last executing test programs: 53.074815092s ago: executing program 3 (id=474): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) 52.881271021s ago: executing program 3 (id=476): add_key$fscrypt_provisioning(0x0, 0x0, &(0x7f00000000c0)={0x0, 0x0, @a}, 0x48, 0x0) r0 = add_key$user(&(0x7f0000000200), &(0x7f0000000440), &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000540), &(0x7f0000000380)={'syz', 0x2}, &(0x7f0000000580)="ed", 0x1, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000100)={r2, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'blake2b-256\x00'}}) 52.748997168s ago: executing program 3 (id=477): setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, 0x0, 0x0) r0 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) rename(0x0, &(0x7f0000000080)='./file2\x00') sendmsg$kcm(r0, &(0x7f00000005c0)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f0000000080), 0x1}, 0x0) 52.697016911s ago: executing program 3 (id=478): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x84000, 0x0) 52.572279727s ago: executing program 3 (id=479): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8085}, 0x24000840) 52.012916326s ago: executing program 3 (id=484): r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r3, @ANYBLOB="1c005a8018000180140003000012"], 0x38}}, 0x0) 51.51858917s ago: executing program 32 (id=484): r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r3, @ANYBLOB="1c005a8018000180140003000012"], 0x38}}, 0x0) 4.1738069s ago: executing program 2 (id=817): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c00000002000000f3ff00000000000e0000000000000000000000000600000d00000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000c20000000000000000000000900000000000000000000000900000000000000000000000902"], 0x0, 0x96, 0x0, 0x3}, 0x28) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={r1, 0xd8, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001000), 0x8, 0x0, 0x8, 0xffffffffffffff0e, 0x0}}, 0x10) 4.012600188s ago: executing program 2 (id=819): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x14}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x300, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0xfd6c) 3.57888512s ago: executing program 0 (id=824): unshare(0x2040400) r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x1000) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='veth1_to_bridge\x00', 0x10) getsockopt$sock_buf(r0, 0x1, 0x19, &(0x7f0000006080)=""/241, &(0x7f0000000280)=0xf1) 3.56898262s ago: executing program 2 (id=825): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x9, 0x700, 0x80000}, 0x50) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="0c000280060001"], 0x24}}, 0x0) 3.395128429s ago: executing program 2 (id=827): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000240)=0x3) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)=0xffffffff) read$dsp(r0, &(0x7f0000000340)=""/36, 0x24) 3.345349132s ago: executing program 0 (id=829): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000300)=[@in={0x2, 0x4e24, @private=0xa010102}]}, &(0x7f0000000280)=0x10) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f00000000c0), 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000200)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000380)={r1}, &(0x7f0000000340)=0x8) 2.607680149s ago: executing program 1 (id=838): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000001680)=[@in6={0xa, 0x4e24, 0xfffffffc, @empty, 0x2}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f00000001c0)={0xa, 0x4e24, 0x80001804, @loopback, 0x4}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000080)="fb", 0x1}], 0x1}, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000200)={0x0, 0x2, 0x9, 0x200, 0x1ff, 0x800, 0x2, 0x5, {0x0, @in={{0x2, 0x5e23, @multicast2}}, 0x1ffc, 0x7, 0x2, 0xc, 0x9}}, &(0x7f0000000040)=0xb0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000300)={r1, 0x38, "6f4deac77971cc2681619b9b3a73d7c3e823f6dd96716e350100000001000000d479d6d107b740a9de2225078f569b4dfc6d48e8d8ca6269"}, &(0x7f0000000180)=0x40) 2.601745639s ago: executing program 4 (id=839): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x56c, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000140)="09000000e700140000007e7bfbf788a83baa9900d6f18f8e950088a800008100", 0x20, 0x24000801, &(0x7f0000000300)={0x11, 0x9900, r2, 0x1, 0x8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}}, 0x14) 2.430046848s ago: executing program 4 (id=840): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x74, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xfffffffe, 0xb}}}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0xb, 0x1, {0x0, 0x4, 0x5, 0x0, 0x1, 0xfffffffb, 0x3, 0x1}}, {0x6, 0x2, [0xfff]}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x40088c1}, 0x40a4) 2.325041493s ago: executing program 2 (id=841): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x2}) r1 = socket$netlink(0x10, 0x3, 0x8) preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)=""/1, 0x1}], 0x1, 0x4, 0x80000000) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) 2.324804623s ago: executing program 0 (id=842): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x1210010, &(0x7f0000000340)=ANY=[@ANYBLOB="696f636861727365743d69736f383835392d372c757466383d312c696f636861727365743d63703835372c73686f72746e616d653d6c6f7765722c6e6f6e756d7461696c3d302c7379735f696d6d757461626c652c73686f72746e616d653d6c6f7765722c696f636861727365743d61736369692c73686f72746e616d653d6c6f7765722c756e695f786c6174653d312c757466383d312c71756965742c756e695f786c6174653d312c756e695f786c6174653d3100000000000000026d653d6d697865642c72736469722c756e695f786c6174653d302c757466383d302c00"], 0x1, 0x379, &(0x7f0000000880)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x641, 0x8000001, r0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) 2.177037441s ago: executing program 0 (id=843): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) mprotect(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 2.043266337s ago: executing program 4 (id=844): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0207e80702"], 0x10}}, 0x40044) r1 = socket$inet6(0xa, 0x3, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x44}, @in=@local, 0x0, 0x56, 0x4e23, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x2, 0xfffffffffffffff6, 0x2000000, 0x1, 0xfffffffffffffffd}, {0x1ff, 0x800000000000, 0x4, 0xffffffffffffff7f}, 0x1, 0x0, 0x1, 0x0, 0x1}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x3f}, 0x0, 0x2b}, 0xa, @in=@loopback, 0x3504, 0x4, 0x0, 0x0, 0xffffffff, 0x6, 0x4}}, 0xe8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}}, 0x1c) 1.99681968s ago: executing program 1 (id=845): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) tee(r1, r0, 0x5, 0xe) 1.864933196s ago: executing program 2 (id=846): syz_mount_image$ocfs2(&(0x7f00000026c0), &(0x7f0000004780)='./file0\x00', 0x200000, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1, 0x4703, &(0x7f0000004800)="$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") syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0x20002078) 1.744972172s ago: executing program 1 (id=847): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x1c, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0xfe, 0x2, 0x0, 0x93}, 0xe) pselect6(0x40, &(0x7f0000000100)={0x9, 0x0, 0x4000000000, 0x0, 0xa48f, 0x0, 0x800010100000}, 0x0, 0x0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r0, 0x1) 1.357958582s ago: executing program 1 (id=848): setgroups(0x0, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee01) setresgid(0x0, 0xee00, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) 1.166041631s ago: executing program 1 (id=849): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{r0, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000380)='%pI4 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r1, 0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x1f, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b705000008000000850000006d00000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r3}, 0xc) 1.132412713s ago: executing program 0 (id=850): syz_mount_image$squashfs(&(0x7f0000000940), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="007e2a01b3e93dc9b01cde3a16380b3485a43d22a0baf1475abb31820c847c4cc9c5f7fb5b0346e9584bd76d3e0284a2d88a1203a216f9000000000000000000cd53386d3903cd1c5feea0df6ae2ffebef5a71b94f19fe6b85f2e967358056b96f0ea03203e45120741be6031f1d069575c54d3635d0bfe4f1c7021f"], 0x1, 0x183, &(0x7f0000000380)="$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") r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) recvmmsg(r0, &(0x7f00000002c0), 0x220, 0x100, 0x0) sendmsg(r0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000d80)=ANY=[], 0x4e8}, 0x4008000) 752.897602ms ago: executing program 4 (id=851): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffe3a}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)=@newqdisc={0x154, 0x24, 0xf0b, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x124, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x1, 0x80000000, 0x6, 0xe, 0x14, 0x19, 0x2}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x2}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x154}}, 0x4000010) 708.325745ms ago: executing program 1 (id=852): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x80800) readv(r1, &(0x7f0000000640)=[{&(0x7f0000000180)=""/4, 0x4}], 0x1) 386.647731ms ago: executing program 4 (id=853): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2004de, &(0x7f0000000100), 0x3, 0x451, &(0x7f0000000f80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x109342, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8080c61) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f0000000200)="df", 0x1}], 0x1, 0x47ffffe, 0xffffffff, 0x0) 68.728717ms ago: executing program 0 (id=854): syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000040)='./bus\x00', 0x2000844, &(0x7f0000000c80)={[{@nodots}, {@fat=@dos1xfloppy}, {@nodots}, {@fat=@nocase}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x7fff}}, {@nodots}, {@dots}, {@fat=@umask={'umask', 0x3d, 0x4}}, {@fat=@errors_remount}, {@fat=@sys_immutable}, {@fat=@gid}, {@fat=@fmask={'fmask', 0x3d, 0x3}}, {@fat=@time_offset={'time_offset', 0x3d, 0xa8}}, {@fat=@sys_immutable}, {@fat=@nfs}, {@fat=@check_strict}]}, 0x1, 0x23d, &(0x7f0000000a40)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1/file3\x00', 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f00000003c0)='.\x00', 0x1b4a47c, &(0x7f0000000dc0)=ANY=[@ANYRES32=0x0, @ANYRES16, @ANYRES32, @ANYRES8, @ANYRESDEC, @ANYRES64, @ANYBLOB="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", @ANYRESHEX, @ANYRES8, @ANYRESHEX, @ANYRES64, @ANYBLOB="07d78ba5b4b305ffa8003d3ce9ffa739e0663e1417c13e72c5279a4b999c88a472706213954865e31509148053419264d6e4ec3f597efaff912ace951125b3eefd14d39185759d6549fe537e3d3c4d5cca3176840af5baa12c6f9bf000085e9875bf09d5c1b1e68f64b44e689ec52c2df882e0d459003298db32777a378c4ace0a20ae4a3a02388044d29ef0ffa7adc737b0e171078e04e665b07fb8d05b5ccf37b7c0724193faac2f04266491289d17e88372335d09e151925ff8f7c30ba93bf421dab1b80566c94d8f42330d10a8b53d815ef818852dca140b21658b973a38b98965cf8af56a1be1543a9b5f596880c1911c54fecd5aefde798a5acb8833ad7e20a68b631cd72101baa470ccc24d68bd292b3d37cc4f1c8d103d99360b6b334059b0333f1540f8594962365e55c0810ef88297072101e1c8affb8b023d24892888c40da78bf946c60d81cc01f3f4e2a09e2e53f05810508579f8d2b298d0dc464180b160f0084060aeb860184400000000008313734b00336f0000f5d969bcf7fbb6ba8de2052baf059660df91e3a4947561683a317fe235858b566069fd7879aa92b18e38b1cb651d5cd3c13c3da31fb20c21c9d5ae9d01a1f64d72e6977aa83825c4f7e3d145ca0417c66270b0c3d1d421cb0b496be97f198d4d18ba35d50aff318cf3c58c8e8a8ee364a028f59a58eded1817cce0207ce5a63b23d3248c65cee3426cc8cadec7ca3c693fd7b4ac2c353922349c87c51cb01be73b1e7c6ed8ffbc146c68501e5a8d", @ANYRESDEC=0x0, @ANYRES32, @ANYRES16], 0x5, 0x0, &(0x7f0000000000)) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) 0s ago: executing program 4 (id=855): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x408, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@uuid_off}]}) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file1\x00', &(0x7f0000000080)=@xfs={0x24, 0x81, {0x7fffffffffffffff, 0xd4a3, 0x7, 0xed2}}, 0x0, 0x1200) kernel console output (not intermixed with test programs): across:124996k [ 86.125174][ T5777] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.134505][ T5777] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.143429][ T5788] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.151508][ T5788] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.160378][ T5788] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.168242][ T5788] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.177530][ T5788] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 86.184978][ T5788] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.193149][ T5788] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.248014][ T5777] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.263022][ T5787] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.268789][ T5786] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.279810][ T5786] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.279847][ T5787] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.290415][ T5786] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.301972][ T5786] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.310606][ T5787] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.315580][ T5786] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 86.326142][ T5786] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.331328][ T5787] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 86.341486][ T5786] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.341881][ T5787] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.370356][ T5787] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 86.378604][ T5781] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.855220][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 86.930820][ T5773] chnl_net:caif_netlink_parms(): no params data found [ 86.966358][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 87.084727][ T5774] chnl_net:caif_netlink_parms(): no params data found [ 87.106993][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.114958][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.122712][ T5775] bridge_slave_0: entered allmulticast mode [ 87.130482][ T5775] bridge_slave_0: entered promiscuous mode [ 87.140619][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.147860][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.155242][ T5775] bridge_slave_1: entered allmulticast mode [ 87.162728][ T5775] bridge_slave_1: entered promiscuous mode [ 87.267803][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.275065][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.283048][ T5773] bridge_slave_0: entered allmulticast mode [ 87.290675][ T5773] bridge_slave_0: entered promiscuous mode [ 87.299400][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.306582][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.314193][ T5773] bridge_slave_1: entered allmulticast mode [ 87.321760][ T5773] bridge_slave_1: entered promiscuous mode [ 87.345470][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.409933][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.431601][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.439112][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.446373][ T5776] bridge_slave_0: entered allmulticast mode [ 87.453936][ T5776] bridge_slave_0: entered promiscuous mode [ 87.498836][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.506019][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.527991][ T5774] bridge_slave_0: entered allmulticast mode [ 87.535470][ T5774] bridge_slave_0: entered promiscuous mode [ 87.567830][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.587594][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.594773][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.603297][ T5776] bridge_slave_1: entered allmulticast mode [ 87.611078][ T5776] bridge_slave_1: entered promiscuous mode [ 87.649307][ T5775] team0: Port device team_slave_0 added [ 87.655750][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.664210][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.671984][ T5774] bridge_slave_1: entered allmulticast mode [ 87.679839][ T5774] bridge_slave_1: entered promiscuous mode [ 87.701750][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.725290][ T5775] team0: Port device team_slave_1 added [ 87.775085][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.799454][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.848436][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.859189][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.866193][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.893053][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.906901][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.914347][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.945397][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.961024][ T5773] team0: Port device team_slave_0 added [ 87.972139][ T5773] team0: Port device team_slave_1 added [ 87.980558][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.077010][ T5776] team0: Port device team_slave_0 added [ 88.086248][ T5774] team0: Port device team_slave_0 added [ 88.094722][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.102054][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.128055][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.152002][ T5776] team0: Port device team_slave_1 added [ 88.171221][ T5774] team0: Port device team_slave_1 added [ 88.180960][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.188148][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.214926][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.269128][ T5775] hsr_slave_0: entered promiscuous mode [ 88.275827][ T5775] hsr_slave_1: entered promiscuous mode [ 88.283724][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.291301][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.317755][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.330764][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.338331][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.364586][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.377979][ T5086] Bluetooth: hci0: command tx timeout [ 88.395105][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.402267][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.429300][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.447321][ T5086] Bluetooth: hci1: command tx timeout [ 88.447383][ T5786] Bluetooth: hci2: command tx timeout [ 88.453144][ T5086] Bluetooth: hci3: command tx timeout [ 88.483597][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.490765][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.517348][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.581424][ T5773] hsr_slave_0: entered promiscuous mode [ 88.590981][ T5773] hsr_slave_1: entered promiscuous mode [ 88.597343][ T5773] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.605257][ T5773] Cannot create hsr debugfs directory [ 88.656852][ T5776] hsr_slave_0: entered promiscuous mode [ 88.663524][ T5776] hsr_slave_1: entered promiscuous mode [ 88.670034][ T5776] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.677727][ T5776] Cannot create hsr debugfs directory [ 88.718852][ T5774] hsr_slave_0: entered promiscuous mode [ 88.725444][ T5774] hsr_slave_1: entered promiscuous mode [ 88.732260][ T5774] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.740633][ T5774] Cannot create hsr debugfs directory [ 89.156770][ T5775] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 89.175718][ T5775] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 89.186997][ T5775] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 89.206892][ T5775] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 89.300181][ T5776] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 89.310901][ T5776] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 89.321783][ T5776] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 89.336554][ T5776] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 89.468059][ T5773] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 89.481900][ T5773] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 89.493456][ T5773] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 89.518280][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.527014][ T5773] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 89.566315][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.598442][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.605876][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.644804][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.652038][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.703076][ T5774] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 89.714897][ T5774] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 89.726177][ T5774] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 89.751629][ T5774] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 89.773009][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.866043][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.935144][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.942500][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.955663][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.962912][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.061012][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.125910][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.199783][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.229977][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.249995][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.257243][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.304237][ T1078] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.311444][ T1078] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.351476][ T1078] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.358780][ T1078] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.376600][ T2948] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.383854][ T2948] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.448704][ T5086] Bluetooth: hci0: command tx timeout [ 90.463605][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.527725][ T5086] Bluetooth: hci3: command tx timeout [ 90.529722][ T5786] Bluetooth: hci2: command tx timeout [ 90.533231][ T5086] Bluetooth: hci1: command tx timeout [ 90.734052][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.742041][ T5775] veth0_vlan: entered promiscuous mode [ 90.773688][ T5775] veth1_vlan: entered promiscuous mode [ 90.861452][ T5776] veth0_vlan: entered promiscuous mode [ 90.885512][ T5775] veth0_macvtap: entered promiscuous mode [ 90.915507][ T5776] veth1_vlan: entered promiscuous mode [ 90.945200][ T5775] veth1_macvtap: entered promiscuous mode [ 91.034181][ T5776] veth0_macvtap: entered promiscuous mode [ 91.075490][ T5776] veth1_macvtap: entered promiscuous mode [ 91.085281][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.109149][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.140403][ T5775] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.151563][ T5775] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.162290][ T5775] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.172044][ T5775] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.212996][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.246398][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.258020][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.272762][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.315040][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.344952][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.359192][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.371225][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.400303][ T5776] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.409609][ T5776] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.419203][ T5776] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.429776][ T5776] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.523154][ T3532] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.536175][ T3532] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.604019][ T5773] veth0_vlan: entered promiscuous mode [ 91.633034][ T5774] veth0_vlan: entered promiscuous mode [ 91.670465][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.678785][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.678930][ T5774] veth1_vlan: entered promiscuous mode [ 91.710512][ T5773] veth1_vlan: entered promiscuous mode [ 91.757661][ T1078] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.765736][ T1078] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.824448][ T5774] veth0_macvtap: entered promiscuous mode [ 91.871537][ T5773] veth0_macvtap: entered promiscuous mode [ 91.882393][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.884345][ T5774] veth1_macvtap: entered promiscuous mode [ 91.899937][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.914403][ T5773] veth1_macvtap: entered promiscuous mode [ 91.984081][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.007348][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.038826][ T5843] ======================================================= [ 92.038826][ T5843] WARNING: The mand mount option has been deprecated and [ 92.038826][ T5843] and is ignored by this kernel. Remove the mand [ 92.038826][ T5843] option from the mount to silence this warning. [ 92.038826][ T5843] ======================================================= [ 92.055491][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.085251][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.098385][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.109228][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.126443][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.148659][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.159987][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.170412][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.183568][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.202327][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.232628][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.251319][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.264456][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.279818][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.293636][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.315103][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.330167][ T786] cfg80211: failed to load regulatory.db [ 92.347303][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.368524][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.395215][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.415845][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.437143][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.456409][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.492399][ T5774] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.506892][ T5774] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.515932][ T5774] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.528900][ T5086] Bluetooth: hci0: command tx timeout [ 92.544065][ T5774] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.607692][ T5086] Bluetooth: hci1: command tx timeout [ 92.610159][ T5786] Bluetooth: hci2: command tx timeout [ 92.613478][ T5086] Bluetooth: hci3: command tx timeout [ 92.639906][ T5773] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.667235][ T5773] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.676034][ T5773] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.716068][ T5773] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.976041][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.987680][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.086395][ T3532] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.095190][ T3532] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.216048][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.233129][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.248954][ T5861] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 93.321139][ T3532] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.342458][ T3532] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.969102][ T5877] syz.1.15[5877]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 94.608512][ T5086] Bluetooth: hci0: command tx timeout [ 94.688877][ T5086] Bluetooth: hci2: command tx timeout [ 94.695371][ T5086] Bluetooth: hci1: command tx timeout [ 94.701680][ T5086] Bluetooth: hci3: command tx timeout [ 94.710720][ T5894] loop3: detected capacity change from 0 to 512 [ 94.776321][ T5896] loop2: detected capacity change from 0 to 512 [ 94.991955][ T5896] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.044823][ T5896] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.192293][ T5877] loop1: detected capacity change from 0 to 40427 [ 95.221024][ T5896] Quota error (device loop2): write_blk: dquota write failed [ 95.232110][ T5877] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 95.258008][ T5896] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 95.264578][ T5877] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 95.283859][ T5906] Invalid ELF header magic: != ELF [ 95.292221][ T5877] F2FS-fs (loop1): invalid crc value [ 95.299507][ T5896] EXT4-fs error (device loop2): ext4_acquire_dquot:6953: comm syz.2.24: Failed to acquire dquot type 1 [ 95.335845][ T5877] F2FS-fs (loop1): Found nat_bits in checkpoint [ 95.493049][ T5877] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 95.504380][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.508334][ T5877] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 95.816815][ T5914] loop2: detected capacity change from 0 to 4096 [ 95.842922][ T5774] syz-executor: attempt to access beyond end of device [ 95.842922][ T5774] loop1: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 95.902937][ T5774] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 95.916342][ T5914] ntfs: (device loop2): ntfs_read_locked_inode(): $DATA attribute is missing. [ 95.940488][ T12] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 95.949824][ T5914] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 95.949914][ T5914] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 95.961773][ T5914] ntfs: volume version 3.1. [ 96.015121][ T12] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 96.185882][ T5914] ntfs: (device loop2): ntfs_cluster_alloc(): Failed to allocate clusters, aborting (error -28). [ 96.223238][ T5914] ntfs: (device loop2): ntfs_attr_extend_allocation(): Cannot extend allocation of inode 0x43, attribute type 0x80, because the allocation of clusters failed with error code -28. [ 96.429459][ T5776] ntfs: (device loop2): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 96.832935][ T5927] loop3: detected capacity change from 0 to 128 [ 96.905118][ T5927] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 97.007164][ T5932] loop2: detected capacity change from 0 to 512 [ 97.014772][ T5932] EXT4-fs: Ignoring removed orlov option [ 97.024035][ T5932] EXT4-fs (loop2): Test dummy encryption mode enabled [ 97.030964][ T5927] ext4 filesystem being mounted at /9/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 97.032051][ T5932] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 97.055795][ T5932] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 97.092708][ T5932] EXT4-fs (loop2): 1 truncate cleaned up [ 97.118092][ T5932] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.163640][ T5935] loop1: detected capacity change from 0 to 256 [ 97.234642][ T5773] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 97.326674][ T5932] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 97.521845][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.784188][ T5944] loop2: detected capacity change from 0 to 4096 [ 98.004072][ T28] audit: type=1804 audit(1776907139.912:2): pid=5944 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.40" name="/newroot/9/file0/file0" dev="loop2" ino=0 res=1 errno=0 [ 98.298386][ T5959] loop2: detected capacity change from 0 to 16 [ 98.376261][ T5959] erofs: (device loop2): mounted with root inode @ nid 36. [ 98.412589][ T5941] loop3: detected capacity change from 0 to 32768 [ 98.512543][ T5941] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 98.594571][ T5941] XFS (loop3): Ending clean mount [ 98.944437][ T5773] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 99.423980][ T5989] netlink: 24 bytes leftover after parsing attributes in process `syz.2.58'. [ 99.625742][ T5993] Bluetooth: MGMT ver 1.22 [ 99.705291][ T23] IPVS: starting estimator thread 0... [ 99.817540][ T5996] IPVS: using max 18 ests per chain, 43200 per kthread [ 100.251167][ T6007] warning: `syz.2.66' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 100.600615][ T6016] loop3: detected capacity change from 0 to 4096 [ 100.701620][ T6018] loop2: detected capacity change from 0 to 4096 [ 100.736632][ T6018] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 100.860120][ T6022] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 7 bytes [ 101.024670][ T6016] ntfs3: loop3: ino=21, "file1" attr_insert_range [ 101.632594][ T6040] netlink: 'syz.0.80': attribute type 13 has an invalid length. [ 101.679707][ T6040] netlink: 24859 bytes leftover after parsing attributes in process `syz.0.80'. [ 101.798633][ T966] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 102.003617][ T966] usb 4-1: config index 0 descriptor too short (expected 1572, got 36) [ 102.013834][ T966] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 102.040241][ T966] usb 4-1: New USB device found, idVendor=05ac, idProduct=0238, bcdDevice= 0.40 [ 102.072955][ T966] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.090337][ T6035] loop1: detected capacity change from 0 to 32768 [ 102.096808][ T966] usb 4-1: Product: syz [ 102.096925][ T966] usb 4-1: Manufacturer: syz [ 102.096943][ T966] usb 4-1: SerialNumber: syz [ 102.142713][ T6035] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.79 (6035) [ 102.183308][ T966] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input5 [ 102.263475][ T6035] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 102.297607][ T6035] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 102.308112][ T6035] BTRFS info (device loop1): enabling auto defrag [ 102.314941][ T6035] BTRFS info (device loop1): use no compression [ 102.323086][ T6035] BTRFS info (device loop1): max_inline at 4096 [ 102.331456][ T6035] BTRFS info (device loop1): using free space tree [ 102.395711][ T5126] bcm5974 4-1:1.0: could not read from device [ 102.422897][ T5126] bcm5974 4-1:1.0: could not read from device [ 102.458476][ T966] bcm5974 4-1:1.0: could not read from device [ 102.514826][ T966] input: failed to attach handler mousedev to device input5, error: -5 [ 102.560676][ T5126] bcm5974 4-1:1.0: could not read from device [ 102.572440][ T6035] BTRFS info (device loop1): enabling ssd optimizations [ 102.594084][ T966] usb 4-1: USB disconnect, device number 2 [ 102.613863][ T6035] BTRFS info (device loop1): auto enabling async discard [ 102.647402][ T8] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 102.897911][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 102.942196][ T8] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 102.955205][ T8] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 102.966254][ T8] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 102.985258][ T8] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 102.996656][ T8] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 103.015347][ T5774] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 103.017524][ T8] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 103.045033][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.289965][ T8] usb 3-1: usb_control_msg returned -32 [ 103.315153][ T8] usbtmc 3-1:16.0: can't read capabilities [ 103.532226][ T6082] loop3: detected capacity change from 0 to 2048 [ 103.621301][ T6082] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.694228][ T6082] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.784698][ T6092] netlink: 8 bytes leftover after parsing attributes in process `syz.0.95'. [ 103.829069][ T6092] netlink: 'syz.0.95': attribute type 18 has an invalid length. [ 103.852186][ T6092] netlink: 4 bytes leftover after parsing attributes in process `syz.0.95'. [ 103.885530][ T6082] fs-verity: sha512 using implementation "sha512-avx2" [ 103.960382][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.769938][ T6112] loop3: detected capacity change from 0 to 32768 [ 104.784773][ T6112] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 scanned by syz.3.106 (6112) [ 104.816711][ T6112] BTRFS info (device loop3): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 104.827314][ T6112] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 104.840935][ T6112] BTRFS info (device loop3): enabling disk space caching [ 104.850274][ T6112] BTRFS info (device loop3): force clearing of disk cache [ 104.857731][ T5763] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 104.859089][ T6112] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 104.875458][ T6112] BTRFS info (device loop3): use zstd compression, level 3 [ 104.883703][ T6112] BTRFS info (device loop3): disk space caching is enabled [ 104.967355][ T6112] BTRFS info (device loop3): enabling ssd optimizations [ 104.982083][ T6112] BTRFS info (device loop3): auto enabling async discard [ 104.993532][ T6112] BTRFS info (device loop3): rebuilding free space tree [ 105.047455][ T5763] usb 2-1: Using ep0 maxpacket: 16 [ 105.058162][ T6112] BTRFS info (device loop3): disabling free space tree [ 105.059451][ T5763] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 105.079961][ T6112] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 105.087298][ T5763] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.110496][ T6112] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 105.130002][ T5763] usb 2-1: config 0 descriptor?? [ 105.140019][ T5763] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 105.392615][ T5773] BTRFS info (device loop3): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 105.454317][ T27] usb 3-1: USB disconnect, device number 2 [ 105.683066][ T6136] loop2: detected capacity change from 0 to 128 [ 105.709447][ T6136] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 105.798951][ T6136] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 105.928728][ T6136] tipc: Started in network mode [ 105.933847][ T6136] tipc: Node identity 2d7205184d3be668002e, cluster identity 4711 [ 106.004659][ T6141] syz.3.109 uses obsolete (PF_INET,SOCK_PACKET) [ 106.178692][ T5763] gspca_sonixj: reg_w1 err -71 [ 106.202075][ T6146] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 106.219861][ T5763] sonixj: probe of 2-1:0.0 failed with error -71 [ 106.245859][ T5763] usb 2-1: USB disconnect, device number 2 [ 106.254762][ T6147] netlink: 'syz.0.114': attribute type 3 has an invalid length. [ 106.284563][ T6147] netlink: 72 bytes leftover after parsing attributes in process `syz.0.114'. [ 106.806839][ T6162] loop3: detected capacity change from 0 to 256 [ 106.872368][ T6162] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d) [ 106.898600][ T8] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 107.101910][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 107.142206][ T8] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 107.167214][ T8] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 107.193721][ T8] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 107.207405][ T5763] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 107.217177][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.233506][ T8] usb 1-1: Product: syz [ 107.238363][ T8] usb 1-1: Manufacturer: syz [ 107.243066][ T8] usb 1-1: SerialNumber: syz [ 107.397136][ T5763] usb 2-1: Using ep0 maxpacket: 32 [ 107.415123][ T5763] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 107.434513][ T5763] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 107.456227][ T5763] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 107.477156][ T5763] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 107.503515][ T8] usb 1-1: 0:2 : does not exist [ 107.510907][ T5763] usb 2-1: config 0 interface 0 has no altsetting 0 [ 107.530636][ T5763] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 107.539537][ T8] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 107.554765][ T5763] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 107.573605][ T5763] usb 2-1: Product: syz [ 107.578266][ T5763] usb 2-1: Manufacturer: syz [ 107.582952][ T5763] usb 2-1: SerialNumber: syz [ 107.616784][ T5763] usb 2-1: config 0 descriptor?? [ 107.633008][ T6176] loop2: detected capacity change from 0 to 8192 [ 107.643140][ T5763] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 107.674803][ T5763] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 107.695705][ T8] usb 1-1: USB disconnect, device number 2 [ 107.788515][ T5779] udevd[5779]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 108.055595][ T8] usb 2-1: USB disconnect, device number 3 [ 108.055611][ C1] ldusb 2-1:0.0: usb_submit_urb failed (-19) [ 108.077628][ T6166] ldusb 2-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 108.108054][ T6180] ldusb 2-1:0.0: Couldn't submit HID_REQ_SET_REPORT -19 [ 108.121080][ T8] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 108.202853][ T6178] loop3: detected capacity change from 0 to 32768 [ 108.219701][ T6178] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 scanned by syz.3.130 (6178) [ 108.299568][ T6178] BTRFS info (device loop3): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 108.326578][ T6178] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 108.340199][ T6178] BTRFS info (device loop3): force zlib compression, level 3 [ 108.348277][ T6178] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 108.386790][ T6178] BTRFS info (device loop3): use zstd compression, level 3 [ 108.413336][ T6178] BTRFS info (device loop3): enabling ssd optimizations [ 108.435229][ T6178] BTRFS info (device loop3): using free space tree [ 108.502712][ T6178] BTRFS info (device loop3): auto enabling async discard [ 108.870949][ T5773] BTRFS info (device loop3): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 109.413602][ T6216] netlink: 'syz.0.138': attribute type 39 has an invalid length. [ 109.805603][ T5763] libceph: connect (1)[c::]:6789 error -101 [ 109.814026][ T6228] netlink: 'syz.2.142': attribute type 10 has an invalid length. [ 109.824390][ T5763] libceph: mon0 (1)[c::]:6789 connect error [ 109.838694][ T6225] ceph: No mds server is up or the cluster is laggy [ 109.874285][ T6228] team0: Device vxcan1 is of different type [ 110.002657][ T6228] syz.2.142 (6228) used greatest stack depth: 20712 bytes left [ 110.383381][ T6248] loop2: detected capacity change from 0 to 256 [ 110.417578][ T6248] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 110.438553][ T6248] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 110.477714][ T6248] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 110.601616][ T6253] netlink: 8 bytes leftover after parsing attributes in process `syz.2.153'. [ 110.617957][ T6253] Zero length message leads to an empty skb [ 111.219492][ T6272] loop8: detected capacity change from 0 to 8 [ 111.247531][ T6272] Dev loop8: unable to read RDB block 8 [ 111.274759][ T6272] loop8: unable to read partition table [ 111.285201][ T6272] loop8: partition table beyond EOD, truncated [ 111.315361][ T6272] loop_reread_partitions: partition scan of loop8 (þ被xü^>à– ) failed (rc=-5) [ 111.464244][ T6282] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 111.831511][ T6285] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 112.428916][ T6310] loop2: detected capacity change from 0 to 4096 [ 112.437336][ T6310] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 112.535728][ T6310] ntfs: volume version 3.1. [ 112.707391][ T28] audit: type=1804 audit(1776907154.602:3): pid=6310 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.176" name="/newroot/59/file0/file1" dev="loop2" ino=67 res=1 errno=0 [ 113.681363][ T6342] netlink: 'syz.2.192': attribute type 4 has an invalid length. [ 113.797205][ T6342] syz.2.192 (6342) used greatest stack depth: 20488 bytes left [ 114.137242][ T966] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 114.317214][ T966] usb 3-1: Using ep0 maxpacket: 32 [ 114.334620][ T966] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 114.343302][ T966] usb 3-1: config 0 has no interface number 0 [ 114.360932][ T966] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 114.374039][ T966] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.384655][ T966] usb 3-1: Product: syz [ 114.392547][ T966] usb 3-1: Manufacturer: syz [ 114.399890][ T966] usb 3-1: SerialNumber: syz [ 114.409993][ T966] usb 3-1: config 0 descriptor?? [ 114.426695][ T6366] loop3: detected capacity change from 0 to 512 [ 114.433128][ T966] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 114.488390][ T6366] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.508805][ T6366] ext4 filesystem being mounted at /38/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 114.644628][ T966] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 114.672897][ T966] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 114.684056][ T6366] EXT4-fs error (device loop3): ext4_get_first_dir_block:3592: inode #12: block 32: comm syz.3.200: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 114.741762][ T6366] EXT4-fs (loop3): Remounting filesystem read-only [ 114.872917][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.119073][ T6378] syzkaller1: entered promiscuous mode [ 115.124983][ T6378] syzkaller1: entered allmulticast mode [ 115.145238][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 115.148743][ T786] usb 3-1: USB disconnect, device number 3 [ 115.215874][ T786] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 115.254692][ T786] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 115.288850][ T786] quatech2 3-1:0.51: device disconnected [ 116.880638][ T6405] loop2: detected capacity change from 0 to 128 [ 116.901787][ T6405] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 116.948166][ T6405] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 117.152024][ T2948] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 117.704364][ T6403] loop3: detected capacity change from 0 to 40427 [ 117.724053][ T6403] F2FS-fs (loop3): Unrecognized mount option "whint_mode=user-based" or missing value [ 118.824709][ T6434] loop6: detected capacity change from 0 to 8 [ 118.845997][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 118.855502][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 118.873437][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 118.882715][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 118.892124][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 118.901423][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 118.911033][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 118.911035][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 118.929849][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 118.977551][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 118.986804][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 118.994598][ T6432] loop1: detected capacity change from 0 to 4096 [ 119.020365][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 119.029646][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 119.047220][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 119.056529][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 119.069286][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 119.078530][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 119.087555][ T6434] ldm_validate_partition_table(): Disk read failed. [ 119.097317][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 119.106742][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 119.118442][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 119.143672][ T6434] Dev loop6: unable to read RDB block 0 [ 119.160300][ T6434] loop6: unable to read partition table [ 119.174635][ T6434] loop6: partition table beyond EOD, truncated [ 119.191968][ T6434] loop_reread_partitions: partition scan of loop6 (ÄNùh*h‘…ÿìžÝ×pਸ਼ "ýo§æ?<í ¯ÊºöÙXDˆÚbÔÌp0ìO{š¸›>.) failed (rc=-5) [ 119.294108][ T6442] batadv_slave_1: entered promiscuous mode [ 119.324743][ T6441] batadv_slave_1: left promiscuous mode [ 119.561372][ T6432] EXT4-fs: Ignoring removed orlov option [ 119.596959][ T6432] EXT4-fs (loop1): Test dummy encryption mode enabled [ 119.626342][ T6432] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.817174][ T786] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 119.876361][ T6432] fs-verity: sha256 using implementation "sha256-avx2" [ 120.009140][ T786] usb 1-1: Using ep0 maxpacket: 16 [ 120.043737][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.059015][ T786] usb 1-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 120.071746][ T786] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.085506][ T786] usb 1-1: Product: syz [ 120.091744][ T786] usb 1-1: Manufacturer: syz [ 120.096546][ T786] usb 1-1: SerialNumber: syz [ 120.128471][ T786] usb 1-1: config 0 descriptor?? [ 120.161524][ T786] gspca_main: spca508-2.14.0 probing 041e:4018 [ 120.390711][ T786] gspca_spca508: reg_read err -32 [ 120.407156][ T786] gspca_spca508: reg_read err -32 [ 120.415560][ T786] gspca_spca508: reg_read err -32 [ 120.494262][ T6458] loop3: detected capacity change from 0 to 4096 [ 120.520065][ T6458] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 120.636645][ T786] gspca_spca508: reg_read err -71 [ 120.656320][ T786] gspca_spca508: reg write: error -71 [ 120.670378][ T786] spca508: probe of 1-1:0.0 failed with error -71 [ 120.704565][ T786] usb 1-1: USB disconnect, device number 3 [ 120.754727][ T6458] ntfs: volume version 3.1. [ 120.945886][ T28] audit: type=1804 audit(1776907162.852:4): pid=6458 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.237" name="/newroot/50/file0/file1" dev="loop3" ino=67 res=1 errno=0 [ 121.261692][ T6471] netlink: 160 bytes leftover after parsing attributes in process `syz.3.241'. [ 121.288202][ T6471] netlink: 160 bytes leftover after parsing attributes in process `syz.3.241'. [ 122.048627][ T6500] loop2: detected capacity change from 0 to 512 [ 122.130420][ T6500] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.255: invalid indirect mapped block 256 (level 2) [ 122.171229][ T6500] EXT4-fs (loop2): 2 truncates cleaned up [ 122.178854][ T6500] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.335873][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.941371][ T786] IPVS: starting estimator thread 0... [ 122.963416][ T6532] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 123.048701][ T6534] IPVS: using max 18 ests per chain, 43200 per kthread [ 123.255864][ T6542] netlink: 12 bytes leftover after parsing attributes in process `syz.3.274'. [ 123.452115][ T6549] overlayfs: failed to decode file handle (len=0, type=251, flags=0, err=-22) [ 123.758291][ T6561] capability: warning: `syz.3.281' uses deprecated v2 capabilities in a way that may be insecure [ 124.487057][ C0] sched: RT throttling activated [ 124.674188][ T6554] loop1: detected capacity change from 0 to 131072 [ 124.698670][ T6554] F2FS-fs (loop1): Test dummy encryption mode enabled [ 124.711879][ T6554] F2FS-fs (loop1): invalid crc value [ 124.756710][ T6554] F2FS-fs (loop1): Found nat_bits in checkpoint [ 124.812627][ T6554] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 124.840926][ T6584] loop3: detected capacity change from 0 to 1024 [ 124.923736][ T6584] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 124.984306][ T6584] ext4 filesystem being mounted at /65/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.057219][ T28] audit: type=1800 audit(1776907166.932:5): pid=6584 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.288" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 125.066847][ T6584] EXT4-fs error (device loop3): ext4_map_blocks:720: inode #15: block 8: comm syz.3.288: lblock 8 mapped to illegal pblock 8 (length 8) [ 125.148207][ T28] audit: type=1800 audit(1776907166.962:6): pid=6584 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.288" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 125.202183][ T6584] EXT4-fs error (device loop3): ext4_ext_remove_space:2940: inode #15: comm syz.3.288: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 125.406727][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 125.592603][ T6601] loop3: detected capacity change from 0 to 128 [ 125.669242][ T6601] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 125.736124][ T6601] hpfs: filesystem error: improperly stopped [ 125.768749][ T6601] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 125.776660][ T6601] hpfs: You really don't want any checks? You are crazy... [ 125.824594][ T6601] hpfs: hpfs_map_sector(): read error [ 125.839375][ T6601] hpfs: code page support is disabled [ 125.846163][ T6601] hpfs: hpfs_map_4sectors(): unaligned read [ 125.884881][ T6601] hpfs: hpfs_map_4sectors(): unaligned read [ 125.901765][ T6601] hpfs: filesystem error: unable to find root dir [ 126.312963][ T6594] loop2: detected capacity change from 0 to 32768 [ 126.461020][ T6594] JBD2: Ignoring recovery information on journal [ 126.576967][ T6599] loop1: detected capacity change from 0 to 32768 [ 126.638740][ T6594] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 126.696537][ T6599] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 126.721605][ T6599] JBD2: Ignoring recovery information on journal [ 126.872361][ T6599] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 126.950449][ T6594] overlayfs: upper fs does not support tmpfile. [ 126.994755][ T6594] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 127.089489][ T6594] overlayfs: upper fs missing required features. [ 127.322510][ T5774] ocfs2: Unmounting device (7,1) on (node local) [ 127.370822][ T5776] ocfs2: Unmounting device (7,2) on (node local) [ 127.389883][ T6603] loop3: detected capacity change from 0 to 32768 [ 127.421599][ T6603] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.296 (6603) [ 127.481935][ T6603] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 127.537809][ T6603] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 127.546859][ T6603] BTRFS warning (device loop3): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 127.638305][ T6603] BTRFS info (device loop3): trying to use backup root at mount time [ 127.646488][ T6603] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8) [ 127.706235][ T6603] BTRFS info (device loop3): use lzo compression, level 0 [ 127.737096][ T6603] BTRFS info (device loop3): turning on flush-on-commit [ 127.744178][ T6603] BTRFS info (device loop3): using free space tree [ 127.897321][ T6603] BTRFS info (device loop3): enabling ssd optimizations [ 128.185853][ T6648] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 128.285540][ T5773] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 128.496304][ T5779] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop3 scanned by udevd (5779) [ 130.059197][ T6676] loop1: detected capacity change from 0 to 40427 [ 130.134973][ T6676] F2FS-fs (loop1): build fault injection attr: rate: 684, type: 0x7ffff [ 130.182632][ T6676] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x35f7 [ 130.208344][ T6676] F2FS-fs (loop1): Image doesn't support compression [ 130.240983][ T6676] F2FS-fs (loop1): invalid crc value [ 130.261750][ T6676] F2FS-fs (loop1): Found nat_bits in checkpoint [ 130.399867][ T6676] F2FS-fs (loop1): Start checkpoint disabled! [ 130.430402][ T6676] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 130.617481][ T28] audit: type=1800 audit(1776907172.522:7): pid=6676 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.314" name="file1" dev="loop1" ino=10 res=0 errno=0 [ 130.650333][ T6676] F2FS-fs (loop1): inject no more block in inc_valid_block_count of f2fs_reserve_new_blocks+0x127/0xb50 [ 130.687622][ T5086] Bluetooth: hci3: command tx timeout [ 130.718064][ T6676] syz.1.314: attempt to access beyond end of device [ 130.718064][ T6676] loop1: rw=2049, sector=77824, nr_sectors = 592 limit=40427 [ 131.050898][ T60] kworker/u4:4: attempt to access beyond end of device [ 131.050898][ T60] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 131.104018][ T60] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 131.127611][ T60] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 131.128348][ T6686] loop3: detected capacity change from 0 to 65536 [ 131.195639][ T6686] XFS (loop3): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 131.252319][ T6686] XFS (loop3): Ending clean mount [ 131.539936][ T5773] XFS (loop3): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 131.617380][ T6724] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 131.709567][ T6724] overlayfs: maximum fs stacking depth exceeded [ 131.948838][ T6733] mmap: syz.0.338 (6733) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 132.310741][ T6745] netlink: 4 bytes leftover after parsing attributes in process `syz.0.344'. [ 132.477584][ T6748] input: syz0 as /devices/virtual/input/input6 [ 133.010956][ T6763] loop2: detected capacity change from 0 to 2048 [ 133.062773][ T6763] loop2: p3 < > p4 < > [ 133.078105][ T6763] loop2: partition table partially beyond EOD, truncated [ 133.085454][ T6763] loop2: p3 start 4284289 is beyond EOD, truncated [ 133.252205][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.259484][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.497546][ T786] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.367825][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.527793][ T786] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.711879][ T6816] bridge0: port 3(syz_tun) entered blocking state [ 134.719998][ T6816] bridge0: port 3(syz_tun) entered disabled state [ 134.728600][ T6816] syz_tun: entered allmulticast mode [ 134.739790][ T6816] syz_tun: entered promiscuous mode [ 134.749233][ T6816] bridge0: port 3(syz_tun) entered blocking state [ 134.756267][ T6816] bridge0: port 3(syz_tun) entered forwarding state [ 135.541683][ T6844] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 135.541683][ T6844] The task syz.1.386 (6844) triggered the difference, watch for misbehavior. [ 135.567704][ T5763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.639126][ T6846] netlink: 'syz.2.387': attribute type 1 has an invalid length. [ 136.607465][ T5763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.866606][ T6862] loop3: detected capacity change from 0 to 4096 [ 136.884133][ T6862] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 136.935859][ T6862] ntfs3: loop3: Failed to initialize $Extend/$Reparse. [ 136.966286][ T6862] ntfs3: loop3: ino=1a, ntfs_sync_fs failed, -22. [ 136.996247][ T6862] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 137.147689][ T5815] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 137.188402][ T6869] netlink: 16 bytes leftover after parsing attributes in process `syz.3.397'. [ 137.365901][ T5815] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 137.385573][ T5815] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.409490][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.422403][ T5815] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 137.447129][ T5815] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 137.472806][ T5815] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 137.482613][ T5815] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 137.499392][ T5815] usb 1-1: Manufacturer: syz [ 137.512688][ T6858] loop1: detected capacity change from 0 to 40427 [ 137.520596][ T5815] usb 1-1: config 0 descriptor?? [ 137.557875][ T6858] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 137.564381][ T6858] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 137.575428][ T6858] F2FS-fs (loop1): invalid crc value [ 137.656022][ T786] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.798437][ T6858] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 137.806875][ T6858] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 137.866325][ T28] audit: type=1800 audit(1776907179.772:8): pid=6858 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.391" name="file1" dev="loop1" ino=10 res=0 errno=0 [ 137.886649][ C1] vkms_vblank_simulate: vblank timer overrun [ 137.918517][ T12] kworker/u4:1: attempt to access beyond end of device [ 137.918517][ T12] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 137.953579][ T12] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 137.966490][ T5815] appleir 0003:05AC:8243.0001: unknown main item tag 0x0 [ 137.984009][ T6858] VFS:Filesystem freeze failed [ 138.005935][ T5815] appleir 0003:05AC:8243.0001: No inputs registered, leaving [ 138.078404][ T5815] appleir 0003:05AC:8243.0001: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 138.349991][ T5815] usb 1-1: USB disconnect, device number 4 [ 138.640104][ T6879] loop2: detected capacity change from 0 to 32768 [ 138.707972][ T5763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.722363][ T6879] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 138.875291][ T6879] XFS (loop2): Ending clean mount [ 138.985073][ T6879] XFS (loop2): Quotacheck needed: Please wait. [ 139.109768][ T6879] XFS (loop2): Quotacheck: Done. [ 139.366066][ T5776] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 139.397422][ T786] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 139.625123][ T23] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 139.637155][ T786] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 139.655885][ T786] usb 2-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 139.665629][ T786] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.674113][ T786] usb 2-1: Product: syz [ 139.678816][ T786] usb 2-1: Manufacturer: syz [ 139.683472][ T786] usb 2-1: SerialNumber: syz [ 139.697910][ T786] usb 2-1: config 0 descriptor?? [ 139.709596][ T786] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 139.738823][ T5763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.850474][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 139.880986][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 139.905885][ T23] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 139.925654][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.939055][ T23] usb 1-1: config 0 descriptor?? [ 140.090451][ T6925] loop3: detected capacity change from 0 to 128 [ 140.382252][ T23] cm6533_jd 0003:0D8C:0022.0002: unknown main item tag 0x0 [ 140.410342][ T23] cm6533_jd 0003:0D8C:0022.0002: unknown main item tag 0x0 [ 140.427328][ T23] cm6533_jd 0003:0D8C:0022.0002: unknown main item tag 0x0 [ 140.449784][ T5815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.458111][ T23] cm6533_jd 0003:0D8C:0022.0002: unknown main item tag 0x0 [ 140.472445][ T23] cm6533_jd 0003:0D8C:0022.0002: unknown main item tag 0x0 [ 140.522039][ T23] cm6533_jd 0003:0D8C:0022.0002: No inputs registered, leaving [ 140.537136][ T23] cm6533_jd 0003:0D8C:0022.0002: hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.0-1/input0 [ 140.555212][ T786] input: gspca_pac7302 as /devices/platform/dummy_hcd.1/usb2/2-1/input/input7 [ 140.745401][ T5815] usb 1-1: USB disconnect, device number 5 [ 140.767355][ T9] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 140.796159][ T786] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.846829][ T786] usb 2-1: USB disconnect, device number 4 [ 140.981953][ T9] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 140.995240][ T9] usb 3-1: config 0 has no interface number 0 [ 141.002070][ T9] usb 3-1: config 0 interface 41 has no altsetting 0 [ 141.017536][ T9] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 141.026862][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.041224][ T9] usb 3-1: Product: syz [ 141.045491][ T9] usb 3-1: Manufacturer: syz [ 141.060176][ T6943] loop3: detected capacity change from 0 to 4096 [ 141.060688][ T9] usb 3-1: SerialNumber: syz [ 141.084996][ T9] usb 3-1: config 0 descriptor?? [ 141.345140][ T6945] netlink: 16 bytes leftover after parsing attributes in process `syz.3.425'. [ 141.427497][ T6947] netlink: 4 bytes leftover after parsing attributes in process `syz.0.426'. [ 141.462117][ T6947] syz_tun: entered promiscuous mode [ 141.483627][ T6947] syz_tun: left promiscuous mode [ 141.567836][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.671607][ T6954] loop1: detected capacity change from 0 to 256 [ 141.810012][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.012672][ T28] audit: type=1326 audit(1776907183.922:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6956 comm="syz.3.431" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f13a499c819 code=0x0 [ 142.038990][ T6963] loop1: detected capacity change from 0 to 164 [ 142.113698][ T9] CoreChips: probe of 3-1:0.41 failed with error -71 [ 142.131436][ T9] usb 3-1: USB disconnect, device number 4 [ 142.280448][ T6970] netlink: 24 bytes leftover after parsing attributes in process `syz.0.435'. [ 142.547286][ T786] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 142.747189][ T786] usb 2-1: Using ep0 maxpacket: 16 [ 142.764844][ T786] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 142.775511][ T786] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.800149][ T786] usb 2-1: config 0 descriptor?? [ 142.829701][ T786] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 142.847297][ T5763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.945112][ T6988] sctp: [Deprecated]: syz.2.443 (pid 6988) Use of struct sctp_assoc_value in delayed_ack socket option. [ 142.945112][ T6988] Use struct sctp_sack_info instead [ 143.363343][ T6999] netlink: 'syz.0.447': attribute type 10 has an invalid length. [ 143.488815][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.710505][ T7004] netlink: 16 bytes leftover after parsing attributes in process `syz.0.450'. [ 143.739355][ T6994] loop2: detected capacity change from 0 to 32768 [ 143.791896][ T6994] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 143.871220][ T9] usb 2-1: USB disconnect, device number 5 [ 143.905208][ T786] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.915846][ T6994] XFS (loop2): Ending clean mount [ 143.942225][ T6994] XFS (loop2): Quotacheck needed: Please wait. [ 144.003252][ T6994] XFS (loop2): Quotacheck: Done. [ 144.111273][ T5776] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 144.699640][ T28] audit: type=1326 audit(1776907186.612:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7027 comm="syz.3.458" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f13a499c819 code=0x0 [ 144.937294][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.968145][ T786] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.547297][ T5815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.644645][ T7066] loop1: detected capacity change from 0 to 40427 [ 146.708977][ T7066] F2FS-fs (loop1): Found nat_bits in checkpoint [ 146.837214][ T7066] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 147.007656][ T786] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.024915][ T5774] syz-executor: attempt to access beyond end of device [ 147.024915][ T5774] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 147.053010][ T5774] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 147.339454][ T60] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.496035][ T60] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.539049][ T786] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 147.728715][ T60] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.761126][ T786] usb 1-1: Using ep0 maxpacket: 8 [ 147.772834][ T786] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 147.813488][ T786] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 147.838066][ T786] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.884039][ T786] usb 1-1: config 0 descriptor?? [ 147.895506][ T60] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.047705][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.109890][ T786] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 148.379774][ T23] usb 1-1: USB disconnect, device number 6 [ 148.434616][ T5786] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 148.448342][ T5786] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 148.492050][ T5786] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 148.521304][ T5786] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 148.536052][ T7110] loop2: detected capacity change from 0 to 512 [ 148.547809][ T5786] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 148.557455][ T5786] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 148.591853][ T7110] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 148.608159][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.646204][ T7110] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002] [ 148.668199][ T7110] System zones: 1-12 [ 148.714504][ T7110] EXT4-fs (loop2): 1 truncate cleaned up [ 148.739268][ T7110] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.087419][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.153078][ T7120] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.197575][ T7120] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.218283][ T7120] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.240529][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.328051][ T7119] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.336844][ T7119] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.596381][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.848159][ T7138] loop1: detected capacity change from 0 to 256 [ 149.904093][ T7138] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 149.966171][ T28] audit: type=1800 audit(1776907191.872:11): pid=7138 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.495" name="file1" dev="loop1" ino=1048603 res=0 errno=0 [ 150.127313][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.317812][ T7148] loop1: detected capacity change from 0 to 128 [ 150.611677][ T5086] Bluetooth: hci2: command tx timeout [ 150.656154][ T7107] chnl_net:caif_netlink_parms(): no params data found [ 150.687295][ T23] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 150.877116][ T23] usb 3-1: Using ep0 maxpacket: 32 [ 150.890900][ T23] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.915443][ T23] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 150.960856][ T23] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 150.976567][ T23] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 151.017209][ T23] usb 3-1: Product: syz [ 151.021476][ T23] usb 3-1: Manufacturer: syz [ 151.064039][ T23] hub 3-1:4.0: USB hub found [ 151.076721][ T60] hsr_slave_0: left promiscuous mode [ 151.089775][ T60] hsr_slave_1: left promiscuous mode [ 151.102943][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 151.114465][ T60] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 151.131765][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 151.139888][ T60] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 151.148549][ T60] bridge_slave_1: left allmulticast mode [ 151.155509][ T60] bridge_slave_1: left promiscuous mode [ 151.169412][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.175664][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.191981][ T5763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.276375][ T60] bridge_slave_0: left allmulticast mode [ 151.286714][ T23] hub 3-1:4.0: config failed, hub doesn't have any ports! (err -19) [ 151.309606][ T60] bridge_slave_0: left promiscuous mode [ 151.327913][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.435686][ T60] veth1_macvtap: left promiscuous mode [ 151.467595][ T60] veth0_macvtap: left promiscuous mode [ 151.473387][ T60] veth1_vlan: left promiscuous mode [ 151.498131][ T60] veth0_vlan: left promiscuous mode [ 151.677487][ T8] usb 3-1: USB disconnect, device number 5 [ 152.687235][ T5086] Bluetooth: hci2: command tx timeout [ 152.962422][ T5763] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 153.028681][ T60] team0 (unregistering): Port device team_slave_1 removed [ 153.086463][ T60] team0 (unregistering): Port device team_slave_0 removed [ 153.147201][ T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 153.160740][ T5763] usb 3-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 153.183763][ T5763] usb 3-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 153.194387][ T5763] usb 3-1: config 1 interface 0 has no altsetting 0 [ 153.204680][ T5763] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 153.214116][ T5763] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.222473][ T5763] usb 3-1: Product: syz [ 153.226717][ T5763] usb 3-1: Manufacturer: syz [ 153.231957][ T5763] usb 3-1: SerialNumber: syz [ 153.244550][ T7212] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 153.271709][ T7212] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 153.280831][ T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 153.836614][ T60] bond0 (unregistering): Released all slaves [ 153.973494][ T7107] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.981094][ T7107] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.989480][ T7107] bridge_slave_0: entered allmulticast mode [ 154.000537][ T7107] bridge_slave_0: entered promiscuous mode [ 154.044179][ T7198] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 154.087324][ T7107] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.097859][ T7107] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.105212][ T7107] bridge_slave_1: entered allmulticast mode [ 154.130965][ T7107] bridge_slave_1: entered promiscuous mode [ 154.256562][ T7107] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 154.292726][ T23] net_ratelimit: 6 callbacks suppressed [ 154.292741][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.310864][ T7107] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 154.333725][ T5763] (unnamed net_device) (uninitialized): Assigned a random MAC address: c6:c2:fb:9b:ce:70 [ 154.442385][ T5763] rtl8150 3-1:1.0: eth5: rtl8150 is detected [ 154.504759][ T5763] usb 3-1: USB disconnect, device number 6 [ 154.515161][ T7107] team0: Port device team_slave_0 added [ 154.550001][ T7107] team0: Port device team_slave_1 added [ 154.711263][ T7107] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 154.735852][ T7107] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.768430][ T5086] Bluetooth: hci2: command tx timeout [ 154.812416][ T7107] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 154.831614][ T7107] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 154.848851][ T7107] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.905869][ T7107] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 154.924150][ T7231] loop1: detected capacity change from 0 to 512 [ 155.052451][ T7231] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.085737][ T7231] ext4 filesystem being mounted at /107/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 155.111488][ T7107] hsr_slave_0: entered promiscuous mode [ 155.133877][ T7107] hsr_slave_1: entered promiscuous mode [ 155.161010][ T7107] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 155.186768][ T28] audit: type=1800 audit(1776907197.092:12): pid=7231 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.525" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 155.190385][ T7107] Cannot create hsr debugfs directory [ 155.277115][ T28] audit: type=1800 audit(1776907197.132:13): pid=7231 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.525" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 155.337519][ T5763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.376346][ T3547] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 155.410947][ T60] IPVS: stop unused estimator thread 0... [ 155.418970][ T3547] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 3 with error 28 [ 155.453695][ T3547] EXT4-fs (loop1): This should not happen!! Data will be lost [ 155.453695][ T3547] [ 155.486052][ T3547] EXT4-fs (loop1): Total free blocks count 0 [ 155.493756][ T3547] EXT4-fs (loop1): Free/Dirty block details [ 155.506695][ T3547] EXT4-fs (loop1): free_blocks=65280 [ 155.529928][ T3547] EXT4-fs (loop1): dirty_blocks=3 [ 155.547289][ T23] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 155.561382][ T3547] EXT4-fs (loop1): Block reservation details [ 155.577147][ T3547] EXT4-fs (loop1): i_reserved_data_blocks=3 [ 155.600336][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.750878][ T23] usb 3-1: Using ep0 maxpacket: 32 [ 155.773234][ T23] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 155.797142][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.823793][ T23] usb 3-1: config 0 descriptor?? [ 156.055444][ T23] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 156.095286][ T23] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 156.115897][ T23] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 156.129808][ T5815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.135461][ T23] usb 3-1: media controller created [ 156.186261][ T23] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 156.239832][ T7107] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 156.269260][ T23] az6027: usb out operation failed. (-71) [ 156.276758][ T23] az6027: usb out operation failed. (-71) [ 156.282962][ T23] stb0899_attach: Driver disabled by Kconfig [ 156.292837][ T23] az6027: no front-end attached [ 156.292837][ T23] [ 156.310297][ T23] az6027: usb out operation failed. (-71) [ 156.314555][ T7107] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 156.316606][ T23] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 156.335597][ T23] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input8 [ 156.349679][ T23] dvb-usb: schedule remote query interval to 400 msecs. [ 156.356777][ T23] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 156.373300][ T23] usb 3-1: USB disconnect, device number 7 [ 156.380353][ T786] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.405242][ T7107] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 156.476180][ T7107] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 156.540747][ T23] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 156.756548][ T7107] 8021q: adding VLAN 0 to HW filter on device bond0 [ 156.801450][ T7107] 8021q: adding VLAN 0 to HW filter on device team0 [ 156.844180][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.851475][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 156.857417][ T5086] Bluetooth: hci2: command tx timeout [ 156.953858][ T2948] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.961162][ T2948] bridge0: port 2(bridge_slave_1) entered forwarding state [ 157.408072][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.920013][ T7107] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 158.447403][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.482390][ T7302] netlink: 'syz.1.535': attribute type 11 has an invalid length. [ 158.516250][ T7302] netlink: 8 bytes leftover after parsing attributes in process `syz.1.535'. [ 158.932424][ T7107] veth0_vlan: entered promiscuous mode [ 158.981671][ T7107] veth1_vlan: entered promiscuous mode [ 159.105427][ T7107] veth0_macvtap: entered promiscuous mode [ 159.135303][ T7107] veth1_macvtap: entered promiscuous mode [ 159.142367][ T7320] binder: 7319:7320 ioctl c0306201 0 returned -14 [ 159.172132][ T7107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.183946][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.202167][ T7107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.215260][ T7107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.226159][ T7107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.242012][ T7107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.253208][ T7107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.269960][ T7107] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 159.295650][ T7107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.316042][ T7107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.338776][ T7107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.358326][ T7323] loop1: detected capacity change from 0 to 512 [ 159.364887][ T7107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.383992][ T7107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.402666][ T7107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.417757][ T7107] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 159.430718][ T7323] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.473707][ T7107] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.488565][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.507301][ T7323] ext4 filesystem being mounted at /113/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 159.547857][ T7107] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.556674][ T7107] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.607100][ T7107] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.722790][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.819947][ T3547] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.836879][ T3547] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 159.929546][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.943971][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 160.297868][ T7335] batadv_slave_0: entered promiscuous mode [ 160.319729][ T7334] batadv_slave_0: left promiscuous mode [ 160.535949][ T2948] tipc: Subscription rejected, illegal request [ 160.544817][ T5763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.111447][ T7329] loop1: detected capacity change from 0 to 32768 [ 161.132903][ T7329] BTRFS: device fsid 34a2da50-e117-4d40-8878-8e0fb0127b5f devid 1 transid 8 /dev/loop1 scanned by syz.1.542 (7329) [ 161.200127][ T7329] BTRFS info (device loop1): first mount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f [ 161.230927][ T7329] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 161.252053][ T7329] BTRFS info (device loop1): using free space tree [ 161.285009][ T7338] loop2: detected capacity change from 0 to 32768 [ 161.354173][ T7338] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 161.431360][ T7329] BTRFS info (device loop1): enabling ssd optimizations [ 161.438668][ T7329] BTRFS info (device loop1): auto enabling async discard [ 161.553111][ T28] audit: type=1804 audit(1776907203.452:14): pid=7338 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.544" name="/newroot/150/file1/file1" dev="loop2" ino=17058 res=1 errno=0 [ 161.579609][ T786] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.708919][ T7329] BTRFS info (device loop1): setting compat-ro feature flag for VERITY (0x4) [ 161.820109][ T7384] netlink: 'syz.4.550': attribute type 11 has an invalid length. [ 161.872283][ T5776] ocfs2: Unmounting device (7,2) on (node local) [ 161.931980][ T5774] BTRFS info (device loop1): last unmount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f [ 162.049921][ T5840] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.238330][ T5815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.612178][ T786] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.695802][ T7405] kernel read not supported for file /baadv_slave_1 (pid: 7405 comm: syz.1.557) [ 162.717132][ T28] audit: type=1800 audit(1776907204.622:15): pid=7405 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.557" name=6261016164765F736C6176655F31 dev="mqueue" ino=13366 res=0 errno=0 [ 162.837312][ T5840] kernel read not supported for file /baadv_slave_1 (pid: 5840 comm: kworker/0:5) [ 163.008666][ T5786] Bluetooth: hci4: command 0x1003 tx timeout [ 163.018591][ T5086] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 163.155860][ T7417] netlink: 'syz.4.561': attribute type 39 has an invalid length. [ 163.342030][ T5763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.658746][ T5763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.759186][ T7429] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.775313][ T7431] process 'syz.4.564' launched './file0' with NULL argv: empty string added [ 163.805641][ T7431] Invalid argument reading file caps for ./file0 [ 164.203766][ T7443] loop4: detected capacity change from 0 to 8192 [ 164.369339][ T7443] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 164.403557][ T7443] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 164.431501][ T7443] REISERFS (device loop4): using ordered data mode [ 164.457530][ T7443] reiserfs: using flush barriers [ 164.495130][ T7443] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 164.548142][ T7443] REISERFS (device loop4): checking transaction log (loop4) [ 164.611669][ T7443] REISERFS (device loop4): Using r5 hash to sort names [ 164.664092][ T7443] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 164.688172][ T5763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.984552][ T7466] macvlan0: entered promiscuous mode [ 165.002765][ T7466] team0: entered promiscuous mode [ 165.013894][ T7466] team_slave_0: entered promiscuous mode [ 165.025622][ T7443] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 3 0(1) DIR], item_len 35, item_location 2121, free_space(entry_count) 2 [ 165.047457][ T7466] team_slave_1: entered promiscuous mode [ 165.070394][ T7466] hsr1: entered promiscuous mode [ 165.075584][ T7466] hsr1: entered allmulticast mode [ 165.091856][ T7466] macvlan0: entered allmulticast mode [ 165.103077][ T7443] REISERFS error (device loop4): vs-5150 search_by_key: invalid format found in block 564. Fsck? [ 165.115029][ T7466] veth1_vlan: entered allmulticast mode [ 165.127133][ T7466] team0: entered allmulticast mode [ 165.137453][ T7466] team_slave_0: entered allmulticast mode [ 165.151830][ T7443] REISERFS (device loop4): Remounting filesystem read-only [ 165.167480][ T7466] team_slave_1: entered allmulticast mode [ 165.173435][ T7443] REISERFS error (device loop4): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 3 0x0 SD] stat data [ 165.624066][ T7458] loop2: detected capacity change from 0 to 32768 [ 165.671668][ T7458] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 scanned by syz.2.572 (7458) [ 165.759991][ T7458] BTRFS info (device loop2): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 165.806868][ T7458] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 165.836018][ T7458] BTRFS info (device loop2): using free space tree [ 166.052569][ T7458] BTRFS info (device loop2): enabling ssd optimizations [ 166.085289][ T7458] BTRFS info (device loop2): auto enabling async discard [ 166.587493][ T5776] BTRFS info (device loop2): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 166.787907][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.807517][ T5763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.756473][ T7564] loop4: detected capacity change from 0 to 8192 [ 168.766338][ T7564] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 168.779912][ T7564] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 168.789516][ T7564] REISERFS (device loop4): using ordered data mode [ 168.796333][ T7564] reiserfs: using flush barriers [ 168.804990][ T7564] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 168.823856][ T7564] REISERFS (device loop4): checking transaction log (loop4) [ 168.847324][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.887906][ T5840] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 168.981511][ T7564] REISERFS (device loop4): Using r5 hash to sort names [ 168.991402][ T7564] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 169.117229][ T5840] usb 2-1: Using ep0 maxpacket: 16 [ 169.133376][ T5840] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 169.158562][ T5840] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 169.175653][ T5840] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 169.197189][ T23] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 169.207832][ T5840] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 169.217492][ T5840] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.232813][ T5840] usb 2-1: config 0 descriptor?? [ 169.407222][ T23] usb 1-1: Using ep0 maxpacket: 8 [ 169.414690][ T23] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 169.415856][ T5815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.431330][ T23] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 169.431360][ T23] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 169.431386][ T23] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 169.489898][ T23] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 169.543982][ T23] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 169.556878][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.679944][ T5840] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 169.693432][ T5840] microsoft 0003:045E:07DA.0003: ignoring exceeding usage max [ 169.724266][ T5840] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0003/input/input9 [ 169.808441][ T5840] microsoft 0003:045E:07DA.0003: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 169.824674][ T23] usb 1-1: usb_control_msg returned -32 [ 169.850615][ T23] usbtmc 1-1:16.0: can't read capabilities [ 169.887842][ T5763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.991167][ T5840] usb 2-1: USB disconnect, device number 6 [ 170.196309][ T7592] usbtmc 1-1:16.0: usb_control_msg returned -32 [ 170.205506][ T5815] usb 1-1: USB disconnect, device number 7 [ 170.726043][ T5840] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 170.791886][ T7594] loop4: detected capacity change from 0 to 32768 [ 170.818237][ T7594] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 scanned by syz.4.614 (7594) [ 170.843025][ T7594] BTRFS info (device loop4): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 170.874210][ T7594] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 170.890141][ T8] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 170.907739][ T7594] BTRFS info (device loop4): using free space tree [ 170.927883][ T5840] usb 3-1: Using ep0 maxpacket: 32 [ 170.929461][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.947688][ T5840] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 170.969811][ T5840] usb 3-1: config 0 has no interface number 0 [ 170.991074][ T5840] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 171.019923][ T5840] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.036734][ T5840] usb 3-1: Product: syz [ 171.044158][ T5840] usb 3-1: Manufacturer: syz [ 171.072446][ T5840] usb 3-1: SerialNumber: syz [ 171.079966][ T7594] BTRFS info (device loop4): enabling ssd optimizations [ 171.110360][ T8] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 171.135589][ T7594] BTRFS info (device loop4): auto enabling async discard [ 171.145257][ T5840] usb 3-1: config 0 descriptor?? [ 171.161072][ T8] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 171.186647][ T5840] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 171.220285][ T8] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 171.243547][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 171.253248][ T8] usb 2-1: SerialNumber: syz [ 171.415900][ T5840] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 171.438549][ T7107] BTRFS info (device loop4): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 171.451394][ T5840] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 171.514688][ T8] usb 2-1: 0:2 : does not exist [ 171.522521][ T8] usb 2-1: usbmixer: too many channels (61) in unit 5 [ 171.664154][ T8] usb 2-1: USB disconnect, device number 7 [ 171.689237][ T5840] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.812864][ T5779] udevd[5779]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 171.968570][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 171.969114][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.984869][ T5815] usb 3-1: USB disconnect, device number 8 [ 172.027735][ T5815] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 172.084417][ T5815] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 172.121719][ T5815] quatech2 3-1:0.51: device disconnected [ 172.448116][ T5815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.716112][ T7647] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 172.894967][ T7653] Illegal XDP return value 4291379200 on prog (id 65) dev N/A, expect packet loss! [ 173.024466][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.322040][ T7669] dummy0: entered promiscuous mode [ 173.341427][ T7669] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 173.355439][ T7669] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 173.364157][ T7669] Cannot create hsr debugfs directory [ 173.376794][ T7669] hsr1: entered allmulticast mode [ 173.382278][ T7669] dummy0: entered allmulticast mode [ 173.397196][ T7669] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 174.047405][ T5763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.211916][ T7690] loop4: detected capacity change from 0 to 1024 [ 174.238634][ T7690] EXT4-fs: Ignoring removed mblk_io_submit option [ 174.267294][ T7690] EXT4-fs: Ignoring removed oldalloc option [ 174.408556][ T7690] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 174.450970][ T7690] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 174.502848][ T7695] syzkaller1: entered promiscuous mode [ 174.520476][ T7695] syzkaller1: entered allmulticast mode [ 174.535211][ T7690] EXT4-fs error (device loop4): ext4_validate_block_bitmap:439: comm syz.4.642: bg 0: block 112: padding at end of block bitmap is not set [ 174.615842][ T7690] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 174.683583][ T7699] EXT4-fs error (device loop4): ext4_map_blocks:720: inode #15: comm syz.4.642: lblock 0 mapped to illegal pblock 0 (length 1) [ 174.723209][ T7690] EXT4-fs (loop4): This should not happen!! Data will be lost [ 174.723209][ T7690] [ 174.754256][ T7699] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 174.797381][ T7699] EXT4-fs (loop4): This should not happen!! Data will be lost [ 174.797381][ T7699] [ 174.820670][ T7690] EXT4-fs (loop4): Total free blocks count 0 [ 174.855923][ T7690] EXT4-fs (loop4): Free/Dirty block details [ 174.882585][ T7690] EXT4-fs (loop4): free_blocks=0 [ 174.900584][ T7690] EXT4-fs (loop4): dirty_blocks=64 [ 174.930759][ T7690] EXT4-fs (loop4): Block reservation details [ 175.088104][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.493325][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.127826][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.447814][ T23] page_pool_release_retry() stalled pool shutdown 1 inflight 60 sec [ 177.110548][ T28] audit: type=1326 audit(1776907219.022:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7766 comm="syz.0.671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4eee39c819 code=0x7ffc0000 [ 177.132693][ C1] vkms_vblank_simulate: vblank timer overrun [ 177.167278][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.186668][ T28] audit: type=1326 audit(1776907219.052:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7766 comm="syz.0.671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4eee39c819 code=0x7ffc0000 [ 177.270766][ T28] audit: type=1326 audit(1776907219.052:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7766 comm="syz.0.671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4eee39c819 code=0x7ffc0000 [ 177.347585][ T28] audit: type=1326 audit(1776907219.052:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7766 comm="syz.0.671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4eee35d04e code=0x7ffc0000 [ 177.420803][ T28] audit: type=1326 audit(1776907219.052:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7766 comm="syz.0.671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4eee39c819 code=0x7ffc0000 [ 177.429056][ T7772] loop2: detected capacity change from 0 to 1024 [ 177.468388][ T28] audit: type=1326 audit(1776907219.052:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7766 comm="syz.0.671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4eee39c819 code=0x7ffc0000 [ 177.562410][ T28] audit: type=1326 audit(1776907219.052:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7766 comm="syz.0.671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4eee39c819 code=0x7ffc0000 [ 177.584628][ C1] vkms_vblank_simulate: vblank timer overrun [ 177.604838][ T7772] hfsplus: invalid catalog max_key_len 715 [ 177.628633][ T7772] hfsplus: failed to load catalog file [ 177.685279][ T28] audit: type=1326 audit(1776907219.052:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7766 comm="syz.0.671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4eee39c819 code=0x7ffc0000 [ 177.795672][ T28] audit: type=1326 audit(1776907219.052:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7766 comm="syz.0.671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4eee39c819 code=0x7ffc0000 [ 177.817839][ C1] vkms_vblank_simulate: vblank timer overrun [ 177.872514][ T28] audit: type=1326 audit(1776907219.052:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7766 comm="syz.0.671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f4eee39c819 code=0x7ffc0000 [ 178.107383][ T786] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 178.207291][ T5763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.287515][ T786] usb 2-1: Using ep0 maxpacket: 8 [ 178.324043][ T786] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 178.354466][ T786] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 178.395037][ T786] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 178.431740][ T786] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 178.475626][ T786] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 178.525241][ T786] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 178.535887][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.548275][ T7795] trusted_key: syz.2.677 sent an empty control message without MSG_MORE. [ 178.589567][ T786] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.903476][ T786] usb 2-1: usb_control_msg returned -32 [ 178.920410][ T786] usbtmc 2-1:16.0: can't read capabilities [ 179.247670][ T786] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.357425][ T7814] usbtmc 2-1:16.0: INITIATE_CLEAR returned 0 [ 179.564679][ T786] usb 2-1: USB disconnect, device number 8 [ 179.826277][ T7825] serio: Serial port ptm0 [ 180.053533][ T7842] syzkaller1: entered promiscuous mode [ 180.064124][ T7842] syzkaller1: entered allmulticast mode [ 180.287318][ T5763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.725505][ T8] kernel write not supported for file bpf-prog (pid: 8 comm: kworker/0:0) [ 180.944658][ T7871] syz_tun: left allmulticast mode [ 180.951801][ T7875] loop1: detected capacity change from 0 to 128 [ 181.003535][ T7871] syz_tun: left promiscuous mode [ 181.018325][ T7875] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 181.045638][ T7871] bridge0: port 3(syz_tun) entered disabled state [ 181.082958][ T7875] hpfs: filesystem error: improperly stopped [ 181.101635][ T7875] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 181.113292][ T7871] bridge_slave_0: left allmulticast mode [ 181.113309][ T7875] hpfs: You really don't want any checks? You are crazy... [ 181.132723][ T7875] hpfs: hpfs_map_sector(): read error [ 181.147444][ T7871] bridge_slave_0: left promiscuous mode [ 181.157617][ T7871] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.181059][ T7875] hpfs: code page support is disabled [ 181.195913][ T7875] hpfs: hpfs_map_4sectors(): unaligned read [ 181.209012][ T7875] hpfs: hpfs_map_4sectors(): unaligned read [ 181.248796][ T5815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.249970][ T7875] hpfs: filesystem error: unable to find root dir [ 181.259091][ T7871] bridge_slave_1: left allmulticast mode [ 181.285605][ T7875] [ 181.329914][ T786] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.358581][ T7871] bridge_slave_1: left promiscuous mode [ 181.385111][ T7871] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.474321][ T7871] bond0: (slave bond_slave_0): Releasing backup interface [ 181.567456][ T5840] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.583245][ T7871] bond0: (slave bond_slave_1): Releasing backup interface [ 181.740069][ T7871] team0: Port device team_slave_0 removed [ 181.845229][ T7871] team0: Port device team_slave_1 removed [ 181.883545][ T7871] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 181.901667][ T7871] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 181.923955][ T7871] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 181.955443][ T7871] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 182.236824][ T7901] vcan0: tx drop: invalid sa for name 0x0000000000000008 [ 182.387537][ T786] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.397932][ T8] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 182.481638][ T27] hid-generic 00A0:0006:0003.0004: unknown main item tag 0x0 [ 182.503113][ T27] hid-generic 00A0:0006:0003.0004: unknown main item tag 0x0 [ 182.523325][ T27] hid-generic 00A0:0006:0003.0004: unknown main item tag 0x0 [ 182.552611][ T27] hid-generic 00A0:0006:0003.0004: unknown main item tag 0x0 [ 182.573685][ T27] hid-generic 00A0:0006:0003.0004: unknown main item tag 0x0 [ 182.602605][ T27] hid-generic 00A0:0006:0003.0004: unknown main item tag 0x0 [ 182.603321][ T8] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 182.632672][ T27] hid-generic 00A0:0006:0003.0004: unknown main item tag 0x0 [ 182.655448][ T8] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 182.671511][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 182.679549][ T27] hid-generic 00A0:0006:0003.0004: unknown main item tag 0x0 [ 182.679624][ T27] hid-generic 00A0:0006:0003.0004: unknown main item tag 0x0 [ 182.679651][ T27] hid-generic 00A0:0006:0003.0004: unknown main item tag 0x0 [ 182.679676][ T27] hid-generic 00A0:0006:0003.0004: unknown main item tag 0x0 [ 182.679700][ T27] hid-generic 00A0:0006:0003.0004: unknown main item tag 0x0 [ 182.679725][ T27] hid-generic 00A0:0006:0003.0004: unknown main item tag 0x0 [ 182.679751][ T27] hid-generic 00A0:0006:0003.0004: unknown main item tag 0x0 [ 182.743317][ T8] usb 1-1: SerialNumber: syz [ 182.753356][ T27] hid-generic 00A0:0006:0003.0004: hidraw0: HID v0.05 Device [syz1] on syz0 [ 182.763456][ T5763] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 182.969668][ T5763] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 183.001357][ T5763] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 183.040435][ T5763] usb 3-1: New USB device found, idVendor=1ae7, idProduct=0525, bcdDevice=ca.e6 [ 183.057228][ T5763] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.086118][ T5763] usb 3-1: Product: syz [ 183.090963][ T5763] usb 3-1: Manufacturer: syz [ 183.095612][ T5763] usb 3-1: SerialNumber: syz [ 183.139859][ T5763] usb 3-1: config 0 descriptor?? [ 183.388477][ T5763] usb 3-1: USB disconnect, device number 9 [ 183.410909][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.470677][ T8] cdc_ether 1-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.0-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 183.610823][ T7918] loop4: detected capacity change from 0 to 32768 [ 183.922813][ T8] usb 1-1: USB disconnect, device number 8 [ 183.948447][ T8] cdc_ether 1-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.0-1, CDC Ethernet Device [ 184.182077][ T7945] netlink: 8 bytes leftover after parsing attributes in process `syz.1.715'. [ 184.223109][ T7947] loop2: detected capacity change from 0 to 512 [ 184.305655][ T7947] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 184.358158][ T7947] ext4 filesystem being mounted at /192/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 184.449826][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.476483][ T7954] loop4: detected capacity change from 0 to 2048 [ 184.579631][ T7954] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 184.610876][ T5840] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.643411][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.142564][ T7971] Invalid argument reading file caps for ./file0 [ 185.504322][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.543849][ T7987] loop2: detected capacity change from 0 to 128 [ 185.566899][ T7987] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 185.617681][ T7987] hpfs: filesystem error: improperly stopped [ 185.631566][ T7992] netlink: 'syz.4.727': attribute type 12 has an invalid length. [ 185.650910][ T7987] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 185.677097][ T7987] hpfs: You really don't want any checks? You are crazy... [ 185.705186][ T7987] hpfs: hpfs_map_sector(): read error [ 185.727510][ T7995] netlink: 'syz.4.727': attribute type 12 has an invalid length. [ 185.757413][ T7987] hpfs: code page support is disabled [ 185.763157][ T7987] hpfs: hpfs_map_4sectors(): unaligned read [ 185.813946][ T7987] hpfs: hpfs_map_4sectors(): unaligned read [ 185.860672][ T7987] hpfs: filesystem error: unable to find root dir [ 185.932745][ T7987] hpfs: hpfs_map_4sectors(): unaligned read [ 185.968246][ T7987] hpfs: hpfs_map_sector(): read error [ 186.221645][ T8008] loop2: detected capacity change from 0 to 512 [ 186.260118][ T8008] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c01c, mo2=0002] [ 186.273524][ T8008] System zones: 0-2, 18-18, 34-35 [ 186.293223][ T8008] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 186.317370][ T8008] ext4 filesystem being mounted at /196/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 186.527551][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.705180][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.569232][ T5763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.653406][ T5840] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.944513][ T8065] loop2: detected capacity change from 0 to 512 [ 188.029310][ T8065] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 188.117751][ T8065] ext4 filesystem being mounted at /201/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 188.552392][ T8051] loop4: detected capacity change from 0 to 40427 [ 188.583836][ T8051] F2FS-fs (loop4): heap/no_heap options were deprecated [ 188.594477][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.605559][ T8051] F2FS-fs (loop4): build fault injection attr: rate: 19, type: 0x7ffff [ 188.614678][ T5763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.646663][ T8051] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x77e8c [ 188.698164][ T8051] F2FS-fs (loop4): invalid crc value [ 188.757644][ T8051] F2FS-fs (loop4): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_ra_meta_pages+0x21d/0x9b0 [ 188.809335][ T8051] F2FS-fs (loop4): Found nat_bits in checkpoint [ 188.816954][ T8093] loop1: detected capacity change from 0 to 128 [ 188.884242][ T8093] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 188.920321][ T8051] F2FS-fs (loop4): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_submit_page_bio+0x134/0x650 [ 188.933984][ T8093] hpfs: filesystem error: improperly stopped [ 188.947867][ T8093] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 188.980633][ T8093] hpfs: You really don't want any checks? You are crazy... [ 188.995513][ C1] F2FS-fs (loop4): inject read IO error in f2fs_read_end_io of blk_update_request+0x597/0xe40 [ 189.022325][ T8093] hpfs: hpfs_map_sector(): read error [ 189.042573][ T8051] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 189.057323][ T8093] hpfs: code page support is disabled [ 189.067239][ T8093] hpfs: hpfs_map_4sectors(): unaligned read [ 189.093298][ T8093] hpfs: hpfs_map_4sectors(): unaligned read [ 189.100088][ T8093] hpfs: filesystem error: unable to find root dir [ 189.143651][ T8093] hpfs: hpfs_map_4sectors(): unaligned read [ 189.159611][ T8093] hpfs: hpfs_map_sector(): read error [ 189.178041][ T8051] F2FS-fs (loop4): inject no more block in inc_valid_node_count of f2fs_new_node_page+0x187/0x910 [ 189.239251][ T8051] syz.4.742: attempt to access beyond end of device [ 189.239251][ T8051] loop4: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 189.255350][ T8051] F2FS-fs (loop4): inject read IO error in f2fs_read_end_io of f2fs_mpage_readpages+0x1cf6/0x1ea0 [ 189.268914][ T8051] syz.4.742: attempt to access beyond end of device [ 189.268914][ T8051] loop4: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 189.321137][ T7107] syz-executor: attempt to access beyond end of device [ 189.321137][ T7107] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 189.336226][ T7107] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 189.546152][ T8104] netlink: 'syz.1.758': attribute type 29 has an invalid length. [ 189.554668][ T8104] netlink: 'syz.1.758': attribute type 29 has an invalid length. [ 189.595895][ T8106] netlink: 'syz.1.758': attribute type 29 has an invalid length. [ 189.656312][ T8104] netlink: 4 bytes leftover after parsing attributes in process `syz.1.758'. [ 189.665808][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.692043][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.700248][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.796839][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 190.796856][ T28] audit: type=1326 audit(1776907232.702:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8143 comm="syz.4.776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f546259c819 code=0x7ffc0000 [ 190.862112][ T5840] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.915388][ T28] audit: type=1326 audit(1776907232.742:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8143 comm="syz.4.776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f546259c819 code=0x7ffc0000 [ 190.941598][ T28] audit: type=1326 audit(1776907232.742:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8143 comm="syz.4.776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f546259c819 code=0x7ffc0000 [ 190.963714][ C0] vkms_vblank_simulate: vblank timer overrun [ 190.972157][ T28] audit: type=1326 audit(1776907232.742:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8143 comm="syz.4.776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f546259c819 code=0x7ffc0000 [ 190.995266][ T28] audit: type=1326 audit(1776907232.742:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8143 comm="syz.4.776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7f546259c819 code=0x7ffc0000 [ 191.069373][ T28] audit: type=1326 audit(1776907232.742:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8143 comm="syz.4.776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f546259c819 code=0x7ffc0000 [ 191.111837][ T28] audit: type=1326 audit(1776907232.742:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8143 comm="syz.4.776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f546259c819 code=0x7ffc0000 [ 191.143548][ T28] audit: type=1326 audit(1776907232.752:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8143 comm="syz.4.776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=94 compat=0 ip=0x7f546259c819 code=0x7ffc0000 [ 191.165676][ C0] vkms_vblank_simulate: vblank timer overrun [ 191.191596][ T28] audit: type=1326 audit(1776907232.752:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8143 comm="syz.4.776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f546259c819 code=0x7ffc0000 [ 191.213988][ C0] vkms_vblank_simulate: vblank timer overrun [ 191.227237][ T28] audit: type=1326 audit(1776907232.752:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8143 comm="syz.4.776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f546259c819 code=0x7ffc0000 [ 191.249439][ C0] vkms_vblank_simulate: vblank timer overrun [ 191.479754][ T8157] netlink: 14 bytes leftover after parsing attributes in process `syz.0.779'. [ 191.738160][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.578357][ T8185] loop4: detected capacity change from 0 to 512 [ 192.595516][ T8185] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 192.632560][ T8185] EXT4-fs (loop4): 1 truncate cleaned up [ 192.655504][ T8185] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 192.695667][ T8170] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 192.702726][ T8170] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 192.725348][ T8170] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 192.742008][ T8170] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 192.749343][ T8170] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 192.759724][ T8170] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 192.770509][ T3547] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.784503][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.796120][ T8170] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 192.806248][ T5763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 192.832558][ T8170] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 192.842276][ T8170] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 192.969983][ T7107] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.266378][ T8199] xt_CT: No such helper "pptp" [ 193.312245][ T8202] syzkaller1: entered promiscuous mode [ 193.318491][ T8202] syzkaller1: entered allmulticast mode [ 193.439322][ T8206] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 193.613080][ T8210] loop1: detected capacity change from 0 to 256 [ 193.673050][ T8210] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d) [ 193.730849][ T1078] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.744913][ T5763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.757434][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.888191][ T5786] Bluetooth: hci0: command 0x0c1a tx timeout [ 193.896043][ T5086] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 194.048300][ T5086] Bluetooth: hci1: command 0x0c1a tx timeout [ 194.319976][ T8234] loop2: detected capacity change from 0 to 1024 [ 194.336110][ T8234] EXT4-fs: Ignoring removed bh option [ 194.389803][ T8234] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 194.514703][ T8234] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 194.678230][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.704322][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.710947][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.767387][ T5086] Bluetooth: hci3: command 0x0c1a tx timeout [ 194.847179][ T5086] Bluetooth: hci2: command 0x0c1a tx timeout [ 195.331650][ T8256] loop4: detected capacity change from 0 to 512 [ 195.391768][ T8256] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.415128][ T8256] ext4 filesystem being mounted at /75/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 195.489522][ T8256] EXT4-fs error (device loop4): ext4_validate_block_bitmap:439: comm syz.4.821: bg 0: block 217: padding at end of block bitmap is not set [ 195.685553][ T7107] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.866608][ T8272] netlink: 12 bytes leftover after parsing attributes in process `syz.4.826'. [ 195.887448][ T27] net_ratelimit: 2 callbacks suppressed [ 195.887463][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.903738][ T8274] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 195.917123][ T8272] netlink: 12 bytes leftover after parsing attributes in process `syz.4.826'. [ 196.128532][ T5086] Bluetooth: hci1: command 0x0c1a tx timeout [ 196.460059][ T8292] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 196.597955][ T8294] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.659678][ T8294] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.764114][ T8294] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.772355][ T8294] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.847257][ T5086] Bluetooth: hci3: command 0x0c1a tx timeout [ 196.854654][ T8294] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.871967][ T8294] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.927164][ T5086] Bluetooth: hci2: command 0x0c1a tx timeout [ 196.929270][ T5763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.974933][ T8293] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.968412][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.222063][ T5086] Bluetooth: hci1: command 0x0c1a tx timeout [ 198.292702][ T8316] loop2: detected capacity change from 0 to 32768 [ 198.452044][ T8316] (syz.2.846,8316,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 198.527335][ T8316] (syz.2.846,8316,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 198.705597][ T8316] JBD2: Ignoring recovery information on journal [ 198.815793][ T8316] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 198.841588][ T8370] loop4: detected capacity change from 0 to 512 [ 198.873769][ T8370] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 198.898306][ T5763] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 198.927149][ T5086] Bluetooth: hci3: command 0x0c1a tx timeout [ 198.933685][ T8370] EXT4-fs (loop4): 1 truncate cleaned up [ 198.968655][ T8370] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 199.009114][ T5086] Bluetooth: hci2: command 0x0c1a tx timeout [ 199.137124][ T5763] usb 2-1: Using ep0 maxpacket: 32 [ 199.149980][ T5763] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 199.173791][ T7107] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.178036][ T5763] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 199.201830][ T5763] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 199.219275][ T5763] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.243890][ T5763] usb 2-1: config 0 descriptor?? [ 199.319768][ T8316] [ 199.322178][ T8316] ====================================================== [ 199.329329][ T8316] WARNING: possible circular locking dependency detected [ 199.336485][ T8316] syzkaller #0 Not tainted [ 199.340939][ T8316] ------------------------------------------------------ [ 199.348003][ T8316] syz.2.846/8316 is trying to acquire lock: [ 199.354025][ T8316] ffff88805d471538 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_init_acl+0x30a/0x770 [ 199.363436][ T8316] [ 199.363436][ T8316] but task is already holding lock: [ 199.370941][ T8316] ffff88805ccaf0e8 (&journal->j_trans_barrier){.+.+}-{3:3}, at: ocfs2_start_trans+0x3a8/0x6f0 [ 199.381332][ T8316] [ 199.381332][ T8316] which lock already depends on the new lock. [ 199.381332][ T8316] [ 199.391782][ T8316] [ 199.391782][ T8316] the existing dependency chain (in reverse order) is: [ 199.400954][ T8316] [ 199.400954][ T8316] -> #2 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 199.409723][ T8316] down_read+0x46/0x2e0 [ 199.414461][ T8316] ocfs2_start_trans+0x3a8/0x6f0 [ 199.419984][ T8316] ocfs2_mknod+0xf1d/0x2300 [ 199.425063][ T8316] ocfs2_mkdir+0x196/0x430 [ 199.430063][ T8316] vfs_mkdir+0x296/0x440 [ 199.434885][ T8316] do_mkdirat+0x1dc/0x450 [ 199.439776][ T8316] __x64_sys_mkdirat+0x89/0xa0 [ 199.445108][ T8316] do_syscall_64+0x55/0xa0 [ 199.450297][ T8316] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 199.456779][ T8316] [ 199.456779][ T8316] -> #1 (sb_internal#4){.+.+}-{0:0}: [ 199.464316][ T8316] ocfs2_start_trans+0x2a9/0x6f0 [ 199.469820][ T8316] ocfs2_xattr_set+0xeb7/0x13e0 [ 199.475247][ T8316] __vfs_removexattr+0x425/0x460 [ 199.480750][ T8316] __vfs_removexattr_locked+0x1e8/0x230 [ 199.486878][ T8316] vfs_removexattr+0x81/0x1b0 [ 199.492106][ T8316] ovl_get_workdir+0xd6c/0x17c0 [ 199.497511][ T8316] ovl_fill_super+0x13ff/0x3620 [ 199.502913][ T8316] get_tree_nodev+0xb5/0x140 [ 199.508072][ T8316] vfs_get_tree+0x8c/0x280 [ 199.513042][ T8316] do_new_mount+0x24b/0xa40 [ 199.518091][ T8316] __se_sys_mount+0x2e7/0x3d0 [ 199.523325][ T8316] do_syscall_64+0x55/0xa0 [ 199.528291][ T8316] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 199.534830][ T8316] [ 199.534830][ T8316] -> #0 (&oi->ip_xattr_sem){++++}-{3:3}: [ 199.542687][ T8316] __lock_acquire+0x2df1/0x7d40 [ 199.548097][ T8316] lock_acquire+0x19e/0x420 [ 199.553164][ T8316] down_read+0x46/0x2e0 [ 199.557871][ T8316] ocfs2_init_acl+0x30a/0x770 [ 199.563097][ T8316] ocfs2_mknod+0x140f/0x2300 [ 199.568439][ T8316] ocfs2_mkdir+0x196/0x430 [ 199.573413][ T8316] vfs_mkdir+0x296/0x440 [ 199.578379][ T8316] do_mkdirat+0x1dc/0x450 [ 199.583269][ T8316] __x64_sys_mkdirat+0x89/0xa0 [ 199.588586][ T8316] do_syscall_64+0x55/0xa0 [ 199.593647][ T8316] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 199.600095][ T8316] [ 199.600095][ T8316] other info that might help us debug this: [ 199.600095][ T8316] [ 199.610347][ T8316] Chain exists of: [ 199.610347][ T8316] &oi->ip_xattr_sem --> sb_internal#4 --> &journal->j_trans_barrier [ 199.610347][ T8316] [ 199.624300][ T8316] Possible unsafe locking scenario: [ 199.624300][ T8316] [ 199.631857][ T8316] CPU0 CPU1 [ 199.637246][ T8316] ---- ---- [ 199.643030][ T8316] rlock(&journal->j_trans_barrier); [ 199.648602][ T8316] lock(sb_internal#4); [ 199.655424][ T8316] lock(&journal->j_trans_barrier); [ 199.663363][ T8316] rlock(&oi->ip_xattr_sem); [ 199.668114][ T8316] [ 199.668114][ T8316] *** DEADLOCK *** [ 199.668114][ T8316] [ 199.676284][ T8316] 8 locks held by syz.2.846/8316: [ 199.681333][ T8316] #0: ffff888077920418 (sb_writers#23){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 199.690803][ T8316] #1: ffff88805d471818 (&type->i_mutex_dir_key#14/1){+.+.}-{3:3}, at: filename_create+0x20c/0x480 [ 199.701565][ T8316] #2: ffff88805b4d1818 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#2){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x16e/0x44c0 [ 199.715357][ T8316] #3: ffff88805d7a89d8 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x16e/0x44c0 [ 199.729153][ T8316] #4: ffff88805b4d09d8 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#4){+.+.}-{3:3}, at: ocfs2_reserve_local_alloc_bits+0x120/0x2600 [ 199.743143][ T8316] #5: ffff888077920608 (sb_internal#4){.+.+}-{0:0}, at: ocfs2_mknod+0xf1d/0x2300 [ 199.752420][ T8316] #6: ffff88805ccaf0e8 (&journal->j_trans_barrier){.+.+}-{3:3}, at: ocfs2_start_trans+0x3a8/0x6f0 [ 199.763259][ T8316] #7: ffff888076480990 (jbd2_handle#2){.+.+}-{0:0}, at: start_this_handle+0x1f7a/0x21c0 [ 199.773143][ T8316] [ 199.773143][ T8316] stack backtrace: [ 199.779066][ T8316] CPU: 0 PID: 8316 Comm: syz.2.846 Not tainted syzkaller #0 [ 199.786815][ T8316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 199.796910][ T8316] Call Trace: [ 199.800321][ T8316] [ 199.803279][ T8316] dump_stack_lvl+0x18c/0x250 [ 199.808021][ T8316] ? load_image+0x420/0x420 [ 199.812628][ T8316] ? show_regs_print_info+0x20/0x20 [ 199.817890][ T8316] ? print_circular_bug+0x12b/0x1a0 [ 199.823133][ T8316] check_noncircular+0x2fc/0x400 [ 199.828122][ T8316] ? print_deadlock_bug+0x5d0/0x5d0 [ 199.833404][ T8316] ? _find_first_zero_bit+0xd3/0x100 [ 199.838721][ T8316] ? add_lock_to_list+0x191/0x280 [ 199.843779][ T8316] __lock_acquire+0x2df1/0x7d40 [ 199.848676][ T8316] ? verify_lock_unused+0x140/0x140 [ 199.853918][ T8316] ? __ocfs2_journal_access+0x648/0x840 [ 199.859593][ T8316] lock_acquire+0x19e/0x420 [ 199.864312][ T8316] ? ocfs2_init_acl+0x30a/0x770 [ 199.869195][ T8316] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 199.874868][ T8316] ? __might_sleep+0xe0/0xe0 [ 199.879496][ T8316] ? read_lock_is_recursive+0x20/0x20 [ 199.884903][ T8316] ? do_raw_spin_lock+0x11f/0x2c0 [ 199.889969][ T8316] down_read+0x46/0x2e0 [ 199.894154][ T8316] ? ocfs2_init_acl+0x30a/0x770 [ 199.899039][ T8316] ocfs2_init_acl+0x30a/0x770 [ 199.903773][ T8316] ? ocfs2_acl_chmod+0x330/0x330 [ 199.908744][ T8316] ? dquot_alloc_inode+0x8ac/0xa40 [ 199.913895][ T8316] ? ocfs2_journal_access+0x40/0x40 [ 199.919119][ T8316] ? ocfs2_block_signals+0x9b/0xe0 [ 199.924267][ T8316] ? ocfs2_metadata_cache_get_super+0x46/0x90 [ 199.930467][ T8316] ? ocfs2_inode_cache_get_super+0xd/0x40 [ 199.936219][ T8316] ocfs2_mknod+0x140f/0x2300 [ 199.940874][ T8316] ? ocfs2_mkdir+0x430/0x430 [ 199.945510][ T8316] ? verify_lock_unused+0x140/0x140 [ 199.950766][ T8316] ? ocfs2_inode_lock_tracker+0x437/0x700 [ 199.956606][ T8316] ? __lock_acquire+0x7d40/0x7d40 [ 199.961662][ T8316] ? do_raw_spin_lock+0x11f/0x2c0 [ 199.966783][ T8316] ? ocfs2_inode_unlock_tracker+0x270/0x2e0 [ 199.972707][ T8316] ? __lock_acquire+0x7d40/0x7d40 [ 199.977764][ T8316] ? __rwlock_init+0x150/0x150 [ 199.982568][ T8316] ? do_raw_spin_unlock+0x121/0x230 [ 199.987820][ T8316] ? put_pid+0xde/0x120 [ 199.992023][ T8316] ocfs2_mkdir+0x196/0x430 [ 199.996479][ T8316] ? make_kgid+0x660/0x660 [ 200.001200][ T8316] ? apparmor_path_mkdir+0x1b0/0x230 [ 200.006538][ T8316] ? ocfs2_symlink+0x2700/0x2700 [ 200.011512][ T8316] ? HAS_UNMAPPED_ID+0x11a/0x180 [ 200.016495][ T8316] ? inode_permission+0xf3/0x480 [ 200.021468][ T8316] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 200.026537][ T8316] ? security_inode_mkdir+0xb7/0x100 [ 200.031865][ T8316] vfs_mkdir+0x296/0x440 [ 200.036164][ T8316] do_mkdirat+0x1dc/0x450 [ 200.040529][ T8316] ? vfs_mkdir+0x440/0x440 [ 200.044982][ T8316] __x64_sys_mkdirat+0x89/0xa0 [ 200.049800][ T8316] do_syscall_64+0x55/0xa0 [ 200.054341][ T8316] ? clear_bhb_loop+0x40/0x90 [ 200.059062][ T8316] ? clear_bhb_loop+0x40/0x90 [ 200.063778][ T8316] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 200.069895][ T8316] RIP: 0033:0x7f995039b687 [ 200.074341][ T8316] Code: 00 66 90 48 89 f2 b9 00 01 00 00 48 89 fe bf 9c ff ff ff e9 db f7 ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 200.094182][ T8316] RSP: 002b:00007f9951233e58 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 200.102898][ T8316] RAX: ffffffffffffffda RBX: 00007f9951233ee0 RCX: 00007f995039b687 [ 200.111072][ T8316] RDX: 00000000000001ff RSI: 00002000000005c0 RDI: 00000000ffffff9c [ 200.119091][ T8316] RBP: 0000200000000b00 R08: 0000200000000140 R09: 0000000000000000 [ 200.127126][ T8316] R10: 0000200000000b00 R11: 0000000000000246 R12: 00002000000005c0 [ 200.135392][ T8316] R13: 00007f9951233ea0 R14: 0000000000000000 R15: 0000000000000000 [ 200.143883][ T8316] [ 200.147236][ C0] vkms_vblank_simulate: vblank timer overrun [ 200.219926][ T8316] syz.2.846 (8316) used greatest stack depth: 18768 bytes left [ 200.319042][ T5776] ocfs2: Unmounting device (7,2) on (node local) [ 200.377781][ T5763] savu 0003:1E7D:2D5A.0005: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 200.680499][ T8] usb 2-1: USB disconnect, device number 9 [ 201.167634][ T5763] net_ratelimit: 8 callbacks suppressed [ 201.167661][ T5763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.887376][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.210218][ T5763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.247566][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.288259][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.927605][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.937192][ T5840] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 205.329865][ T27] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.371893][ T5763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 207.412487][ T5763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 207.968956][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.450223][ T5763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog