is 0 [ 1768.129834][T23530] usb 2-1: config 5 has no interface number 0 [ 1768.150031][T23530] usb 2-1: config 5 interface 248 altsetting 4 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1768.186382][T23530] usb 2-1: config 5 interface 248 has no altsetting 0 [ 1768.218279][T23530] usb 2-1: string descriptor 0 read error: -22 [ 1768.240734][T23530] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1768.270646][T21436] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1768.355375][T21421] loop4: detected capacity change from 0 to 32768 [ 1768.394288][ T47] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1768.431983][ T47] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1768.467615][T21421] *** Log Is Dirty ! *** [ 1768.470416][ T47] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1768.483269][T21421] lmLogInit: exit(-22) [ 1768.506790][T21421] lmLogOpen: exit(-22) [ 1768.517867][ T47] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1768.542491][T23530] dvb-usb: found a 'Pinnacle Expresscard 320cx' in warm state. [ 1768.569737][T23533] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1768.578741][T23530] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1768.599557][T21424] loop8: detected capacity change from 0 to 32768 [ 1768.608896][T21440] loop2: detected capacity change from 0 to 64 [ 1768.621255][T23530] dvbdev: DVB: registering new adapter (Pinnacle Expresscard 320cx) [ 1768.633373][T21424] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.21896 (21424) [ 1768.656110][T23530] usb 2-1: media controller created [ 1768.664145][T21440] hfs: unable to locate alternate MDB [ 1768.676226][T21440] hfs: continuing without an alternate MDB [ 1768.697477][T21424] BTRFS info (device loop8): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1768.716242][T23530] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1768.741246][T21424] BTRFS info (device loop8): using sha256 checksum algorithm [ 1768.953701][T21424] BTRFS info (device loop8): enabling ssd optimizations [ 1769.008155][T21424] BTRFS info (device loop8): turning on async discard [ 1769.029586][T21424] BTRFS info (device loop8): enabling free space tree [ 1769.075563][T23530] DVB: Unable to find symbol dib7000p_attach() [ 1769.116258][T23530] dvb-usb: no frontend was attached by 'Pinnacle Expresscard 320cx' [ 1769.335171][T18902] BTRFS info (device loop8): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1769.386333][T23530] rc_core: IR keymap rc-dib0700-rc5 not found [ 1769.404929][T23530] Registered IR keymap rc-empty [ 1769.420337][T15086] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1769.434382][T23530] dvb-usb: could not initialize remote control. [ 1769.465459][T23530] dvb-usb: Pinnacle Expresscard 320cx successfully initialized and connected. [ 1769.501307][T23530] dib0700: There's no endpoint for remote controller [ 1769.592902][T15086] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1769.677776][T23533] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1769.768040][T21473] netlink: 'syz.8.21909': attribute type 142 has an invalid length. [ 1769.827545][T21473] netlink: 16 bytes leftover after parsing attributes in process `syz.8.21909'. [ 1769.938114][T15086] usb 2-1: USB disconnect, device number 8 [ 1769.949651][ T30] audit: type=1326 audit(1684.462:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21478 comm="syz.6.21914" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f67fe59e0d9 code=0x0 [ 1770.113184][T15086] dvb-usb: Pinnacle Expresscard 320cx successfully deinitialized and disconnected. [ 1770.274510][T23503] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1770.767885][T21502] loop1: detected capacity change from 0 to 128 [ 1770.786911][T23533] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1770.798098][T21502] FAT-fs (loop1): bogus number of reserved sectors [ 1770.816568][T21502] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 1770.842967][T21502] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1771.130369][T23503] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 1771.208918][T21515] netlink: 'syz.4.21930': attribute type 3 has an invalid length. [ 1771.316003][T23503] usb 2-1: Using ep0 maxpacket: 8 [ 1771.337468][T23503] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1771.369602][T23503] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 1771.390589][T23503] usb 2-1: config 179 has no interface number 0 [ 1771.412774][T23503] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 1771.453375][T23503] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 1771.472321][T21523] loop8: detected capacity change from 0 to 128 [ 1771.496658][T23503] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 105, changing to 10 [ 1771.513437][T21523] FAT-fs (loop8): Directory bread(block 1048) failed [ 1771.534058][T23503] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 26229, setting to 1024 [ 1771.534827][T21523] FAT-fs (loop8): Directory bread(block 1049) failed [ 1771.574625][T23503] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1771.599309][T21523] FAT-fs (loop8): Directory bread(block 1050) failed [ 1771.635384][T23503] usb 2-1: config 179 interface 65 has no altsetting 0 [ 1771.652797][T21523] FAT-fs (loop8): Directory bread(block 1051) failed [ 1771.661173][T23503] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1771.689961][T21523] FAT-fs (loop8): Directory bread(block 1052) failed [ 1771.703188][T21502] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1771.732590][T21523] FAT-fs (loop8): Directory bread(block 1053) failed [ 1771.760808][T21523] FAT-fs (loop8): Directory bread(block 1054) failed [ 1771.778820][T21523] FAT-fs (loop8): Directory bread(block 1055) failed [ 1771.811093][T23503] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input161 [ 1771.824195][T15086] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 1771.910190][T23533] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1771.912427][T21523] syz.8.21935: attempt to access beyond end of device [ 1771.912427][T21523] loop8: rw=8390659, sector=1096, nr_sectors = 8 limit=128 [ 1771.984400][ T4961] input input161: unable to receive magic message: -110 [ 1772.034088][T15086] usb 5-1: New USB device found, idVendor=1b96, idProduct=0009, bcdDevice= 0.00 [ 1772.084435][ T4961] input input161: unable to receive magic message: -71 [ 1772.105864][T15086] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1772.158825][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1772.167228][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1772.181869][T23503] usb 2-1: USB disconnect, device number 9 [ 1772.226200][T15086] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1772.275858][T15086] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1772.447309][T15086] usb 5-1: config 0 descriptor?? [ 1772.629041][T21533] loop6: detected capacity change from 0 to 4096 [ 1772.655638][T21533] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1772.678835][T23504] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1772.686328][T21533] EXT4-fs (loop6): Test dummy encryption mode enabled [ 1772.730982][T21533] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c1a8, mo2=0003] [ 1772.746748][T21533] System zones: 0-5 [ 1772.781303][T21533] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1772.802621][T21540] netlink: 40 bytes leftover after parsing attributes in process `syz.7.21943'. [ 1772.916412][T21533] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 1772.936165][T15086] ntrig 0003:1B96:0009.0039: unknown main item tag 0x0 [ 1772.974595][T15086] ntrig 0003:1B96:0009.0039: unknown main item tag 0x0 [ 1773.007050][T15086] ntrig 0003:1B96:0009.0039: unknown main item tag 0x0 [ 1773.020171][T23533] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1773.059861][T15086] ntrig 0003:1B96:0009.0039: unknown main item tag 0x0 [ 1773.093785][T15086] ntrig 0003:1B96:0009.0039: unknown main item tag 0x0 [ 1773.116862][T15086] ntrig 0003:1B96:0009.0039: unknown main item tag 0x0 [ 1773.143788][T15086] ntrig 0003:1B96:0009.0039: unknown main item tag 0x0 [ 1773.177889][T15086] ntrig 0003:1B96:0009.0039: hidraw0: USB HID v0.00 Device [HID 1b96:0009] on usb-dummy_hcd.4-1/input0 [ 1773.249675][T13133] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1773.261492][T15086] usb 5-1: USB disconnect, device number 14 [ 1773.472843][T21554] fido_id[21554]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 1773.549315][T21560] loop6: detected capacity change from 0 to 512 [ 1773.602793][T21560] EXT4-fs warning (device loop6): dx_probe:843: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 1773.618475][T21560] EXT4-fs warning (device loop6): dx_probe:848: Enable large directory feature to access it [ 1773.630813][T21560] EXT4-fs warning (device loop6): dx_probe:933: inode #2: comm syz.6.21949: Corrupt directory, running e2fsck is recommended [ 1773.650603][T21560] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -117 [ 1773.659101][T21560] EXT4-fs error (device loop6): ext4_iget_extra_inode:5179: inode #15: comm syz.6.21949: corrupted in-inode xattr: e_name out of bounds [ 1773.675147][T21560] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1773.677049][T21560] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.21949: couldn't read orphan inode 15 (err -117) [ 1773.686273][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 1773.686307][ C1] EXT4-fs (loop6): initial error at time 1687: ext4_iget_extra_inode:5179: inode 15 [ 1773.686364][ C1] EXT4-fs (loop6): last error at time 1687: ext4_iget_extra_inode:5179: inode 15 [ 1773.725314][T21560] loop6: lost filesystem error report for type 5 error -117 [ 1773.738541][T21560] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1773.897268][T13133] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1774.026898][T21571] netlink: 76 bytes leftover after parsing attributes in process `syz.7.21956'. [ 1774.054762][T21572] loop4: detected capacity change from 0 to 128 [ 1774.064015][T21571] netlink: 40 bytes leftover after parsing attributes in process `syz.7.21956'. [ 1774.089157][T21571] netlink: 16 bytes leftover after parsing attributes in process `syz.7.21956'. [ 1774.102757][T21572] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 1774.122777][T23530] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1774.154540][T21572] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1774.247659][T21576] loop2: detected capacity change from 0 to 2048 [ 1774.404393][T21576] FAT-fs (loop2): error, fat_get_cluster: detected the cluster chain loop (i_pos 1) [ 1774.542425][T21584] loop7: detected capacity change from 0 to 512 [ 1774.606807][T21584] EXT4-fs (loop7): Test dummy encryption mode enabled [ 1774.654327][T21584] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1774.726960][T21584] EXT4-fs (loop7): 1 truncate cleaned up [ 1774.814467][T21584] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1775.030789][T15884] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1775.124089][T23530] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 1775.231014][T23533] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1775.339478][T23530] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1775.378033][T23530] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1775.397056][T23530] usb 2-1: Product: syz [ 1775.435666][T23530] usb 2-1: Manufacturer: syz [ 1775.448240][T23530] usb 2-1: SerialNumber: syz [ 1775.525807][T23533] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1775.581415][T21617] netlink: 8 bytes leftover after parsing attributes in process `syz.7.21976'. [ 1775.670187][T21616] loop2: detected capacity change from 0 to 2048 [ 1775.725345][T21616] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1775.771175][T21616] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1775.928098][T15086] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1776.349503][T23530] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1776.684212][T23533] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1776.717312][T23533] ath9k_htc: Failed to initialize the device [ 1776.935029][T23533] usb 2-1: ath9k_htc: USB layer deinitialized [ 1777.006176][T23530] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 1777.092038][T21623] loop4: detected capacity change from 0 to 32768 [ 1777.186540][T23530] usb 9-1: Using ep0 maxpacket: 16 [ 1777.216996][T23530] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice=4f.14 [ 1777.262573][T23530] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1777.313411][T23530] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1777.354104][T23530] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1777.390164][T23530] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1777.429090][T23530] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1777.444444][T23530] usb 9-1: Product: syz [ 1777.449449][T21658] loop7: detected capacity change from 0 to 128 [ 1777.453458][T16044] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1777.464789][T23530] usb 9-1: Manufacturer: syz [ 1777.474626][T23530] usb 9-1: SerialNumber: syz [ 1777.487679][T21658] FAT-fs (loop7): bogus number of reserved sectors [ 1777.513110][T23530] usb 9-1: config 0 descriptor?? [ 1777.523513][T21658] FAT-fs (loop7): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 1777.570483][T21658] FAT-fs (loop7): Can't find a valid FAT filesystem [ 1777.822936][T23503] usb 9-1: USB disconnect, device number 6 [ 1778.102062][T15086] usb 2-1: USB disconnect, device number 10 [ 1778.110934][T21656] loop2: detected capacity change from 0 to 32768 [ 1778.259844][T21668] loop1: detected capacity change from 0 to 256 [ 1778.564619][T23533] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1778.775915][T21670] ptrace attach of "ci-upstream-kasan-badwrites-root/syz-executor exec"[21673] was attempted by "ci-upstream-kasan-badwrites-root/syz-executor exec"[21670] [ 1779.026844][T23503] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 1779.173548][T15086] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1779.254202][T23503] usb 5-1: Using ep0 maxpacket: 16 [ 1779.270522][T23503] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1c03, bcdDevice= 0.00 [ 1779.304336][T23503] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1779.340773][T23503] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1779.356597][T21692] loop1: detected capacity change from 0 to 256 [ 1779.369016][T23503] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1779.430219][T23503] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1779.465928][T23503] usb 5-1: config 0 descriptor?? [ 1779.675879][T23530] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1779.952797][T23503] corsair-psu 0003:1B1C:1C03.003A: item fetching failed at offset 30/34 [ 1779.960843][T21684] loop8: detected capacity change from 0 to 32768 [ 1779.981380][T23503] corsair-psu 0003:1B1C:1C03.003A: probe with driver corsair-psu failed with error -22 [ 1780.031157][T21684] XFS (loop8): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1780.183762][T21684] XFS (loop8): Ending clean mount [ 1780.312489][T23503] usb 5-1: USB disconnect, device number 15 [ 1780.532256][T15086] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1780.607943][T18902] XFS (loop8): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1780.788682][T23533] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1780.954211][T21708] loop6: detected capacity change from 0 to 32768 [ 1781.391587][T21715] loop1: detected capacity change from 0 to 32768 [ 1781.576151][T21715] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1781.589882][T21740] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1781.618677][T23530] IPVS: starting estimator thread 0... [ 1781.669947][T21751] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 3692 out of range (51000000..2150000000) [ 1781.727586][T21744] IPVS: using max 28 ests per chain, 67200 per kthread [ 1781.760927][T21756] loop8: detected capacity change from 0 to 64 [ 1781.768874][T21715] XFS (loop1): Ending clean mount [ 1781.916398][T15086] libceph: connect (1)[c::]:6789 error -13 [ 1781.924357][T23530] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1781.970842][T15086] libceph: mon0 (1)[c::]:6789 connect error [ 1782.035877][ T5762] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1782.052309][T21762] loop4: detected capacity change from 0 to 128 [ 1782.118667][T15086] libceph: connect (1)[c::]:6789 error -13 [ 1782.130539][T15086] libceph: mon0 (1)[c::]:6789 connect error [ 1782.133658][T21762] FAT-fs (loop4): Directory bread(block 1048) failed [ 1782.208415][T21762] FAT-fs (loop4): Directory bread(block 1049) failed [ 1782.225358][T21762] FAT-fs (loop4): Directory bread(block 1050) failed [ 1782.255737][T21731] ceph: No mds server is up or the cluster is laggy [ 1782.257693][T21762] FAT-fs (loop4): Directory bread(block 1051) failed [ 1782.343013][T21762] FAT-fs (loop4): Directory bread(block 1052) failed [ 1782.363043][T21762] FAT-fs (loop4): Directory bread(block 1053) failed [ 1782.399488][T21762] FAT-fs (loop4): Directory bread(block 1054) failed [ 1782.413826][T15086] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1782.424392][T23560] libceph: connect (1)[c::]:6789 error -13 [ 1782.438867][T23560] libceph: mon0 (1)[c::]:6789 connect error [ 1782.461183][T21762] FAT-fs (loop4): Directory bread(block 1055) failed [ 1782.778638][T21762] syz.4.22034: attempt to access beyond end of device [ 1782.778638][T21762] loop4: rw=8390659, sector=1096, nr_sectors = 8 limit=128 [ 1783.012825][T23530] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1783.053359][T21779] IPVS: Error connecting to the multicast addr [ 1784.015779][T21815] loop1: detected capacity change from 0 to 512 [ 1784.054662][T21815] EXT4-fs (loop1): Test dummy encryption mode enabled [ 1784.099956][T21815] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.22056: inode has both inline data and extents flags [ 1784.126301][T23530] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1784.179305][T21815] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1784.180627][T21815] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.22056: couldn't read orphan inode 15 (err -117) [ 1784.189852][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 1784.189891][ C0] EXT4-fs (loop1): initial error at time 1697: ext4_orphan_get:1399: inode 15 [ 1784.189945][ C0] EXT4-fs (loop1): last error at time 1697: ext4_orphan_get:1399: inode 15 [ 1784.226811][T21815] loop1: lost filesystem error report for type 5 error -117 [ 1784.235122][T21815] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1784.337455][T23504] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 1784.527390][T23504] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1784.577687][T23504] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1784.607108][T23504] usb 3-1: Product: syz [ 1784.624963][T23504] usb 3-1: Manufacturer: syz [ 1784.631481][T23504] usb 3-1: SerialNumber: syz [ 1784.667377][ T5762] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1784.709781][T23560] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1785.058390][T21840] bridge0: port 2(bridge_slave_1) entered disabled state [ 1785.066162][T21840] bridge0: port 1(bridge_slave_0) entered disabled state [ 1785.232086][T23533] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1785.481290][T21840] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1785.525827][T21840] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1785.671720][T23503] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1785.753230][T21840] veth3: left promiscuous mode [ 1785.762504][T21840] vlan2: left allmulticast mode [ 1785.768272][T21840] bond0: left allmulticast mode [ 1785.773570][T21840] bond_slave_0: left allmulticast mode [ 1785.781489][T21840] bond_slave_1: left allmulticast mode [ 1785.790106][T19048] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1785.824270][ T47] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1785.854602][ T47] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1785.887791][ T47] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1785.915819][T23560] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 1785.942390][T23560] ath9k_htc: Failed to initialize the device [ 1786.040980][T23560] usb 3-1: ath9k_htc: USB layer deinitialized [ 1786.116280][T21863] loop1: detected capacity change from 0 to 64 [ 1786.156190][T21863] Trying to free block not in datazone [ 1786.344091][T16044] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1786.419558][T21874] loop1: detected capacity change from 0 to 256 [ 1786.907455][T21887] loop6: detected capacity change from 0 to 256 [ 1786.986538][T21889] loop1: detected capacity change from 0 to 512 [ 1787.019487][T21889] EXT4-fs (loop1): Test dummy encryption mode enabled [ 1787.047935][T21889] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1787.103013][T21889] EXT4-fs error (device loop1): ext4_orphan_get:1425: comm syz.1.22085: bad orphan inode 131083 [ 1787.185709][T21889] loop1: lost filesystem error report for type 5 error -117 [ 1787.186953][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 1787.200756][ C0] EXT4-fs (loop1): initial error at time 1700: ext4_orphan_get:1425 [ 1787.208805][ C0] EXT4-fs (loop1): last error at time 1700: ext4_orphan_get:1425 [ 1787.242759][T21889] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1787.454560][T16044] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1787.481024][T23530] usb 3-1: USB disconnect, device number 28 [ 1787.580450][ T5762] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1787.688563][T21905] loop2: detected capacity change from 0 to 8 [ 1787.861888][T21905] SQUASHFS error: Failed to read block 0x2d7: -5 [ 1787.901492][T21905] SQUASHFS error: Unable to read metadata cache entry [2d5] [ 1788.144192][T21921] netlink: 8 bytes leftover after parsing attributes in process `syz.1.22102'. [ 1788.195044][T21923] loop8: detected capacity change from 0 to 64 [ 1788.244222][T21923] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. Mounting read-only. [ 1788.514177][T21933] netlink: 'syz.1.22108': attribute type 2 has an invalid length. [ 1788.568131][T16044] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1788.850481][T21946] hugetlbfs: Bad value '' for mount option 'nr_inodes' [ 1788.850481][T21946] [ 1788.910388][T23560] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1789.223031][T21957] loop4: detected capacity change from 0 to 512 [ 1789.273962][T21957] EXT4-fs: Ignoring removed i_version option [ 1789.309630][T21957] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1789.351675][T21957] EXT4-fs error (device loop4): ext4_free_branches:1020: inode #11: comm syz.4.22120: invalid indirect mapped block 4294967295 (level 1) [ 1789.405829][T21957] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1789.421567][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 1789.437210][ C1] EXT4-fs (loop4): initial error at time 1702: ext4_free_branches:1020: inode 11 [ 1789.446446][ C1] EXT4-fs (loop4): last error at time 1702: ext4_free_branches:1020: inode 11 [ 1789.446863][T21957] EXT4-fs error (device loop4): ext4_free_branches:1020: inode #11: comm syz.4.22120: invalid indirect mapped block 4294967295 (level 1) [ 1789.534472][T21957] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1789.536662][T21957] EXT4-fs (loop4): 2 truncates cleaned up [ 1789.574462][T21971] loop2: detected capacity change from 0 to 256 [ 1789.611549][T21957] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1789.677396][T16044] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1789.712738][T21973] IPVS: Error connecting to the multicast addr [ 1789.834786][T21957] [ 1789.837148][T21957] ====================================================== [ 1789.844195][T21957] WARNING: possible circular locking dependency detected [ 1789.851220][T21957] syzkaller #0 Tainted: G L [ 1789.857200][T21957] ------------------------------------------------------ [ 1789.864215][T21957] syz.4.22120/21957 is trying to acquire lock: [ 1789.870366][T21957] ffff888021f24640 (sb_internal){.+.+}-{0:0}, at: evict+0x3c2/0xad0 [ 1789.878433][T21957] [ 1789.878433][T21957] but task is already holding lock: [ 1789.885793][T21957] ffff88804fd7ac18 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_ext_migrate+0x3bf/0x2000 [ 1789.896043][T21957] [ 1789.896043][T21957] which lock already depends on the new lock. [ 1789.896043][T21957] [ 1789.906438][T21957] [ 1789.906438][T21957] the existing dependency chain (in reverse order) is: [ 1789.915443][T21957] [ 1789.915443][T21957] -> #1 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 1789.923895][T21957] lock_acquire+0x1b9/0x370 [ 1789.928933][T21957] ext4_writepages+0x21d/0x750 [ 1789.934241][T21957] do_writepages+0x278/0x600 [ 1789.939356][T21957] __writeback_single_inode+0x164/0x1300 [ 1789.945540][T21957] writeback_single_inode+0x51c/0xfc0 [ 1789.951452][T21957] write_inode_now+0x174/0x1f0 [ 1789.956755][T21957] iput.part.0+0x62a/0x1050 [ 1789.961786][T21957] iput+0x35/0x40 [ 1789.965978][T21957] ext4_xattr_block_set+0x6f7/0x3660 [ 1789.971799][T21957] ext4_expand_extra_isize_ea+0x17c6/0x1d70 [ 1789.978233][T21957] __ext4_expand_extra_isize+0x346/0x480 [ 1789.984400][T21957] __ext4_mark_inode_dirty+0x668/0x880 [ 1789.990405][T21957] ext4_evict_inode+0x835/0x1960 [ 1789.995887][T21957] evict+0x3c2/0xad0 [ 1790.000308][T21957] iput.part.0+0x989/0x1050 [ 1790.005341][T21957] iput+0x35/0x40 [ 1790.009506][T21957] ext4_orphan_cleanup+0x71e/0x11e0 [ 1790.015253][T21957] ext4_fill_super+0x917f/0xb470 [ 1790.020718][T21957] get_tree_bdev_flags+0x38c/0x620 [ 1790.026369][T21957] vfs_get_tree+0x92/0x320 [ 1790.031320][T21957] path_mount+0x7d0/0x23d0 [ 1790.036264][T21957] __x64_sys_mount+0x293/0x310 [ 1790.041559][T21957] do_syscall_64+0x115/0x870 [ 1790.046697][T21957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1790.053117][T21957] [ 1790.053117][T21957] -> #0 (sb_internal){.+.+}-{0:0}: [ 1790.060436][T21957] check_prev_add+0xeb/0xe60 [ 1790.065557][T21957] __lock_acquire+0x136c/0x1a40 [ 1790.070943][T21957] lock_acquire+0x1b9/0x370 [ 1790.075976][T21957] ext4_evict_inode+0xf1b/0x1960 [ 1790.081458][T21957] evict+0x3c2/0xad0 [ 1790.085882][T21957] iput.part.0+0x989/0x1050 [ 1790.090922][T21957] iput+0x35/0x40 [ 1790.095082][T21957] ext4_ext_migrate+0xd5b/0x2000 [ 1790.100560][T21957] __ext4_ioctl+0xd32/0x4200 [ 1790.105672][T21957] __x64_sys_ioctl+0x18e/0x210 [ 1790.110971][T21957] do_syscall_64+0x115/0x870 [ 1790.116102][T21957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1790.122519][T21957] [ 1790.122519][T21957] other info that might help us debug this: [ 1790.122519][T21957] [ 1790.132763][T21957] Possible unsafe locking scenario: [ 1790.132763][T21957] [ 1790.140200][T21957] CPU0 CPU1 [ 1790.145554][T21957] ---- ---- [ 1790.150905][T21957] lock(&sbi->s_writepages_rwsem); [ 1790.156108][T21957] lock(sb_internal); [ 1790.162698][T21957] lock(&sbi->s_writepages_rwsem); [ 1790.170425][T21957] rlock(sb_internal); [ 1790.174583][T21957] [ 1790.174583][T21957] *** DEADLOCK *** [ 1790.174583][T21957] [ 1790.182714][T21957] 3 locks held by syz.4.22120/21957: [ 1790.187990][T21957] #0: ffff888021f24450 (sb_writers#4){.+.+}-{0:0}, at: __ext4_ioctl+0xd02/0x4200 [ 1790.197263][T21957] #1: ffff88803563bbc0 (&type->i_mutex_dir_key#3){++++}-{4:4}, at: __ext4_ioctl+0xd2a/0x4200 [ 1790.207578][T21957] #2: ffff88804fd7ac18 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_ext_migrate+0x3bf/0x2000 [ 1790.218273][T21957] [ 1790.218273][T21957] stack backtrace: [ 1790.224159][T21957] CPU: 0 UID: 0 PID: 21957 Comm: syz.4.22120 Tainted: G L syzkaller #0 PREEMPT(full) [ 1790.224207][T21957] Tainted: [L]=SOFTLOCKUP [ 1790.224219][T21957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1790.224240][T21957] Call Trace: [ 1790.224252][T21957] [ 1790.224264][T21957] dump_stack_lvl+0x100/0x190 [ 1790.224303][T21957] print_circular_bug.cold+0x178/0x1c7 [ 1790.224361][T21957] check_noncircular+0x146/0x160 [ 1790.224404][T21957] check_prev_add+0xeb/0xe60 [ 1790.224444][T21957] __lock_acquire+0x136c/0x1a40 [ 1790.224491][T21957] lock_acquire+0x1b9/0x370 [ 1790.224528][T21957] ? evict+0x3c2/0xad0 [ 1790.224563][T21957] ? __pfx___might_resched+0x10/0x10 [ 1790.224602][T21957] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1790.224647][T21957] ext4_evict_inode+0xf1b/0x1960 [ 1790.224698][T21957] ? evict+0x3c2/0xad0 [ 1790.224730][T21957] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 1790.224776][T21957] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1790.224820][T21957] ? __pfx_ext4_evict_inode+0x10/0x10 [ 1790.224871][T21957] ? evict+0x37e/0xad0 [ 1790.224908][T21957] ? evict+0x37e/0xad0 [ 1790.224939][T21957] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1790.224984][T21957] ? __pfx_ext4_evict_inode+0x10/0x10 [ 1790.225036][T21957] evict+0x3c2/0xad0 [ 1790.225072][T21957] ? __pfx_evict+0x10/0x10 [ 1790.225104][T21957] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1790.225149][T21957] ? iput.part.0+0x981/0x1050 [ 1790.225183][T21957] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1790.225230][T21957] iput.part.0+0x989/0x1050 [ 1790.225269][T21957] iput+0x35/0x40 [ 1790.225302][T21957] ext4_ext_migrate+0xd5b/0x2000 [ 1790.225351][T21957] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1790.225399][T21957] ? __pfx_ext4_ext_migrate+0x10/0x10 [ 1790.225449][T21957] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1790.225490][T21957] ? down_write+0x146/0x1f0 [ 1790.225544][T21957] ? __pfx_down_write+0x10/0x10 [ 1790.225596][T21957] ? mnt_get_write_access+0x1e9/0x2f0 [ 1790.225639][T21957] __ext4_ioctl+0xd32/0x4200 [ 1790.225673][T21957] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1790.225718][T21957] ? __pfx___ext4_ioctl+0x10/0x10 [ 1790.225753][T21957] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1790.225794][T21957] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1790.225832][T21957] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1790.225873][T21957] ? do_vfs_ioctl+0x226/0x13e0 [ 1790.225919][T21957] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1790.225964][T21957] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1790.226005][T21957] ? find_held_lock+0x2b/0x80 [ 1790.226056][T21957] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1790.226097][T21957] ? hook_file_ioctl_common+0x140/0x440 [ 1790.226144][T21957] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1790.226185][T21957] ? __fget_files+0x21f/0x3d0 [ 1790.226236][T21957] ? __pfx_ext4_ioctl+0x10/0x10 [ 1790.226268][T21957] __x64_sys_ioctl+0x18e/0x210 [ 1790.226311][T21957] do_syscall_64+0x115/0x870 [ 1790.226363][T21957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1790.226398][T21957] RIP: 0033:0x7f22a1f9e0d9 [ 1790.226425][T21957] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1790.226458][T21957] RSP: 002b:00007f22a2df7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1790.226490][T21957] RAX: ffffffffffffffda RBX: 00007f22a2225fa0 RCX: 00007f22a1f9e0d9 [ 1790.226513][T21957] RDX: 0000000000000000 RSI: 0000000000006609 RDI: 0000000000000004 [ 1790.226534][T21957] RBP: 00007f22a2035024 R08: 0000000000000000 R09: 0000000000000000 [ 1790.226556][T21957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1790.226576][T21957] R13: 00007f22a2226038 R14: 00007f22a2225fa0 R15: 00007fffc2b9fad8 [ 1790.226611][T21957] [ 1790.644868][T21959] loop1: detected capacity change from 0 to 40427 [ 1790.720598][T21959] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 1790.750303][T21959] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 1790.763293][T21959] F2FS-fs (loop1): invalid crc value [ 1790.770031][ T4926] Bluetooth: hci6: unexpected event for opcode 0x0404 [ 1790.788186][T16044] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1790.802248][T21962] loop6: detected capacity change from 0 to 32768 [ 1790.809115][T23504] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1790.827448][T21962] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.22123 (21962) [ 1790.843480][ T5765] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1790.860943][T21962] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1790.872096][T21962] BTRFS info (device loop6): using sha256 checksum algorithm [ 1791.004887][T21959] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1791.016441][T21959] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 1791.025316][T21959] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1791.039292][T21962] BTRFS info (device loop6): enabling ssd optimizations [ 1791.055409][T21962] BTRFS info (device loop6): turning on async discard [ 1791.063741][T21962] BTRFS info (device loop6): enabling free space tree [ 1791.068165][T21959] syz.1.22121: attempt to access beyond end of device [ 1791.068165][T21959] loop1: rw=2049, sector=53248, nr_sectors = 8 limit=40427 [ 1791.147211][ T5762] syz-executor: attempt to access beyond end of device [ 1791.147211][ T5762] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1791.166847][ T5762] CPU: 1 UID: 0 PID: 5762 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 1791.166909][ T5762] Tainted: [L]=SOFTLOCKUP [ 1791.166922][ T5762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1791.166945][ T5762] Call Trace: [ 1791.166957][ T5762] [ 1791.166971][ T5762] dump_stack_lvl+0x100/0x190 [ 1791.167017][ T5762] f2fs_stop_checkpoint+0x5e6/0xb30 [ 1791.167076][ T5762] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1791.167120][ T5762] ? errseq_set+0xe3/0x150 [ 1791.167174][ T5762] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1791.167223][ T5762] f2fs_write_end_bio+0xf53/0x1340 [ 1791.167261][ T5762] ? __pfx_f2fs_write_end_bio+0x10/0x10 [ 1791.167296][ T5762] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1791.167340][ T5762] ? rcu_is_watching+0x12/0xc0 [ 1791.167397][ T5762] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1791.167441][ T5762] ? lock_release+0x24d/0x310 [ 1791.167487][ T5762] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 1791.167524][ T5762] bio_endio+0x778/0x8e0 [ 1791.167567][ T5762] submit_bio_noacct+0x64c/0x1ff0 [ 1791.167631][ T5762] f2fs_submit_write_bio+0x133/0x330 [ 1791.167689][ T5762] __submit_merged_bio+0x330/0x7b0 [ 1791.167724][ T5762] ? rcu_is_watching+0x12/0xc0 [ 1791.167782][ T5762] __submit_merged_write_cond+0x3fe/0x510 [ 1791.167826][ T5762] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 1791.167876][ T5762] ? __pfx___might_resched+0x10/0x10 [ 1791.167922][ T5762] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1791.167967][ T5762] ? folio_clear_dirty_for_io+0x178/0x960 [ 1791.168030][ T5762] f2fs_write_cache_pages+0x20e9/0x2630 [ 1791.168088][ T5762] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1791.168134][ T5762] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 1791.168181][ T5762] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1791.168226][ T5762] ? clockevents_program_event+0x1ef/0x820 [ 1791.168286][ T5762] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1791.168329][ T5762] ? kernel_text_address+0x8d/0x100 [ 1791.168369][ T5762] ? __pfx_clockevents_program_event+0x10/0x10 [ 1791.168424][ T5762] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1791.168469][ T5762] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1791.168513][ T5762] ? __css_rstat_updated+0x1ce/0x5a0 [ 1791.168557][ T5762] ? __hrtimer_rearm_deferred+0x23c/0x720 [ 1791.168626][ T5762] ? rcu_is_watching+0x12/0xc0 [ 1791.168691][ T5762] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1791.168735][ T5762] ? __mod_zone_page_state+0xe2/0x190 [ 1791.168805][ T5762] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1791.168849][ T5762] ? rcu_is_watching+0x12/0xc0 [ 1791.168907][ T5762] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1791.168950][ T5762] ? lock_release+0x24d/0x310 [ 1791.168992][ T5762] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1791.169035][ T5762] ? rcu_is_watching+0x12/0xc0 [ 1791.169092][ T5762] f2fs_write_data_pages+0x799/0x16d0 [ 1791.169146][ T5762] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1791.169201][ T5762] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1791.169247][ T5762] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1791.169294][ T5762] do_writepages+0x278/0x600 [ 1791.169331][ T5762] ? __pfx_do_writepages+0x10/0x10 [ 1791.169364][ T5762] ? do_raw_spin_unlock+0x145/0x1e0 [ 1791.169415][ T5762] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1791.169459][ T5762] ? _raw_spin_unlock+0x28/0x50 [ 1791.169508][ T5762] filemap_writeback+0x22d/0x2e0 [ 1791.169546][ T5762] ? __pfx_filemap_writeback+0x10/0x10 [ 1791.169615][ T5762] ? f2fs_sync_dirty_inodes+0x3a7/0x970 [ 1791.169663][ T5762] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1791.169707][ T5762] ? rcu_is_watching+0x12/0xc0 [ 1791.169760][ T5762] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1791.169805][ T5762] ? lock_release+0x24d/0x310 [ 1791.169853][ T5762] f2fs_sync_dirty_inodes+0x46a/0x970 [ 1791.169920][ T5762] block_operations+0x2a6/0xfc0 [ 1791.169965][ T5762] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1791.170010][ T5762] ? rcu_is_watching+0x12/0xc0 [ 1791.170068][ T5762] ? __pfx_block_operations+0x10/0x10 [ 1791.170121][ T5762] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1791.170197][ T5762] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1791.170242][ T5762] ? rcu_is_watching+0x12/0xc0 [ 1791.170295][ T5762] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1791.170340][ T5762] ? trace_irq_enable.constprop.0+0x122/0x160 [ 1791.170390][ T5762] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1791.170435][ T5762] ? rcu_is_watching+0x12/0xc0 [ 1791.170494][ T5762] f2fs_write_checkpoint+0x58b/0x53d0 [ 1791.170544][ T5762] ? trace_irq_enable.constprop.0+0x122/0x160 [ 1791.170594][ T5762] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1791.170639][ T5762] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1791.170687][ T5762] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1791.170731][ T5762] ? __wait_for_common+0x1f3/0x4c0 [ 1791.170783][ T5762] ? __pfx_schedule_timeout+0x10/0x10 [ 1791.170829][ T5762] ? __pfx___wait_for_common+0x10/0x10 [ 1791.170881][ T5762] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1791.170935][ T5762] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 1791.170983][ T5762] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1791.171034][ T5762] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1791.171080][ T5762] ? rcu_is_watching+0x12/0xc0 [ 1791.171132][ T5762] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1791.171177][ T5762] ? kthread_stop+0x280/0x630 [ 1791.171237][ T5762] kill_f2fs_super+0x3f1/0x4a0 [ 1791.171284][ T5762] ? __pfx_kill_f2fs_super+0x10/0x10 [ 1791.171345][ T5762] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1791.171401][ T5762] deactivate_locked_super+0xc1/0x1b0 [ 1791.171450][ T5762] deactivate_super+0xe7/0x110 [ 1791.171495][ T5762] cleanup_mnt+0x21f/0x450 [ 1791.171550][ T5762] task_work_run+0x150/0x240 [ 1791.171589][ T5762] ? __pfx_task_work_run+0x10/0x10 [ 1791.171630][ T5762] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1791.171675][ T5762] ? rcu_is_watching+0x12/0xc0 [ 1791.171733][ T5762] exit_to_user_mode_loop+0x1d8/0x6f0 [ 1791.171779][ T5762] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1791.171822][ T5762] ? rcu_is_watching+0x12/0xc0 [ 1791.171879][ T5762] do_syscall_64+0x666/0x870 [ 1791.171943][ T5762] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1791.171982][ T5762] RIP: 0033:0x7f82f099f317 [ 1791.172010][ T5762] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 1791.172047][ T5762] RSP: 002b:00007ffe1b71bc58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1791.172083][ T5762] RAX: 0000000000000000 RBX: 00007f82f0a34474 RCX: 00007f82f099f317 [ 1791.172109][ T5762] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe1b71bd10 [ 1791.172133][ T5762] RBP: 00007ffe1b71bd10 R08: 00007ffe1b71cd10 R09: 00000000ffffffff [ 1791.172158][ T5762] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe1b71cda0 [ 1791.172183][ T5762] R13: 00007f82f0a34474 R14: 00000000001a014d R15: 00007ffe1b71cde0 [ 1791.172224][ T5762] [ 1791.173558][ T5762] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 1791.188562][T13133] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1791.864216][T23560] loop1: lost filesystem error report for type 5 error -108 [ 1791.905431][T23530] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1792.155924][T23560] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1793.013608][T23530] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1794.121631][T16044] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1795.243354][T16044] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1795.404981][T23560] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1796.346260][T16044] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1797.455285][T13055] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1798.566308][T13055] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1798.652115][T23560] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1799.680171][T13055] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog